

euuh
Membres-
Compteur de contenus
49 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par euuh
-
Bonjour Bonsoir, Jai un gros soucis j'ai windows 7 avec comme antivirus eset nod32 j'ai voulut mettre un parefeu (genre kerio windows 7 pas compatible) alors j'ai installez spyware docteur pour essayez d'etre plus trankill contre les infection lors de l'instalation il ma demandez de desactiver le bitedefender de windows7 alors je les fais apres instalation lance le scan detecte plein de connerie et je fini par tous netoyer mais un gros probleme apparais apres le PC rame monstrueusement impossible dafficher une page internet et quoi que je fasse sous windows rame attend plusieur minute pour afficher qque chose je suis perdu que faire quand je desinstale spyware docteur tous remarche normalement il est sur quil y a un gros probleme avec se logiciel mais comment faire pour pouvoir l'utiliser sans que mon pc rame comme ca ! merci d'avance voici mon rapport hjt Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:07:12, on 02/12/2009 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Windows\WindowsMobile\wmdc.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\DesktopEarth\DesktopEarth.exe C:\Program Files\DMV\MaxTV4\maxtv_powertools.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Users\Public\Games\World of Warcraft\BackgroundDownloader.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Fousseine\Downloads\hijackthis-2.0.2.75917.exe C:\Users\FOUSSE~1\AppData\Local\Temp\hijackthis-2.0.2.75917.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Startup: DesktopEarth AutoStart.lnk = ? O4 - Startup: MaxTV Powertools.lnk = C:\Program Files\DMV\MaxTV4\maxtv_powertools.exe O4 - Startup: MaxTV.lnk = C:\Program Files\DMV\MaxTV4\maxtv.exe O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Windows\System32\nvSCPAPISvr.exe -- End of file - 5280 bytes
-
salut j'ai un prob mon antivirus me dit qu'il y a aucun virus mais quand je veut mettre spyware docteur a jour il refuse de plus quand je veut le supprimé pour le reinstaller il me mes sans cesse des erreur comment faire svp je voudrais le mettre a jour ou le supprimé et reinstaller voici mon rapport hjt Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:22:02, on 14/07/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16850) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Fousseine\Bureau\HJT.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [skype] "C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1231530761796 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{F0E8C117-203A-462F-AE5A-A4FCDB10BCBD}: NameServer = 212.27.40.241,212.27.40.240 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\DOCUME~1\FOUSSE~1\LOCALS~1\APPLIC~1\Skype\Shared\SKYPE4~1.DLL O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: Service de sauvegarde G DATA - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe --
-
Mon antivirus a detecte 2 virus que j'arrive pas a supprimer
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
c'est mon antivirus g data qui me les a mis tous les deux en quarantaine mais en faite je sais pas comment sortir le rapport je vien de les effacer de la quarantaine je refais une analyse pour voir si il va trouver qques chose et vs poste son rapport si il m'en fais un -
Mon antivirus a detecte 2 virus que j'arrive pas a supprimer
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
merci voila les rapport : Logfile of random's system information tool 1.05 (written by random/random) Run by Fousseine at 2009-04-30 15:42:05 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 9 GB (6%) free of 153 GB Total RAM: 2047 MB (43% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:42:28, on 30/04/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Spyware Doctor\pctsTray.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Phone\Skype.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\Spyware Doctor\pctsAuxs.exe C:\Program Files\Spyware Doctor\pctsSvc.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Plugin Manager\skypePM.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\alg.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Documents and Settings\Fousseine\Bureau\securite\RSIT.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\trend micro\Fousseine.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iSTray] "C:\Program Files\Spyware Doctor\pctsTray.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [skype] "C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1231530761796 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{F0E8C117-203A-462F-AE5A-A4FCDB10BCBD}: NameServer = 212.27.40.241,212.27.40.240 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\DOCUME~1\FOUSSE~1\LOCALS~1\APPLIC~1\Skype\Shared\SKYPE4~1.DLL O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: Service de sauvegarde G DATA - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 8599 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\ParetoLogic Privacy Controls_{E8F6CB1E-E8A5-11DD-AC06-001BFC8593A1}.job C:\WINDOWS\tasks\ParetoLogic Registration.job C:\WINDOWS\tasks\ParetoLogic Update Version2.job C:\WINDOWS\tasks\WGASetup.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-09 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {0124123D-61B4-456f-AF86-78C53A0790C5} - G DATA WebFilter - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll [2008-09-08 656968] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "GDFirewallTray"=C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe [2008-09-09 1037992] "G DATA AntiVirus Trayapplication"=C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe [2008-11-24 958024] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-04-12 8429568] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-09 136600] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-09-10 289576] "ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2008-08-25 1168264] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-11-23 203720] "Skype"=C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Phone\Skype.exe [2009-03-16 24095528] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner] C:\Program Files\CCleaner\CCleaner.exe [2008-12-19 1434864] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader] C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [2007-08-28 531272] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMBooster] C:\Program Files\Iminent\imbooster.exe /warmup [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate] C:\Program Files\Logitech\Video\ManifestEngine.exe [2004-10-08 196608] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe [2004-10-08 458752] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe [2004-10-08 217088] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE [2004-10-08 221184] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] C:\WINDOWS\system32\NvCpl.dll [2007-04-12 8429568] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll [2007-04-12 81920] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pareto_Update] C:\Program Files\Fichiers communs\ParetoLogic\UUS2\Pareto_Update.exe [2008-02-22 189808] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-09 136600] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk] C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LDMConf.exe [2009-01-09 450560] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2008-09-06 267304] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcoreservice] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "EditLevel"=0 "NoCommonGroups"=0 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveAutoRun"= "NoDriveTypeAutoRun"= "NoDrives"= "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule" "C:\Documents and Settings\Fousseine\Local Settings\temp\Blizzard Launcher Temporary - 05dc4608\Launcher.exe"="C:\Documents and Settings\Fousseine\Local Settings\temp\Blizzard Launcher Temporary - 05dc4608\Launcher.exe:*:Enabled:Blizzard Launcher" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher" "C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Phone\Skype.exe"="C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Phone\Skype.exe:*:Enabled:Skype " [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" ======List of files/folders created in the last 1 months====== 2009-04-30 15:42:07 ----D---- C:\Program Files\trend micro 2009-04-30 15:42:05 ----D---- C:\rsit 2009-04-30 03:02:36 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$ 2009-04-25 14:52:45 ----A---- C:\fixnavi.txt 2009-04-25 14:51:32 ----D---- C:\Program Files\Navilog1 2009-04-24 00:39:07 ----D---- C:\Documents and Settings\Fousseine\Application Data\dvdcss 2009-04-24 00:38:58 ----D---- C:\Documents and Settings\Fousseine\Application Data\vlc 2009-04-24 00:13:43 ----D---- C:\Program Files\VideoLAN 2009-04-23 14:05:32 ----D---- C:\Documents and Settings\Fousseine\Application Data\Acreon 2009-04-17 03:04:05 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$ 2009-04-17 03:03:57 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$ 2009-04-17 03:01:37 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$ 2009-04-17 03:01:21 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$ 2009-04-17 03:01:14 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$ 2009-04-17 03:00:30 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$ 2009-04-09 03:00:51 ----D---- C:\WINDOWS\system32\KB905474 2009-04-07 10:09:04 ----HDC---- C:\WINDOWS\ie7 2009-04-07 09:56:13 ----SHD---- C:\Config.Msi ======List of files/folders modified in the last 1 months====== 2009-04-30 15:42:12 ----D---- C:\WINDOWS\Temp 2009-04-30 15:42:08 ----D---- C:\WINDOWS\Prefetch 2009-04-30 15:42:07 ----RD---- C:\Program Files 2009-04-30 15:24:10 ----D---- C:\Documents and Settings\Fousseine\Application Data\Skype 2009-04-30 14:19:27 ----D---- C:\Program Files\Mozilla Firefox 2009-04-30 14:14:05 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP 2009-04-30 10:16:07 ----D---- C:\Program Files\Spyware Doctor 2009-04-30 08:09:20 ----D---- C:\Documents and Settings\Fousseine\Application Data\skypePM 2009-04-30 03:19:30 ----D---- C:\WINDOWS 2009-04-30 03:19:19 ----D---- C:\WINDOWS\system32\drivers 2009-04-30 03:18:56 ----D---- C:\WINDOWS\system32 2009-04-30 03:13:53 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-04-30 03:06:03 ----HD---- C:\WINDOWS\inf 2009-04-30 03:03:15 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-04-30 02:23:27 ----D---- C:\Program Files\eMule 2009-04-29 18:35:14 ----HD---- C:\WINDOWS\$hf_mig$ 2009-04-29 16:23:34 ----D---- C:\WINDOWS\system32\CatRoot2 2009-04-29 16:23:29 ----D---- C:\Program Files\World of Warcraft 2009-04-29 15:03:19 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-04-28 17:44:16 ----D---- C:\WINDOWS\Debug 2009-04-25 16:38:36 ----A---- C:\cleannavi.txt 2009-04-17 03:11:12 ----D---- C:\WINDOWS\system32\wbem 2009-04-17 03:11:12 ----D---- C:\WINDOWS\AppPatch 2009-04-17 03:04:09 ----A---- C:\WINDOWS\imsins.BAK 2009-04-17 03:03:42 ----D---- C:\WINDOWS\system32\fr-fr 2009-04-17 03:03:42 ----D---- C:\Program Files\Internet Explorer 2009-04-09 03:00:54 ----SD---- C:\WINDOWS\Tasks 2009-04-08 03:02:39 ----D---- C:\WINDOWS\system32\CatRoot 2009-04-08 03:01:03 ----D---- C:\WINDOWS\ie7updates 2009-04-07 10:18:34 ----D---- C:\WINDOWS\Help 2009-04-07 10:16:22 ----RSD---- C:\WINDOWS\assembly 2009-04-07 10:16:20 ----D---- C:\Program Files\Iminent 2009-04-07 10:16:16 ----SHD---- C:\WINDOWS\Installer 2009-04-07 10:10:06 ----D---- C:\WINDOWS\WBEM 2009-04-07 10:09:53 ----D---- C:\WINDOWS\Media 2009-04-07 09:56:25 ----D---- C:\Program Files\Fichiers communs 2009-04-07 09:56:23 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2009-04-06 16:57:24 ----A---- C:\WINDOWS\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 GRD;G DATA Rootkit Detector Driver; \??\C:\WINDOWS\system32\drivers\GRD.sys [] R1 IKSysFlt;System Filter Driver; C:\WINDOWS\system32\drivers\iksysflt.sys [2008-08-25 66952] R1 IKSysSec;System Security Driver; C:\WINDOWS\system32\drivers\iksyssec.sys [2008-08-25 81288] R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576] R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] R2 GDTdiInterceptor;GDTdiInterceptor; \??\C:\WINDOWS\system32\drivers\GDTdiIcpt.sys [] R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l251x86.sys [2007-06-21 29696] R3 GDMnIcpt;GDMnIcpt; \??\C:\WINDOWS\system32\drivers\MiniIcpt.sys [] R3 GearAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [2008-04-17 15464] R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 HookCentre;HookCentre; \??\C:\WINDOWS\system32\drivers\HookCentre.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568] R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288] R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-04-12 6738656] R3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2004-10-08 585824] R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] S3 aykc44uy;aykc44uy; C:\WINDOWS\system32\drivers\aykc44uy.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320] S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-11-06 34064] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-09-10 116040] R2 AVKProxy;G DATA AntiVirus Proxy; C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe [2008-11-24 1016904] R2 AVKService;Planificateur G DATA; C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe [2008-09-08 386120] R2 AVKWCtl;Gardien d'AntiVirus; C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe [2008-09-08 1185496] R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-09 152984] R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-04-12 163908] R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2007-06-05 177704] R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2008-06-13 356920] R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2008-10-09 1079176] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968] R3 GDFwSvc;Pare-feu personnel G DATA; C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe [2008-10-30 1407976] R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-09-10 536872] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 G DATA Tuner Service;G DATA Tuner Service; C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe [2008-08-19 925768] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792] S3 Service de sauvegarde G DATA;Service de sauvegarde G DATA; C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe [2008-10-28 880200] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- et l'autre : info.txt logfile of random's system information tool 1.05 2009-04-30 15:42:30 ======Uninstall list====== -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Apple Mobile Device Support-->MsiExec.exe /I{AA9768AA-FF0B-4C66-A085-31E934F77841} Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7} Atheros Communications Inc.