Prosze o sprawdzenie loga / wirus

**Posty:** 64 · przez **mitchelo** 02 Sty 2009, 13:05

Hej mam zainstalowanego Noda 32 ale mimo tego podlapalem jakiegos wirusa. Komputer wolniej chodzi i czesto gdy przegladam internet to wlaczaja mi sie jakies strony ze sklepami albo poprostu puste. Dzieki za pomoc
Log z hijacka zrobiony po combofix!!

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 01:11:28, on 2009-01-03 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe C:\WINDOWS\system32\RUNDLL32.EXE D:\Programy\Itunes\iTunesHelper.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe I:\Instalki\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll" O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe" O4 - HKLM\..\Run: [QFan Help] "C:\Program Files\ASUS\AI Suite\QFan3\QFanHelp.exe" O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\AI Suite\CpuLevelUpHelp.exe O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.09\RivaTuner.exe" /S O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "D:\Programy\Itunes\iTunesHelper.exe" O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - res://E:\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://E:\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Pobierz za pomocą BitComet - res://E:\BitComet\BitComet.exe/AddLink.htm O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://E:\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.mks.com.pl O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab O20 - AppInit_DLLs: jpcynv.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\WINDOWS\system32\pr2ah4nc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 7241 bytes

**Posty:** 8001 · przez **Okocza** 02 Sty 2009, 13:59

mitchelo, popraw tagi w ktorych jest log i zamiesc log z combofixa

**Posty:** 64 · przez **mitchelo** 02 Sty 2009, 15:37

Sorry dawno mnie tu nie bylo i nie wiedzialem ze tak sie pozmienialo. Zaraz zrobie log w combo