® L2 Fast Ethernet Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A755762-EED8-47AB-A446-505766F93D43}\Setup.exe" -l0x9 -removeonly Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959} CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe" Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} Corel Paint Shop Pro Photo X2-->MsiExec.exe /X{64E72FB1-2343-4977-B4A8-262CD53D0BD3} Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe" eMule-->"C:\Program Files\eMule\Uninstall.exe" G DATA TotalCare-->MsiExec.exe /I{9CBC3C1F-310E-4C4F-89E2-1B8D6C902BF2} GIMP 2.6.4-->"C:\Program Files\GIMP-2.0\setup\unins000.exe" High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" HijackThis 2.0.2-->"C:\Documents and Settings\Fousseine\Bureau\HijackThis.exe" /uninstall Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D} IsoBuster 2.5-->"C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe" iTunes-->MsiExec.exe /I{41B9E2CF-0B3F-442A-B5B3-592A4A355634} Java 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF} Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe K-Lite Codec Pack 4.5.3 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe" Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe" -l0x40c Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL Logitech Print Service-->C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C} Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128} Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31} Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe Mozilla Firefox (2.0.0.20)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} Navilog1 3.7.1-->"C:\Program Files\Navilog1\unins000.exe" NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33} Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} ParetoLogic Privacy Controls-->MsiExec.exe /I{5C92A787-3D1C-44E7-8B77-072C95EE1CF0} Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB} Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D} Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" Spyware Doctor 6.0-->C:\Program Files\Spyware Doctor\unins000.exe /LOG TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe" VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe WinAce Archiver-->"C:\Program Files\WinAce\SXUNINST.EXE" "C:\Program Files\WinAce\SXUNINST.INI" Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe" Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52} Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C} Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinPcap 4.0.2-->C:\Program Files\WinPcap\uninstall.exe Wireshark 1.0.5-->"C:\Program Files\Wireshark\uninstall.exe" World of Warcraft-->C:\Program Files\Fichiers communs\Blizzard Entertainment\World of Warcraft\Uninstall.exe Wow Cartographe 1.09-->C:\Program Files\WowCartographe\uninst.exe XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe" ======Security center information====== AV: G DATA TotalCare 2009 FW: Pare-feu personnel G DATA (disabled) System event log Computer Name: FOUSSEIN-E4DA72 Event Code: 7036 Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution. Record Number: 5 Source Name: Service Control Manager Time Written: 20090311205110.000000+060 Event Type: Informations User: Computer Name: FOUSSEIN-E4DA72 Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur. Record Number: 4 Source Name: Service Control Manager Time Written: 20090311205110.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: FOUSSEIN-E4DA72 Event Code: 7036 Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution. Record Number: 3 Source Name: Service Control Manager Time Written: 20090311205110.000000+060 Event Type: Informations User: Computer Name: FOUSSEIN-E4DA72 Event Code: 6005 Message: Le service d'Enregistrement d'événement a démarré. Record Number: 2 Source Name: EventLog Time Written: 20090311205045.000000+060 Event Type: Informations User: Computer Name: FOUSSEIN-E4DA72 Event Code: 6009 Message: Microsoft ® Windows ® 5.01. 2600 Service Pack 3 Multiprocessor Free. Record Number: 1 Source Name: EventLog Time Written: 20090311205045.000000+060 Event Type: Informations User: Application event log Computer Name: FOUSSEIN-E4DA72 Event Code: 4096 Message: Record Number: 141 Source Name: Avira AntiVir Time Written: 20090110155816.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: FOUSSEIN-E4DA72 Event Code: 1800 Message: Le service Centre de sécurité Windows a démarré. Record Number: 140 Source Name: SecurityCenter Time Written: 20090110155815.000000+060 Event Type: Informations User: Computer Name: FOUSSEIN-E4DA72 Event Code: 0 Message: Service started Record Number: 139 Source Name: AVKProxy Time Written: 20090110155811.000000+060 Event Type: Informations User: Computer Name: FOUSSEIN-E4DA72 Event Code: 2 Message: Récupération de la mise à jour automatique du fichier CAB de la liste racine tierce partie réussie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> Record Number: 138 Source Name: crypt32 Time Written: 20090110155121.000000+060 Event Type: Informations User: Computer Name: FOUSSEIN-E4DA72 Event Code: 7 Message: Récupération de la mise à jour automatique du numéro de séquence de la liste racine tierce partie réussie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> Record Number: 137 Source Name: crypt32 Time Written: 20090110155120.000000+060 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Smart Projects\IsoBuster "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel "PROCESSOR_REVISION"=0f0d "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip -----------------EOF----------------- -
Mon antivirus a detecte 2 virus que j'arrive pas a supprimer
euuh a posté un sujet dans Analyses et éradication malwares
Bonjour mon antivirus a détecter deux virus que je n'arrive pas a retire de l'ordi j'utilise g data total care 2009 et spyware docteur et le scan avec malwarebyte ne marche pas j'ai fait un rapport HJT que voici merci de votre aide Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:15:07, on 30/04/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Spyware Doctor\pctsTray.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Phone\Skype.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\Spyware Doctor\pctsAuxs.exe C:\Program Files\Spyware Doctor\pctsSvc.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Plugin Manager\skypePM.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\alg.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe C:\Program Files\G DATA\TotalCare\AVK\AVK.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Documents and Settings\Fousseine\Bureau\HJT.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iSTray] "C:\Program Files\Spyware Doctor\pctsTray.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [skype] "C:\Documents and Settings\Fousseine\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1231530761796 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{F0E8C117-203A-462F-AE5A-A4FCDB10BCBD}: NameServer = 212.27.40.241,212.27.40.240 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\DOCUME~1\FOUSSE~1\LOCALS~1\APPLIC~1\Skype\Shared\SKYPE4~1.DLL O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: Service de sauvegarde G DATA - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 8592 bytes -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
oki merci des infos c'est tous se que j'avais comme soucis en se moment donc tant mieu si y a rien re merci encore -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
ensuite j'ai pu avoir ca comme rapport donc je sais pas si il est normale Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:04:51, on 28/01/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16764) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Synaptics\SynTP\SynTPStart.exe C:\Windows\RtHDVCpl.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe C:\Program Files\TOSHIBA\Registration\ToshibaRegistration.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Steam\Steam.exe C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe C:\Windows\system32\taskeng.exe C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Program Files\Windows Mail\WinMail.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Synaptics\SynTP\SynToshiba.exe C:\Windows\system32\conime.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Internet Explorer\ieuser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Fousseine\Desktop\HJT.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: G DATA WebFilter Class - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [synTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup O4 - HKLM\..\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe /auto O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE O4 - HKLM\..\Run: [smoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silent O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/709-44555-9400-3/4 (file missing) O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.fr/exec/obidos/redirect-...1&site=home (file missing) O13 - Gopher Prefix: O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Service de sauvegarde G DATA - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA Corporation - (no file) O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 8567 bytes -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
en voulons faire un rapport hjt sur le portable qui est sous vista voila le message que j'ai eu: for somme reason your system denied write access to the host files if any hijackthis are in this file , hijackthis may not be able to fix this. if that happens you need to edit your file yourself to do this click start run and type notepad c:\windows\system32\drivers\etc\hosts and press enter find the line hijackthis report and delete them save the files as host (with quote) and reboot for vista simply exit hijackthis right click on the hijackthis icon choose run as administrator -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
merci beaucoup j'amerais qu'on regarde pour mon ordi portable si sa ne te derange pas enfin si le gros est fini bien sur malgre que je le trouve toujour aussi long pour demarer les pages internet genre msn et explrer avec firefox il demare assez vite voila pour le gros mtn le portable lors de son achat il etais tres rapide meme avec juste 1 giga de ram mtn meme quand je formate il est long tres long certaine page veulent pas s'ouvrir il bloque parfois pourtant il etais tres rapide q'on je venais de l'avoir je les deja formate plein de fois avec le cd restore mais ca marche a peine il resre assez long je me demande si ca cache pas une connerie qu'il a chope voila -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
oui merci en effet en désinstallent adore reader j'ai pu l'installer -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
oui j'ai un gros probleme avec explorateur a chaque fois que je veu l'installer pendant l'installation il me dit l'instalation na pu se terminer et du coup me redemande de redemarer la machine comment faire pour l'installer plz? -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
ok voila j'ai désinstalle combot fix et voici le rapport Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:19:22, on 28/01/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PSIService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\LVComsX.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Documents and Settings\Fousseine\Bureau\HJT.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.iminent.com/?appId=e0198ecc-...mp;ref=homepage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://search.iminent.com/?appId=e0198ecc-...mp;ref=homepage R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - AutorunsDisabled - (no file) O2 - BHO: Iminent.SearchTheWeb.HelperObject - {0E896FCA-D07E-45FE-901F-6A26FCF59C02} - mscoree.dll (file missing) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1231530761796 O17 - HKLM\System\CCS\Services\Tcpip\..\{F0E8C117-203A-462F-AE5A-A4FCDB10BCBD}: NameServer = 212.27.40.241,212.27.40.240 O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: Service de sauvegarde G DATA - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe -- End of file - 7645 bytes -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
oki merci apparemment y a plus rien qui porte ses nom de fichier ! c'est super merci encore !! -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
ok je comprend mieu merci pour l'information ! mtn j'ai rescan hier soir avant de me coucher tous l'ordi j'ai scan a 3 reprise parcequ'au premier scan il m'avait trouver win32 beagle.........sur les fichier que j'avais en quarantaine et que j'ai effacer donc il etais plus sur l'ordi mais il est arriver a me trouver les meme fichier infecté pourtant il etais plus dans incomning d'emule (pas les 17 fichier mais au moin 4 au premier scan que j'ai stoppé je les est de nouveau effacer de quarantaine puis j'ai rescan complet il ma trouver 1 toujour les meme que j'avais plus sur l'ordi j'ai effacer de nouveau et hop rescan et la rien trouver donc je sais pas si il von encore revenir ses fameux fichier(en meme temps au premier scan j'ai constater que j'avais oublier de double clique sur le fichier lib que tu ma fait faire)voila tous -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
lol effectivement j'ai pu lles effacer avec cette manip j'avais voulu les desinfecte au paravant -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
oki mais le prob je narrive pas a vider ma quarantaine il ne peu pas les effacer ou les reinseser sinon il est reparez le pc la? -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
ok merci pour les infos sans le crtl v je serais pas arriver a sortir cette image lol http://img401.imageshack.us/my.php?image=image1pm0.jpg -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
je cherche ou son stocke les image qu'on prend? avec impression écran? je sais pas -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