Kod: Zaznacz wszystko: ComboFix 09-01-01.01 - Ramzes 2009-01-03 0:43:07.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1033.18.3327.2712 [GMT 11:00] Uruchomiony z: c:\documents and settings\Ramzes\Desktop\ComboFix.exe * Utworzono nowy punkt przywracania * Resident AV is active . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Ramzes\Application Data\ShoppingReport c:\documents and settings\Ramzes\Application Data\ShoppingReport\cs\Config.xml c:\documents and settings\Ramzes\Application Data\ShoppingReport\cs\db\Aliases.dbs c:\documents and settings\Ramzes\Application Data\ShoppingReport\cs\db\Sites.dbs c:\documents and settings\Ramzes\Application Data\ShoppingReport\cs\dwld\WhiteList.xip c:\documents and settings\Ramzes\Application Data\ShoppingReport\cs\report\aggr_storage.xml c:\documents and settings\Ramzes\Application Data\ShoppingReport\cs\report\send_storage.xml c:\documents and settings\Ramzes\Application Data\ShoppingReport\cs\res2\WhiteList.dbs c:\program files\ShoppingReport c:\program files\ShoppingReport\Uninst.exe c:\windows\system32\dknuifnq.dll c:\windows\system32\gaprswgm.dll c:\windows\system32\geBtRhFy.dll c:\windows\system32\jpcynv.dll c:\windows\system32\jrblghmi.dll c:\windows\system32\mgwsrpag.ini c:\windows\system32\msvcsv60.dll c:\windows\system32\pshlee.dll c:\windows\system32\rplfqqam.ini c:\windows\system32\tmp60.tmp c:\windows\system32\yFhRtBeg.ini c:\windows\system32\yFhRtBeg.ini2 . ((((((((((((((((((((((((( Pliki utworzone od 2008-12-02 do 2009-01-02 ))))))))))))))))))))))))))))))) . 2009-01-02 21:58 . 2009-01-02 21:59 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\BESTplayer 2009-01-02 21:58 . 2009-01-02 21:58 97 --a------ c:\windows\VplayerINI.vpl 2009-01-02 21:57 . 2009-01-02 21:58 897 --a------ c:\windows\VPlayer.INI 2009-01-02 21:52 . 2009-01-02 21:52 <DIR> d-------- c:\program files\XviD 2009-01-02 14:08 . 2009-01-02 14:08 <DIR> d-------- c:\documents and settings\Administrator 2009-01-01 21:30 . 2008-10-22 10:37 <DIR> d-------- c:\windows\system32\drivers\ect 2009-01-01 21:30 . 2008-10-22 20:07 1,986,301 --a------ C:\Adobe CS4 Master Collection_ACTIVATION PATCH by P!mPdOG.ExE 2009-01-01 20:03 . 2009-01-01 20:16 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Download Manager 2009-01-01 12:00 . 2008-03-03 14:25 5,702 --ah----- c:\windows\nod32restoretemdono.reg 2009-01-01 12:00 . 2008-03-03 18:21 568 --ah----- c:\windows\nod32fixtemdono.reg 2009-01-01 11:56 . 2009-01-01 11:56 <DIR> d-------- c:\program files\ESET 2009-01-01 11:56 . 2009-01-01 11:56 <DIR> d-------- c:\documents and settings\All Users\Application Data\ESET 2008-12-31 11:14 . 2009-01-02 14:58 <DIR> d-------- c:\documents and settings\All Users\Application Data\FLEXnet 2008-12-31 10:58 . 2008-12-31 10:58 <DIR> d-------- c:\program files\Adobe Media Player 2008-12-31 10:56 . 2008-12-31 10:56 <DIR> d-------- c:\program files\Common Files\Adobe AIR 2008-12-31 10:39 . 2008-12-31 10:39 <DIR> d-------- c:\program files\Common Files\Macrovision Shared 2008-12-30 20:20 . 2008-12-30 20:20 <DIR> d-------- c:\program files\Vstplugins 2008-12-30 20:20 . 2008-12-30 20:20 <DIR> d-------- c:\documents and settings\All Users\Application Data\Sony 2008-12-30 20:19 . 2008-12-30 20:19 <DIR> d-------- c:\program files\Sony 2008-12-30 20:17 . 2008-12-30 20:17 <DIR> d-------- c:\program files\Sony Setup 2008-12-30 20:11 . 2008-12-30 20:12 <DIR> d-------- C:\!KillBox 2008-12-30 17:36 . 2008-12-30 19:10 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Sony 2008-12-30 17:36 . 2008-12-30 17:36 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Publish Providers 2008-12-30 17:36 . 2009-01-02 01:17 <DIR> d-a------ c:\documents and settings\All Users\Application Data\TEMP 2008-12-30 14:04 . 2009-01-03 00:46 16,773,152 --ahs---- c:\windows\system32\drivers\fidbox.dat 2008-12-30 14:04 . 2009-01-03 00:46 169,604 --ahs---- c:\windows\system32\drivers\fidbox.idx 2008-12-30 14:01 . 2008-12-30 14:01 <DIR> d-------- c:\program files\ZoneAlarmSB 2008-12-30 14:01 . 2008-12-30 14:01 <DIR> d-------- c:\documents and settings\All Users\Application Data\MailFrontier 2008-12-30 14:00 . 2008-12-30 14:00 <DIR> d-------- c:\program files\Zone Labs 2008-12-30 03:41 . 2008-12-30 03:41 74 -r-hs---- c:\windows\CT5PRET.BIN 2008-12-30 03:36 . 2008-12-30 03:41 <DIR> d-------- c:\program files\Reallusion 2008-12-29 23:38 . 2008-12-29 23:38 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Reallusion 2008-12-29 23:30 . 2008-12-29 23:30 <DIR> d-------- c:\program files\Common Files\Reallusion 2008-12-29 23:12 . 2008-12-29 23:12 <DIR> d-------- c:\program files\VDOWNLOADER 2008-12-29 22:58 . 2008-12-29 22:58 <DIR> d-------- c:\program files\FDRLab 2008-12-29 12:33 . 2008-12-29 12:33 <DIR> d-------- c:\program files\Flux 2008-12-28 20:32 . 2008-12-28 20:32 <DIR> d-------- c:\program files\PSPaudioware.com 2008-12-28 20:31 . 2006-06-19 18:06 8,278,016 --a------ c:\windows\system32\PSP Neon HR.dll 2008-12-28 20:31 . 2006-06-19 18:16 8,151,040 --a------ c:\windows\system32\PSP Neon.dll 2008-12-28 13:11 . 2008-12-28 13:11 <DIR> d-------- c:\program files\KeyToSound 2008-12-28 02:16 . 2008-12-28 02:16 <DIR> d-------- c:\documents and settings\All Users\Application Data\iZotope 2008-12-28 00:36 . 2008-12-28 00:53 <DIR> d-------- c:\program files\iZotope 2008-12-27 23:56 . 2008-12-27 23:56 <DIR> d-------- c:\program files\Atomic RAR Password Recovery 2008-12-27 23:53 . 2008-12-27 23:53 <DIR> d-------- c:\program files\Intelore 2008-12-26 00:21 . 2008-12-26 00:21 <DIR> d-------- c:\program files\apulSoft 2008-12-25 22:14 . 2008-12-25 22:14 <DIR> d-------- c:\program files\iPod 2008-12-25 22:14 . 2008-12-25 22:14 <DIR> d-------- c:\program files\Bonjour 2008-12-25 22:14 . 2008-12-25 22:14 <DIR> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2008-12-25 22:13 . 2008-12-25 22:13 <DIR> d-------- c:\program files\QuickTime 2008-12-21 22:04 . 2008-12-21 22:04 <DIR> d-------- C:\Freeze 2008-12-21 13:10 . 2008-12-21 13:10 <DIR> d-------- c:\program files\Antares Audio Technologies 2008-12-20 23:26 . 2008-12-24 11:02 <DIR> d-------- C:\Edits 2008-12-20 23:22 . 2008-12-24 11:18 <DIR> d-------- C:\Images 2008-12-20 20:57 . 2008-12-25 21:11 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\SIR 2008-12-20 20:57 . 2008-12-20 21:22 <DIR> d-------- c:\documents and settings\All Users\Application Data\SIR 2008-12-20 19:01 . 2008-12-24 14:49 <DIR> d-------- C:\Audio 2008-12-20 17:34 . 2006-09-14 01:21 2,240 --a------ c:\windows\LENDIG.sys 2008-12-19 13:39 . 2008-12-19 13:39 <DIR> d-------- c:\program files\Steinberg 2008-12-18 20:59 . 2008-12-18 20:59 6,475,776 --a------ c:\windows\system32\PSP VintageWarmer2.dll 2008-12-17 22:35 . 2008-04-14 05:40 43,904 --a------ c:\windows\system32\drivers\sbp2port.sys 2008-12-17 22:35 . 2008-04-14 05:40 43,904 --a--c--- c:\windows\system32\dllcache\sbp2port.sys 2008-12-12 11:18 . 2008-12-12 11:18 87,336 --a------ c:\windows\system32\dns-sd.exe 2008-12-12 11:11 . 2008-12-12 11:11 61,440 --a------ c:\windows\system32\dnssd.dll 2008-12-10 17:20 . 2008-12-10 17:20 <DIR> d-------- c:\documents and settings\All Users\Application Data\nView_Profiles 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\windows\system32\AGEIA 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\windows\nview 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\program files\AGEIA Technologies 2008-12-10 17:17 . 2008-12-02 23:11 453,152 --a------ c:\windows\system32\nvudisp.exe 2008-12-10 17:17 . 2009-01-03 00:49 205,483 --a------ c:\windows\system32\nvapps.xml 2008-12-10 17:17 . 2008-12-02 23:11 18,696 --a------ c:\windows\system32\nvdisp.nvu 2008-12-10 17:16 . 2008-12-10 17:16 <DIR> d-------- C:\NVIDIA 2008-12-10 17:16 . 2008-12-02 10:13 453,152 --a------ c:\windows\system32\NVUNINST.EXE 2008-12-06 22:25 . 2008-12-06 22:25 <DIR> d-------- c:\program files\Medieval Software 2008-12-05 22:21 . 2008-12-05 22:21 <DIR> d-------- c:\windows\system32\drivers\umdf 2008-12-05 22:20 . 2008-12-05 22:20 <DIR> d-------- c:\windows\system32\xlive 2008-12-05 22:20 . 2008-12-05 22:35 <DIR> d-------- c:\program files\Microsoft Games for Windows - LIVE 2008-12-05 21:23 . 2008-12-05 21:23 <DIR> d-------- c:\program files\MSBuild 2008-12-05 21:22 . 2008-12-05 21:22 <DIR> d-------- c:\windows\system32\XPSViewer 2008-12-05 21:22 . 2008-12-05 21:22 <DIR> d-------- c:\program files\Reference Assemblies 2008-12-05 21:22 . 2006-06-29 13:07 14,048 --a------ c:\windows\system32\spmsg2.dll 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\system32\scripting 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\system32\en 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\system32\bits 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\l2schemas 2008-12-04 20:10 . 2008-12-04 20:10 <DIR> d-------- c:\windows\ServicePackFiles 2008-12-03 05:40 . 2008-12-03 05:40 <DIR> d-------- c:\windows\Downloaded Installations 2008-12-02 20:11 . 2008-12-02 20:11 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\RTPlayer 2008-12-02 18:11 . 2008-12-29 13:21 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\VST3 Presets . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-02 02:56 --------- d-----w c:\documents and settings\Ramzes\Application Data\Tunebite 2009-01-01 13:00 --------- d-----w c:\documents and settings\Ramzes\Application Data\U3 2009-01-01 10:18 --------- d-----w c:\program files\Common Files\Adobe 2008-12-30 08:19 9,216 ----a-w c:\windows\Internet Logs\xDB1.tmp 2008-12-30 08:19 230,912 ----a-w c:\windows\Internet Logs\xDB23B6.tmp 2008-12-30 08:19 1,336,832 ----a-w c:\windows\Internet Logs\xDB23B7.tmp 2008-12-29 16:41 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-25 11:14 --------- d-----w c:\program files\Common Files\Apple 2008-12-25 11:08 --------- d-----w c:\program files\Safari 2008-12-25 05:12 --------- d-----w c:\documents and settings\Ramzes\Application Data\Winamp 2008-12-19 02:57 --------- d-----w c:\program files\Syncrosoft 2008-12-02 18:40 --------- d-----w c:\program files\Nomad Factory 2008-12-02 12:11 6,209,536 ----a-w c:\windows\system32\drivers\nv4_mini.sys 2008-11-27 04:25 --------- d-----w c:\documents and settings\Ramzes\Application Data\Blue Cat Audio 2008-11-13 08:56 --------- d-----w c:\documents and settings\Ramzes\Application Data\AccurateRip 2008-11-13 08:55 --------- d-----w c:\program files\Exact Audio Copy 2008-11-04 11:27 --------- d-----w c:\program files\ivo 2008-11-02 11:14 --------- d-----w c:\documents and settings\All Users\Application Data\RapidSolution 2008-11-02 11:13 --------- d-----w c:\program files\PixiePack Codec Pack 2008-11-02 11:12 --------- d-----w c:\program files\RapidSolution 2008-11-01 07:46 22,328 ----a-w c:\documents and settings\Ramzes\Application Data\PnkBstrK.sys 2007-02-12 08:10 