alors j'ai pas compris je dois desinstaler le programme regcure du systeme? ou juste son icone au bureau et comment on fait capture d'ecran svp -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
ok c'est fait ================================================== Registry Key : HKCR\CLSID\{3BAB8215-F5C2-4604-AF04-61F4CD991630}\1RegCure Name : ScanTime Type : REG_BINARY Data : 64 00 00 00 D9 07 07 00 04 00 09 00 13 00 00 00 19 00 00 00 D9 07 01 00 01 00 1A 00 12 00 00 00 19 00 00 00 D9 07 01 00 04 00 16 00 11 00 2A 00 21 00 00 00 02 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 33 34 38 30 33 2D 30 45 42 32 30 2D 38 34 39 35 32 2D 39 42 31 38 38 00 01 00 00 00 Key Modified Time : 26/01/2009 18:02:31 Data Length : 100 ================================================== ================================================== Registry Key : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs Name : Order Type : REG_BINARY Data : 08 00 00 00 02 00 00 00 72 13 00 00 01 00 00 00 22 00 00 00 C8 00 00 00 00 00 00 00 BA 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 A8 00 32 00 1B 06 00 00 29 3A 4C A3 20 00 43 4F 4E 46 49 47 7E 31 2E 4C 4E 4B 00 00 7E 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 66 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 65 00 72 00 20 00 6C 00 65 00 73 00 20 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 20 00 70 00 61 00 72 00 20 00 64 00 E9 00 66 00 61 00 75 00 74 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 30 30 37 37 00 00 1C 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1C 00 00 00 00 00 00 00 00 00 8A 00 00 00 02 00 00 00 7C 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 6A 00 32 00 1E 06 00 00 29 3A 9A 9E 20 00 4D 49 43 52 4F 53 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 9A 9E 3B 3A 88 A5 14 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1C 00 00 00 00 00 00 00 00 00 86 00 00 00 01 00 00 00 78 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 66 00 32 00 E3 05 00 00 36 3A 8D 85 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1C 00 00 00 00 00 00 00 00 00 EC 00 00 00 03 00 00 00 DE 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 68 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 62 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 0E 00 00 00 00 00 EF BE 03 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 6E 00 00 00 04 00 00 00 60 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 4E 00 31 00 00 00 00 00 29 3A 57 94 10 00 43 43 6C 65 61 6E 65 72 00 00 28 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 67 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 00 00 00 00 00 00 72 00 00 00 15 00 00 00 64 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 52 00 31 00 00 00 00 00 2D 3A 8A 6A 10 00 43 44 42 55 52 4E 7E 31 00 00 2C 00 03 00 04 00 EF BE 2D 3A 8A 6A 3B 3A 67 A5 14 00 00 00 43 00 44 00 42 00 75 00 72 00 6E 00 65 00 72 00 58 00 50 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 98 00 00 00 18 00 00 00 8A 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 78 00 31 00 00 00 00 00 33 3A 20 6F 10 00 43 4F 52 45 4C 50 7E 31 00 00 52 00 03 00 04 00 EF BE 33 3A 20 6F 3B 3A 67 A5 14 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 E4 00 00 00 05 00 00 00 D6 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 50 00 31 00 00 00 00 00 39 3A 12 90 10 00 44 4D 41 52 52 41 7E 31 00 00 2A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 41 A8 14 00 00 00 44 00 E9 00 6D 00 61 00 72 00 72 00 61 00 67 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 72 00 31 00 00 00 00 00 2B 3A 35 B7 11 00 44 4D 41 52 52 41 7E 31 00 00 3E 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 5D A4 14 00 28 00 44 00 E9 00 6D 00 61 00 72 00 72 00 61 00 67 00 65 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 37 00 18 00 0E 00 00 00 00 00 EF BE 03 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 64 00 00 00 10 00 00 00 56 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 44 00 31 00 00 00 00 00 2A 3A CE 01 10 00 65 4D 75 6C 65 00 22 00 03 00 04 00 EF BE 2A 3A CE 01 3B 3A 67 A5 14 00 00 00 65 00 4D 00 75 00 6C 00 65 00 00 00 14 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 14 00 00 00 00 00 00 00 00 00 7E 00 00 00 06 00 00 00 70 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5E 00 31 00 00 00 00 00 2F 3A 92 7D 10 00 47 44 41 54 41 54 7E 31 00 00 38 00 03 00 04 00 EF BE 2F 3A 92 7D 3B 3A 67 A5 14 00 00 00 47 00 20 00 44 00 41 00 54 00 41 00 20 00 54 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 70 00 00 00 17 00 00 00 62 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 50 00 31 00 00 00 00 00 2D 3A E1 AD 10 00 49 4D 42 4F 4F 53 7E 31 00 00 2A 00 03 00 04 00 EF BE 2D 3A D9 AD 3B 3A 67 A5 14 00 00 00 49 00 4D 00 42 00 6F 00 6F 00 73 00 74 00 65 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 68 00 00 00 1F 00 00 00 5A 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 48 00 31 00 00 00 00 00 38 3A 08 6C 10 00 69 54 75 6E 65 73 00 00 24 00 03 00 04 00 EF BE 38 3A 08 6C 3B 3A 67 A5 14 00 00 00 69 00 54 00 75 00 6E 00 65 00 73 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 16 00 00 00 00 00 00 00 00 00 76 00 00 00 07 00 00 00 68 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 56 00 31 00 00 00 00 00 29 3A 54 71 11 00 4A 65 75 78 00 00 34 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 67 A5 14 00 1E 00 4A 00 65 00 75 00 78 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 37 33 00 14 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 14 00 00 00 00 00 00 00 00 00 CC 00 00 00 08 00 00 00 BE 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 4E 00 31 00 00 00 00 00 29 3A 32 78 10 00 4C 6F 67 69 74 65 63 68 00 00 28 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 67 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 5C 00 31 00 00 00 00 00 29 3A 34 78 10 00 4C 6F 67 69 74 65 63 68 00 00 28 00 03 00 04 00 EF BE 29 3A 08 78 3B 3A 67 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 00 00 18 00 0E 00 00 00 00 00 EF BE 03 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 92 00 00 00 11 00 00 00 84 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 72 00 31 00 00 00 00 00 2A 3A F0 8D 10 00 4D 41 4C 57 41 52 7E 31 00 00 4C 00 03 00 04 00 EF BE 2A 3A F0 8D 3B 3A 67 A5 14 00 00 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 62 00 79 00 74 00 65 00 73 00 27 00 20 00 41 00 6E 00 74 00 69 00 2D 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 7C 00 00 00 12 00 00 00 6E 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5C 00 31 00 00 00 00 00 37 3A EF A0 10 00 4D 4F 5A 49 4C 4C 7E 31 00 00 36 00 03 00 04 00 EF BE 37 3A EF A0 3B 3A 67 A5 14 00 00 00 4D 00 6F 00 7A 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 6E 00 00 00 1A 00 00 00 60 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 4E 00 31 00 00 00 00 00 36 3A C8 80 10 00 4E 61 76 69 6C 6F 67 31 00 00 28 00 03 00 04 00 EF BE 36 3A C8 80 3B 3A 67 A5 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 84 00 00 00 1D 00 00 00 76 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 64 00 31 00 00 00 00 00 37 3A 3C AC 14 00 4F 50 45 4E 4F 46 7E 31 2E 30 00 00 3C 00 03 00 04 00 EF BE 37 3A 22 AC 3B 3A 67 A5 14 00 00 00 4F 00 70 00 65 00 6E 00 4F 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 2E 00 30 00 00 00 1A 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1A 00 00 00 00 00 00 00 00 00 74 00 00 00 1C 00 00 00 66 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 54 00 31 00 00 00 00 00 36 3A 52 87 10 00 50 41 52 45 54 4F 7E 31 00 00 2E 00 03 00 04 00 EF BE 36 3A 52 87 3B 3A 67 A5 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 4C 00 6F 00 67 00 69 00 63 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 70 00 00 00 20 00 00 00 62 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 50 00 31 00 00 00 00 00 38 3A C1 6B 10 00 51 55 49 43 4B 54 7E 31 00 00 2A 00 03 00 04 00 EF BE 38 3A C1 6B 3B 3A 67 A5 14 00 00 00 51 00 75 00 69 00 63 00 6B 00 54 00 69 00 6D 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 C4 00 00 00 1B 00 00 00 B6 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 4A 00 31 00 00 00 00 00 36 3A 28 85 10 00 52 65 67 43 75 72 65 00 26 00 03 00 04 00 EF BE 36 3A 27 85 3B 3A 67 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 16 00 00 00 58 00 31 00 00 00 00 00 36 3A 26 85 10 00 52 65 67 43 75 72 65 00 26 00 03 00 04 00 EF BE 36 3A 26 85 3B 3A 67 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 00 00 16 00 0E 00 00 00 00 00 EF BE 03 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 16 00 00 00 00 00 00 00 00 00 72 00 00 00 21 00 00 00 64 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 52 00 31 00 00 00 00 00 3B 3A 1C A9 10 00 52 45 47 53 43 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 3B 3A 1B A9 3B 3A 1C A9 14 00 00 00 52 00 65 00 67 00 53 00 63 00 61 00 6E 00 6E 00 65 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 00 00 00 00 00 00 90 00 00 00 14 00 00 00 82 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 70 00 31 00 00 00 00 00 2B 3A 2A B9 10 00 53 50 59 42 4F 54 7E 31 00 00 4A 00 03 00 04 00 EF BE 2B 3A 2A B9 3B 3A 67 A5 14 00 00 00 53 00 70 00 79 00 62 00 6F 00 74 00 20 00 2D 00 20 00 53 00 65 00 61 00 72 00 63 00 68 00 20 00 26 00 20 00 44 00 65 00 73 00 74 00 72 00 6F 00 79 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 7A 00 00 00 13 00 00 00 6C 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5A 00 31 00 00 00 00 00 2A 3A 29 78 10 00 53 50 59 57 41 52 7E 31 00 00 34 00 03 00 04 00 EF BE 2A 3A 29 78 3B 3A 67 A5 14 00 00 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 20 00 44 00 6F 00 63 00 74 00 6F 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 76 00 00 00 19 00 00 00 68 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 56 00 31 00 00 00 00 00 34 3A 4F 72 10 00 57 49 4E 44 4F 57 7E 31 00 00 30 00 03 00 04 00 EF BE 34 3A 42 72 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4C 00 69 00 76 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 C0 00 00 00 16 00 00 00 B2 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 48 00 31 00 00 00 00 00 2C 3A 9A 8A 10 00 57 69 6E 52 41 52 00 00 24 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 16 00 00 00 56 00 31 00 00 00 00 00 2C 3A 9A 8A 10 00 57 69 6E 52 41 52 00 00 24 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 00 00 16 00 0E 00 00 00 00 00 EF BE 03 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 16 00 00 00 00 00 00 00 00 00 86 00 00 00 09 00 00 00 78 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 66 00 32 00 0C 07 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 3B 3A 88 A5 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 94 00 00 00 1E 00 00 00 86 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 74 00 32 00 26 07 00 00 38 3A AC 6B 20 00 41 50 50 4C 45 53 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 38 3A AC 6B 3B 3A 88 A5 14 00 00 00 41 00 70 00 70 00 6C 00 65 00 20 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 BC 00 00 00 0A 00 00 00 AE 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 9C 00 32 00 3F 06 00 00 36 3A 8D 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 72 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 48 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 20 00 E0 00 20 00 64 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 72 63 62 64 79 63 74 6C 2E 64 6C 6C 2C 2D 31 35 32 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 A2 00 00 00 0B 00 00 00 94 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 82 00 32 00 FF 02 00 00 36 3A E6 89 20 00 49 4E 54 45 52 4E 7E 31 2E 4C 4E 4B 00 00 58 00 03 00 04 00 EF BE 29 3A 33 73 3B 3A 88 A5 14 00 40 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 31 30 30 31 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 94 00 00 00 0C 00 00 00 86 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 74 00 32 00 18 03 00 00 2A 3A B1 6C 20 00 4C 45 43 54 45 55 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 4C 00 65 00 63 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 9E 00 00 00 0D 00 00 00 90 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 7E 00 32 00 E2 02 00 00 36 3A E6 89 20 00 4F 55 54 4C 4F 4F 7E 31 2E 4C 4E 4B 00 00 54 00 03 00 04 00 EF BE 29 3A 34 73 3B 3A 88 A5 14 00 3C 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 31 30 30 34 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 8C 00 00 00 0E 00 00 00 7E 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 6C 00 32 00 7D 02 00 00 29 3A 54 71 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 73 00 73 00 65 00 6E 00 67 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 BA 00 00 00 0F 00 00 00 AC 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 9A 00 32 00 12 03 00 00 29 3A 89 71 20 00 57 49 4E 44 4F 57 7E 32 2E 4C 4E 4B 00 00 70 00 03 00 04 00 EF BE 29 3A 89 71 3B 3A 88 A5 14 00 44 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 6F 00 76 00 69 00 65 00 20 00 4D 00 61 00 6B 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 50 52 4F 47 52 41 7E 31 5C 4D 4F 56 49 45 4D 7E 31 5C 77 6D 6D 32 72 65 73 2E 64 6C 6C 2C 2D 36 31 34 34 36 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 Key Modified Time : 27/01/2009 22:09:10 Data Length : 4 986 ================================================== ================================================== Registry Key : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\RegCure Name : Order Type : REG_BINARY Data : 08 00 00 00 02 00 00 00 FE 00 00 00 01 00 00 00 02 00 00 00 76 00 00 00 00 00 00 00 68 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 56 00 32 00 C5 01 00 00 36 3A 26 85 20 00 52 65 67 43 75 72 65 2E 6C 6E 6B 00 2E 00 03 00 04 00 EF BE 36 3A 26 85 36 3A 32 A6 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1A 00 00 00 00 00 00 00 00 00 7C 00 00 00 01 00 00 00 6E 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5C 00 32 00 A1 02 00 00 36 3A 28 85 20 00 55 4E 49 4E 53 54 7E 31 2E 4C 4E 4B 00 00 32 00 03 00 04 00 EF BE 36 3A 28 85 36 3A 32 A6 14 00 00 00 55 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 00 00 00 00 1C 00 00 00 00 00 00 00 00 00 Key Modified Time : 22/01/2009 22:12:33 Data Length : 262 ================================================== ================================================== Registry Key : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage Name : ProgramsCache Type : REG_BINARY Data : 09 00 00 00 0B 00 46 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 