2,682,880 ------w c:\documents and settings\All Users\VCREDI~3.EXE 2006-06-23 06:48 32,768 ----a-r c:\windows\inf\UpdateUSB.exe 2006-05-24 05:38 233,472 ----a-w c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll 2006-05-18 06:00 204,895 ----a-w c:\program files\mozilla firefox\plugins\ctdomemhelper.dll 2005-09-29 03:41 77,824 ----a-w c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll 2006-05-18 05:59 426,081 ----a-w c:\program files\mozilla firefox\plugins\ctplayerobject.dll 2005-02-02 01:19 458,752 ----a-w c:\program files\mozilla firefox\plugins\imagickrt.dll 2006-04-10 07:35 139,264 ----a-w c:\program files\mozilla firefox\plugins\rlcontentclass.dll 2005-11-09 00:10 204,800 ----a-w c:\program files\mozilla firefox\plugins\RLMusicPacker.dll 2005-11-09 00:42 106,496 ----a-w c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll 2006-01-04 00:22 212,992 ----a-w c:\program files\mozilla firefox\plugins\RLVoicePacker.dll 2006-01-04 00:21 167,936 ----a-w c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "c:\program files\Winamp Toolbar\winamptb.dll" [2008-07-17 1266992] [HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1] [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AudioDrvEmulator"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-11-04 49152] "Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2008-05-09 1423360] "QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe" [2008-05-06 594432] "Cpu Level Up help"="c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe" [2007-11-30 881152] "VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2006-07-13 122880] "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112] "RivaTunerStartupDaemon"="c:\program files\RivaTuner v2.09\RivaTuner.exe" [2008-04-29 2707456] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792] "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-10-01 111936] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-02 13680640] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-02 86016] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696] "iTunesHelper"="d:\programy\Itunes\iTunesHelper.exe" [2008-11-20 290088] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-07-09 919016] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-06-10 1447168] "CTHelper"="CTHELPER.EXE" [2006-05-24 c:\windows\CTHELPER.EXE] "CTxfiHlp"="CTXFIHLP.EXE" [2006-05-24 c:\windows\system32\CTXFIHLP.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=jpcynv.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.iac2"= c:\progra~1\ACEMEG~1\SystemS\Intel\iac25_32.ax "msacm.sl_anet"= c:\progra~1\ACEMEG~1\SystemS\sl_anet.acm "vidc.yv12"= c:\progra~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL "vidc.divx"= c:\progra~1\ACEMEG~1\SystemS\DivX\DivX520.dll "vidc.iyuv"= c:\progra~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll "vidc.yvu9"= c:\progra~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll "vidc.uyvy"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "vidc.yuy2"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "vidc.yvyu"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "msacm.msaudio1"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "d:\\Gry\\Grid\\GRID.exe"= "d:\\Gry\\AoE3\\age3x.exe"= "d:\\Gry\\AoE3\\age3y.exe"= "c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"= "d:\\Gry\\FC2\\Far Cry 2\\bin\\FarCry2.exe"= "d:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Launcher.exe"= "d:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Editor.exe"= "c:\\WINDOWS\\system32\\PnkBstrA.exe"= "c:\\WINDOWS\\system32\\PnkBstrB.exe"= "e:\\BitComet\\BitComet.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "d:\\Gry\\Gta\\Rockstar Games Social Club\\RGSCLauncher.exe"= "d:\\Gry\\Gta\\Grand Theft Auto IV\\LaunchGTAIV.exe"= "d:\\Gry\\Gta\\Grand Theft Auto IV\\GTAIV.exe"= "c:\\Program Files\\Codemasters\\DiRT\\DiRT.exe"= "d:\\Programy\\Itunes\\iTunes.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "16167:TCP"= 16167:TCP:BitComet 16167 TCP "16167:UDP"= 16167:UDP:BitComet 16167 UDP "5353:TCP"= 5353:TCP:Adobe CSI CS4 R0 mv61xx;mv61xx;c:\windows\system32\DRIVERS\mv61xx.sys [2008-08-24 150568] R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2006-12-31 28544] R0 pe3ah4nc;DiRT Environment Driver (pe3ah4nc);c:\windows\system32\drivers\pe3ah4nc.sys [2007-05-19 64880] R0 ps6ah4nc;DiRT Synchronization Driver (ps6ah4nc);c:\windows\system32\drivers\ps6ah4nc.sys [2007-05-19 55160] R0 ps7ah4nc;DiRT Synchronization Driver (ps7ah4nc);c:\windows\system32\drivers\ps7ah4nc.sys [2007-08-18 68208] R1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2008-06-10 34312] R2 ekrn;Eset Service;"c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe" [2008-06-10 468224] R3 rrau0001;rrau0001;c:\windows\system32\Drivers\rrau0001.sys [2008-08-24 24576] R3 rrwd0001;rrwd0001;c:\windows\system32\Drivers\rrwd0001.sys [2008-08-24 71936] R3 SynasUSB;SynasUSB;c:\windows\system32\drivers\SynasUSB.sys [2008-09-05 23288] R3 VIRUSUSB;USB ASIO driver for Access Virus TI;c:\windows\system32\Drivers\VirusUSB.sys [2008-10-11 357208] R3 VTIAUDIO;Virus TI Audio;c:\windows\system32\drivers\vtiaudio.sys [2008-10-11 39776] R3 VTIMIDEV01;Virus TI MIDI Driver;c:\windows\system32\drivers\vtimidi.sys [2008-10-11 56136] S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe /s c:\windows\nod32fixtemdono.reg [2006-02-28 3584] S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc);c:\windows\system32\pr2ah4nc.exe svc [] S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;\??\c:\windows\system32\DNINDIS5.SYS [2008-08-26 17149] S3 SetupNTGLM7X;SetupNTGLM7X;\??\G:\NTGLM7X.sys [] S3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service;c:\windows\system32\DRIVERS\WPN111.sys [] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{35be4702-89fe-11dd-82d5-002215172d99}] \Shell\AutoRun\command - I:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4955b8e4-71be-11dd-9273-806d6172696f}] \Shell\AutoRun\command - F:\autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d0b97892-75ab-11dd-92a2-002215172d99}] \Shell\AutoRun\command - J:\LaunchU3.exe -a [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{61E3FE32-07B9-4563-A3E0-2DE2D620FE10}] c:\program files\PixiePack Codec Pack\InstallerHelper.exe . Zawartość folderu 'Zaplanowane zadania' 2008-12-27 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34] . - - - - USUNIĘTO PUSTE WPISY - - - - BHO-{64f99845-cd2b-4c8c-9326-9a78128492a4} - c:\windows\system32\jpcynv.dll BHO-{9CF7AD86-4A4E-4E42-9B65-9807F0937037} - c:\windows\system32\geBtRhFy.dll HKCU-Run-AdobeBridge - (no file) HKLM-Run-WinampAgent - c:\program files\Winamp\winampa.exe . ------- Skan uzupełniający ------- . uInternet Settings,ProxyOverride = *.local IE: &Winamp Search - c:\documents and settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html IE: Pobierz wszystkie VIdeo za pomocą BitComet - e:\bitcomet\BitComet.exe/AddVideo.htm IE: Pobierz wszystko za pomocą BitComet - e:\bitcomet\BitComet.exe/AddAllLink.htm IE: Pobierz za pomocą BitComet - e:\bitcomet\BitComet.exe/AddLink.htm IE: {{C5428486-50A0-4a02-9D20-520B59A9F9B3} - {A16AD1E9-F69A-45af-9462-B1C286708842} - Trusted Zone: www.mks.com.pl c:\windows\Downloaded Program Files\Manager.exe - c:\windows\Downloaded Program Files\DownloadManagerV2.ocx O16 -: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab c:\windows\Downloaded Program Files\DownloadManagerV2.inf FF - ProfilePath - c:\documents and settings\Ramzes\Application Data\Mozilla\Firefox\Profiles\nvu4odq5.default\ FF - plugin: c:\program files\Mozilla Firefox\plugins\NPAskSBr.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npRLCT4Player.dll FF - plugin: d:\programy\Itunes\Mozilla Plugins\npitunes.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-03 00:49:58 Windows 5.1.2600 Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\Network1-1957994488-1450960922-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*NULL*] "??"=hex:85,bd,35,a3,69,d8,f4,d5,22,dd,4a,ca,c5,75,07,6d,ce,75,8b,32,a2,6f,d1,\ 3b,26,60,08,7d,2a,22,98,4d,f6,bc,8f,1a,7e,34,9d,5e,0a,ff,85,54,a2,10,d2,04,\ 91,e6,62,00,d9,0d,97,f1,75,33,6c,a1,33,6c,38,cc,ad,a7,10,85,33,9b,70,04,d3,\ f8,ed,66,9e,b5,a9,94,cf,9d,8c,0e,44,8a,f3,73,a6,4a,ad,9e,85,6c,3d,1d,19,b3,\ c6,0a,c7,7a,ab,2a,5e,4b,0c,92,12,3d,62,01,32,dd,50,b1,38,9d,61,ab,3f,c1,63,\ 2c,af,a1,43,93,50,e6,bd,bc,3a,8b,63,4f,91,f9,7e,74,63,ac,2c,03,b4,ff,87,30,\ 09,37,5f,0d,93,49,70,30,e1,89,4f,7a,00,7d,81,d6,db,db,fd,59,33,f9,93,90,d6,\ 95,9a,92,97,60,40,4f,73,4f,df,fd,f0,7e,50,5e,89,ce,92,46,4e,55,8d,44,06,d1,\ f2,fc,bf,cf,dc,4d,38,7b,8d,4c,4d,c6,31,b4,88,ec,47,66,2e,a5,ea,01,97,8d,0b,\ 66,f2,99,ad,bd,9b,1a,86,c2,95,22,ec,36,20,39,be,3f,5b,11,75,07,e0,4b,71,47,\ 4c,17,5c,bc,ef,b3,c5,d3,b0,1b,a2,97,05,10,7a,d9,14,cd,37,37,fb,03,e0,bb,07,\ 6d,55,49,d3,61,a5,ab,ad,45,4a,06,18,a4,f7,8c,7d,3a,5f,3a,bf,f9,c9,c9,9e,c2,\ ef,09,75,5d,44,1d,99,d5,39,85,ab,b9,2f,3e,2f,b7,6f,ec,67,ba,ef,76,b1,3b,0b,\ 77,3c,73,fe,91,e8,ea,55,de,ec,bc,e4,2e,db,a7,21,00,64,b2,8f,cc,c4,8b,05,30,\ d1,3c,05,ee,8d,d3,a1,3c,54,b4,f9,e0,c7,52,2a,6f,c2,b2,10,62,4b,9a,bb,3e,4e,\ 45,d2,b1,67,c2,1b,55,d6,8d,a0,a8,29,ed,c4,cf,7d,a2,b7,e6,c6,8f,f1,6d,c3,b4,\ 5f,f7,43,e6,0d,ba,32,78,65,97,c1,a7,b5,97,ac,57,3e,91,f5,3a,4b,09,6e,cd,09,\ 73,14,51,3e,1f,7e,98,d7,b4,b6,16,71,d3,70,de,43,1c,b7,d2,01,b6,57,1b,c9,25,\ 2a,4d,80,2d,3c,84,e6,a3,84,c6,5f,4a,06,bf,ae,c8,67,9f,f4,93,f5,dc,c0,7d,de,\ a0,ec,84,87,ce,d1,86,fc,22,db,a6,3c,f9,b2,59,c9,ea,c3,a4,23,1b,64,89,6a,07,\ 83,fd,aa,51,c6,0c,de,4e,dc,e0,a9,39,a0,20,79,ef,69,05,08,be,6a,01,d0,3c,65,\ be,13,69,4b,cd,89,4f,16,1a,c2,21,7d,54,d5,23,66,62,a7,d9,af,33,ea,2c,83,70,\ fd,65,d3,5a,b0,27,51,b9,88,a0,d2,23,1e,79,63,d7,61,8a,84,14,29,78,3f,4c,58,\ a8,cf,89,f9,95,21,8f,6b,72,de,01,9f,2c,a4,c8,45,11,50,08,1e,1c,08,7a,75,2f,\ 93,39,51,5b,ae,72,1c,3c,77,f9,2f,13,58,ab,0e,8b,f0,79,7d,c1,ea,69,03,41,29,\ fd,ca,89,08,80,34,10,a7,51,0a,e0,ba,31,c3,cd,1b,81,21,08,e9,6c,9b,17,5d,b7,\ 90,02,4b,79,1d,8b,ec,e9,fd,38,ca,5e,a5,eb,03,53,b1,96,29,fa,0e,91,d2,4c,b3,\ 67,a0,21,90,e3,47,76,68,84,da,e0,d3,1d,97,71,3d,1a,f3,41,22,8b,a1,fb,44,4d,\ 66,35,34,b2,23,e5,6c,11,be,63,52,dc,e2,a2,7f,0b,c7,b5,79,c5,73,35,f1,1a,38,\ 29,44,b1,17,f3,a2,9c,38,1a,c7,17,e9,2c,5b,3c,6b,26,7b,39,ab,f5,2c,d2,43,91,\ 9b,c4,4d,ab,f2,4e,69,03,1d,35,73,40,96,1f,b3,42,1f,4b,a7,91,17,0e,6d,b4,05,\ 1f,9c,41,70,22,6c,a2,71,02,e9,21,ee,34,bd,db,b0,2c,93,84,e6,66,56,42,d0,08,\ 92,30,52,d3,81,16,df,57,f8,b7,b3,4b,d3,e2,20,78,d6,5f,49,da,05,d6,16,d1,96,\ 69,68,aa,b3,18,8b,32,1c,55,8e,32,ae,74,f8,cf,6b,10,c8,f2,4b,5c,d7,f0,69,a7,\ b7,be,e7,5e,0d,f3,43,89,25,53,dd,8f,a8,f4,65,93,6f,39,6d,52,30,ad,64,8f,fb,\ 6a,c1,2c,06,75,0e,49,9c,30,a4,d1,12,a2,61,e9,77,32,7d,da,83,fe,33,38,ea,14,\ 3b,1d,40,80,22,e3,42,01,ee,11,55,c8,3d,e6,c6,39,43,71,ce,35,9b,56,d4,05,c5,\ ea,f2,06,06,0e,a5,aa,fa,46,21,36,91,b9,ca,1e,bb,31,50,47,9f,4b,db,52,46,db,\ 16,01,bf,cf,63,15,3c,4e,37,d0,88,fd,07,95,ee,75,b9,a5,cd,b8,1f,b4,f3,65,4d,\ a3,be,17,bd,d2,28,9a,f9,d3,ba,57,6a,ee,0b,74,e7,4a,54,21,c1,cb,f9,77,9f,31,\ 4c,bd,32,e4,48,4f,49,23,f7,39,b7,e9,83,23,b9,85,1a,4e,23,af,f5,65,06,19,f4,\ 7b,9c,96,ea,8f,df,35,64,3e,7d,a8,ef,11,b9,95,c0,de,f0,c1,0f,0f,85,fe,a7,fd,\ c0,17,dc,db,3a,c9,aa,b0,99,5a,68,f7,90,3b,99,63,c4,26,0c,61,b7,ea,2d,08,bd,\ 0b,dc,ac,f3,de,6e,ee,ae,e0,20,f2,f2,15,aa,6e,ef,bb,65,a2,50,5f,d1,16,43,e0,\ e9,71,f6,7f,68,37,0b,a1,2a,34,13,38,ed,19,48,1a,fc,db,c2,c1,5d,f1,21,33,83,\ 53,7c,74,3e,be,a4,b2,bb,8d,66,2d,96,31,1f,11,dd,e8,17,6f,f3,9b,bb,c8,f9,ee,\ fc,5b,33,7b,8b,7f,6d,d6,91,81,7e,1a,33,d0,8d,21,1c,86,19,66,fe,12,e9,7d,dd,\ b0,75,e0,9d,62,f5,6b,df,78,7e,c8,c9,98,19,7c,19,44,33,59,81,8b,05,2f,c5,f9,\ 1e,77,71,29,36,5a,56,9c,59,33,b4,54,85,63,d7,d2,86,96,0d,88,f6,b8,bc,b7,96,\ 9a,04,b1,a0,4c,71,0a,ed,7e,81,4b,6b,59,cc,52,a4,39,49,eb,04,b9,c2,cf,47,01,\ ec,65,36,dc,64,7f,75,0b,43,b5,aa,20,cd,70,eb,ca,79,12,7f,86,02,66,51,87,02,\ 1d,a5,6e,f8,52,2d,9f,0d,7e,e2,33,eb,8d,8e,6b,96,fe,85,30,d7,54,1c,0c,9e,fe,\ 8a,8a,f4,f5,39,21,a0,91,b3,7d,4e,44,c9,01,15,d4,b7,56,0d,ec,b8,25,b9,dd,81,\ 0e,90,62,d4,8e,4f,08,78,24,30,14,bb,bb,5f,b1,94,cf,86,c6,32,1e,1f,62,94,fb,\ a0,d8,b6,a3,ce,31,17,c1,79,f3,d8,05,9b,94,15,30,b8,ad,80,37,3f,8b,5b,61,41,\ 2f,34,8f,40,31,10,de,97,41,71,70,3e,2f,e1,ab,13,f7,82,8b,d1,5b,b5,a4,3a,4a,\ 7e,64,0d,88,cd,82,78,bb,cd,d3,7b,66,ce,b7,d9,1f,d7,a8,0a,8f,c2,fc,7b,82,b6,\ ec,ed,f8,6c,d0,6c,58,5d,de,d2,92,46,41,0f,7b,fc,10,1e,d8,41,08,4e,40,78,ad,\ 44,53,d6,d4,e9,66,de,82,7a,6a,8d,2a,5f,fc,0c,64,29,50,e3,93,8b,cf,9f,bc,ca,\ ed,c5,19,c5,19,4d,00,6a,da,1a,07,31,3b,8d,01,73,e0,ae,05,ca,1a,4a,35,8b,9d,\ df,06,04,f3,76,93,d6,15,80,e9,0b,21,91,cc,3c,3b,48,d7,74,03,ed,5e,83,aa,00,\ 31,7c,fd,7d,36,78,70,56,18,7c,f1,18,24,5f,84,a8,30,bf,e4,ff,34,3f,8a,ff,da,\ e6,5f,9e,05,b5,fd,e0,8f,1d,3c,96,f0,bb,4d,20,c7,2b,df,7e,dd,9d,11,15,55,d3,\ f3,75,43,33,57,d0,27,a3,09,e5,6c,97,e6,b8,3f,88,c4,9d,94,42,55,d0,5f,13,13,\ 30,4a,df,5b,c8,1d,6e,7d,5f,db,33,fd,8e,0a,e4,3a,f5,10,5b,40,c5,f0,e4,5a,37,\ 6f,9e,25,5b,de,d6,fa,1c,da,e0,c1,30,97,d3,0a,a2,02,0c,b3,23,20,f5,30,99,f1,\ 1d,ec,e3,ca,46,14,66,67,98,7d,0b,63,75,ab,5b,0c,c4,c6,56,18,08,2b,d8,d9,ac,\ 65,54,88,66,c3,a7,75,f8,02,bd,cf,c7,11,36,42,bf,d7,f6,f4,3a,db,a0,b0,99,28,\ 64,21,8b,02,0c,b3,37,d0,26,e1,fb,7d,20,48,56,e3,27,58,71,c6,f6,15,67,4d,6e,\ 42,f5,38,dc,10,d2,43,f2,bc,fe,6e,f3,e2,22,b6,05,6b,8a,81,f4,ec,e3,5f,fb,d3,\ b9,b3,af,85,58,61,32,1f,86,fa,ef,d2,22,62,86,46,8d,6e,72,90,e5,57,73,1d,96,\ 53,9f,67,db,3f,66,4f,1b,2a,ea,cc,a3,0a,a9,66,61,90,4d,ef,a4,ac,e1,32,b9,84,\ 92,79,d9,15,79,c7,60,83,7c,60,9b,f1,07,be,1d,9c,93,31,e0,03,36,4e,ca,cc,62,\ 01,69,bd,e6,01,65,6d,0f,34,fe,d2,38,1a,18,ca,d6,4e,54,1f,d5,0e,26,cf,bf,b6,\ 0c,87,2c,45,0d,85,ed,02,d3,58,4c,a3,60,0f,5e,91,20,4d,e3,bc,6a,b0,79,a4,67,\ 4b,36,8a,47,2d,37,49,55,f8,f8,aa,d1,ba,ac,64,6c,ed,6c,1f,f8,ae,db,dc,00,b1,\ 84,3b,da,5a,35,e2,64,8f,54,6b,8d,9d,e6,57,d0,f4,20,34,8b,8a,21,b8,09,a0,56,\ a6,eb,8e,3c,aa,30,cb,5c,0c,e8,75,a4,75,83,ca,a9,f5,37,6a,a7,62,e8,64,b6,5d,\ bd,80,01,2e,d4,08,fb,ff,a6,27,45,65,75,17,7d,78,16,2c,53,38,93,0a,41,42,e3,\ 1b,f4,63,75,d7,c5,bc,63,d3,d1,6d,f8,56,58,1a,e7,7f,c7,44,f4,0b,a8,60,9e,b3,\ 29,6f,06,c5,46,79,fb,d5,ad,79,49,e1,c1,9b,7e,b3,07,df,ab,7d,a3,86,cb,d4,5a,\ 7c,d8,3f,48,69,1f,67,db,6f,ae,23,b7,73,09,e0,5a,91,66,ce,d9,d5,da,6a,38,96,\ 65,2f,16,23,0d,f0,99,75,77,89,82,9b,ca,07,33,f0,b5,3c,00,3f,c4,69,19,ac,3a,\ 9c,9c,ff,0d,41,d0,73,fa,c5,0d,95,13,0b,77,db,b2,28,eb,70,90,9e,8d,86,58,f3,\ 96,58,21,89,0e,2b,c7,7c,0b,7a,85,b0,81,fe,cb,e5,b8,ff,c7,f8,fd,28,9c,76,72,\ 86,14,4c,26,6e,72,87,96,99,66,22,13,80,ff,99,43,4a,0a,d9,fd,88,dc,79,bd,52,\ 5d,07,20,54,84,b9,cb,09,43,bb,fa,77,fc,80,a9,b3,ae,31,44,2b,c0,d1,ab,cc,f1,\ c4,6b,4b,fc,55,b7,7d,6d,d6,d2,b0,ff,0f,e2,68,dc,f4,3a,12,08,b2,3f,62,45,7d,\ 47,8c,26,88,a6,8d,97,bb,35,d7,ca,69,24,ea,40,7a,c3,a7,96,4d,54,c2,b1,69,2c,\ 3a,c7,18,73,b0,95,93,9c,16,0c,22,d5,75,b4,65,4f,ff,d3,ee,c5,96,2c,03,79,8a,\ 5b,29,d6,c4,0b,de,9d,48,c4,ee,34,f6,1e,2d,22,c3,ee,e2,62,0e,48,50,2f,4d,0c,\ c6,16,b2,32,0b,82,3a,9f,d2,88,17,5b,f6,26,b9,44,4e,c1,33,27,47,2d,94,c9,dc,\ 50,e3,e3,7e,1b,f6,7c,62,84,ca,c8,3d,d0,c6,79,90,07,cf,44,12,58,b2,fd,94,84,\ 9d,c3,47,1c,2a,47,db,4d,6e,5e,57,c2,ec,99,4f,96,50,84,ee,1b,2d,fe,d6,b3,8a,\ ec,c1,0e,f5,c7,54,a2,ae,82,15,af,0f,4d,20,90,68,e2,2d,98,33,30,83,2d,25,1f,\ af,62,42,d9,68,3e,16,a1,50,0f,cd,94,cd,84,77,33,3c,3a,c5,99,b4,62,7b,9b,d4,\ 5c,76,4a,c9,8e,3d,80,12,71,a5,8f,64,6c,74,dc,8f,b2,59,45,ec,88,49,2d,76,d7,\ 36,ee,a2,f3,bf,0b,c1,8f,da,74,25,ce,46,89,75,27,88,c2,b9,e5,c2,19,13,d6,bc,\ 35,52,d0,ff,9d,48,e8,0d,16,41,6a,e1,6d,83,d7,05,b4,bd,55,db,4d,7e,15,70,83,\ ed,9d,7d,00,0b,b7,d5,a8,63,0a,e7,ac,df,23,fe,af,9a,0d,2f,c7,50,02,92,07,de,\ 83,96,50,5f,9f,4c,76,66,2d,ca,81,73,85,79,2c,ee,7d,1a,46,86,1d,6c,10,49,79,\ 3c,38,ad,e2,38,b9,0d,4d,8d,1e,de,12,f9,cd,71,7b,7d,22,ce,71,21,b7,96,89,d3,\ 55,c8,22,60,08,a8,b4,5a,26,34,ee,11,bf,20,b3,9e,75,15,8c,f9,0f,55,e3,54,c1,\ 78,02,f9,83,8a,18,1a,22,81,26,cc,49,de,19,ba,34,45,8d,c7,00,3d,ff,28,68,e5,\ ab,de,25,d6,e2,09,e7,7e,d7,d9,3f,27,1e,bb,99,c8,bc,32,08,92,bb,f0,39,4c,59,\ 7d,94,73,9e,6c,92,6a,34,3a,48,e0,82,6f,ec,81,f0,5f,33,81,e9,7b,70,79,73,c0,\ 58,c7,4e,cb,22,81,06,60,54,9f,b0,58,22,11,e5,fc,d4,7d,55,97,f1,e3,36,5d,f0,\ 0f,6e,d9,80,34,82,11,11,8b,a2,09,b0,88,ba,00,f3,52,a6,f3,3a,2a,62,35,34,96,\ a2,58,72,50,0d,52,52,cf,c7,03,b5,fc,14,73,d9,1a,12,76,00,d3,a9,48,00,d0,59,\ c0,f1,2f,39,55,33,b6,4f,54,6a,8b,52,ff,c3,fb,af,56,57,d9,f5,ae,b5,ad,1d,f3,\ c7,82,8f,e2,26,ae,e1,d4,a2,21,79,e2,62,41,1f,13,03,98,9a,b6,49,80,33,4b,e5,\ 9b,2f,15,12,4d,9d,45,ae,a1,38,74,1f,c3,f6,ef,46,b4,ee,0c,db,f4,3e,ba,ce,81,\ 00,03,a8,7e,db,38,51,ba,90,67,38,5a,bd,39,c7,b0,aa,62,a7,5e,14,d7,ea,bf,fe,\ 81,3c,6e,73,72,13,24,bf,1f,7a,8e,c2,b4,69,ea,d2,a2,b1,f0,62,0c,3c,d2,44,2d,\ b8,6f,1b,5a,2a,55,6e,30,11,15,64,b9,bd,5b,88,e5,4d,a4,3e,1c,e5,fa,28,16,8b,\ 7a,95,7b,37,b7,e4,3f,6d,80,d5,9b,80,5f,23,5c,91,1f,15,26,10,b5,47,2b,38,f6,\ 4d,23,b2,f8,52,b1,02,aa,7a,22,72,a4,4e,de,74,b9,3f,91,32,70,22,b0,b4,7e,a2,\ 3b,dd,17,0f,68,41,d3,f0,e9,7e,9f,00,d6,3e,be,62,97,b4,e6,be,ac,27,ee,3b,b6,\ 23,b1,d8,d9,66,f2,53,61,d4,1b,b3,8c,73,cb,58,2d,75,20,7d,a8,75,51,f6,9c,5c,\ 0a,60,68,d6,c6,c2,f5,7c,d3,92,ff,07,41,af,cb,30,88,c9,0b,0d,f3,30,d4,af,bf,\ 08,56,13,5b,6d,cf,7c,29,1b,3a,0b,4f,df,30,b9,2e,68,1a,79,67,91,8e,07,c4,b6,\ 82,f8,28,cd,7d,07,d5,76,a3,9c,2b,7c,f5,4f,fe,15,6b,e7,47,3b,02,b3,c9,c5,76,\ 32,e8,1b,20,ba,af,23,fb,1b,a9,65,6c,78,0f,ba,ab,70,fa,3e,bc,38,26,5a,41,f6,\ 12,bb,47,2a,72,f8,6b,5f,e1,50,dc,0f,ca,36,a3,09,c0,ea,c5,d8,ca,46,c9,45,bf,\ 48,31,ca,f2,a8,b7,60,c4,2a,9d,a2,de,f3,58,d5,c8,ae,90,09,a9,d5,d6,8b,1a,0e,\ 7d,9e,e7,59,dd,9a,98,78,d5,4e,43,9d,c3,3e,66,3a,97,cb,24,5e,50,31,a1,46,a4,\ 72,d9,9f,57,4e,fb,3a,bc,e0,d2,d7,10,19,8c,19,01,ea,40,43,7a,9b,b1,ec,32,31,\ 50,da,c2,d3,f0,68,cc,65,6f,85,27,c7,af,e0,45,fc,94,85,79,d4,8a,9e,f0,b3,e6,\ cc,77,7e,a0,ea,43,f9,e5,9f,6e,39,3c,98,97,62,90,f9,de,6f,cc,26,1b,05,24,e0,\ 35,b9,52,b6,39,a5,c3,a2,e2,a8,4d,f2,9a,eb,fc,6e,19,e4,ef,6c,e2,89,3d,98,3a,\ ec,24,ae,7f,db,68,de,e7,17,3b,4c,c2,10,a9,22,bc,54,2e,57,6c,4a,cf,d7,6b,d1,\ 4a,e9,ab,41,b7,02,f5,ff,e1,c0,a7,2d,7d,f4,1d,3f,3e,17,ce,a2,74,f9,b2,a9,b8,\ 84,09,08,10,3f,b3,73,00,fd,34,f7,0b,6b,56,ae,da,28,43,95,51,15,55,26,9f,c1,\ aa,bc,e9,69,c2,a6,65,58,f2,ba,22,3a,38,3d,b8,a0,a7,96,c8,06,52,d1,7d,07,11,\ 62,67,5b,c1,a8,e2,b2,2a,c9,98,da,03,4e,41,ca,1a,94,82,ea,bf,a4,53,f4,c6,dc,\ ae,cc,f6,89,87,43,da,43,fe,5f,fb,2e,bf,2c,dc,e6,e1,39,c6,1f,48,9a,ed,55,cd,\ 7d,ea,6e,37,fb,93,f0,26,63,b0,7d,0f,72,36,6a,50,76,fb,23,3d,07,3c,25,4e,2e,\ 92,bf,e0,02,72,84,ea,f4,8a,2f,ee,df,9c,7f,0b,f0,1e,d3,8f,26,26,01,92,d8,f1,\ a9,c0,2b,e2,1d,a5,a7,77,81,99,06,18,70,fd,5b,22,9f,51,8d,cc,5a,8f,19,a3,31,\ d5,e4,76,31,0a,53,e0,26,32,4b,60,5d,3b,c2,a9,80,37,21,82,d7,e6,cb,2d,d4,7c,\ 76,77,26,40,99,fa,3d,f6,80,1e,e2,1e,08,22,de,55,e1,0d,94,c2,5e,da,26,e7,ee,\ 3b,e7,49,47,2c,3e,8a,97,7b,d0,fa,e7,90,dd,d7,67,fe,b7,91,34,b9,24,a7,23,86,\ a9,aa,7f,6a,d9,2e,02,be,d8,ec,b3,0e,d2,1b,62,24,bf,94,f4,f4,e3,70,1b,39,f3,\ 23,f3,72,d4,2a,86,64,b1,33,67,e7,d7,01,72,43,1d,ca,a8,53,04,e2,73,0f,e3,d8,\ 5b,db,42,4f,3f,fc,f1,ec,b3,45,a6,46,9b,a6,24,c9,eb,7c,af,18,6d,0f,23,64,0d,\ 23,0f,10,43,4e,14,9d,b8,67,7b,6a,93,cb,34,ac,5f,f1,a7,fd,17,75,87,44,6d,5d,\ 5f,e0,f1,8f,59,90,ed,ab,ab,df,52,31,ee,1f,95,d1,f5,89,41,88,b9,f8,2b,e8,25,\ bd,26,0d,85,ac,1f,ed,c4,5c,d8,11,64,cf,0f,b3,10,9c,8e,a6,91,63,7e,c6,c7,85,\ b6,37,58,88,c0,50,49,70,b2,0f,88,ea,82,d3,41,f6,fc,67,45,de,fc,e7,cc,56,97,\ 1a,92,57,60,f9,0e,e7,97,99,0b,53,db,87,4b,27,f0,28,5e,c4,60,53,95,f7,d8,61,\ 67,30,92,2b,bb,b3,85,79,8b,1b,86,6c,f0,0e,fc,47,3a,d7,2a,01,d0,df,34,89,00,\ 9b,da,a7,07,ed,52,94,ec,26,f6,a6,03,2f,8f,73,ba,f2,a9,a8,23,05,b3,2c,bf,2a,\ 99,8b,d7,b3,48,b1,81,fb,8f,a7,e4,19,88,81,19,4b,3e,e2,50,ae,98,23,82,d3,09,\ 4f,e3,99,c4,90,1a,85,fa,b0,38,3d,5e,5a,df,fd,47,36,ae,c0,83,54,7e,34,2f,dc,\ 51,9a,34,f7,8a,b8,1b,b4,bd,b9,14,41,4e,3a,71,ae,b6,e1,a9,c9,9e,2f,b8,f5,4f,\ 7e,73,00,9c,7b,e3,8f,dc,33,03,f7,01,6d,b6,91,9a,82,9c,ef,f4,32,73,ab,df,c9,\ 42,c9,86,98,f2,a2,52,a5,6f,97,cd,de,73,1e,f0,0f,a5,29,26,22,39,a3,67,1b,0b,\ 40,e6,8d,2b,5f,2a,80,1a,33,53,06,96,d7,38,38,d9,e4,d9,df,16,24,0b,48,71,14,\ 33,28,f7,18,de,b1,f7,6a,d6,0d,1e,a5,44,fd,d3,7c,a8,d3,83,57,f7,31,95,c7,3e,\ 76,82,a8,c6,cb,fe,90,20,5d,48,d9,ca,4c,b7,48,37,65,48,86,84,ff,d5,ce,59,99,\ f9,bb,d8,71,68,dd,78,a2,42,c2,76,6c,ce,b8,d3,d1,0d,98,40,54,79,ac,f2,32,27,\ 57,31,25,9f,08,17,dc,7e,34,07,26,31,39,9e,1d,6b,22,99,6f,2f,25,49,aa,5f,cc,\ 81,6a,75,61,a0,32,53,e7,26,5c,d7,0b,10,e3,f8,b2,42,9a,3e,31,3f,77,36,90,10,\ 3b,91,9e,5b,8c,2e,62,03,0e,9d,7b,86,3a,7f,b8,47,aa,ea,d5,b1,c1,47,dd,56,e0,\ 8c,28,b7,bf,bd,e2,45,38,5c,83,93,69,ad,4a,8d,7b,69,c8,36,5a,0b,2f,e6,39,50,\ 58,ab,e3,4c,df,86,5d,43,20,4c,16,bf,19,8e,9d,58,13,2d,3e,91,93,a1,a1,8c,77,\ cd,36,40,f0,be,39,4d,a9,3f,ea,74,c4,86,80,bd,d4,f8,89,b0,55,1b,c3,4c,c3,06,\ 18,55,1e,4f,90,07,c2,f2,69,06,7f,6f,51,72,d8,a7,41,96,c0,0f,4d,b8,ff,3d,86,\ da,9f,18,f5,c1,fa,eb,60,09,b0,6e,f1,14,f8,3c,43,d0,24,1f,0c,ea,89,87,50,17,\ 82,51,c7,a0,6a,ba,52,1f,52,09,8f,01,90,45,e9,30,e6,ca,69,21,5b,93,b8,ab,e3,\ fd,b0,5f,09,4b,55,cd,76,89,c2,ec,6c,ee,ce,1e,99,2d,41,fe,46,b5,8a,4d,a3,23,\ 84,8e,f8,7c,65,05,ff,b4,c1,65,16,0a,87,c8,14,23,8e,81,ed,70,5e,c1,a2,c3,1a,\ 88,1f,ac,0c,99,ee,b3,e8,c7,4a,29,a1,79,8e,c0,c8,05,ea,52,c5,b0,4c,7c,04,61,\ 47,34,8d,7a,d9,88,f6,29,e7,6f,63,b2,0e,55,6f,c7,66,0d,76,83,11,f5,1c,89,b4,\ 8b,68,00,f3,48,f1,62,df,09,91,7a,51,f8,e8,3c,be,6c,6e,ea,38,6b,ee,be,ea,0f,\ af,22,8c,07,5d,bb,26,08,44,b6,46,0c,7f,68,6e,40,57,80,51,02,c4,66,80,8e,db,\ 96,28,2f,30,53,6e,0c,a6,34,56,94,a9,f5,9f,9f,08,52,ec,5a,c2,59,12,99,38,06,\ b7,83,32,61,22,c5,7a,41,77,5b,fb,86,68,20,fc,3c,43,dc,4a,40,09,8b,a5,2f,a1,\ e5,80,5e,02,66,ce,23,c7,76,2d,8c,8e,68,67,d3,10,d6,d9,e5,36,91,a5,a6,18,fb,\ bd,a6,75,1a,cb,38,b8,f8,9b,11,2b,4d,89,3c,5f,3b,d6,3a,d5,4b,b7,bf,2e,79,53,\ 23,1b,2e,0f,1f,95,85,a2,75,31,de,e1,13,b0,c6,c1,33,16,2f,ab,1b,1f,dc,23,25,\ e9,75,63,cd,dc,20,4e,f6,3f,6a,af,98,46,0e,c7,ba,29,10,ee,8a,36,40,fd,2d,4e,\ 5a,6c,38,08,d4,b1,3b,28,32,ca,23,f6,4f,c1,8c,9d,e1,5d,1b,5c,e7,fb,87,02,a4,\ f2,81,1f,5f,e4,a6,f7,d2,4e,60,7f,ec,c1,be,1c,08,93,73,90,86,70,5f,45,fa,52,\ f3,49,21,d8,22,d8,db,31,4a,de,8f,7a,88,2f,57,da,d1,8c,57,60,81,6f,1f,f1,11,\ 6c,5c,ba,50,73,75,1b,39,67,ce,4c,ed,e2,19,3f,2a,79,10,3e,a1,a9,a2,76,3c,22,\ ff,3a,a9,c5,95,22,ad,d2,5b,a8,b3,42,18,42,e7,70,56,80,26,73,a5,81,b9,9c,76,\ e3,b4,2f,01,da,fa,73,75,d0,74,31,f2,6f,8b,cc,bc,cc,3d,64,e4,1b,70,3e,09,34,\ 01,81,af,89,31,d9,4e,c3,64,5a,17,83,d4,65,a1,53,e7,28,37,a4,b6,f8,27,5c,ce,\ 56,59,e8,20,62,eb,0b,59,f7,51,b7,cb,a5,3f,3c,35,7d,05,37,b6,00,3d,7c,c4,f8,\ 0a,bd,bf,9a,08,d8,67,b7,05,70,85,f5,ee,91,b3,8a,98,bd,e0,4f,45,6b,c0,38,9b,\ f1,b1,83,2b,03,7a,22,c1,1d,72,47,20,6f,fb,4e,91,f0,f4,a5,88,ee,85,81,f6,1f,\ 51,50,c5,11,a4,9d,e4,d8,d8,9d,4b,be,58,57,52,f8,b5,05,9e,81,16,53,c0,ad,c5,\ e7,38,aa,b2,c2,dc,19,47,03,37,94,b6,fa,ca,6d,9d,cf,a6,e0,84,a8,5e,1d,6f,07,\ 56,e4,10,a0,61,15,84,ee,c4,aa,c0,ac,42,82,ef,4f,d5,94,1e,2b,61,ea,76,de,7f,\ 94,6e,4e,a5,32,fd,e9,c5,e5,b0,d8,d9,17,06,09,5f,21,80,16,e0,36,9d,7a,01,40,\ 15,a0,0a,a9,8b,92,54,c5,72,a5,d7,49,7e,f1,36,22,d1,ab,66,96,4f,43,44,e9,22,\ 38,86,90,4b,be,8c,69,68,23,26,0b,a5,d4,6f,48,08,95,b2,01,bf,9e,bd,27,a1,a6,\ 88,46,18,70,fd,b5,c6,03,5a,06,8b,58,80,23,9f,51,9f,4c,05,21,f3,03,d3,bc,38,\ 6a,4a,77,39,f8,4a,85,5f,d5,77,93,3c,7a,d5,4c,65,55,06,c2,49,e5,23,ca,cc,a5,\ dd,7f,0a,0b,03,0d,17,1e,0a,02,76,29,b8,3c,69,cf,18,4f,50,3a,54,a8,44,b5,69,\ 0e,d8,3e,74,65,fa,16,b8,5d,9f,dd,8b,53,80,79,53,e5,2e,49,26,44,25,fb,57,58,\ 15,da,d2,34,01,a2,43,ee,be,aa,bb,ad,93,6c,9f,a5,73,67,59,33,63,fd,23,c2,dc,\ 02,93,c4,bb,78,37,84,2d,5a,e5,fe,e2,78,e0,fb,e3,9c,7c,a6,35,dd,0b,61,54,9a,\ f0,73,c4,ae,1c,f0,da,0e,82,50,e3,04,78,71,df,82,5b,28,40,06,1f,eb,2e,12,41,\ 67,3c,ff,00,2c,c0,2f,77,41,f8,ec,43,7d,bb,d3,02,7e,86,93,c2,96,d9,56,ee,bf,\ 45,b3,40,02,74,89,4e,a4,3f,03,8f,49,42,38,4d,37,0e,ab,0a,a3,6f,2c,9a,1a,54,\ f5,b1,60,67,ec,bd,87,7c,a8,bd,f4,92,78,ea,be,9f,22,ed,f1,3b,5b,07,a6,c7,18,\ c4,cf,a1,b4,f1,6b,2e,a2,32,68,f1,d3,36,b9,9a,e1,cd,ba,08,28,40,ae,6b,38,46,\ 49,81,75,bb,21,93,d5,5e,d3,67,f2,c7,22,e9,2d,97,d4,81,16,8f,02,82,fd,19,70,\ e9,3e,d9,ce,f9,36,c9 "??"=hex:89,ae,01,73,ce,d8,d5,3c,e0,9a,ed,20,f3,65,c1,45 [HKEY_USERS\Network1-1957994488-1450960922-839522115-1003\Software\SecuROM\License information*NULL*] "datasecu"=hex:27,56,60,c1,e4,b7,ce,e2,0d,28,0d,c2,b5,aa,07,66,fe,2f,11,3e,4d,\ 39,d9,cd,23,e4,12,d2,8a,ce,97,95,2b,4a,f4,47,d7,61,80,41,9b,f3,31,10,d8,57,\ 48,cc,1e,f8,68,42,f4,85,04,a0,d5,1e,dd,e6,20,3c,2f,a0,1f,07,01,a6,d0,0a,e5,\ 67,88,9f,95,4c,11,80,d3,f7,8d,ef,88,ec,9b,dc,e8,77,db,5e,6b,eb,f1,1c,22,ca,\ 64,05,87,ff,15,d7,45,28,ba,6c,af,22,79,9c,5d,2a,67,e8,05,7c,d3,c5,28,8f,9a,\ 01,48,99,00,8d,88,1d,51,8d,a5,3c,a4,56,d0,e3,a7,6f,0b,51,0d,2f,d4,aa,54,3a,\ 8c,f4,2e,cb,db,6d,9b,b7,af,ce,a9,e3,31,fc,36,09,d3,ed,a5,41,02,4f,29,82,a8,\ 09,40,c4,84,e7,06,c0,5e,e4,03,3f,1d,43,01,64,3f,62,e8,27,ff,e6,0c,7d,36,3b,\ 28,c1,34,54,d8,0d,70,3e,2a,e7,16,c6,db,32,72,1d,de,c6,b4,a2,9f,6f,c1,2b,8b,\ cd,4f,40,7d,8d,14,7e,51,d3,69,23,ed,e1,68,40,39,a6,74,61,ee,8c,3a,bc,3c,5d,\ 74,ee,8c,80,14,c6,ac,41,9b,20,67,e8,79,de,78,5f,e1,1b,90,30,a5,85,a8,b4,51,\ 24,30,10,70,b2,5f,83,de,64,ca,04,5f,74,c5,74,c9,b0,12,df,e1,40,ff,84,6b,59,\ 92,41,f6,e7,eb,cb,fe,80,a1,bf,43,c8,c6,1e,a3,5a,74,c4,98,11,7e,38,4c,a0,d4,\ 80,22,88,1a,ef,98,4b,b7,49,0c,de,c7,c3,93,f9,92,96,f2,42,bd,dc,5b,dd,01,95,\ 8b,b5,1c,14,1e,ae,36,e9,9a,1f,e3,50,d9,bf,fe,4f,00,0d,f8,f9,2c,26,f9,ef,af,\ 9d,40,38,01,9d,85,98,99,9a,73,2e,ec,bf,a7,c0,dc,9a,e7,f7,ca,ff,e3,d8,8b,78,\ 37,e9,2f,50,c7,ab,a6,b5,c6,d9,44,69,0a,1b,2c,4c,00,af,88,4f,b8,d6,ca,89,ae,\ fa,92,00,b8,53,7b,60,c5,26,6b,f0,2e,3b,ce,90,8e,15,59,bf,c9,20,c1,5e,83,99,\ 34,54,46,b1,3e,0a,b3,99,83,7a,59,d8,5e,71,15,d2,cd,cc,b2,c2,16,15,84,29,c5,\ b7,d3,06,45,b5,c9,9e,eb,48,92,f4,85,08,41,88,ac,c2,7c,1c,25,bd,d6,7e,c3,cc,\ 80,5a,86,f5,4a,b1,d4,c1,d6,98,18,60,25,3a,49,83,f2,79,0a,f0,a9,35,90,8c,d0,\ 36,0e,77,04,0c,cf,7a,78,4a,79,17,cd,2f,25,ed,49,b1,5f,e7,0e,d3,5c,75,37,63,\ b9,e6,d9,de,52,07,be,93,fe,30,24,21,60,b8,23,58,4d,5f,0e,27,3d,5a,95,3f,81,\ ef,28,83,14,f3,eb,fa,30,cc,8b,3b,fa,41,75,26,4e,17,b0,b0,bd,11,ff,f0,4a,7e,\ 9c,8b,1b,f1,3a,89,3d,d5,48,55,96,a5,2f,f9,d7,80,d7,10,00,00,05,cd,82,1b,be,\ 22,dd,bc,88,9c,1d,c3,da,7a,ff,dd,53,35,3e,54,b9,76,5f,c3,d3,44,ec,ca,7e,3c,\ e2,99,47,8c,d8,b6,52,1d,9b,44,a3,88,78,ed,b6,5b,c1,23,68,35,70,3a,cb,3a,1f,\ 26,48,e9,80,e2,5a,1e,a0,a9,30,14,7c,7d,c8,72,42,e2,cc,9e,93,ae,23,05,d5,98,\ 6a,80,b1,65,7d,98,73,58,22,7d,53,76,29,b6,f2,16,12,f0,7d,7f,ab,36,45,0c,c5,\ f8,1d,d9,8b,71,13,81,c9,63,c6,88,db,a1,63,47,f7,c3,d6,e7,37,63,0d,27,c4,ce,\ 88,e3,5a,11,b1,30,d1,e7,1b,9f,51,18,f6,41,03,4b,6c,70,d0,34,de,f6,2f,cc,58,\ 5c,58,0c,09,a5,11,be,fc,f1,c8,dd,4a,fe,3e,2d,96,eb,2f,79,4d,ae,f2,42,ab,9e,\ 48,0c,19,ce,50,97,2f,6f,23,b1,e8,b1,06,97,fa,6e,bd,b0,7f,f0,36,b8,1d,f3,7a,\ 9a,db,6a,88,06,e1,6f,db,13,e1,ce,15,06,e4,a6,9a,b3,df,0a,d5,12,a3,e5,fa,ee,\ 31,63,a3,8e,ef,a5,cc,04,58,1a,74,4f,6f,e1,0b,73,cf,25,7b,ea,52,48,f9,c8,28,\ 27,be,ca,16,a5,0f,d8,71,22,22,28,90,0d,71,6b,ef,67,54,c1,e7,e1,3b,97,90,b0,\ e3,14,10,36,01,8c,27,f4,44,45,ba,d0,34,0e,7f,09,5c,ac,9a,5e,4c,cf,bf,fc,5e,\ b0,1f,dd,c6,9a,ba,a0,77,10,51,8c,cc,1e,17,74,03,91,f5,eb,09,f8,9c,f1,8d,30,\ df,24,a7,de,32,dd,11,5d,c8,da,71,21,79,f1,d6,8a,b3,73,33,5d,54,e1,77,2d,28,\ 57,ee,e3,92,dd,13,75,24,bc,df,d5,54,17,11,01,a4,b0,a0,e9,7d,f5,bd,44,fe,51,\ 6e,23,8b,d1,64,1d,38,de,d2,4c,1b,d4,46,00,ab,7d,f0,f7,b7,6c,e0,a3,10,af,2f,\ 40,77,d5,0f,15,6f,7a,6a,b6,75,61,12,66,3b,46,4e,b1,2b,85,60,27,8b,f7,13,13,\ 74,b4,2f,22,52,4f,b0,11,43,07,7a,ef,b1,12,f1,75,80,94,6f,8e,44,cb,a2,a5,05,\ aa,e7,90,8f,7e,71,97,79,b9,fa,63,85,5f,87,69,ac,ad,28,0a,5d,51,8b,af,44,d7,\ e5,9d,c3,78,0d,97,06,0a,33,f4,37,36,43,5d,3e,bf,56,31,4c,cf,37,33,6a,4e,3c,\ 30,13,e6,3b,b6,6d,36,2d,5d,50,82,3c,cd,83,d9,ee,fe,e3,63,88,3a,a7,d5,79,a9,\ 66,1e,a2,60,8a,cb,ee,6d,2d,70,e4,da,77,09,e4,15,86,8d,b5,da,b6,a6,fd,96,43,\ eb,1e,ae,bc,47,d1,5c,ef,f4,68,ba,57,f4,48,26,82,9b,4e,89,9d,af,e2,71,d0,6b,\ bf,a9,1e,75,06,d6,2b,91,2b,d3,f0,12,64,b5,64,49,21,74,a9,fa,2b,3b,28,df,db,\ f6,ad,a8,02,37,62,a2,54,b2,19,a4,f4,df,55,61,bb,d3,27,5e,d5,8f,e0,03,73,49,\ d3,f0,3b,9e,0f,7c,6d,20,18,93,df,47,0a,67,c7,bc,5a,e7,5a,68,75,60,11,55,22,\ a6,e1,53,d9,ae,10,c7,20,1b,a0,3f,8b,21,be,98,1d,cc,cb,47,8f,20,e1,56,55,8b,\ 26,23,6c,75,7c,6c,19,18,d4,24,83,5c,f1,cd,db,a8,3f,f4,95,a3,e2,1f,4c,c7,81,\ e8,1d,d1,f3,73,29,d6,f1,14,7a,1a,f6,a9,01,ed,42,7a,81,0c,22,46,ba,f9,97,42,\ 96,f7,b9,6e,33,7f,f2,26,6a,bf,cb,73,7f,7a,5f,e7,9a,13,37,b9,d7,fd,b9,da,b6,\ 89,94,7b,1c,0b,78,1f,82,80,fd,7a,37,9e,11,e6,f7,aa,6b,f7,ef,69,c7,54,01,56,\ ae,cd,14,21,6b,57,7d,18,33,6f,77,16,a1,c9,dc,56,e1,c5,5d,84,57,a7,06,23,b7,\ 71,bd,34,5b,78,d6,ec,34,c9,21,d0,f9,32,a2,bd,d5,5a,a5,90,68,8e,02,80,c5,c5,\ bf,5e,52,b9,5d,af,00,9d,fb,36,b1,22,ee,55,af,51,87,65,20,2a,11,6a,c7,a7,56,\ 71,ae,24,1b,29,d1,66,3a,f5,e9,af,9d,f2,05,b2,25,57,8f,d6,1f,9d,eb,4c,39,5b,\ 6a,ae,50,cd,77,19,4e,88,26,f5,f7,7b,47,fc,28,4e,1c,d9,09,e7,65,62,86,72,73,\ eb,a0,79,16,db,2c,d1,09,72,2f,c0,23,1e,ff,38,ee,2d,f0,f6,c6,18,ed,1f,70,ae,\ 3a,3d,d1,7c,99,49,f6,c0,73,98,fd,2c,73,bb,5b,b7,9f,f9,96,64,fe,2d,73,26,e6,\ 65,51,ab,b6,87,ef,c3,fe,3f,07,e1,f2,f4,ec,06,ee,6a,af,b7,69,67,7d,93,33,47,\ 5a,d8,1e,d9,45,03,ef,3b,92,9a,ce,62,92,9e,3d,6d,55,57,50,5e,a1,4b,f9,ef,a2,\ f5,b6,e3,89,30,bd,74,60,8b,b0,68,61,4d,d8,4d,fc,99,65,58,cd,52,32,6b,ee,1f,\ 16,8f,6e,36,3a,97,f3,34,42,e9,29,10,82,17,e5,50,17,78,d7,04,c1,42,37,7f,6e,\ b0,4f,2a,be,fb,05,c8,cc,20,70,08,eb,a9,15,8b,da,32,a7,c2,18,c0,c9,a2,0a,6e,\ 7f,b2,79,6c,07,65,b4,e2,ce,bf,39,1b,17,5d,c1,12,99,03,f5,fb,86,1b,b6,7f,e3,\ 03,2f,9c,ca,01,95,60,2d,dc,d3,30,39,79,8f,90,9b,1f,52,e8,fa,bc,ee,e3,24,f1,\ 3b,c6,01,53,a6,d2,e2,1c,eb,73,94,32,9b,27,b3,7d,19,d3,be,21,cb,6e,18,2f,04,\ d3,5b,c4,d9,bc,0e,14,6e,ea,22,60,85,f7,ad,ce,4f,f5,63,fe,fc,30,91,1a,2b,bc,\ c2,06,46,1c,4c,d8,12,40,73,07,d3,68,20,7d,f9,3f,a5,06,6b,69,61,3d,0f,06,5a,\ e1,32,8c,49,4a,c7,73,fd,77,6e,96,cf,7e,37,34,27,fe,24,96,2c,5e,e1,29,3e,2d,\ 99,da,92,a8,4f,89,b2,df,98,11,21,3b,f5,59,6e,69,23,20,0c,da,81,f1,ea,67,19,\ dc,4e,ce,6e,ff,4b,4f,20,12,11,52,5a,fd,1a,89,f3,33,27,94,fa,39,ad,d8,c0,ca,\ 86,49,e2,4c,2b,7a,3f,91,5f,7b,74,f9,63,18,37,99,ae,3c,75,94,ec,53,76,57,88,\ 3d,1d,cf,e2,0c,72,b8,5a,a9,9f,5a,62,32,95,f5,18,3c,0b,98,6f,41,d6,ab,0d,1e,\ ab,a8,07,bf,56,16,6b,8e,55,37,9c,aa,ac,10,24,f5,4c,5a,d3,15,68,69,40,d7,9f,\ 64,98,50,9f,c4,53,9f,48,a2,3c,34,a6,03,9d,d6,c5,93,50,ce,b7,09,56,6d,78,fa,\ 85,c2,46,6a,aa,13,ee,9c,93,b6,e2,5b,65,a0,43,f7,ed,6e,24,23,54,fb,52,91,1e,\ 2e,0b,10,70,80,e9,8a,f0,26,7a,63,85,d4,8b,7a,11,d0,8b,c7,f5,77,22,b1,d9,7c,\ d7,5a,84,91,10,b1,17,13,5c,c3,51,51,1c,32,e2,61,88,68,63,4f,8f,b8,ab,5d,57,\ a7,92,5e,d1,be,9b,17,35,b7,b9,d2,ce,f4,24,5a,5e,9c,e9,fc,49,d8,52,02,2a,59,\ 90,27,bd,b6,e9,46,64,c2,78,57,25,88,c0,12,f0,63,fd,a7,85,af,5c,88,7a,cc,bd,\ 1c,bc,ac,d1,69,de,46,d6,07,08,5a,1e,a0,2c,fb,d7,ae,65,6b,1a,f1,af,82,5a,ec,\ bb,f6,26,c4,7e,ba,db,27,cd,db,ab,9d,76,76,7b,b8,1b,a5,97,b3,22,21,03,11,5b,\ 7d,51,22,b6,ab,ac,a6,c3,47,99,e7,4b,a9,6b,10,d8,9a,d1,4c,d3,2f,0b,b3,76,42,\ 59,89,90,cf,1a,2e,6d,91,2f,60,92,57,bd,75,42,63,1d,10,82,87,42,ff,b2,a8,74,\ f6,64,c2,69,cf,d4,31,88,bb,28,7c,e6,0d,45,02,1b,d2,d7,2e,12,b5,84,86,26,78,\ e6,56,d2,4f,70,b1,3d,02,80,9b,14,6d,5f,7d,c5,c3,00,31,b0,55,bf,16,63,b4,c3,\ 9e,7b,9e,3f,70,c9,d4,94,39,77,8a,bd,4e,a3,2c,f6,2f,5d,46,eb,7a,eb,06,60,79,\ ec,bc,8f,6a,e1,6f,88,18,6b,ba,86,ff,24,29,bf,d3,c4,cd,b3,22,4c,b9,67,bb,8c,\ d8,56,eb,e1,d3,e3,d1,25,8b,eb,cf,01,ec,d5,21,9d,da,36,e5,c0,3b,f0,3c,b8,69,\ f4,16,18,ea,7f,2f,f2,c6,8f,a3,b6,5e,8b,37,4b,ea,c5,9f,7d,a5,7a,37,d8,e4,83,\ 7c,ab,1c,8a,88,f5,9a,b1,e8,ad,47,64,7a,eb,3f,a7,ac,37,50,f1,03,19,a4,d2,22,\ 65,17,40,da,f8,d3,57,c9,16,ab,20,3c,1a,98,8c,ea,d7,ae,d5,cc,72,f8,d4,69,ea,\ cf,80,8b,c7,35,34,a0,cb,13,82,94,3a,49,7b,32,93,43,43,99,78,ad,19,75,f3,7b,\ a1,6a,06,b5,76,88,53,f9,75,d2,7c,89,f6,a7,69,9d,18,ce,f6,7c,75,a3,c8,24,ed,\ ce,da,94,c7,0b,61,93,26,49,f1,d2,c0,c7,03,de,c0,a5,6b,f0,29,a9,c4,f1,48,47,\ 2f,b1,f8,9a,0c,ad,f3,9c,1f,4a,89,ed,67,65,2c,3d,72,99,67,3d,5c,66,74,42,db,\ 53,f8,13,21,d5,e1,e5,61,97,b9,f1,a1,fe,8f,af,f6,0b,75,c0,ea,5e,01,13,fc,cd,\ 86,2e,53,de,15,65,c0,1c,0a,27,68,ac,64,57,97,f4,10,bc,8a,ca,9d,db,9d,4f,b2,\ 87,7d,9f,fd,14,43,88,a6,06,c4,5c,28,fe,f5,fe,f2,1b,e9,8d,47,8a,5a,39,a5,67,\ 2c,48,11,f8,60,40,b4,0c,40,51,14,f2,40,30,96,49,d7,6e,b9,f7,93,9a,77,2a,1e,\ 