00 00 01 C0 00 00 00 BE 00 32 00 3F 06 00 00 36 3A 8D 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 20 00 E0 00 20 00 64 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 59 00 53 00 54 00 45 00 4D 00 52 00 4F 00 4F 00 54 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 63 00 69 00 6D 00 6C 00 62 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 D4 00 00 00 D2 00 32 00 FF 02 00 00 36 3A E6 89 20 00 49 4E 54 45 52 4E 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 33 73 3B 3A 88 A5 14 00 00 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 74 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 5C 00 69 00 65 00 78 00 70 00 6C 00 6F 00 72 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 E2 00 00 00 E0 00 32 00 18 03 00 00 2A 3A B1 6C 20 00 4C 45 43 54 45 55 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 4C 00 65 00 63 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 7A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 00 5C 00 77 00 6D 00 70 00 6C 00 61 00 79 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C6 00 00 00 C4 00 32 00 E2 02 00 00 36 3A E6 89 20 00 4F 55 54 4C 4F 4F 7E 31 2E 4C 4E 4B 00 00 3E 00 03 00 04 00 EF BE 29 3A 34 73 3B 3A 88 A5 14 00 00 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 6A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 5C 00 6D 00 73 00 69 00 6D 00 6E 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 A0 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 5A 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 00 00 01 C8 00 00 00 C6 00 32 00 82 01 00 00 29 3A AC 71 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 94 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 6A 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 43 00 6F 00 6D 00 70 00 61 00 74 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 20 00 64 00 65 00 73 00 20 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 63 6F 6D 70 61 74 55 49 2E 64 6C 6C 2C 2D 31 31 35 00 00 1C 00 16 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 00 00 00 00 1C 00 00 00 01 BE 00 00 00 BC 00 32 00 EF 05 00 00 36 3A 8D 85 20 00 42 4C 4F 43 2D 4E 7E 31 2E 4C 4E 4B 00 00 48 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 32 00 42 00 6C 00 6F 00 63 00 2D 00 6E 00 6F 00 74 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 35 31 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 6F 00 74 00 65 00 70 00 61 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 DA 00 00 00 D8 00 32 00 06 03 00 00 36 3A E5 89 20 00 43 41 52 4E 45 54 7E 31 2E 4C 4E 4B 00 00 56 00 03 00 04 00 EF BE 29 3A 35 73 3B 3A 88 A5 14 00 40 00 43 00 61 00 72 00 6E 00 65 00 74 00 20 00 64 00 27 00 61 00 64 00 72 00 65 00 73 00 73 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 31 37 00 1C 00 66 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 5C 00 77 00 61 00 62 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C0 00 00 00 BE 00 32 00 CF 05 00 00 36 3A 8D 85 20 00 45 58 50 4C 4F 52 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 44 00 45 00 78 00 70 00 6C 00 6F 00 72 00 61 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 37 00 1C 00 48 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 65 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C8 00 00 00 C6 00 32 00 13 06 00 00 36 3A 8D 85 20 00 49 4E 56 49 54 45 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 44 00 49 00 6E 00 76 00 69 00 74 00 65 00 20 00 64 00 65 00 20 00 63 00 6F 00 6D 00 6D 00 61 00 6E 00 64 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 32 32 00 1C 00 50 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C2 00 00 00 C0 00 32 00 EF 05 00 00 36 3A 8D 85 20 00 53 59 4E 43 48 52 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 36 00 53 00 79 00 6E 00 63 00 68 00 72 00 6F 00 6E 00 69 00 73 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 32 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 6F 00 62 00 73 00 79 00 6E 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F6 00 00 00 F4 00 32 00 F7 05 00 00 36 3A 8D 85 20 00 56 49 53 49 54 45 7E 31 2E 4C 4E 4B 00 00 7C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 54 00 56 00 69 00 73 00 69 00 74 00 65 00 20 00 67 00 75 00 69 00 64 00 E9 00 65 00 20 00 64 00 65 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 58 00 50 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 74 6F 75 72 73 74 61 72 74 2E 65 78 65 2C 2D 31 00 1C 00 5C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 74 00 6F 00 75 00 72 00 73 00 74 00 61 00 72 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 FE 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 5A 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 5E 00 31 00 00 00 00 00 29 3A AC 71 11 00 41 43 43 45 53 53 7E 31 00 00 46 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 30 00 41 00 63 00 63 00 65 00 73 00 73 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 30 00 18 00 00 00 01 BE 00 00 00 BC 00 32 00 DD 05 00 00 36 3A 8D 85 20 00 43 4C 41 56 49 45 7E 31 2E 4C 4E 4B 00 00 50 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 3A 00 43 00 6C 00 61 00 76 00 69 00 65 00 72 00 20 00 76 00 69 00 73 00 75 00 65 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 35 32 00 1C 00 50 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6F 00 73 00 6B 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 DE 00 00 00 DC 00 32 00 03 06 00 00 36 3A 8D 85 20 00 47 45 53 54 49 4F 7E 31 2E 4C 4E 4B 00 00 68 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 52 00 47 00 65 00 73 00 74 00 69 00 6F 00 6E 00 6E 00 61 00 69 00 72 00 65 00 20 00 64 00 27 00 75 00 74 00 69 00 6C 00 69 00 74 00 61 00 69 00 72 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 35 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 75 00 74 00 69 00 6C 00 6D 00 61 00 6E 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B0 00 00 00 AE 00 32 00 F5 05 00 00 36 3A 8D 85 20 00 4C 6F 75 70 65 2E 6C 6E 6B 00 3E 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 28 00 4C 00 6F 00 75 00 70 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 34 31 00 18 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 61 00 67 00 6E 00 69 00 66 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 18 00 00 00 00 00 01 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 5A 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 60 00 31 00 00 00 00 00 2A 3A B1 6C 11 00 44 49 56 45 52 54 7E 31 00 00 48 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 32 00 44 00 69 00 76 00 65 00 72 00 74 00 69 00 73 00 73 00 65 00 6D 00 65 00 6E 00 74 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 37 32 00 18 00 00 00 01 E2 00 00 00 E0 00 32 00 24 03 00 00 2A 3A B1 6C 20 00 4C 45 43 54 45 55 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 4C 00 65 00 63 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 7A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 00 5C 00 77 00 6D 00 70 00 6C 00 61 00 79 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 86 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 40 00 31 00 00 00 00 00 29 3A 57 94 10 00 43 43 6C 65 61 6E 65 72 00 00 28 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 67 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 00 00 18 00 00 00 01 B0 00 00 00 AE 00 32 00 18 06 00 00 29 3A 57 94 20 00 43 43 6C 65 61 6E 65 72 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 88 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 62 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 5C 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 A6 00 00 00 A4 00 32 00 4A 00 00 00 29 3A 57 94 20 00 43 43 4C 45 41 4E 7E 31 2E 55 52 4C 00 00 42 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 88 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 20 00 48 00 6F 00 6D 00 65 00 70 00 61 00 67 00 65 00 2E 00 75 00 72 00 6C 00 00 00 1C 00 46 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 77 00 77 00 77 00 2E 00 63 00 63 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 63 00 6F 00 6D 00 2F 00 00 00 00 00 1C 00 00 00 01 C0 00 00 00 BE 00 32 00 59 05 00 00 29 3A 57 94 20 00 55 4E 49 4E 53 54 7E 31 2E 4C 4E 4B 00 00 44 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 88 A5 14 00 00 00 55 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 20 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 5E 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 86 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 40 00 31 00 00 00 00 00 29 3A 32 78 10 00 4C 6F 67 69 74 65 63 68 00 00 28 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 67 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 00 00 18 00 00 00 01 E6 00 00 00 E4 00 32 00 EF 02 00 00 29 3A 32 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 88 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 7C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 5C 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 5C 00 66 00 77 00 50 00 72 00 69 00 6E 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 82 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 3C 00 31 00 00 00 00 00 36 3A 28 85 10 00 52 65 67 43 75 72 65 00 26 00 03 00 04 00 EF BE 36 3A 27 85 3B 3A 67 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 00 00 16 00 00 00 01 AC 00 00 00 AA 00 32 00 A1 02 00 00 36 3A 28 85 20 00 55 4E 49 4E 53 54 7E 31 2E 4C 4E 4B 00 00 32 00 03 00 04 00 EF BE 36 3A 28 85 3B 3A 88 A5 14 00 00 00 55 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 5C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 80 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 3A 00 31 00 00 00 00 00 2C 3A 9A 8A 10 00 57 69 6E 52 41 52 00 00 24 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 00 00 16 00 00 00 01 B4 00 00 00 B2 00 32 00 D0 02 00 00 2C 3A 9A 8A 20 00 41 49 44 45 44 45 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 88 A5 14 00 00 00 41 00 69 00 64 00 65 00 20 00 64 00 65 00 20 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 63 00 68 00 6D 00 00 00 00 00 1C 00 00 00 01 C2 00 00 00 C0 00 32 00 BD 02 00 00 2C 3A 9A 8A 20 00 4D 41 4E 55 45 4C 7E 31 2E 4C 4E 4B 00 00 50 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 88 A5 14 00 00 00 4D 00 61 00 6E 00 75 00 65 00 6C 00 20 00 64 00 65 00 20 00 6C 00 61 00 20 00 63 00 6F 00 6E 00 73 00 6F 00 6C 00 65 00 20 00 52 00 41 00 52 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 54 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 5C 00 52 00 61 00 72 00 2E 00 74 00 78 00 74 00 00 00 00 00 1C 00 00 00 01 A2 00 00 00 A0 00 32 00 D0 02 00 00 2C 3A 9A 8A 20 00 57 69 6E 52 41 52 2E 6C 6E 6B 00 00 2C 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 65 00 78 00 65 00 00 00 00 00 1A 00 00 00 02 16 00 02 00 00 00 00 00 01 F4 00 00 00 F2 00 32 00 1B 06 00 00 29 3A 4C A3 20 00 43 4F 4E 46 49 47 7E 31 2E 4C 4E 4B 00 00 7E 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 66 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 65 00 72 00 20 00 6C 00 65 00 73 00 20 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 20 00 70 00 61 00 72 00 20 00 64 00 E9 00 66 00 61 00 75 00 74 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 30 30 37 37 00 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 63 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B4 00 00 00 B2 00 32 00 1E 06 00 00 29 3A 9A 9E 20 00 4D 49 43 52 4F 53 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 9A 9E 3B 3A 88 A5 14 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 56 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B2 00 00 00 B0 00 32 00 E3 05 00 00 36 3A 8D 85 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 75 00 70 00 64 00 6D 00 67 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 5A 00 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 00 00 01 52 01 00 00 50 01 32 00 0C 07 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 3B 3A 88 A5 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 F8 00 00 00 0B 00 EF BE 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 41 00 64 00 6F 00 62 00 65 00 5C 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 30 00 5C 00 52 00 65 00 61 00 64 00 65 00 72 00 5C 00 41 00 63 00 72 00 6F 00 52 00 64 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 01 00 33 00 34 00 54 00 4C 00 60 00 6C 00 72 00 76 00 35 00 28 00 38 00 48 00 28 00 36 00 21 00 24 00 2C 00 43 00 43 00 21 00 52 00 65 00 61 00 64 00 65 00 72 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 46 00 69 00 6C 00 65 00 73 00 3E 00 6C 00 7B 00 6E 00 5E 00 72 00 79 00 3F 00 4F 00 74 00 40 00 32 00 64 00 31 00 6C 00 63 00 21 00 59 00 4A 00 51 00 72 00 00 00 00 00 1C 00 00 00 01 44 01 00 00 42 01 32 00 26 07 00 00 38 3A AC 6B 20 00 41 50 50 4C 45 53 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 38 3A AC 6B 3B 3A 88 A5 14 00 00 00 41 00 70 00 70 00 6C 00 65 00 20 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 DC 00 00 00 0B 00 EF BE 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 41 00 70 00 70 00 6C 00 65 00 20 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 5C 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 01 00 2D 00 79 00 65 00 71 00 49 00 6A 00 3D 00 75 00 48 00 40 00 72 00 3D 00 56 00 5F 00 3F 00 66 00 66 00 6A 00 4C 00 34 00 3E 00 5D 00 3D 00 39 00 66 00 6D 00 74 00 75 00 72 00 57 00 3F 00 59 00 66 00 7D 00 66 00 4B 00 62 00 2E 00 27 00 5F 00 61 00 00 00 00 00 1C 00 00 00 01 C0 00 00 00 BE 00 32 00 7D 02 00 00 29 3A 54 71 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 73 00 73 00 65 00 6E 00 67 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 60 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4D 00 65 00 73 00 73 00 65 00 6E 00 67 00 65 00 72 00 5C 00 6D 00 73 00 6D 00 73 00 67 00 73 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F4 00 00 00 F2 00 32 00 12 03 00 00 29 3A 89 71 20 00 57 49 4E 44 4F 57 7E 32 2E 4C 4E 4B 00 00 70 00 03 00 04 00 EF BE 29 3A 89 71 3B 3A 88 A5 14 00 44 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 6F 00 76 00 69 00 65 00 20 00 4D 00 61 00 6B 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 50 52 4F 47 52 41 7E 31 5C 4D 4F 56 49 45 4D 7E 31 5C 77 6D 6D 32 72 65 73 2E 64 6C 6C 2C 2D 36 31 34 34 36 00 00 1C 00 66 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4D 00 6F 00 76 00 69 00 65 00 20 00 4D 00 61 00 6B 00 65 00 72 00 5C 00 6D 00 6F 00 76 00 69 00 65 00 6D 00 6B 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 A0 00 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 46 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 00 00 01 EA 00 00 00 E8 00 32 00 C6 02 00 00 38 3A B3 9B 20 00 53 43 41 4E 4E 45 7E 31 2E 4C 4E 4B 00 00 76 00 03 00 04 00 EF BE 29 3A 8E 78 3B 3A 88 A5 14 00 50 00 53 00 63 00 61 00 6E 00 6E 00 65 00 72 00 20 00 61 00 6E 00 64 00 20 00 43 00 61 00 6D 00 65 00 72 00 61 00 20 00 57 00 69 00 7A 00 61 00 72 00 64 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 73 74 69 5F 63 69 2E 64 6C 6C 2C 2D 31 31 00 1C 00 56 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 69 00 61 00 61 00 63 00 6D 00 67 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 BC 00 00 00 BA 00 32 00 DA 05 00 00 2B 3A 12 76 20 00 43 41 4C 43 55 4C 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 53 71 3B 3A 88 A5 14 00 36 00 43 00 61 00 6C 00 63 00 75 00 6C 00 61 00 74 00 72 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 31 39 00 1C 00 52 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 63 00 61 00 6C 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C8 00 00 00 C6 00 32 00 87 06 00 00 29 3A 3D A3 20 00 43 4F 4E 4E 45 58 7E 31 2E 4C 4E 4B 00 00 56 00 03 00 04 00 EF BE 29 3A 3D A3 3B 3A 88 A5 14 00 00 00 43 00 6F 00 6E 00 6E 00 65 00 78 00 69 00 6F 00 6E 00 20 00 42 00 75 00 72 00 65 00 61 00 75 00 20 00 E0 00 20 00 64 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 54 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 73 00 74 00 73 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B0 00 00 00 AE 00 32 00 EB 05 00 00 36 3A 8C 85 20 00 50 61 69 6E 74 2E 6C 6E 6B 00 3E 00 03 00 04 00 EF BE 29 3A 53 71 3B 3A 88 A5 14 00 28 00 50 00 61 00 69 00 6E 00 74 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 35 34 00 18 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 73 00 70 00 61 00 69 00 6E 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 18 00 00 00 01 DA 00 00 00 D8 00 32 00 6F 03 00 00 29 3A 53 71 20 00 57 6F 72 64 50 61 64 2E 6C 6E 6B 00 42 00 03 00 04 00 EF BE 29 3A 53 71 3B 3A 88 A5 14 00 2C 00 57 00 6F 00 72 00 64 00 50 00 61 00 64 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 39 00 1A 00 7C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 5C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 5C 00 77 00 6F 00 72 00 64 00 70 00 61 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 1A 00 00 00 00 EA 00 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 46 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 4A 00 31 00 00 00 00 00 29 3A 54 71 11 00 41 43 43 45 53 53 7E 31 00 00 32 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 00 00 18 00 00 00 01 D6 00 00 00 D4 00 32 00 F0 05 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 62 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 4C 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 41 00 63 00 63 00 65 00 73 00 73 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 31 36 00 1C 00 56 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 61 00 63 00 63 00 77 00 69 00 7A 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 00 01 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 46 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 60 00 31 00 00 00 00 00 29 3A 3D A3 11 00 43 4F 4D 4D 55 4E 7E 31 00 00 48 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 32 00 43 00 6F 00 6D 00 6D 00 75 00 6E 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 38 00 18 00 00 00 01 02 01 00 00 00 01 32 00 68 06 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 32 2E 4C 4E 4B 00 00 8A 00 03 00 04 00 EF BE 29 3A 86 71 3B 3A 88 A5 14 00 60 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 74 00 69 00 6F 00 6E 00 20 00 64 00 75 00 20 00 72 00 E9 00 73 00 65 00 61 00 75 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 68 6E 65 74 77 69 7A 2E 64 6C 6C 2C 2D 33 30 38 35 00 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F8 00 00 00 F6 00 32 00 6E 06 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 80 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 88 A5 14 00 56 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 4E 00 6F 00 75 00 76 00 65 00 6C 00 6C 00 65 00 20 00 63 00 6F 00 6E 00 6E 00 65 00 78 00 69 00 6F 00 6E 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 6E 65 74 73 68 65 6C 6C 2E 64 6C 6C 2C 2D 31 30 31 30 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F4 00 00 00 F2 00 32 00 78 06 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 33 2E 4C 4E 4B 00 00 7C 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 50 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 52 00 E9 00 73 00 65 00 61 00 75 00 20 00 73 00 61 00 6E 00 73 00 20 00 66 00 69 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 78 70 73 70 32 72 65 73 2E 64 6C 6C 2C 2D 31 36 32 30 31 00 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 D0 00 00 00 CE 00 32 00 DD 06 00 00 36 3A 8C 85 20 00 43 4F 4E 4E 45 58 7E 31 2E 4C 4E 4B 00 00 6A 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 88 A5 14 00 40 00 43 00 6F 00 6E 00 6E 00 65 00 78 00 69 00 6F 00 6E 00 73 00 20 00 72 00 E9 00 73 00 65 00 61 00 75 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 6E 65 74 73 68 65 6C 6C 2E 64 6C 6C 2C 2D 31 32 30 30 00 1C 00 48 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 65 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 D2 00 00 00 D0 00 32 00 12 03 00 00 29 3A 54 71 20 00 48 59 50 45 52 54 7E 31 2E 4C 4E 4B 00 00 4E 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 38 00 48 00 79 00 70 00 65 00 72 00 54 00 65 00 72 00 6D 00 69 00 6E 00 61 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 33 31 00 1C 00 66 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 5C 00 68 00 79 00 70 00 65 Key Modified Time : 27/01/2009 22:09:07 Data Length : 39 910 ================================================== ================================================== Registry Key : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\3 Name : ViewView2 Type : REG_BINARY Data : 1C 00 00 00 06 00 00 00 00 00 00 00 00 00 9C 00 00 00 00 00 01 00 00 00 FF FF FF FF F0 F0 F0 F0 14 00 03 00 D2 04 00 00 00 00 00 00 30 00 00 00 FD DF DF FD 0F 00 06 00 28 00 10 00 34 00 48 00 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 04 00 00 00 05 00 00 00 B4 00 60 00 78 00 78 00 B4 00 B4 00 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 02 00 00 00 40 00 31 00 00 00 00 00 2B 3A CA B8 10 00 41 55 54 4F 52 55 4E 53 00 00 28 00 03 00 04 00 EF BE 2B 3A CA B8 2B 3A 00 B8 14 00 00 00 41 00 75 00 74 00 6F 00 72 00 75 00 6E 00 73 00 00 00 18 00 DC 00 00 00 1A 01 00 00 76 00 32 00 B8 F4 51 01 28 3A 7D 61 20 00 41 4E 54 49 56 49 7E 31 2E 45 58 45 00 00 5A 00 03 00 04 00 EF BE 30 3A 02 7D 2F 3A 00 B8 14 00 00 00 61 00 6E 00 74 00 69 00 76 00 69 00 72 00 5F 00 77 00 6F 00 72 00 6B 00 73 00 74 00 61 00 74 00 69 00 6F 00 6E 00 5F 00 77 00 69 00 6E 00 75 00 5F 00 66 00 72 00 5F 00 68 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 E2 00 00 00 52 00 32 00 00 C6 00 00 28 3A B6 60 20 00 41 54 46 2D 43 4C 7E 31 2E 45 58 45 00 00 36 00 03 00 04 00 EF BE 30 3A F1 7C 2F 3A 00 B8 14 00 00 00 41 00 54 00 46 00 2D 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 1C 00 DC 00 00 00 02 00 00 00 42 00 32 00 BA 16 08 00 28 3A 45 62 20 00 4C 4F 50 53 44 2E 45 58 45 00 2A 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 4C 00 6F 00 70 00 53 00 44 00 2E 00 65 00 78 00 65 00 00 00 18 00 DC 00 00 00 3A 00 00 00 50 00 32 00 D0 27 29 00 28 3A A9 5E 20 00 4D 42 41 4D 2D 53 7E 31 2E 45 58 45 00 00 34 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 6D 00 62 00 61 00 6D 00 2D 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 DC 00 00 00 72 00 00 00 4C 00 32 00 64 CD 08 00 27 3A 31 74 20 00 4E 41 56 49 4C 4F 47 31 2E 45 58 45 00 00 30 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 AA 00 00 00 40 00 32 00 70 F8 2A 00 2B 3A 35 9E 20 00 6E 74 66 73 2E 65 78 65 00 00 28 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 6E 00 74 00 66 00 73 00 2E 00 65 00 78 00 65 00 00 00 18 00 DC 00 00 00 AA 00 00 00 40 00 32 00 1B EE 0B 00 26 3A E6 53 20 00 52 53 49 54 2E 65 78 65 00 00 28 00 03 00 04 00 EF BE 2B 3A C9 B8 2F 3A 00 B8 14 00 00 00 52 00 53 00 49 00 54 00 2E 00 65 00 78 00 65 00 00 00 18 00 DC 00 00 00 E2 00 00 00 52 00 32 00 00 28 E6 00 2B 3A 2A B1 20 00 53 50 59 42 4F 54 7E 31 2E 45 58 45 00 00 36 00 03 00 04 00 EF BE 2B 3A C9 B8 2F 3A 00 B8 14 00 00 00 73 00 70 00 79 00 62 00 6F 00 74 00 73 00 64 00 31 00 36 00 30 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 1A 01 00 00 5E 00 32 00 78 C1 3A 00 2B 3A 7B AF 20 00 53 50 59 42 4F 54 7E 32 2E 45 58 45 00 00 42 00 03 00 04 00 EF BE 2B 3A CA B8 2F 3A 00 B8 14 00 00 00 73 00 70 00 79 00 62 00 6F 00 74 00 73 00 64 00 5F 00 69 00 6E 00 63 00 6C 00 75 00 64 00 65 00 73 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 3A 00 00 00 5A 00 32 00 88 83 57 00 36 3A E7 7B 20 00 50 41 52 45 54 4F 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A 4A 7C 35 3A 00 B8 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 5F 00 50 00 43 00 5F 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 72 00 00 00 5A 00 32 00 F8 EC 14 00 36 3A DC 79 20 00 52 45 47 43 55 52 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A 4E 7C 35 3A 00 B8 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 53 00 65 00 74 00 75 00 70 00 5F 00 43 00 42 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 72 00 00 00 00 00 00 00 Key Modified Time : 22/01/2009 16:34:29 Data Length : 1 234 ================================================== ================================================== Registry Key : HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop Name : ItemPos800x600(1) Type : REG_BINARY Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E8 02 00 00 E8 01 00 00 14 00 1F 60 40 F0 5F 64 81 50 1B 10 9F 08 00 AA 00 2F 95 4E 18 00 00 00 F5 00 00 00 14 00 1F 80 D0 67 B5 86 3C 31 D2 11 89 85 00 80 AD A9 6E 9B 18 00 00 00 46 01 00 00 58 00 3A 00 C1 06 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 36 3A B9 8A 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 97 01 00 00 50 00 3A 00 50 06 00 00 2D 3A 8A 6A 20 00 43 44 42 55 52 4E 7E 31 2E 4C 4E 4B 00 00 34 00 03 00 04 00 EF BE 2D 3A 8A 6A 36 3A 8C 85 14 00 00 00 43 00 44 00 42 00 75 00 72 00 6E 00 65 00 72 00 58 00 50 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 A8 01 00 00 02 00 00 00 76 00 3A 00 1B 08 00 00 33 3A 20 6F 20 00 43 4F 52 45 4C 50 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 33 3A 20 6F 36 3A B9 8A 14 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 E8 01 00 00 42 00 3A 00 8C 02 00 00 2A 3A D0 01 20 00 65 4D 75 6C 65 2E 6C 6E 6B 00 2A 00 03 00 04 00 EF BE 2A 3A D0 01 36 3A 8C 85 14 00 00 00 65 00 4D 00 75 00 6C 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 18 00 68 00 00 00 02 00 00 00 5C 00 3A 00 B5 06 00 00 2F 3A 92 7D 20 00 47 44 41 54 41 54 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 2F 3A 92 7D 36 3A B9 8A 14 00 00 00 47 00 20 00 44 00 41 00 54 00 41 00 20 00 54 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 53 00 00 00 5C 00 3A 00 95 07 00 00 29 3A 07 9C 20 00 49 4E 53 54 41 4C 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 07 9C 36 3A B9 8A 14 00 00 00 49 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 20 00 4D 00 53 00 4E 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 53 00 00 00 5E 00 3A 00 6C 06 00 00 29 3A 34 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 34 78 36 3A B9 8A 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 51 00 75 00 69 00 63 00 6B 00 43 00 61 00 6D 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 A4 00 00 00 70 00 3A 00 B8 02 00 00 2A 3A F0 8D 20 00 4D 41 4C 57 41 52 7E 31 2E 4C 4E 4B 00 00 54 00 03 00 04 00 EF BE 2A 3A F0 8D 36 3A B9 8A 14 00 00 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 62 00 79 00 74 00 65 00 73 00 27 00 20 00 41 00 6E 00 74 00 69 00 2D 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 A4 00 00 00 62 00 3A 00 4D 06 00 00 29 3A 34 78 20 00 4D 45 53 50 48 4F 7E 31 2E 4C 4E 4B 00 00 46 00 03 00 04 00 EF BE 29 3A 34 78 36 3A B9 8A 14 00 00 00 4D 00 65 00 73 00 20 00 70 00 68 00 6F 00 74 00 6F 00 73 00 20 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 F5 00 00 00 5A 00 3A 00 42 06 00 00 34 3A 45 77 20 00 4D 4F 5A 49 4C 4C 7E 31 2E 4C 4E 4B 00 00 3E 00 03 00 04 00 EF BE 34 3A 1B 77 36 3A B9 8A 14 00 00 00 4D 00 6F 00 7A 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 A8 01 00 00 53 00 00 00 4C 00 3A 00 76 02 00 00 36 3A C8 80 20 00 4E 61 76 69 6C 6F 67 31 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 36 3A C8 80 36 3A B9 8A 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 A8 01 00 00 A4 00 00 00 48 00 3A 00 B9 01 00 00 36 3A 26 85 20 00 52 65 67 43 75 72 65 2E 6C 6E 6B 00 2E 00 03 00 04 00 EF BE 36 3A 26 85 36 3A 26 85 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 68 00 00 00 46 01 00 00 58 00 3A 00 65 06 00 00 2A 3A 29 78 20 00 53 50 59 57 41 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 2A 3A 29 78 36 3A B9 8A 14 00 00 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 20 00 44 00 6F 00 63 00 74 00 6F 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 97 01 00 00 40 00 31 00 00 00 00 00 2C 3A D4 01 10 00 41 75 74 6F 72 75 6E 73 00 00 28 00 03 00 04 00 EF BE 2B 3A CD B5 36 3A 01 86 14 00 00 00 41 00 75 00 74 00 6F 00 72 00 75 00 6E 00 73 00 00 00 18 00 68 00 00 00 E8 01 00 00 50 00 31 00 00 00 00 00 2B 3A 86 9E 10 00 44 4F 53 53 49 45 7E 31 00 00 38 00 03 00 04 00 EF BE 2B 3A 74 9E 36 3A 01 86 14 00 00 00 64 00 6F 00 73 00 73 00 69 00 65 00 72 00 20 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 B8 00 00 00 02 00 00 00 44 00 31 00 00 00 00 00 29 3A DD 78 10 00 46 54 45 4C 59 43 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A DA 78 36 3A 01 86 14 00 00 00 66 00 EA 00 74 00 65 00 20 00 6C 00 79 00 63 00 E9 00 65 00 00 00 18 00 A8 01 00 00 F5 00 00 00 50 00 31 00 00 00 00 00 31 3A 04 7A 10 00 4E 4F 4F 42 50 52 7E 31 00 00 38 00 03 00 04 00 EF BE 31 3A 04 7A 36 3A 01 86 14 00 00 00 6E 00 6F 00 6F 00 62 00 70 00 72 00 6F 00 6F 00 66 00 5F 00 6C 00 61 00 74 00 65 00 73 00 74 00 00 00 18 00 08 01 00 00 A4 00 00 00 3A 00 31 00 00 00 00 00 35 3A 68 B2 10 00 70 68 6F 74 6F 73 00 00 24 00 03 00 04 00 EF BE 2E 3A 98 0B 36 3A 01 86 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 00 00 16 00 A8 01 00 00 46 01 00 00 42 00 31 00 00 00 00 00 34 3A 7D 82 10 00 50 48 4F 54 4F 53 7E 31 00 00 2A 00 03 00 04 