5f,9c,3b,38,9e,c2,5c,c0,e9,e7,5c,36,18,63,00,88,82,09,34,97,09,9c,03,44,25,\ d9,07,f0,50,c0,3c,7c,39,43,07,9f,e7,ae,8d,c3,65,60,c7,b4,e7,1b,8c,9f,8f,46,\ bb,6f,78,6d,ea,73,35,55,26,c4,9d,f4,39,37,c9,d1,23,79,9f,b4,41,0a,90,9d,fe,\ 86,de,b0,27,9b,27,cc,41,60,4b,51,fb,80,d5,25,52,1e,ca,6f,51,95,14,62,cf,cb,\ f4,0e,06,94,0f,2b,30,99,f6,6e,ac,c9,29,80,fb,b8,63,6d,70,2f,ae,3b,f8,ba,a8,\ 34,ac,51,92,84,bf,6a,4b,fb,18,6b,04,8c,42,58,66,4b,7e,ce,bc,a6,07,64,9e,2a,\ 89,c0,cf,20,c0,be,65,76,9f,dc,14,27,5b,38,dd,bd,12,29,67,43,20,e1,39,ff,45,\ f2,2b,9a,e9,7e,b1,a5,68,25,fd,cd,04,7f,31,c7,d9,fc,c9,b4,48,a2,ba,0a,22,30,\ f1,7d,43,e8,b0,45,15,9d,dd,19,4d,da,45,29,59,19,cf,98,41,27,9b,44,a8,09,4e,\ e1,5d,4e,48,f7,98,24,c8,47,46,32,07,8d,a2,3f,a3,dc,45,a9,d5,74,54,27,cd,ad,\ f0,cf,26,0f,94,de,2e,6d,83,88,4a,f4,f1,5a,c8,ca,f3,58,88,25,38,78,ad,25,6b,\ 9f,0e,12,7e,13,8d,37,68,e7,c5,33,ef,5d,c8,99,02,9d,62,9d,df,7b,b2,6b,5e,7e,\ ed,8e,41,a4,7e,f7,ec,f3,5b,c3,d8,7b,64,43,6b,7e,b6,60,c4,26,21,4e,f1,b7,c7,\ 64,29,7a,f4,61,0c,df,db,d2,2c,ce,ec,03,b0,81,88,65,71,eb,50,c7,47,38,44,5d,\ 5d,d2,6c,b6,bc,11,f6,c5,1d,f6,ba,56,19,0d,62,0f,46,c7,ee,1a,08,bd,5b,00,26,\ fc,33,42,40,2e,ff,d2,b9,db,9b,18,d1,2d,9a,61,f1,c8,7e,68,93,05,af,23,67,a5,\ 3f,b1,2b,a4,ef,ef,00,8e,36,f3,c7,c9,09,29,03,0e,a7,da,b9,f6,5b,96,26,f8,75,\ e5,8a,b5,ed,e7,3d,3f,a1,f4,6b,7c,6e,58,c3,8a,69,a3,d6,e7,70,78,d5,24,03,86,\ 94,18,4d,c7,6f,dc,18,80,76,b4,42,64,9a,32,9c,c4,4c,32,48,4b,fa,2f,e8,3c,de,\ 88,01,03,ff,ef,6c,69,0b,aa,ca,44,04,b4,85,06,9c,e7,14,0e,c1,f2,9c,b9,3a,9b,\ 83,2d,02,c5,c9,e0,82,aa,67,38,3b,31,77,e7,c6,ab,fe,71,d2,69,97,54,04,97,3d,\ ad,a3,db,2b,ae,df,00,33,e8,b1,81,f0,7f,8d,14,c9,84,ab,4b,76,d6,8d,13,39,d0,\ 87,b7,3e,2e,fa,fd,b0,72,89,d3,e7,17,59,c0,ea,dd,fa,1e,4d,39,0d,5a,59,7a,8a,\ ab,f4,a9,bc,c3,49,02,e8,6f,93,6b,a5,b8,5e,a7,e8,ed,c3,5b,db,0f,77,cc,91,8e,\ 1e,0a,ca,da,1e,92,8b,e9,3c,88,6b,3d,2e,ea,ed,95,6e,2d,d8,c0,53,ca,4c,92,9f,\ 29,f0,a0,fa,a6,7d,d3,7c,b8,f6,28,0b,f1,54,1b,1c,b5,f5,7e,47,89,c7,23,7f,73,\ 02,13,da,e9,b8,c9,fd,3a,21,4f,0d,a3,f9,7f,2d,e9,82,67,83,a5,0a,fd,60,9d,b2,\ 7c,ef,ab,c5,68,9c,c2,9c,a6,86,96,ac,f3,2e,78,10,36,39,55,6b,a6,26,d1,25,7e,\ aa,63,ff,d6,dd,d9,f7,55,aa,6d,26,cd,67,48,fe,23,87,a9,ef,84,38,b5,30,b7,7e,\ 4d,94,c7,1c,ae,55,23,5a,4c,7b,ef,66,08,15,f1,2d,3a,a6,0c,eb,14,d2,2e,ac,54,\ fc,74,05,96,6f,cd,48,5a,2f,91,2c,2c,74,df,55,9a,61,85,00,ea,5f,1e,92,54,5a,\ ef,61,e2,4b,c6,18,8e,ec,51,91,58,bf,77,cd,4a,16,b2,28,90,24,f0,b6,9f,92,46,\ f0,33,67,42,12,8a,a2,41,a4,35,a4,d7,7a,84,5b,d5,79,5b,5c,47,6e,8b,9c,95,8c,\ 1d,05,46,6b,27,7b,df,f7,ea,35,08,14,8e,02,47,e9,62,4c,c5,88,69,12,6e,97,ce,\ 3d,64,9d,23,8f,59,55,5a,87,cf,02,cc,11,25,e4,76,17,f9,6b,d9,2c,34,99,ff,48,\ 97,be,bc,70,87,e2,fe,eb,a0,47,06,3c,c0,0c,0a,89,36,58,b8,c1,e9,e6,52,26,25,\ 82,c0,27,ca,85,e5,42,35,31,4d,c0,f7,0f,11,8e,18,34,7a,9c,d0,c1,2e,1f,f8,9d,\ bf,c6,1f,ed,2f,4c,2a,6b,61,a5,2a,50,49,47,f8,f5,15,85,d3,af,de,a6,e1,bf,32,\ 8a,51,ee,e2,65,a0,63,c8,1f,e6,1f,9d,91,df,18,8a,9b,c1,12,02,2d,63,20,86,48,\ 5a,dd,99,2c,98,70,d7,6d,bb,18,f4,f4,b3,41,6d,da,af,08,6c,82,29,22,d5,ec,35,\ c8,de,b8,f2,96,e1,2f,ba,48,86,f9,aa,da,0f,da,af,e7,73,43,8d,79,31,31,fe,23,\ a3,31,fd,6d,2d,a2,aa,1a,6c,9d,d5,e9,de,a2,b7,0c,39,53,2e,c1,32,96,2a,dd,3e,\ 95,70,c2,95,4b,d2,bb,04,19,30,d0,31,d9,84,51,98,32,a4,cd,89,a6,31,90,a5,a5,\ f6,3f,de,16,58,98,48,8d,e9,1c,20,0d,d5,b3,32,b0,72,f7,09,30,f4,ad,93,19,3c,\ 04,dc,d5,0c,f1,9c,e8,ab,f9,82,5d,26,af,44,4b,b3,a8,77,5e,a0,43,ce,ae,34,d4,\ 86,a7,36,2a,bd,de,a8,00,f1,2f,6d,1b,d6,e7,70,46,76,19,c5,a3,db,96,41,51,58,\ 43,e3,c9,a4,7b,08,30,d6,2d,96,e9,e6,b8,0b,9e,be,c4,97,5b,21,52,d0,c6,6b,0d,\ 49,5c,21,ed,8f,fd,ef,e0,3b,78,32,5f,3e,e7,55,f1,f0,8b,24,c5,c9,e8,e5,14,1a,\ 05,79,80,da,e0,7f,0f,18,24,12,2d,7c,b0,a5,3e,e3,c3,d6,1d,c0,89,02,00,b9,6b,\ 47,13,b8,31,a6,08,b3,38,f7,75,8b,59,69,ef,91,57,6f,2c,f2,58,49,a2,25,7c,2e,\ 32,ab,db,2b,b2,b9,74,28,9a,02,be,a1,24,40,af,59,37,4d,84,02,ca,d3,d5,14,7b,\ 21,4b,15,b5,04,32,72,39,99,9c,f9,2e,cd,7d,0c,f8,45,9b,48,16,4e,e3,ef,5d,4d,\ 1e,64,50,a4,cd,44,55,db,d2,50,97,7d,c8,18,e9,df,1f,e6,18,67,a1,c0,ee,9e,81,\ e3,f7,ba,f6,da,bc,c7,bf,4a,d3,95,e3,bc,f9,9a,41,b9,85,43,1c,14,29,c3,38,58,\ ed,73,f6,d7,2f,e4,e9,24,8c,f1,9a,a8,f5,5d,69,43,13,13,8e,01,6f,fb,2d,ef,38,\ ba,c6,4a,60,f8,7e,d4,9e,1b,25,76,df,ad,83,e0,f1,38,00,a3,56,86,29,05,82,f4,\ 01,dc,5b,85,2e,e6,12,3f,84,a2,ed,ef,73,fc,63,d8,9b,5c,83,cb,66,04,e7,7f,b4,\ 5c,09,21,0f,74,ef,d9,42,40,fb,b0,bb,bf,88,47,3b,8c,a1,f8,2c,17,7e,96,64,bc,\ d3,5c,17,33,94,89,74,97,8e,8a,b5,b0,93,7d,5d,d1,a2,8a,5f,9d,67,84,e3,85,e2,\ f3,0d,1e,d9,19,91,04,2e,95,87,a1,79,02,ec,9c,07,1c,53,6d,c0,d5,33,69,46,db,\ 89,37,e8,9b,4d,2b,bc,bf,32,6b,c5,36,2f,c6,a8,26,17,fc,56,fe,23,3f,ea,55,00,\ ce,40,38,46,0b,3e,df,85,76,fd,6b,b5,0b,ae,ea,6b,b2,ed,65,f5,47,3d,f2,1b,0e,\ bf,62,3f,e7,87,87,54,b6,07,56,00,ba,77,03,3f,f3,76,51,6d,06,c3,df,13,25,05,\ f1,7a,a2,ee,d8,bf,64,91,d9,5a,80,84,26,d9,16,07,b0,3d,f3,b0,80,6f,52,ac,d4,\ d2,26,2f,5c,b7,ac,bd,98,10,96,ef,39,ca,fa,c3,54,1c,9b,f0,ec,05,4c,1e,3c,cc,\ 9b,c3,ac,3d,8b,99,ff,f5,9e,dd,d6,72,8c,b4,0f,93,9f,1b,64,59,c0,fe,d0,2d,e2,\ 99,07,68,10,fb,be,3a,65,d3,a3,65,8a,7a,36,b3,37,56,ab,d0,27,83,52,8c,d1,32,\ cf,9b,3b,90,fd,af,8c,64,5d,13,c9,cf,1d,84,1d,3a,3e,a9,20,02,30,6c,6d,20,4e,\ 4f,62,25,06,89,e4,91,94,95,14,83,04,ee,0b,70,d4,1a,56,91,b0,46,95,ba,64,b8,\ 91,7d,62,55,60,94,64,8f,9a,4a,1d,bd,0b,82,b0,bb,3d,24,d0,38,c9,4a,4c,05,d3,\ 99,ae,89,17,5b,42,21,44,87,cf,51,2a,6c,74,8d,d9,20,3d,14,7a,ff,d7,a3,47,b7,\ b4,e6,c5,04,6c,cc,fa,b4,d9,58,64,72,cc,d3,cd,65,70,13,8e,77,76,fb,f3,ec,9e,\ 30,79,8a,44,91,1d,68,15,a1,18,d2,60,91,0d,a4,25,b4,bf,21,10,ec,61,c5,e2,93,\ 22,23,e7,fe,7d,c2,71,5b,be,23,d4,24,9f,eb,29,66,2d,07,09,04,39,2b,97,8c,f2,\ 5d,3c,2b,46,c6,b8,14,ae,0b,a0,39,e9,2e,fc,98,ad,9b,57,9c,4f,1c,e8,7f,fd,a6,\ 97,aa,ae,97,b6,04,f7,9d,09,ce,21,29,ed,94,b8,9f,b7,ab,b0,a2,5e,f6,81,a2,70,\ af,8b,cf,18,d2,ee,d5,88,f6,a4,9b,b6,f5,93,8a,9c,0d,32,8b,9f,93,9a,87,66,78,\ 85,eb,8d,78,cd,d8,b1,67,c7,8d,5c,9d,80,de,52,64,45,99,77,62,0c,9a,7e,25,06,\ 93,df,8b,77,0b,50,e6,84,64,87,14,07,bb,67,cf,fa,aa,c5,fc,c2,18,5e,b3,32,de,\ 34,3b,c9,fc,a1,0b,76,b0,9f,45,cf,5e,bf,cf,42,b5,2a,c9,90,90,17,f6,8b,9b,6b,\ a9,d6,5e,45,8e,9b,b3,3c,10,0a,da,8f,e2,a1,11,df,c2,d0,84,6e,d1,41,87,b2,b7,\ 0a,0d,fb,22,25,55,09,ac,cf,07,81,ba,a1,f5,ee,9d,e0,ed,f7,53,05,7f,ff,aa,9f,\ f0,58,27,4f,77,bd,8f,11,a0,23,b2,39,17,57,d2,45,ef,ef,7a,7b,64,c3,c8,f3,19,\ 80,8c,d6,8d,46,bc,b3,88,10,af,6e,3d,94,38,eb,1f,eb,4a,7f,8b,41,c2,f7,af,db,\ 65,33,73,ce,fa,93,88,11,62,c8,6d,84,f9,52,da,5c,dc,b1,15,a2,7c,fb,6b,31,3c,\ e6,b7,3a,27,79,78,61,1c,08,fd,ee,04,f3,d8,b3,9f,ec,f7,a5,25,20,e4,0f,75,81,\ 81,0b,f8,c2,78,d6,30,27,ff,ca,6f,1f,36,9a,d6,52,fa,c2,9d,45,0a,de,ce,90,09,\ 9a,8f,10,a9,bc,a2,f4,e7,e4,b2,51,05,b5,e4,f0,e8,a2,8c,53,b1,07,c8,1b,6e,d2,\ 60,5d,40,65,e9,56,ff,4d,69,00,ba,8d,06,e1,93,aa,05,d1,d1,8b,ef,d6,3e,d2,d7,\ 17,bb,b5,b0,f7,a4,bc,ea,5c,6b,2c,cf,fe,1e,94,36,4b,b7,af,e1,00,ca,18,35,83,\ 7c,bd,dd,e7,70,24,04,1b,16,8b,62,18,45,72,be,ca,2e,57,a4,e6,be,8d,8d,e0,a7,\ cd,cd,c2,09,31,e0,6f,91,ac,c4,8c,84,a4,b3,83,6c,0a,20,0c,7f,df,f9,09,99,f2,\ ed,77,bd,f7,92,42,26,60,43,2d,dc,54,68,99,f7,f2,dd,47,6b,35,f4,db,61,e0,85,\ eb,13,e7,c3,71,65,55,02,39,90,35,09,07,0a,39,8d,42,69,a1,73,62,fd,25,a8,d5,\ 00,22,13,a1,36,7a,6f,eb,21,de,a9,05,1e,e3,47,07,cf,92,b1,e3,3e,44,ab,c5,52,\ 33,c4,b0,49,c3,05,a1,c1,84,23,a4,2e,86,4f,b0,57,d0,a8,ab,56,b7,ca,0c,77,e7,\ 0c,44,14,ab,98,5c,df,f2,47,e3,b0,78,17,e0,9a,28,8e,d7,ce,e1,f6,14,5d,2d,f3,\ 03,eb,90,f0,b3,bb,32,eb,80,c1,1c,89,37,c8,19,09,c4,14,73,1c,8c,e3,3e,a2,6a,\ ad,7d,05,84,2f,cb,04,e7,01,4d,e0,a3,0a,a7,4a,c7,b6,6c,d2,9f,5e,75,40,e0,77,\ dc,3c,64,16,ef,a3,14,fe,1e,88,ff,ad,98,7c,74,a8,06,8f,98,db,05,ec,dd,cd,c3,\ 5e,4d,74,f2,ed,47,69,2f,8e,5b,8e,30,8a,27,83,5b,1a,ff,68,22,cf,4d,47,39,dc,\ ca,0a,9c,a6,4c,77,6a,ea,15,93,b9,40,1d,f6,89,a7,8c,06,4f,c5,91,86,df,89,d6,\ 70,be,3c,61,94,f6,bc,b3,d7,8d,88,8f,21,39,61,69,aa,2c,a7,e8,15,5c,73,47,90,\ 2f,24,42,a5,95,a4,4e,58,23,a9,18,26,6c,48,b7,d4,a6,82,c4,84,12,5c,9b,15,be,\ 58,b8,31,d5,bd,6d,a5,14,6b,62,62,5e,80,a8,53,38,e7,39,af,36,9b,12,e9,f8,cf,\ d1,74,5b,8d,40,bc,50,90,db,42,a7,07,0c,00,15,95,0a,9b,75,78,e7,a9,8e,58,f6,\ 1b,25,00,49,80,56,f5,e7,5a,c2,1c,32,a7,4e,f7,9f,49,07,46,db,05,de,2c,35,cf,\ 02,88,00,e0,5f,2f,52,88,d3,80,6d,92,48,e8,9d,ed,32,26,c9,84,44,6e,80,2f,2a,\ 80,de,4f,b7,be,0c,b7,84,bc,e5,e2,93,28,d8,49,85,2b,72,47,e6,5b,47,b2,0b,db,\ e4,81,21,ae,75,43,51,38,1e,0d,12,4f,0c,e3,7f,73,54,f0,52,3f,02,75,d8,74,2d,\ 37,ba,fd,6e,65,99,0a,4a,21,89,f9,b8,ec,14,fb,40,81,1b,78,9d,57,0d,27,04,44,\ cb,2f,36,7a,99,5b,5e,32,d1,e2,cc,ba,a9,e4,eb,94,4a,49,fd,03,cb,46,b3,70,ab,\ b7,1e,d0,dc,e7,69,f4,22,7e,25,3a,ca,27,09,34,12,d9,56,c2,b0,e1,e5,f4,c0,b7,\ a2,41,33,78,c1,c2,7a,03,f2,06,95,6c,55,2f,04,87,66,a3,36,68,04,c4,41,f4,f2,\ 66,c1,a4,1a,6b,59,42,d0,ef,59,d1,79,b7,88,3e,b3,02,83,39,a6,33,49,fd,14,07,\ fa,04,1e,12,c7,af,18,ff,bb,63,52,4a,24,20,b6,13,ad,a8,b2,fe,6b,d5,68,70,ce,\ 9d,4d,4f,44,d5,88,21,2f,33,92,2f,54,a4,97,32,5b,b1,67,4a,47,34,a6,ef,6c,d4,\ d8,db,f8,82,b9,9c,2e,98,47,89,33,a3,a1,95,d2,ac,03,65,65,17,69,d5,14,1f,0c,\ 12,bb,25,ee,e5,1c,e6,a4,60,42,3b,31,74,36,0e,61,20,7d,53,7a,9b,b0,9a,80,80,\ 09,bd,d6,14,f2,29,94,25,a9,b1,9f,09,1e,70,13,97,18,ed,96,4a,49,f7,ca,64,24,\ 36,dc,5a,67,64,5e,28,62,f6,30,22,ea,03,ad,36,d0,2e,6f,3d,7e,58,64,d0,09,0a,\ 85,3c,15,27,dc,42,6c,12,b5,67,49,92,34,15,26,a9,ac,e0,09,4a,0a,d1,a1,10,dd,\ dd,7f,c5,4c,d7,bd,7e,1a,07,95,5a,d6,9a,c9,f3,e4,72,95,1e,22,38,37,24,dd,b6,\ 8e,7e,9e,5e,96,6f,f4,ec,93,7e,7d,99,b4,17,0d,5a,f9,84,a6,92,6d,0d,00,de,cb,\ 4f,89,76,d0,00,46,81,dc,56,77,8c,20,d0,a5,93,4c,e7,2b,01,5f,e1,83,79,3f,f4,\ ee,2e,98,92,80,7b,eb,a7,3a,6c,e6,bc,d0,18,3f,52,af,fc,05,41,a7,c1,80,c1,57,\ 41,52,5e,46,18,a4,70,47,af,1c,ad,d6,81,5f,8a,83,c6,c0,81,49,26,ed,09,28,a7,\ 2c,8d,b9,0e,53,bf,42,3d,4d,ef,8b,c2,fa,c9,62,2f,6a,74,93,44,67,41,b4,d9,f1,\ 79,26,3b,66,5c,93,f3,72,90,4e,53,ee,59,de,b7,a1,61,8e,bd,2f,34,00,a7,33,35,\ 01,b5,aa,67,cf,1a,03,4f,9d,a7,2d,e7,7a,dd,f7,3a,57,66,49,89,f0,cc,9e,08,9e,\ 35,af,cc,08,08,4b,04,dd,48,d6,d5,a7,38,e4,e1,ec,9b,d7,65,24,7c,41,5a,08,d5,\ 01,21,15,88,8c,3d,80,53,9c,6e,dc,cd,52,0d,71,b9,93,ed,cd,47,58,e5,42,c8,b3,\ 22,6a,0d,2e,64,ba,e6,35,46,e3,ae,3f,6c,43,f9,80,cf,e9,76,6a,bd,66,52,b0,51,\ 6d,7f,7a,95,95,13,f9,5e,ce,ea,23,9d,0a,51,71,38,af,35,b9,7c,a6,71,b0,43,87,\ d2,32,79,52,0e,16,02,c3,4f,c5,2c,c4,c8,26,b0,a4,8e,bf,8d,6e,fc,72,5a,35,0a,\ 15,06,63,b1,1f,c7,e7,07,86,61,a4,19,4c,0e,84,af,1d,8b,0d,99,64,0d,d4,8e,99,\ 79,4c,04,7f,f2,43,c0,1e,40,7a,aa,20,ff,c9,3f,fc,b3,2d,4e,25,f4,e9,31,46,cb,\ 49,8f,53,85,29,96,3a,bc,5b,73,c0,84,80,84,8d,e7,7b,d5,c4,4e,b5,40,bd,fd,7c,\ 85,a2,96,d9,a3,c3,ce,f0,09,bc,ce,a2,d4,f3,ae,bb,17,60,e9,33,75,63,88,94,f4,\ 42,79,c8,b9,d7,fc,6c,8e,34,ce,6b,a0,d9,17,4b,bc "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98