00 EF BE 34 3A 19 78 36 3A 01 86 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 62 00 69 00 73 00 00 00 18 00 58 01 00 00 97 01 00 00 40 00 31 00 00 00 00 00 35 3A 41 86 10 00 73 65 63 75 72 69 74 65 00 00 28 00 03 00 04 00 EF BE 2B 3A 9D B8 36 3A 01 86 14 00 00 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 A8 01 00 00 97 01 00 00 40 00 32 00 36 07 00 00 30 3A 33 85 20 00 33 32 36 33 2E 67 69 66 00 00 28 00 03 00 04 00 EF BE 30 3A 33 85 36 3A C6 7E 14 00 00 00 33 00 32 00 36 00 33 00 2E 00 67 00 69 00 66 00 00 00 18 00 B8 00 00 00 53 00 00 00 5A 00 32 00 20 D5 95 01 98 39 1D 95 20 00 41 44 42 45 52 44 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 29 3A E5 78 35 3A F6 85 14 00 00 00 41 00 64 00 62 00 65 00 52 00 64 00 72 00 39 00 30 00 5F 00 66 00 72 00 5F 00 46 00 52 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 A4 00 00 00 76 00 32 00 B8 F4 51 01 28 3A 7D 61 20 00 41 4E 54 49 56 49 7E 31 2E 45 58 45 00 00 5A 00 03 00 04 00 EF BE 29 3A E3 78 36 3A DC 7E 14 00 00 00 61 00 6E 00 74 00 69 00 76 00 69 00 72 00 5F 00 77 00 6F 00 72 00 6B 00 73 00 74 00 61 00 74 00 69 00 6F 00 6E 00 5F 00 77 00 69 00 6E 00 75 00 5F 00 66 00 72 00 5F 00 68 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 F5 00 00 00 52 00 32 00 00 C6 00 00 28 3A B6 60 20 00 41 54 46 2D 43 4C 7E 31 2E 45 58 45 00 00 36 00 03 00 04 00 EF BE 29 3A E7 78 36 3A D6 7E 14 00 00 00 41 00 54 00 46 00 2D 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 46 01 00 00 4C 00 32 00 6E D0 08 00 2B 3A 6D AF 20 00 41 75 74 6F 72 75 6E 73 2E 7A 69 70 00 00 30 00 03 00 04 00 EF BE 2B 3A 6D AF 36 3A DA 7E 14 00 00 00 41 00 75 00 74 00 6F 00 72 00 75 00 6E 00 73 00 2E 00 7A 00 69 00 70 00 00 00 1C 00 B8 00 00 00 97 01 00 00 4C 00 32 00 0C 06 00 00 29 3A 57 94 20 00 43 43 6C 65 61 6E 65 72 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 29 3A 57 94 36 3A 01 86 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 08 01 00 00 F5 00 00 00 68 00 32 00 4E 92 30 00 2D 3A 71 67 20 00 43 44 42 58 50 5F 7E 31 2E 45 58 45 00 00 4C 00 03 00 04 00 EF BE 2D 3A 67 67 36 3A 2F 80 14 00 00 00 63 00 64 00 62 00 78 00 70 00 5F 00 73 00 65 00 74 00 75 00 70 00 5F 00 34 00 2E 00 32 00 2E 00 33 00 2E 00 31 00 31 00 31 00 30 00 2E 00 65 00 78 00 65 00 00 00 1C 00 A8 01 00 00 E8 01 00 00 74 00 32 00 68 F3 85 01 31 3A 61 77 20 00 43 4C 41 4D 58 41 7E 31 2E 44 4D 47 00 00 58 00 03 00 04 00 EF BE 31 3A 3A 77 36 3A E1 7E 14 00 00 00 43 00 6C 00 61 00 6D 00 58 00 61 00 76 00 5F 00 31 00 2E 00 31 00 2E 00 31 00 5F 00 55 00 6E 00 69 00 76 00 65 00 72 00 73 00 61 00 6C 00 5F 00 65 00 39 00 34 00 32 00 2E 00 64 00 6D 00 67 00 00 00 1C 00 08 01 00 00 46 01 00 00 5A 00 32 00 10 28 2D 00 2D 3A 25 68 20 00 44 4F 54 4E 45 54 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 2D 3A 22 68 36 3A E4 7E 14 00 00 00 64 00 6F 00 74 00 6E 00 65 00 74 00 66 00 78 00 33 00 35 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 02 00 00 00 AA 00 32 00 43 66 89 11 7E 39 70 78 20 00 44 52 41 47 4F 4E 7E 31 2E 4D 4B 56 00 00 8E 00 03 00 04 00 EF BE 33 3A 92 8D 36 3A E6 7E 14 00 00 00 44 00 72 00 61 00 67 00 6F 00 6E 00 2E 00 42 00 61 00 6C 00 6C 00 2E 00 5A 00 2E 00 4F 00 73 00 73 00 75 00 21 00 2E 00 4B 00 61 00 65 00 74 00 74 00 65 00 2E 00 4B 00 69 00 74 00 61 00 2E 00 53 00 6F 00 6E 00 67 00 6F 00 6B 00 75 00 2E 00 54 00 6F 00 2E 00 4E 00 61 00 6B 00 61 00 6D 00 61 00 2D 00 54 00 61 00 63 00 68 00 69 00 2E 00 6D 00 6B 00 76 00 00 00 1C 00 F8 01 00 00 53 00 00 00 68 00 32 00 A0 8A 5D 00 34 3A 03 73 20 00 46 49 52 45 46 4F 7E 31 2E 45 58 45 00 00 4C 00 03 00 04 00 EF BE 34 3A F4 72 36 3A ED 7E 14 00 00 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 20 00 53 00 65 00 74 00 75 00 70 00 20 00 32 00 2E 00 30 00 2E 00 30 00 2E 00 32 00 30 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 A4 00 00 00 62 00 32 00 20 3C 74 00 34 3A 36 77 20 00 46 49 52 45 46 4F 7E 32 2E 45 58 45 00 00 46 00 03 00 04 00 EF BE 34 3A 2D 77 36 3A F4 7E 14 00 00 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 20 00 53 00 65 00 74 00 75 00 70 00 20 00 33 00 2E 00 30 00 2E 00 35 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 E8 01 00 00 54 00 32 00 A0 7D ED 0F 5C 39 54 63 20 00 47 44 54 43 32 30 7E 31 2E 45 58 45 00 00 38 00 03 00 04 00 EF BE 29 3A EC 78 36 3A F1 7E 14 00 00 00 47 00 44 00 54 00 43 00 32 00 30 00 30 00 39 00 46 00 52 00 41 00 31 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 02 00 00 00 66 00 32 00 20 66 E1 00 2A 3A 45 8D 20 00 49 45 37 2D 57 49 7E 31 2E 45 58 45 00 00 4A 00 03 00 04 00 EF BE 2A 3A 42 8D 36 3A 76 8A 14 00 00 00 49 00 45 00 37 00 2D 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 58 00 50 00 2D 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 97 01 00 00 8A 00 32 00 D0 40 67 00 2D 3A C9 AD 20 00 49 4D 42 4F 4F 53 7E 32 2E 45 58 45 00 00 6E 00 03 00 04 00 EF BE 2D 3A B9 AD 36 3A F5 7E 14 00 00 00 49 00 4D 00 42 00 6F 00 6F 00 73 00 74 00 65 00 72 00 53 00 65 00 74 00 75 00 70 00 2E 00 6A 00 6A 00 73 00 33 00 6D 00 34 00 6A 00 66 00 70 00 6A 00 66 00 68 00 6C 00 76 00 76 00 6D 00 64 00 71 00 64 00 31 00 7A 00 68 00 35 00 35 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 53 00 00 00 92 00 32 00 63 00 00 00 29 3A FB A5 20 00 49 4E 54 45 52 4E 7E 31 2E 55 52 4C 00 00 76 00 03 00 04 00 EF BE 29 3A FB A5 36 3A F1 7E 14 00 00 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 20 00 2D 00 20 00 72 00 E9 00 73 00 6F 00 6C 00 75 00 74 00 69 00 6F 00 6E 00 20 00 64 00 65 00 20 00 70 00 72 00 6F 00 62 00 6C 00 E8 00 6D 00 65 00 73 00 2E 00 75 00 72 00 6C 00 00 00 1C 00 F8 01 00 00 F5 00 00 00 54 00 32 00 28 05 00 04 35 3A 48 BA 20 00 49 54 55 4E 45 53 7E 31 2E 45 58 45 00 00 38 00 03 00 04 00 EF BE 35 3A 12 BA 36 3A 0A 7F 14 00 00 00 69 00 54 00 75 00 6E 00 65 00 73 00 38 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 18 00 00 00 02 00 00 00 68 00 32 00 E3 02 00 00 29 3A 32 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 32 78 36 3A 27 87 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 58 01 00 00 02 00 00 00 42 00 32 00 BA 16 08 00 28 3A 45 62 20 00 4C 6F 70 53 44 2E 65 78 65 00 2A 00 03 00 04 00 EF BE 29 3A FB 78 36 3A 81 83 14 00 00 00 4C 00 6F 00 70 00 53 00 44 00 2E 00 65 00 78 00 65 00 00 00 18 00 58 01 00 00 53 00 00 00 50 00 32 00 D0 27 29 00 28 3A A9 5E 20 00 4D 42 41 4D 2D 53 7E 31 2E 45 58 45 00 00 34 00 03 00 04 00 EF BE 29 3A 00 79 36 3A 24 80 14 00 00 00 6D 00 62 00 61 00 6D 00 2D 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 46 01 00 00 5C 00 32 00 E7 62 0B 00 30 3A 9A 8A 20 00 4D 49 53 53 49 4E 7E 31 2E 45 58 45 00 00 40 00 03 00 04 00 EF BE 30 3A 9A 8A 36 3A 0A 80 14 00 00 00 6D 00 69 00 73 00 73 00 69 00 6E 00 67 00 66 00 69 00 6C 00 65 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 58 01 00 00 A4 00 00 00 4C 00 32 00 64 CD 08 00 27 3A 31 74 20 00 4E 61 76 69 6C 6F 67 31 2E 65 78 65 00 00 30 00 03 00 04 00 EF BE 29 3A 03 79 36 3A BD 80 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 97 01 00 00 5C 00 32 00 80 2B 0C 00 31 3A FC 79 20 00 4E 4F 4F 42 50 52 7E 31 2E 5A 49 50 00 00 40 00 03 00 04 00 EF BE 31 3A FB 79 36 3A 27 80 14 00 00 00 6E 00 6F 00 6F 00 62 00 70 00 72 00 6F 00 6F 00 66 00 5F 00 6C 00 61 00 74 00 65 00 73 00 74 00 2E 00 7A 00 69 00 70 00 00 00 1C 00 F8 01 00 00 E8 01 00 00 5A 00 32 00 88 83 57 00 36 3A E7 7B 20 00 50 41 52 45 54 4F 7E 32 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A C8 7B 36 3A 46 87 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 5F 00 50 00 43 00 5F 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 48 02 00 00 02 00 00 00 6C 00 32 00 58 6F 41 00 36 3A B5 7A 20 00 50 41 52 45 54 4F 7E 31 2E 45 58 45 00 00 50 00 03 00 04 00 EF BE 36 3A AB 7A 36 3A 26 80 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 4C 00 6F 00 67 00 69 00 63 00 20 00 41 00 6E 00 74 00 69 00 20 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 2E 00 65 00 78 00 65 00 00 00 1C 00 48 02 00 00 53 00 00 00 90 00 32 00 D8 DA 60 14 33 3A A4 6D 20 00 50 53 50 50 31 32 7E 31 2E 45 58 45 00 00 74 00 03 00 04 00 EF BE 33 3A 74 6B 36 3A 18 7F 14 00 00 00 50 00 53 00 50 00 50 00 31 00 32 00 5F 00 43 00 6F 00 72 00 65 00 6C 00 5F 00 54 00 42 00 59 00 42 00 5F 00 45 00 4E 00 5F 00 49 00 45 00 5F 00 46 00 52 00 5F 00 44 00 45 00 5F 00 45 00 53 00 5F 00 49 00 54 00 5F 00 4E 00 4C 00 5F 00 45 00 53 00 44 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 E8 01 00 00 6A 00 32 00 15 02 00 00 2A 3A 0D 6B 20 00 52 41 43 43 4F 55 7E 31 2E 4C 4E 4B 00 00 4E 00 03 00 04 00 EF BE 2A 3A 0D 6B 36 3A 27 87 14 00 00 00 52 00 61 00 63 00 63 00 6F 00 75 00 72 00 63 00 69 00 20 00 76 00 65 00 72 00 73 00 20 00 49 00 6E 00 63 00 6F 00 6D 00 69 00 6E 00 67 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 48 02 00 00 A4 00 00 00 5A 00 32 00 F8 EC 14 00 36 3A DC 79 20 00 52 45 47 43 55 52 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A DB 79 36 3A 24 85 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 53 00 65 00 74 00 75 00 70 00 5F 00 43 00 42 00 2E 00 65 00 78 00 65 00 00 00 1C 00 58 01 00 00 E8 01 00 00 40 00 32 00 1B EE 0B 00 26 3A E6 53 20 00 52 53 49 54 2E 65 78 65 00 00 28 00 03 00 04 00 EF BE 29 3A 05 79 36 3A 26 7F 14 00 00 00 52 00 53 00 49 00 54 00 2E 00 65 00 78 00 65 00 00 00 18 00 48 02 00 00 F5 00 00 00 48 00 32 00 28 D9 E6 01 36 3A 70 80 20 00 73 64 73 65 74 75 70 2E 65 78 65 00 2E 00 03 00 04 00 EF BE 36 3A 58 80 36 3A 70 80 14 00 00 00 73 00 64 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1A 00 48 02 00 00 46 01 00 00 7A 00 32 00 00 60 98 2B 8F 39 32 18 20 00 54 52 41 49 54 4F 7E 31 2E 41 56 49 00 00 5E 00 03 00 04 00 EF BE 33 3A 9B 8D 36 3A 1B 7F 14 00 00 00 54 00 72 00 61 00 69 00 74 00 6F 00 72 00 2E 00 46 00 52 00 45 00 4E 00 43 00 48 00 2E 00 44 00 56 00 44 00 52 00 69 00 70 00 2E 00 58 00 76 00 69 00 44 00 2D 00 4D 00 4F 00 4E 00 4B 00 2E 00 61 00 76 00 69 00 00 00 1C 00 58 01 00 00 F5 00 00 00 7E 00 32 00 88 EB F8 03 28 3A 8D 66 20 00 54 52 45 4E 44 4D 7E 31 2E 45 58 45 00 00 62 00 03 00 04 00 EF BE 29 3A 09 79 36 3A 28 7F 14 00 00 00 54 00 72 00 65 00 6E 00 64 00 4D 00 69 00 63 00 72 00 6F 00 5F 00 54 00 49 00 53 00 5F 00 31 00 37 00 2E 00 30 00 30 00 5F 00 65 00 6E 00 2D 00 55 00 53 00 5F 00 33 00 32 00 2D 00 62 00 69 00 74 00 2E 00 65 00 78 00 65 00 00 00 1C 00 58 01 00 00 46 01 00 00 46 00 32 00 40 9D 08 00 28 3A BB 62 20 00 55 73 62 46 69 78 2E 65 78 65 00 00 2C 00 03 00 04 00 EF BE 29 3A 07 79 36 3A 2B 7F 14 00 00 00 55 00 73 00 62 00 46 00 69 00 78 00 2E 00 65 00 78 00 65 00 00 00 1A 00 48 02 00 00 97 01 00 00 58 00 32 00 48 B9 11 00 34 3A 65 70 20 00 57 4C 53 45 54 55 7E 31 2E 45 58 45 00 00 3C 00 03 00 04 00 EF BE 34 3A 65 70 36 3A 2D 7F 14 00 00 00 77 00 6C 00 73 00 65 00 74 00 75 00 70 00 2D 00 63 00 75 00 73 00 74 00 6F 00 6D 00 2E 00 65 00 78 00 65 00 00 00 1C 00 48 02 00 00 97 01 00 00 00 00 00 00 Key Modified Time : 27/01/2009 21:48:04 Data Length : 5 494 ================================================== ================================================== Registry Key : HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop Name : ItemPos1024x768(1) Type : REG_BINARY Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 02 00 00 EE 01 00 00 14 00 1F 60 40 F0 5F 64 81 50 1B 10 9F 08 00 AA 00 2F 95 4E B3 00 00 00 9C 01 00 00 14 00 1F 68 80 53 1C 87 A0 42 69 10 A2 EA 08 00 2B 30 30 9D 65 00 00 00 4A 01 00 00 14 00 1F 80 D0 67 B5 86 3C 31 D2 11 89 85 00 80 AD A9 6E 9B 65 00 00 00 F8 00 00 00 58 00 3A 00 C1 06 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 3B 3A 89 A5 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 EE 01 00 00 50 00 3A 00 50 06 00 00 2D 3A 8A 6A 20 00 43 44 42 55 52 4E 7E 31 2E 4C 4E 4B 00 00 34 00 03 00 04 00 EF BE 2D 3A 8A 6A 3B 3A 89 A5 14 00 00 00 43 00 44 00 42 00 75 00 72 00 6E 00 65 00 72 00 58 00 50 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 EE 01 00 00 76 00 3A 00 1B 08 00 00 33 3A 20 6F 20 00 43 4F 52 45 4C 50 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 33 3A 20 6F 3B 3A 89 A5 14 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 92 02 00 00 42 00 3A 00 8C 02 00 00 2A 3A D0 01 20 00 65 4D 75 6C 65 2E 6C 6E 6B 00 2A 00 03 00 04 00 EF BE 2A 3A D0 01 3B 3A 89 A5 14 00 00 00 65 00 4D 00 75 00 6C 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 18 00 65 00 00 00 9C 01 00 00 5C 00 3A 00 B5 06 00 00 2F 3A 92 7D 20 00 47 44 41 54 41 54 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 2F 3A 92 7D 3B 3A 89 A5 14 00 00 00 47 00 20 00 44 00 41 00 54 00 41 00 20 00 54 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 9C 01 00 00 5C 00 3A 00 95 07 00 00 29 3A 07 9C 20 00 49 4E 53 54 41 4C 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 07 9C 3B 3A 89 A5 14 00 00 00 49 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 20 00 4D 00 53 00 4E 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 40 02 00 00 46 00 3A 00 59 08 00 00 39 3A 9B 93 20 00 69 54 75 6E 65 73 2E 6C 6E 6B 00 00 2C 00 03 00 04 00 EF BE 38 3A 08 6C 3B 3A 89 A5 14 00 00 00 69 00 54 00 75 00 6E 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 17 00 00 00 54 00 00 00 5E 00 3A 00 6C 06 00 00 29 3A 34 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 34 78 3B 3A 89 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 51 00 75 00 69 00 63 00 6B 00 43 00 61 00 6D 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 A6 00 00 00 62 00 3A 00 4D 06 00 00 29 3A 34 78 20 00 4D 45 53 50 48 4F 7E 31 2E 4C 4E 4B 00 00 46 00 03 00 04 00 EF BE 29 3A 34 78 3B 3A 89 A5 14 00 00 00 4D 00 65 00 73 00 20 00 70 00 68 00 6F 00 74 00 6F 00 73 00 20 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 F8 00 00 00 5A 00 3A 00 42 06 00 00 37 3A 07 A1 20 00 4D 4F 5A 49 4C 4C 7E 31 2E 4C 4E 4B 00 00 3E 00 03 00 04 00 EF BE 37 3A EF A0 3B 3A 89 A5 14 00 00 00 4D 00 6F 00 7A 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 B3 00 00 00 F8 00 00 00 4C 00 3A 00 76 02 00 00 36 3A C8 80 20 00 4E 61 76 69 6C 6F 67 31 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 36 3A C8 80 3B 3A 89 A5 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 A6 00 00 00 60 00 3A 00 81 03 00 00 37 3A 23 AC 20 00 4F 50 45 4E 4F 46 7E 31 2E 4C 4E 4B 00 00 44 00 03 00 04 00 EF BE 37 3A 23 AC 3B 3A 89 A5 14 00 00 00 4F 00 70 00 65 00 6E 00 4F 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 2E 00 30 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 02 00 00 00 5C 00 3A 00 44 06 00 00 38 3A C1 6B 20 00 51 55 49 43 4B 54 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 38 3A C1 6B 3B 3A 89 A5 14 