reszta sie nie miesci

**Posty:** 8001 · przez **Okocza** 02 Sty 2009, 16:52

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka

**Posty:** 64 · przez **mitchelo** 02 Sty 2009, 18:22

Kod: Zaznacz wszystko: [b]SDFix: Version 1.240 [/b] Run by Administrator on Sat 01/03/2009 at 02:58 AM Microsoft Windows XP [Version 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-03 03:08:22 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:f2,9e,c0,79,46,82,23,eb,5e,a1,d4,29,9b,4a,30,35,de,27,d2,5f,4e,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,f9,d1,4e,04,56,82,a1,90,19,9a,4d,f3,87,24,e4,0f,cf,.. "khjeh"=hex:71,91,b0,24,16,08,43,69,3e,24,84,5f,a0,22,1c,71,20,b8,73,18,fa,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:a5,99,cf,24,bc,6c,6b,3f,a4,eb,62,2e,80,8f,df,2c,fd,1e,33,17,69,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:f2,9e,c0,79,46,82,23,eb,5e,a1,d4,29,9b,4a,30,35,de,27,d2,5f,4e,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,f9,d1,4e,04,56,82,a1,90,19,9a,4d,f3,87,24,e4,0f,cf,.. "khjeh"=hex:71,91,b0,24,16,08,43,69,3e,24,84,5f,a0,22,1c,71,20,b8,73,18,fa,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:5f,c3,72,b9,a6,c2,94,ce,ad,3a,b8,1b,f4,47,48,76,5b,7d,fe,e3,00,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:f2,9e,c0,79,46,82,23,eb,5e,a1,d4,29,9b,4a,30,35,de,27,d2,5f,4e,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,f9,d1,4e,04,56,82,a1,90,19,9a,4d,f3,87,24,e4,0f,cf,.. "khjeh"=hex:71,91,b0,24,16,08,43,69,3e,24,84,5f,a0,22,1c,71,20,b8,73,18,fa,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:a5,99,cf,24,bc,6c,6b,3f,a4,eb,62,2e,80,8f,df,2c,fd,1e,33,17,69,.. scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\\Gry\\Grid\\GRID.exe"="D:\\Gry\\Grid\\GRID.exe:*:Enabled:GRID" "D:\\Gry\\AoE3\\age3x.exe"="D:\\Gry\\AoE3\\age3x.exe:*:Enabled:Age of Empires III - The WarChiefs" "D:\\Gry\\AoE3\\age3y.exe"="D:\\Gry\\AoE3\\age3y.exe:*:Enabled:Age of Empires III - The Asian Dynasties" "C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"="C:\\Program Files\\Electronic Arts\\EADM\\Core.exe:*:Enabled:EA Download Manager" "D:\\Gry\\FC2\\Far Cry 2\\bin\\FarCry2.exe"="D:\\Gry\\FC2\\Far Cry 2\\bin\\FarCry2.exe:*:Enabled:Far Cry 2" "D:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Launcher.exe"="D:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater" "D:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Editor.exe"="D:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Editor.exe:*:Enabled:Editor" "C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA" "C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB" "E:\\BitComet\\BitComet.exe"="E:\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "D:\\Gry\\Gta\\Rockstar Games Social Club\\RGSCLauncher.exe"="D:\\Gry\\Gta\\Rockstar Games Social Club\\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club" "D:\\Gry\\Gta\\Grand Theft Auto IV\\LaunchGTAIV.exe"="D:\\Gry\\Gta\\Grand Theft Auto IV\\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV" "D:\\Gry\\Gta\\Grand Theft Auto IV\\GTAIV.exe"="D:\\Gry\\Gta\\Grand Theft Auto IV\\GTAIV.exe:*:Enabled:Grand Theft Auto IV" "C:\\Program Files\\Codemasters\\DiRT\\DiRT.exe"="C:\\Program Files\\Codemasters\\DiRT\\DiRT.exe:*:Enabled:DiRT Executable" "D:\\Programy\\Itunes\\iTunes.exe"="D:\\Programy\\Itunes\\iTunes.exe:*:Enabled:iTunes" "C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour" "C:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"="C:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Mon 3 Mar 2008 568 A..H. --- "C:\WINDOWS\nod32fixtemdono.reg" Mon 3 Mar 2008 5,702 A..H. --- "C:\WINDOWS\nod32restoretemdono.reg" Mon 29 Dec 2008 6,112 ...HR --- "C:\Documents and Settings\Ramzes\Application Data\SecuROM\UserData\securom_v7_01.bak" [b]Finished![/b]

Kod: Zaznacz wszystko: ComboFix 09-01-01.01 - Ramzes 2009-01-03 3:12:57.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1033.18.3327.2803 [GMT 11:00] Uruchomiony z: c:\documents and settings\Ramzes\Desktop\ComboFix.exe . ((((((((((((((((((((((((( Pliki utworzone od 2008-12-02 do 2009-01-02 ))))))))))))))))))))))))))))))) . 2009-01-03 02:34 . 2009-01-03 02:34 578,560 --a--c--- c:\windows\system32\dllcache\user32.dll 2009-01-03 02:32 . 2009-01-03 02:32 <DIR> d-------- c:\windows\ERUNT 2009-01-03 02:24 . 2009-01-03 03:09 <DIR> d-------- C:\SDFix 2009-01-02 21:58 . 2009-01-02 21:59 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\BESTplayer 2009-01-02 21:58 . 2009-01-02 21:58 97 --a------ c:\windows\VplayerINI.vpl 2009-01-02 21:57 . 2009-01-02 21:58 897 --a------ c:\windows\VPlayer.INI 2009-01-02 21:52 . 2009-01-02 21:52 <DIR> d-------- c:\program files\XviD 2009-01-02 14:08 . 2009-01-02 14:08 <DIR> d-------- c:\documents and settings\Administrator 2009-01-01 21:30 . 2008-10-22 10:37 <DIR> d-------- c:\windows\system32\drivers\ect 2009-01-01 21:30 . 2008-10-22 20:07 1,986,301 --a------ C:\Adobe CS4 Master Collection_ACTIVATION PATCH by P!mPdOG.ExE 2009-01-01 20:03 . 2009-01-01 20:16 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Download Manager 2009-01-01 12:00 . 2008-03-03 14:25 5,702 --ah----- c:\windows\nod32restoretemdono.reg 2009-01-01 12:00 . 2008-03-03 18:21 568 --ah----- c:\windows\nod32fixtemdono.reg 2009-01-01 11:56 . 2009-01-01 11:56 <DIR> d-------- c:\program files\ESET 2009-01-01 11:56 . 2009-01-01 11:56 <DIR> d-------- c:\documents and settings\All Users\Application Data\ESET 2008-12-31 11:14 . 2009-01-02 14:58 <DIR> d-------- c:\documents and settings\All Users\Application Data\FLEXnet 2008-12-31 10:58 . 2008-12-31 10:58 <DIR> d-------- c:\program files\Adobe Media Player 2008-12-31 10:56 . 2008-12-31 10:56 <DIR> d-------- c:\program files\Common Files\Adobe AIR 2008-12-31 10:39 . 2008-12-31 10:39 <DIR> d-------- c:\program files\Common Files\Macrovision Shared 2008-12-30 20:20 . 2008-12-30 20:20 <DIR> d-------- c:\program files\Vstplugins 2008-12-30 20:20 . 2008-12-30 20:20 <DIR> d-------- c:\documents and settings\All Users\Application Data\Sony 2008-12-30 20:19 . 2008-12-30 20:19 <DIR> d-------- c:\program files\Sony 2008-12-30 20:17 . 2008-12-30 20:17 <DIR> d-------- c:\program files\Sony Setup 2008-12-30 20:11 . 2008-12-30 20:12 <DIR> d-------- C:\!KillBox 2008-12-30 17:36 . 2008-12-30 19:10 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Sony 2008-12-30 17:36 . 2008-12-30 17:36 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Publish Providers 2008-12-30 17:36 . 2009-01-02 01:17 <DIR> d-a------ c:\documents and settings\All Users\Application Data\TEMP 2008-12-30 14:04 . 2009-01-03 02:29 16,773,152 --ahs---- c:\windows\system32\drivers\fidbox.dat 2008-12-30 14:04 . 2009-01-03 02:29 170,684 --ahs---- c:\windows\system32\drivers\fidbox.idx 2008-12-30 14:01 . 2008-12-30 14:01 <DIR> d-------- c:\program files\ZoneAlarmSB 2008-12-30 14:01 . 2008-12-30 14:01 <DIR> d-------- c:\documents and settings\All Users\Application Data\MailFrontier 2008-12-30 14:00 . 2008-12-30 14:00 <DIR> d-------- c:\program files\Zone Labs 2008-12-30 03:41 . 2008-12-30 03:41 74 -r-hs---- c:\windows\CT5PRET.BIN 2008-12-30 03:36 . 2008-12-30 03:41 <DIR> d-------- c:\program files\Reallusion 2008-12-29 23:38 . 2008-12-29 23:38 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\Reallusion 2008-12-29 23:30 . 2008-12-29 23:30 <DIR> d-------- c:\program files\Common Files\Reallusion 2008-12-29 23:12 . 2008-12-29 23:12 <DIR> d-------- c:\program files\VDOWNLOADER 2008-12-29 22:58 . 2008-12-29 22:58 <DIR> d-------- c:\program files\FDRLab 2008-12-29 12:33 . 2008-12-29 12:33 <DIR> d-------- c:\program files\Flux 2008-12-28 20:32 . 2008-12-28 20:32 <DIR> d-------- c:\program files\PSPaudioware.com 2008-12-28 20:31 . 2006-06-19 18:06 8,278,016 --a------ c:\windows\system32\PSP Neon HR.dll 2008-12-28 20:31 . 2006-06-19 18:16 8,151,040 --a------ c:\windows\system32\PSP Neon.dll 2008-12-28 13:11 . 2008-12-28 13:11 <DIR> d-------- c:\program files\KeyToSound 2008-12-28 02:16 . 2008-12-28 02:16 <DIR> d-------- c:\documents and settings\All Users\Application Data\iZotope 2008-12-28 00:36 . 2008-12-28 00:53 <DIR> d-------- c:\program files\iZotope 2008-12-27 23:56 . 2008-12-27 23:56 <DIR> d-------- c:\program files\Atomic RAR Password Recovery 2008-12-27 23:53 . 2008-12-27 23:53 <DIR> d-------- c:\program files\Intelore 2008-12-26 00:21 . 2008-12-26 00:21 <DIR> d-------- c:\program files\apulSoft 2008-12-25 22:14 . 2008-12-25 22:14 <DIR> d-------- c:\program files\iPod 2008-12-25 22:14 . 2008-12-25 22:14 <DIR> d-------- c:\program files\Bonjour 2008-12-25 22:14 . 2008-12-25 22:14 <DIR> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2008-12-25 22:13 . 2008-12-25 22:13 <DIR> d-------- c:\program files\QuickTime 2008-12-21 22:04 . 2008-12-21 22:04 <DIR> d-------- C:\Freeze 2008-12-21 13:10 . 2008-12-21 13:10 <DIR> d-------- c:\program files\Antares Audio Technologies 2008-12-20 23:26 . 2008-12-24 11:02 <DIR> d-------- C:\Edits 2008-12-20 23:22 . 2008-12-24 11:18 <DIR> d-------- C:\Images 2008-12-20 20:57 . 2008-12-25 21:11 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\SIR 2008-12-20 20:57 . 2008-12-20 21:22 <DIR> d-------- c:\documents and settings\All Users\Application Data\SIR 2008-12-20 19:01 . 2008-12-24 14:49 <DIR> d-------- C:\Audio 2008-12-20 17:34 . 2006-09-14 01:21 2,240 --a------ c:\windows\LENDIG.sys 2008-12-19 13:39 . 2008-12-19 13:39 <DIR> d-------- c:\program files\Steinberg 2008-12-18 20:59 . 2008-12-18 20:59 6,475,776 --a------ c:\windows\system32\PSP VintageWarmer2.dll 2008-12-17 22:35 . 2008-04-14 05:40 43,904 --a------ c:\windows\system32\drivers\sbp2port.sys 2008-12-17 22:35 . 2008-04-14 05:40 43,904 --a--c--- c:\windows\system32\dllcache\sbp2port.sys 2008-12-12 11:18 . 2008-12-12 11:18 87,336 --a------ c:\windows\system32\dns-sd.exe 2008-12-12 11:11 . 2008-12-12 11:11 61,440 --a------ c:\windows\system32\dnssd.dll 2008-12-10 17:20 . 2008-12-10 17:20 <DIR> d-------- c:\documents and settings\All Users\Application Data\nView_Profiles 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\windows\system32\AGEIA 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\windows\nview 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard 2008-12-10 17:17 . 2008-12-10 17:17 <DIR> d-------- c:\program files\AGEIA Technologies 2008-12-10 17:17 . 2008-12-02 23:11 453,152 --a------ c:\windows\system32\nvudisp.exe 2008-12-10 17:17 . 2009-01-03 03:10 205,483 --a------ c:\windows\system32\nvapps.xml 2008-12-10 17:17 . 2008-12-02 23:11 18,696 --a------ c:\windows\system32\nvdisp.nvu 2008-12-10 17:16 . 2008-12-10 17:16 <DIR> d-------- C:\NVIDIA 2008-12-10 17:16 . 2008-12-02 10:13 453,152 --a------ c:\windows\system32\NVUNINST.EXE 2008-12-06 22:25 . 2008-12-06 22:25 <DIR> d-------- c:\program files\Medieval Software 2008-12-05 22:21 . 2008-12-05 22:21 <DIR> d-------- c:\windows\system32\drivers\umdf 2008-12-05 22:20 . 2008-12-05 22:20 <DIR> d-------- c:\windows\system32\xlive 2008-12-05 22:20 . 2008-12-05 22:35 <DIR> d-------- c:\program files\Microsoft Games for Windows - LIVE 2008-12-05 21:23 . 2008-12-05 21:23 <DIR> d-------- c:\program files\MSBuild 2008-12-05 21:22 . 2008-12-05 21:22 <DIR> d-------- c:\windows\system32\XPSViewer 2008-12-05 21:22 . 2008-12-05 21:22 <DIR> d-------- c:\program files\Reference Assemblies 2008-12-05 21:22 . 2006-06-29 13:07 14,048 --a------ c:\windows\system32\spmsg2.dll 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\system32\scripting 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\system32\en 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\system32\bits 2008-12-04 20:11 . 2008-12-04 20:11 <DIR> d-------- c:\windows\l2schemas 2008-12-04 20:10 . 2008-12-04 20:10 <DIR> d-------- c:\windows\ServicePackFiles 2008-12-03 05:40 . 2008-12-03 05:40 <DIR> d-------- c:\windows\Downloaded Installations 2008-12-02 20:11 . 2008-12-02 20:11 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\RTPlayer 2008-12-02 18:11 . 2008-12-29 13:21 <DIR> d-------- c:\documents and settings\Ramzes\Application Data\VST3 Presets . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-02 16:02 1,390,080 ----a-w c:\windows\Internet Logs\xDB1C.tmp 2009-01-02 16:02 1,120,256 ----a-w c:\windows\Internet Logs\xDB1B.tmp 2009-01-02 02:56 --------- d-----w c:\documents and settings\Ramzes\Application Data\Tunebite 2009-01-01 13:00 --------- d-----w c:\documents and settings\Ramzes\Application Data\U3 2009-01-01 10:18 --------- d-----w c:\program files\Common Files\Adobe 2008-12-30 08:19 9,216 ----a-w c:\windows\Internet Logs\xDB1.tmp 2008-12-30 08:19 230,912 ----a-w c:\windows\Internet Logs\xDB23B6.tmp 2008-12-30 08:19 1,336,832 ----a-w c:\windows\Internet Logs\xDB23B7.tmp 2008-12-29 16:41 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-25 11:14 --------- d-----w c:\program files\Common Files\Apple 2008-12-25 11:08 --------- d-----w c:\program files\Safari 2008-12-25 05:12 --------- d-----w c:\documents and settings\Ramzes\Application Data\Winamp 2008-12-19 02:57 --------- d-----w c:\program files\Syncrosoft 2008-12-02 18:40 --------- d-----w c:\program files\Nomad Factory 2008-11-27 04:25 --------- d-----w c:\documents and settings\Ramzes\Application Data\Blue Cat Audio 2008-11-13 08:56 --------- d-----w c:\documents and settings\Ramzes\Application Data\AccurateRip 2008-11-13 08:55 --------- d-----w c:\program files\Exact Audio Copy 2008-11-04 11:27 --------- d-----w c:\program files\ivo 2008-11-02 11:14 --------- d-----w c:\documents and settings\All Users\Application Data\RapidSolution 2008-11-02 11:13 --------- d-----w c:\program files\PixiePack Codec Pack 2008-11-02 11:12 --------- d-----w c:\program files\RapidSolution 2008-11-01 07:46 22,328 ----a-w c:\documents and settings\Ramzes\Application Data\PnkBstrK.sys 2008-11-01 07:45 66,872 ----a-w c:\windows\system32\PnkBstrA.exe 2008-11-01 07:45 2,250,024 ----a-w c:\windows\system32\pbsvc.exe 2008-11-01 07:45 107,832 ----a-w c:\windows\system32\PnkBstrB.exe 2008-11-01 02:04 5,074 ----a-w c:\windows\system32\ealregsnapshot1.reg 2008-10-28 06:41 14,303,392 ----a-w c:\windows\system32\xlive.dll 2008-10-28 06:41 13,643,936 ----a-w c:\windows\system32\xlivefnt.dll 2008-10-23 12:36 286,720 ----a-w c:\windows\system32\gdi32.dll 2008-10-16 20:38 826,368 ----a-w c:\windows\system32\wininet.dll 2008-10-16 03:13 202,776 ----a-w c:\windows\system32\wuweb.dll 2008-10-16 03:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll 2008-10-16 03:12 561,688 ----a-w c:\windows\system32\wuapi.dll 2008-10-16 03:12 323,608 ----a-w c:\windows\system32\wucltui.dll 2008-10-16 03:09 92,696 ----a-w c:\windows\system32\cdm.dll 2008-10-16 03:09 51,224 ----a-w c:\windows\system32\wuauclt.exe 2008-10-16 03:09 43,544 ----a-w c:\windows\system32\wups2.dll 2008-10-16 03:08 34,328 ----a-w c:\windows\system32\wups.dll 2008-10-12 22:56 70,936 ----a-w c:\windows\system32\PhysXLoader.dll 2008-10-05 06:26 107,888 ----a-w c:\windows\system32\CmdLineExt.dll 2008-10-03 10:02 247,326 ----a-w c:\windows\system32\strmdll.dll 2007-02-12 08:10 2,682,880 ------w c:\documents and settings\All Users\VCREDI~3.EXE 2006-06-23 06:48 32,768 ----a-r c:\windows\inf\UpdateUSB.exe 2006-05-24 05:38 233,472 ----a-w c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll 2006-05-18 06:00 204,895 ----a-w c:\program files\mozilla firefox\plugins\ctdomemhelper.dll 2005-09-29 03:41 77,824 ----a-w c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll 2006-05-18 05:59 426,081 ----a-w c:\program files\mozilla firefox\plugins\ctplayerobject.dll 2005-02-02 01:19 458,752 ----a-w c:\program files\mozilla firefox\plugins\imagickrt.dll 2006-04-10 07:35 139,264 ----a-w c:\program files\mozilla firefox\plugins\rlcontentclass.dll 2005-11-09 00:10 204,800 ----a-w c:\program files\mozilla firefox\plugins\RLMusicPacker.dll 2005-11-09 00:42 106,496 ----a-w c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll 2006-01-04 00:22 212,992 ----a-w c:\program files\mozilla firefox\plugins\RLVoicePacker.dll 2006-01-04 00:21 167,936 ----a-w c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll . ((((((((((((((((((((((((((((( snapshot@2009-01-03_ 0.51.29.06 ))))))))))))))))))))))))))))))))))))))))) . + 2008-08-07 04:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX\ERDNT.EXE + 2009-01-02 15:56:16 671,744 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0[/u]0000001\NTUSER.DAT + 2009-01-02 15:56:17 8,192 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0[/u]0000002\UsrClass.dat + 2008-08-07 04:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX_First_Run\ERDNT.EXE + 2009-01-02 15:32:48 671,744 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0[/u]0000001\NTUSER.DAT + 2009-01-02 15:32:48 8,192 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0[/u]0000002\UsrClass.dat - 2009-01-02 11:16:03 67,696 ----a-w c:\windows\system32\perfc009.dat + 2009-01-02 16:06:58 67,696 ----a-w c:\windows\system32\perfc009.dat - 2009-01-02 11:16:03 432,992 ----a-w c:\windows\system32\perfh009.dat + 2009-01-02 16:06:58 432,992 ----a-w c:\windows\system32\perfh009.dat . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "c:\program files\Winamp Toolbar\winamptb.dll" [2008-07-17 1266992] [HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1] [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AudioDrvEmulator"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-11-04 49152] "Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2008-05-09 1423360] "QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe" [2008-05-06 594432] "Cpu Level Up help"="c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe" [2007-11-30 881152] "VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2006-07-13 122880] "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112] "RivaTunerStartupDaemon"="c:\program files\RivaTuner v2.09\RivaTuner.exe" [2008-04-29 2707456] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792] "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-10-01 111936] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-02 13680640] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-02 86016] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696] "iTunesHelper"="d:\programy\Itunes\iTunesHelper.exe" [2008-11-20 290088] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-07-09 919016] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-06-10 1447168] "CTHelper"="CTHELPER.EXE" [2006-05-24 c:\windows\CTHELPER.EXE] "CTxfiHlp"="CTXFIHLP.EXE" [2006-05-24 c:\windows\system32\CTXFIHLP.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=jpcynv.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.iac2"= c:\progra~1\ACEMEG~1\SystemS\Intel\iac25_32.ax "msacm.sl_anet"= c:\progra~1\ACEMEG~1\SystemS\sl_anet.acm "vidc.yv12"= c:\progra~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL "vidc.divx"= c:\progra~1\ACEMEG~1\SystemS\DivX\DivX520.dll "vidc.iyuv"= c:\progra~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll "vidc.yvu9"= c:\progra~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll "vidc.uyvy"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "vidc.yuy2"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "vidc.yvyu"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "msacm.msaudio1"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "d:\\Gry\\Grid\\GRID.exe"= "d:\\Gry\\AoE3\\age3x.exe"= "d:\\Gry\\AoE3\\age3y.exe"= "c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"= "d:\\Gry\\FC2\\Far Cry 2\\bin\\FarCry2.exe"= "d:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Launcher.exe"= "d:\\Gry\\FC2\\Far Cry 2\\bin\\FC2Editor.exe"= "c:\\WINDOWS\\system32\\PnkBstrA.exe"= "c:\\WINDOWS\\system32\\PnkBstrB.exe"= "e:\\BitComet\\BitComet.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "d:\\Gry\\Gta\\Rockstar Games Social Club\\RGSCLauncher.exe"= "d:\\Gry\\Gta\\Grand Theft Auto IV\\LaunchGTAIV.exe"= "d:\\Gry\\Gta\\Grand Theft Auto IV\\GTAIV.exe"= "c:\\Program Files\\Codemasters\\DiRT\\DiRT.exe"= "d:\\Programy\\Itunes\\iTunes.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "16167:TCP"= 16167:TCP:BitComet 16167 TCP "16167:UDP"= 16167:UDP:BitComet 16167 UDP "5353:TCP"= 5353:TCP:Adobe CSI CS4 R0 mv61xx;mv61xx;c:\windows\system32\DRIVERS\mv61xx.sys [2008-08-24 150568] R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2006-12-31 28544] R0 pe3ah4nc;DiRT Environment Driver (pe3ah4nc);c:\windows\system32\drivers\pe3ah4nc.sys [2007-05-19 64880] R0 ps6ah4nc;DiRT Synchronization Driver (ps6ah4nc);c:\windows\system32\drivers\ps6ah4nc.sys [2007-05-19 55160] R0 ps7ah4nc;DiRT Synchronization Driver (ps7ah4nc);c:\windows\system32\drivers\ps7ah4nc.sys [2007-08-18 68208] R1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2008-06-10 34312] R2 ekrn;Eset Service;"c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe" [2008-06-10 468224] R3 rrau0001;rrau0001;c:\windows\system32\Drivers\rrau0001.sys [2008-08-24 24576] R3 rrwd0001;rrwd0001;c:\windows\system32\Drivers\rrwd0001.sys [2008-08-24 71936] R3 SynasUSB;SynasUSB;c:\windows\system32\drivers\SynasUSB.sys [2008-09-05 23288] S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe /s c:\windows\nod32fixtemdono.reg [2006-02-28 3584] S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc);c:\windows\system32\pr2ah4nc.exe svc [] S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;\??\c:\windows\system32\DNINDIS5.SYS [2008-08-26 17149] S3 SetupNTGLM7X;SetupNTGLM7X;\??\G:\NTGLM7X.sys [] S3 VIRUSUSB;USB ASIO driver for Access Virus TI;c:\windows\system32\Drivers\VirusUSB.sys [2008-10-11 357208] S3 VTIAUDIO;Virus TI Audio;c:\windows\system32\drivers\vtiaudio.sys [2008-10-11 39776] S3 VTIMIDEV01;Virus TI MIDI Driver;c:\windows\system32\drivers\vtimidi.sys [2008-10-11 56136] S3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service;c:\windows\system32\DRIVERS\WPN111.sys [] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{35be4702-89fe-11dd-82d5-002215172d99}] \Shell\AutoRun\command - I:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4955b8e4-71be-11dd-9273-806d6172696f}] \Shell\AutoRun\command - F:\autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d0b97892-75ab-11dd-92a2-002215172d99}] \Shell\AutoRun\command - J:\LaunchU3.exe -a [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{61E3FE32-07B9-4563-A3E0-2DE2D620FE10}] c:\program files\PixiePack Codec Pack\InstallerHelper.exe . Zawartość folderu 'Zaplanowane zadania' 2008-12-27 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34] . . ------- Skan uzupełniający ------- . uInternet Settings,ProxyOverride = *.local IE: &Winamp Search - c:\documents and settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html IE: Pobierz wszystkie VIdeo za pomocą BitComet - e:\bitcomet\BitComet.exe/AddVideo.htm IE: Pobierz wszystko za pomocą BitComet - e:\bitcomet\BitComet.exe/AddAllLink.htm IE: Pobierz za pomocą BitComet - e:\bitcomet\BitComet.exe/AddLink.htm IE: {{C5428486-50A0-4a02-9D20-520B59A9F9B3} - {A16AD1E9-F69A-45af-9462-B1C286708842} - Trusted Zone: www.mks.com.pl c:\windows\Downloaded Program Files\Manager.exe - c:\windows\Downloaded Program Files\DownloadManagerV2.ocx O16 -: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab c:\windows\Downloaded Program Files\DownloadManagerV2.inf FF - ProfilePath - c:\documents and settings\Ramzes\Application Data\Mozilla\Firefox\Profiles\nvu4odq5.default\ FF - plugin: c:\program files\Mozilla Firefox\plugins\NPAskSBr.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npRLCT4Player.dll FF - plugin: d:\programy\Itunes\Mozilla Plugins\npitunes.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-03 03:14:00 Windows 5.1.2600 Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(872) c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll . Czas ukończenia: 2009-01-03 3:14:38 ComboFix-quarantined-files.txt 2009-01-02 16:14:33 Przed: 49 292 656 640 bytes free Po: 49,266,139,136 bytes free 312 --- E O F --- 2008-12-18 10:15:44

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 03:17:22, on 2009-01-03 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe C:\WINDOWS\system32\RUNDLL32.EXE D:\Programy\Itunes\iTunesHelper.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\explorer.exe I:\Instalki\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll" O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe" O4 - HKLM\..\Run: [QFan Help] "C:\Program Files\ASUS\AI Suite\QFan3\QFanHelp.exe" O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\AI Suite\CpuLevelUpHelp.exe O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.09\RivaTuner.exe" /S O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "D:\Programy\Itunes\iTunesHelper.exe" O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - res://E:\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://E:\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Pobierz za pomocą BitComet - res://E:\BitComet\BitComet.exe/AddLink.htm O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://E:\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.mks.com.pl O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab O20 - AppInit_DLLs: jpcynv.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\WINDOWS\system32\pr2ah4nc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 7242 bytes

**Posty:** 8001 · przez **Okocza** 02 Sty 2009, 18:31

mitchelo, wstaw log z SDFixa w tag 'code'

**Posty:** 64 · przez **mitchelo** 02 Sty 2009, 18:45

myslalem ze z sdfix tylko tekst, juz poprawione

**Posty:** 18165 · przez **wojtas** 02 Sty 2009, 18:53

O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O20 - AppInit_DLLs: jpcynv.dll

skasuj wpisy + pogrubione jak beda wywal do kosza

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5.Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.