00 00 00 51 00 75 00 69 00 63 00 6B 00 54 00 69 00 6D 00 65 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 B3 00 00 00 54 00 00 00 48 00 3A 00 B9 01 00 00 36 3A 26 85 20 00 52 65 67 43 75 72 65 2E 6C 6E 6B 00 2E 00 03 00 04 00 EF BE 36 3A 26 85 3B 3A 89 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 B3 00 00 00 02 00 00 00 58 00 3A 00 65 06 00 00 2A 3A 29 78 20 00 53 50 59 57 41 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 2A 3A 29 78 3B 3A 89 A5 14 00 00 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 20 00 44 00 6F 00 63 00 74 00 6F 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 9D 01 00 00 F8 00 00 00 3A 00 31 00 00 00 00 00 39 3A 55 99 10 00 64 69 76 65 72 73 00 00 24 00 03 00 04 00 EF BE 39 3A 08 99 3B 3A A7 A5 14 00 00 00 64 00 69 00 76 00 65 00 72 00 73 00 00 00 16 00 EB 01 00 00 F8 00 00 00 50 00 31 00 00 00 00 00 2B 3A 86 9E 10 00 44 4F 53 53 49 45 7E 31 00 00 38 00 03 00 04 00 EF BE 2B 3A 74 9E 3B 3A A7 A5 14 00 00 00 64 00 6F 00 73 00 73 00 69 00 65 00 72 00 20 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 9D 01 00 00 9C 01 00 00 44 00 31 00 00 00 00 00 29 3A DD 78 10 00 46 54 45 4C 59 43 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A DA 78 3B 3A A7 A5 14 00 00 00 66 00 EA 00 74 00 65 00 20 00 6C 00 79 00 63 00 E9 00 65 00 00 00 18 00 EB 01 00 00 4A 01 00 00 3A 00 31 00 00 00 00 00 35 3A 68 B2 10 00 70 68 6F 74 6F 73 00 00 24 00 03 00 04 00 EF BE 2E 3A 98 0B 3B 3A A7 A5 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 00 00 16 00 9D 01 00 00 4A 01 00 00 42 00 31 00 00 00 00 00 34 3A 7D 82 10 00 50 48 4F 54 4F 53 7E 31 00 00 2A 00 03 00 04 00 EF BE 34 3A 19 78 3B 3A A7 A5 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 62 00 69 00 73 00 00 00 18 00 EB 01 00 00 9C 01 00 00 40 00 31 00 00 00 00 00 39 3A 4F 99 10 00 73 65 63 75 72 69 74 65 00 00 28 00 03 00 04 00 EF BE 2B 3A 9D B8 3B 3A A7 A5 14 00 00 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 17 00 00 00 40 02 00 00 40 00 32 00 36 07 00 00 30 3A 33 85 20 00 33 32 36 33 2E 67 69 66 00 00 28 00 03 00 04 00 EF BE 30 3A 33 85 3A 3A 71 AC 14 00 00 00 33 00 32 00 36 00 33 00 2E 00 67 00 69 00 66 00 00 00 18 00 01 01 00 00 02 00 00 00 5A 00 32 00 20 D5 95 01 98 39 1D 95 20 00 41 44 42 45 52 44 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 29 3A E5 78 3A 3A F7 BB 14 00 00 00 41 00 64 00 62 00 65 00 52 00 64 00 72 00 39 00 30 00 5F 00 66 00 72 00 5F 00 46 00 52 00 2E 00 65 00 78 00 65 00 00 00 1C 00 39 02 00 00 92 02 00 00 42 00 32 00 0D 55 1D 00 54 2B 55 6A 20 00 63 6F 72 61 6E 2E 70 64 66 00 2A 00 03 00 04 00 EF BE 3A 3A 66 87 3A 3A 78 AC 14 00 00 00 63 00 6F 00 72 00 61 00 6E 00 2E 00 70 00 64 00 66 00 00 00 18 00 B3 00 00 00 EE 01 00 00 50 00 32 00 1C 1D 00 00 3B 3A 7A 5D 20 00 48 49 4A 41 43 4B 7E 31 2E 4C 4F 47 00 00 34 00 03 00 04 00 EF BE 3A 3A B0 B4 3B 3A 7A 5D 14 00 00 00 68 00 69 00 6A 00 61 00 63 00 6B 00 74 00 68 00 69 00 73 00 2E 00 6C 00 6F 00 67 00 00 00 1C 00 B3 00 00 00 4A 01 00 00 3C 00 32 00 38 21 06 00 3A 3A AC B3 20 00 48 4A 54 2E 65 78 65 00 26 00 03 00 04 00 EF BE 3A 3A AB B3 3B 3A 74 5D 14 00 00 00 48 00 4A 00 54 00 2E 00 65 00 78 00 65 00 00 00 16 00 17 00 00 00 4A 01 00 00 92 00 32 00 63 00 00 00 29 3A FB A5 20 00 49 4E 54 45 52 4E 7E 31 2E 55 52 4C 00 00 76 00 03 00 04 00 EF BE 29 3A FB A5 3B 3A 89 A5 14 00 00 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 20 00 2D 00 20 00 72 00 E9 00 73 00 6F 00 6C 00 75 00 74 00 69 00 6F 00 6E 00 20 00 64 00 65 00 20 00 70 00 72 00 6F 00 62 00 6C 00 E8 00 6D 00 65 00 73 00 2E 00 75 00 72 00 6C 00 00 00 1C 00 17 00 00 00 92 02 00 00 46 00 32 00 00 9A 04 00 37 3A 66 A4 20 00 6B 69 6B 69 68 32 2E 70 70 73 00 00 2C 00 03 00 04 00 EF BE 37 3A 66 A4 3A 3A C5 AC 14 00 00 00 6B 00 69 00 6B 00 69 00 68 00 32 00 2E 00 70 00 70 00 73 00 00 00 1A 00 17 00 00 00 02 00 00 00 68 00 32 00 E3 02 00 00 29 3A 32 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 89 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 54 00 00 00 84 00 32 00 B0 1A 92 08 37 3A 33 A5 20 00 4F 4F 4F 5F 33 30 7E 31 2E 45 58 45 00 00 68 00 03 00 04 00 EF BE 37 3A C8 A4 3A 3A C5 AC 14 00 00 00 4F 00 4F 00 6F 00 5F 00 33 00 2E 00 30 00 2E 00 30 00 5F 00 57 00 69 00 6E 00 33 00 32 00 49 00 6E 00 74 00 65 00 6C 00 5F 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 5F 00 77 00 4A 00 52 00 45 00 5F 00 66 00 72 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B3 00 00 00 A6 00 00 00 5A 00 32 00 88 83 57 00 36 3A E7 7B 20 00 50 41 52 45 54 4F 7E 32 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A C8 7B 3A 3A CA AD 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 5F 00 50 00 43 00 5F 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 9D 01 00 00 02 00 00 00 6A 00 32 00 15 02 00 00 2A 3A 0D 6B 20 00 52 41 43 43 4F 55 7E 31 2E 4C 4E 4B 00 00 4E 00 03 00 04 00 EF BE 2A 3A 0D 6B 3B 3A 89 A5 14 00 00 00 52 00 61 00 63 00 63 00 6F 00 75 00 72 00 63 00 69 00 20 00 76 00 65 00 72 00 73 00 20 00 49 00 6E 00 63 00 6F 00 6D 00 69 00 6E 00 67 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 B3 00 00 00 40 02 00 00 48 00 32 00 E2 83 2E 00 3A 3A 8E BB 21 00 54 52 41 4C 41 4C 41 2E 65 78 65 00 2E 00 03 00 04 00 EF BE 3A 3A 8E BB 3B 3A 68 A5 14 00 00 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 2E 00 65 00 78 00 65 00 00 00 1A 00 B3 00 00 00 40 02 00 00 00 00 00 00 Key Modified Time : 27/01/2009 21:48:04 Data Length : 3 162 ================================================== ================================================== Registry Key : HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache Name : C:\Program Files\RegCure\RegCure.exe Type : REG_SZ Data : RegCure Application Key Modified Time : 27/01/2009 22:09:13 Data Length : 20 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Classes\CLSID\{3BAB8215-F5C2-4604-AF04-61F4CD991630}\1RegCure Name : ScanTime Type : REG_BINARY Data : 64 00 00 00 D9 07 07 00 04 00 09 00 13 00 00 00 19 00 00 00 D9 07 01 00 01 00 1A 00 12 00 00 00 19 00 00 00 D9 07 01 00 04 00 16 00 11 00 2A 00 21 00 00 00 02 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 33 34 38 30 33 2D 30 45 42 32 30 2D 38 34 39 35 32 2D 39 42 31 38 38 00 01 00 00 00 Key Modified Time : 26/01/2009 18:02:31 Data Length : 100 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegCure Name : SlowInfoCache Type : REG_BINARY Data : 28 02 00 00 01 00 00 00 00 E0 DA 01 00 00 00 00 C0 93 16 05 93 7D C9 01 0A 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 5C 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Key Modified Time : 23/01/2009 20:44:35 Data Length : 552 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegCure Name : Changed Type : REG_DWORD Data : 0x00000000 (0) Key Modified Time : 23/01/2009 20:44:35 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\RegCure.exe Name : Type : REG_SZ Data : C:\Program Files\RegCure\RegCure.exe Key Modified Time : 22/01/2009 17:41:14 Data Length : 37 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegCure Name : DisplayName Type : REG_SZ Data : RegCure 1.5.1.3 Key Modified Time : 22/01/2009 17:41:14 Data Length : 16 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegCure Name : UninstallString Type : REG_SZ Data : C:\Program Files\RegCure\uninst.exe Key Modified Time : 22/01/2009 17:41:14 Data Length : 36 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegCure Name : DisplayIcon Type : REG_SZ Data : C:\Program Files\RegCure\RegCure.exe Key Modified Time : 22/01/2009 17:41:14 Data Length : 37 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegCure Name : DisplayVersion Type : REG_SZ Data : 1.5.1.3 Key Modified Time : 22/01/2009 17:41:14 Data Length : 8 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegCure Name : URLInfoAbout Type : REG_SZ Data : http://www.regcure.com Key Modified Time : 22/01/2009 17:41:14 Data Length : 23 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegCure Name : Publisher Type : REG_SZ Data : RegCure, Inc. Key Modified Time : 22/01/2009 17:41:14 Data Length : 14 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : AffiliateID Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FirstTime Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FirstSincePatch Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : 15DayReminder Type : REG_DWORD Data : 0x00000000 (0) Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : 30DayReminder Type : REG_DWORD Data : 0x00000000 (0) Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : License Type : REG_SZ Data : 34803-0EB20-84952-9B188 Key Modified Time : 26/01/2009 18:02:28 Data Length : 24 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : ProductID Type : REG_DWORD Data : 0x00000002 (2) Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : VendorID Type : REG_DWORD Data : 0x00000001 (1) Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : LicenseType Type : REG_DWORD Data : 0x00000001 (1) Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : repairafterfind Type : REG_SZ Data : 1 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : systemrestore Type : REG_SZ Data : 1 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : lastScan Type : REG_SZ Data : 2009-01-26 18:00:39 Key Modified Time : 26/01/2009 18:02:28 Data Length : 20 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : lastfounderrors Type : REG_SZ Data : 142 Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : errs Type : REG_SZ Data : 142 Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalComErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalUninstallErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalFontErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalSharedDllErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalAppPathErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalHelpFileErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalWinStartUpErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalFilePathErrors Type : REG_SZ Data : 26 Key Modified Time : 26/01/2009 18:02:28 Data Length : 3 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalProgramShortcutErrors Type : REG_SZ Data : 1 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalEmtyRegKeyErrors Type : REG_SZ Data : 115 Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : TotalShellExtensionErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedComErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedUninstallErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedFontErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedSharedDllErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedAppPathErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedHelpFileErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedWinStartUpErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedFilePathErrors Type : REG_SZ Data : 26 Key Modified Time : 26/01/2009 18:02:28 Data Length : 3 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedProgramShortcutErrors Type : REG_SZ Data : 1 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedEmtyRegKeyErrors Type : REG_SZ Data : 115 Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : FixedShellExtensionErrors Type : REG_SZ Data : 0 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : ErrorsFixed Type : REG_SZ Data : 284 Key Modified Time : 26/01/2009 18:02:28 Data Length : 4 ================================================== ================================================== Registry Key : HKLM\SOFTWARE\RegCure Name : ShowTip Type : REG_SZ Data : 1 Key Modified Time : 26/01/2009 18:02:28 Data Length : 2 ================================================== ================================================== Registry Key : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCompatibility Name : AppCompatCache Type : REG_BINARY Data : EF BE AD DE 60 00 00 00 60 00 00 00 00 00 00 00 01 00 00 00 47 00 00 00 04 00 00 00 50 00 00 00 52 00 00 00 21 00 00 00 3A 00 00 00 1D 00 00 00 26 00 00 00 05 00 00 00 40 00 00 00 5C 00 00 00 5B 00 00 00 5F 00 00 00 14 00 00 00 4B 00 00 00 2B 00 00 00 10 00 00 00 29 00 00 00 00 00 00 00 46 00 00 00 24 00 00 00 1B 00 00 00 3C 00 00 00 58 00 00 00 12 00 00 00 02 00 00 00 53 00 00 00 44 00 00 00 07 00 00 00 2C 00 00 00 55 00 00 00 16 00 00 00 08 00 00 00 13 00 00 00 4D 00 00 00 34 00 00 00 43 00 00 00 27 00 00 00 2D 00 00 00 3E 00 00 00 0F 00 00 00 41 00 00 00 1A 00 00 00 37 00 00 00 17 00 00 00 4C 00 00 00 19 00 00 00 56 00 00 00 09 00 00 00 45 00 00 00 2F 00 00 00 23 00 00 00 32 00 00 00 2E 00 00 00 11 00 00 00 5D 00 00 00 06 00 00 00 33 00 00 00 35 00 00 00 59 00 00 00 57 00 00 00 0D 00 00 00 0C 00 00 00 0B 00 00 00 49 00 00 00 54 00 00 00 3B 00 00 00 4E 00 00 00 15 00 00 00 36 00 00 00 48 00 00 00 1E 00 00 00 5E 00 00 00 18 00 00 00 28 00 00 00 1F 00 00 00 2A 00 00 00 39 00 00 00 3D 00 00 00 0A 00 00 00 5A 00 00 00 51 00 00 00 25 00 00 00 03 00 00 00 0E 00 00 00 31 00 00 00 38 00 00 00 3F 00 00 00 1C 00 00 00 4F 00 00 00 22 00 00 00 4A 00 00 00 20 00 00 00 42 00 00 00 30 00 00 00 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 6D 00 64 00 35 00 64 00 65 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 41 00 64 00 6D 00 69 00 6E 00 2E 00 65 00 78 00 65 00 00 00 70 00 5F 00 34 00 2E 00 32 00 2E 00 33 00 2E 00 31 00 31 00 31 00 30 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 1C 93 92 56 C6 01 00 9E 00 00 00 00 00 00 CA 2D 19 3D C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 73 00 63 00 6E 00 74 00 66 00 79 00 2E 00 65 00 78 00 65 00 00 00 6C 00 2E 00 65 00 78 00 65 00 00 00 5C 00 69 00 64 00 6E 00 64 00 6C 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 E8 2D 10 D8 9D C8 01 00 36 00 00 00 00 00 00 FA FB FB 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 4E 00 49 00 52 00 43 00 4D 00 44 00 2E 00 65 00 78 00 65 00 00 00 6A 00 72 00 65 00 36 00 5C 00 62 00 69 00 6E 00 5C 00 6A 00 71 00 73 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 74 00 00 00 00 00 00 EA 38 CF 24 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 65 00 78 00 74 00 72 00 61 00 63 00 74 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 72 00 76 00 69 00 63 00 65 00 2E 00 65 00 78 00 65 00 00 00 6E 00 6C 00 6F 00 61 00 64 00 5C 00 37 00 62 00 36 00 65 00 30 00 38 00 34 00 65 00 38 00 39 00 37 00 61 00 34 00 31 00 36 00 64 00 61 00 64 00 36 00 32 00 30 00 34 00 66 00 65 00 63 00 35 00 34 00 64 00 31 00 65 00 30 00 30 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 CE 00 00 00 00 00 00 6E 7C 44 31 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 67 00 72 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6E 00 67 00 73 00 5C 00 46 00 6F 00 75 00 73 00 73 00 65 00 69 00 6E 00 65 00 5C 00 42 00 75 00 72 00 65 00 61 00 75 00 5C 00 4F 00 70 00 65 00 6E 00 4F 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 2E 00 30 00 20 00 28 00 66 00 72 00 29 00 20 00 49 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 6A 00 61 00 76 00 61 00 5C 00 6A 00 72 00 65 00 2D 00 36 00 75 00 37 00 2D 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 2D 00 69 00 35 00 38 00 36 00 2D 00 70 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 1C 3A 01 00 00 00 00 00 44 00 9F 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 70 00 76 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 20 01 00 00 00 00 00 D2 90 0D 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 65 00 62 00 63 00 68 00 65 00 63 00 6B 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 47 00 44 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 54 00 72 00 61 00 79 00 2E 00 65 00 78 00 65 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CE BD F7 D7 9D C8 01 00 4C 04 00 00 00 00 00 60 51 0F CC BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 77 00 78 00 63 00 61 00 63 00 6C 00 73 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 72 00 2E 00 64 00 6C 00 6C 00 00 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 3E 03 00 00 00 00 00 0A 41 C9 20 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 76 00 65 00 72 00 63 00 6C 00 73 00 69 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 64 0E D8 9D C8 01 00 70 00 00 00 00 00 00 EC DD 28 06 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 33 00 32 00 37 00 38 00 38 00 52 00 32 00 32 00 46 00 57 00 4A 00 46 00 57 00 5C 00 67 00 72 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 74 00 6F 00 72 00 5C 00 73 00 64 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 4D 00 65 00 64 00 69 00 61 00 43 00 61 00 74 00 61 00 6C 00 6F 00 67 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 1C 3A 01 00 00 00 00 00 54 F4 3D E1 BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 43 00 61 00 74 00 63 00 68 00 6D 00 65 00 2E 00 74 00 6D 00 70 00 00 00 65 00 6D 00 75 00 6C 00 65 00 2E 00 65 00 78 00 65 00 00 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 4D 00 65 00 64 00 69 00 61 00 43 00 61 00 74 00 61 00 6C 00 6F 00 67 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 3A 02 00 00 00 00 00 C2 76 CD 90 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 73 00 68 00 69 00 6D 00 67 00 76 00 77 00 2E 00 64 00 6C 00 6C 00 00 00 6B 00 2E 00 65 00 78 00 65 00 00 00 54 00 41 00 5C 00 41 00 56 00 4B 00 50 00 72 00 6F 00 78 00 79 00 5C 00 41 00 56 00 4B 00 50 00 72 00 6F 00 78 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 B0 91 F3 D7 9D C8 01 00 B8 06 00 00 00 00 00 E0 21 9A 4B B8 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 76 00 63 00 70 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 48 00 65 00 6C 00 70 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 7A 63 19 7D C7 01 00 A0 80 00 00 00 00 00 DA 32 41 6C BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 76 00 73 00 68 00 65 00 6C 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 73 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 7A 63 19 7D C7 01 00 20 07 00 00 00 00 00 14 06 B6 6C BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 58 00 50 00 2D 00 4B 00 42 00 33 00 31 00 30 00 39 00 39 00 34 00 2D 00 53 00 50 00 32 00 2D 00 50 00 72 00 6F 00 2D 00 42 00 6F 00 6F 00 74 00 44 00 69 00 73 00 6B 00 2D 00 46 00 52 00 41 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1A 57 C1 28 72 80 C9 01 E8 86 46 00 00 00 00 00 EA C3 36 2B 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 65 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 61 00 5C 00 6A 00 72 00 65 00 36 00 5C 00 62 00 69 00 6E 00 5C 00 6A 00 75 00 73 00 63 00 68 00 65 00 64 00 2E 00 65 00 78 00 65 00 00 00 32 00 37 00 5C 00 63 00 76 00 74 00 72 00 65 00 73 00 2E 00 65 00 78 00 65 00 00 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 82 01 00 00 00 00 00 F8 C2 6C EA BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 65 00 74 00 63 00 73 00 75 00 6D 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 47 00 44 00 46 00 77 00 53 00 76 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B1 F7 4F 4A 17 C7 01 00 4E 00 00 00 00 00 00 32 E4 53 3E C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 73 00 68 00 64 00 6F 00 63 00 76 00 77 00 2E 00 64 00 6C 00 6C 00 00 00 35 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 4C 00 45 00 52 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 EE 6D BD 2A 2F C9 01 00 E2 16 00 00 00 00 00 C6 AF 0A DD BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 77 00 73 00 63 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 5C 00 75 00 6E 00 6F 00 70 00 6B 00 67 00 2E 00 65 00 78 00 65 00 00 00 73 00 58 00 50 00 2D 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 16 02 00 00 00 00 00 9A 51 0F 30 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 Key Modified Time : 27/01/2009 21:46:07 Data Length : 53 392 ================================================== ================================================== Registry Key : HKLM\SYSTEM\ControlSet003\Control\Session Manager\AppCompatibility Name : AppCompatCache Type : REG_BINARY Data : EF BE AD DE 60 00 00 00 60 00 00 00 00 00 00 00 01 00 00 00 47 00 00 00 04 00 00 00 50 00 00 00 52 00 00 00 21 00 00 00 3A 00 00 00 1D 00 00 00 26 00 00 00 05 00 00 00 40 00 00 00 5C 00 00 00 5B 00 00 00 5F 00 00 00 14 00 00 00 4B 00 00 00 2B 00 00 00 10 00 00 00 29 00 00 00 00 00 00 00 46 00 00 00 24 00 00 00 1B 00 00 00 3C 00 00 00 58 00 00 00 12 00 00 00 02 00 00 00 53 00 00 00 44 00 00 00 07 00 00 00 2C 00 00 00 55 00 00 00 16 00 00 00 08 00 00 00 13 00 00 00 4D 00 00 00 34 00 00 00 43 00 00 00 27 00 00 00 2D 00 00 00 3E 00 00 00 0F 00 00 00 41 00 00 00 1A 00 00 00 37 00 00 00 17 00 00 00 4C 00 00 00 19 00 00 00 56 00 00 00 09 00 00 00 45 00 00 00 2F 00 00 00 23 00 00 00 32 00 00 00 2E 00 00 00 11 00 00 00 5D 00 00 00 06 00 00 00 33 00 00 00 35 00 00 00 59 00 00 00 57 00 00 00 0D 00 00 00 0C 00 00 00 0B 00 00 00 49 00 00 00 54 00 00 00 3B 00 00 00 4E 00 00 00 15 00 00 00 36 00 00 00 48 00 00 00 1E 00 00 00 5E 00 00 00 18 00 00 00 28 00 00 00 1F 00 00 00 2A 00 00 00 39 00 00 00 3D 00 00 00 0A 00 00 00 5A 00 00 00 51 00 00 00 25 00 00 00 03 00 00 00 0E 00 00 00 31 00 00 00 38 00 00 00 3F 00 00 00 1C 00 00 00 4F 00 00 00 22 00 00 00 4A 00 00 00 20 00 00 00 42 00 00 00 30 00 00 00 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 6D 00 64 00 35 00 64 00 65 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 41 00 64 00 6D 00 69 00 6E 00 2E 00 65 00 78 00 65 00 00 00 70 00 5F 00 34 00 2E 00 32 00 2E 00 33 00 2E 00 31 00 31 00 31 00 30 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 1C 93 92 56 C6 01 00 9E 00 00 00 00 00 00 CA 2D 19 3D C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 73 00 63 00 6E 00 74 00 66 00 79 00 2E 00 65 00 78 00 65 00 00 00 6C 00 2E 00 65 00 78 00 65 00 00 00 5C 00 69 00 64 00 6E 00 64 00 6C 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 E8 2D 10 D8 9D C8 01 00 36 00 00 00 00 00 00 FA FB FB 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 4E 00 49 00 52 00 43 00 4D 00 44 00 2E 00 65 00 78 00 65 00 00 00 6A 00 72 00 65 00 36 00 5C 00 62 00 69 00 6E 00 5C 00 6A 00 71 00 73 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 74 00 00 00 00 00 00 EA 38 CF 24 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 65 00 78 00 74 00 72 00 61 00 63 00 74 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 72 00 76 00 69 00 63 00 65 00 2E 00 65 00 78 00 65 00 00 00 6E 00 6C 00 6F 00 61 00 64 00 5C 00 37 00 62 00 36 00 65 00 30 00 38 00 34 00 65 00 38 00 39 00 37 00 61 00 34 00 31 00 36 00 64 00 61 00 64 00 36 00 32 00 30 00 34 00 66 00 65 00 63 00 35 00 34 00 64 00 31 00 65 00 30 00 30 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 CE 00 00 00 00 00 00 6E 7C 44 31 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 67 00 72 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6E 00 67 00 73 00 5C 00 46 00 6F 00 75 00 73 00 73 00 65 00 69 00 6E 00 65 00 5C 00 42 00 75 00 72 00 65 00 61 00 75 00 5C 00 4F 00 70 00 65 00 6E 00 4F 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 2E 00 30 00 20 00 28 00 66 00 72 00 29 00 20 00 49 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 6A 00 61 00 76 00 61 00 5C 00 6A 00 72 00 65 00 2D 00 36 00 75 00 37 00 2D 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 2D 00 69 00 35 00 38 00 36 00 2D 00 70 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 1C 3A 01 00 00 00 00 00 44 00 9F 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 70 00 76 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 20 01 00 00 00 00 00 D2 90 0D 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 65 00 62 00 63 00 68 00 65 00 63 00 6B 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 47 00 44 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 54 00 72 00 61 00 79 00 2E 00 65 00 78 00 65 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CE BD F7 D7 9D C8 01 00 4C 04 00 00 00 00 00 60 51 0F CC BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 77 00 78 00 63 00 61 00 63 00 6C 00 73 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 72 00 2E 00 64 00 6C 00 6C 00 00 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 3E 03 00 00 00 00 00 0A 41 C9 20 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 76 00 65 00 72 00 63 00 6C 00 73 00 69 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 64 0E D8 9D C8 01 00 70 00 00 00 00 00 00 EC DD 28 06 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 33 00 32 00 37 00 38 00 38 00 52 00 32 00 32 00 46 00 57 00 4A 00 46 00 57 00 5C 00 67 00 72 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 74 00 6F 00 72 00 5C 00 73 00 64 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 4D 00 65 00 64 00 69 00 61 00 43 00 61 00 74 00 61 00 6C 00 6F 00 67 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 1C 3A 01 00 00 00 00 00 54 F4 3D E1 BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 43 00 61 00 74 00 63 00 68 00 6D 00 65 00 2E 00 74 00 6D 00 70 00 00 00 65 00 6D 00 75 00 6C 00 65 00 2E 00 65 00 78 00 65 00 00 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 4D 00 65 00 64 00 69 00 61 00 43 00 61 00 74 00 61 00 6C 00 6F 00 67 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 3A 02 00 00 00 00 00 C2 76 CD 90 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 73 00 68 00 69 00 6D 00 67 00 76 00 77 00 2E 00 64 00 6C 00 6C 00 00 00 6B 00 2E 00 65 00 78 00 65 00 00 00 54 00 41 00 5C 00 41 00 56 00 4B 00 50 00 72 00 6F 00 78 00 79 00 5C 00 41 00 56 00 4B 00 50 00 72 00 6F 00 78 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 B0 91 F3 D7 9D C8 01 00 B8 06 00 00 00 00 00 E0 21 9A 4B B8 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 76 00 63 00 70 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 48 00 65 00 6C 00 70 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 7A 63 19 7D C7 01 00 A0 80 00 00 00 00 00 DA 32 41 6C BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 76 00 73 00 68 00 65 00 6C 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 73 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 7A 63 19 7D C7 01 00 20 07 00 00 00 00 00 14 06 B6 6C BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 58 00 50 00 2D 00 4B 00 42 00 33 00 31 00 30 00 39 00 39 00 34 00 2D 00 53 00 50 00 32 00 2D 00 50 00 72 00 6F 00 2D 00 42 00 6F 00 6F 00 74 00 44 00 69 00 73 00 6B 00 2D 00 46 00 52 00 41 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1A 57 C1 28 72 80 C9 01 E8 86 46 00 00 00 00 00 EA C3 36 2B 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 65 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 61 00 5C 00 6A 00 72 00 65 00 36 00 5C 00 62 00 69 00 6E 00 5C 00 6A 00 75 00 73 00 63 00 68 00 65 00 64 00 2E 00 65 00 78 00 65 00 00 00 32 00 37 00 5C 00 63 00 76 00 74 00 72 00 65 00 73 00 2E 00 65 00 78 00 65 00 00 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 82 01 00 00 00 00 00 F8 C2 6C EA BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 65 00 74 00 63 00 73 00 75 00 6D 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 47 00 44 00 46 00 77 00 53 00 76 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B1 F7 4F 4A 17 C7 01 00 4E 00 00 00 00 00 00 32 E4 53 3E C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 73 00 68 00 64 00 6F 00 63 00 76 00 77 00 2E 00 64 00 6C 00 6C 00 00 00 35 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 4C 00 45 00 52 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 EE 6D BD 2A 2F C9 01 00 E2 16 00 00 00 00 00 C6 AF 0A DD BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 77 00 73 00 63 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 5C 00 75 00 6E 00 6F 00 70 00 6B 00 67 00 2E 00 65 00 78 00 65 00 00 00 73 00 58 00 50 00 2D 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 16 02 00 00 00 00 00 9A 51 0F 30 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 Key Modified Time : 27/01/2009 21:46:07 Data Length : 53 392 ================================================== ================================================== Registry Key : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCompatibility Name : AppCompatCache Type : REG_BINARY Data : EF BE AD DE 60 00 00 00 60 00 00 00 00 00 00 00 01 00 00 00 47 00 00 00 04 00 00 00 50 00 00 00 52 00 00 00 21 00 00 00 3A 00 00 00 1D 00 00 00 26 00 00 00 05 00 00 00 40 00 00 00 5C 00 00 00 5B 00 00 00 5F 00 00 00 14 00 00 00 4B 00 00 00 2B 00 00 00 10 00 00 00 29 00 00 00 00 00 00 00 46 00 00 00 24 00 00 00 1B 00 00 00 3C 00 00 00 58 00 00 00 12 00 00 00 02 00 00 00 53 00 00 00 44 00 00 00 07 00 00 00 2C 00 00 00 55 00 00 00 16 00 00 00 08 00 00 00 13 00 00 00 4D 00 00 00 34 00 00 00 43 00 00 00 27 00 00 00 2D 00 00 00 3E 00 00 00 0F 00 00 00 41 00 00 00 1A 00 00 00 37 00 00 00 17 00 00 00 4C 00 00 00 19 00 00 00 56 00 00 00 09 00 00 00 45 00 00 00 2F 00 00 00 23 00 00 00 32 00 00 00 2E 00 00 00 11 00 00 00 5D 00 00 00 06 00 00 00 33 00 00 00 35 00 00 00 59 00 00 00 57 00 00 00 0D 00 00 00 0C 00 00 00 0B 00 00 00 49 00 00 00 54 00 00 00 3B 00 00 00 4E 00 00 00 15 00 00 00 36 00 00 00 48 00 00 00 1E 00 00 00 5E 00 00 00 18 00 00 00 28 00 00 00 1F 00 00 00 2A 00 00 00 39 00 00 00 3D 00 00 00 0A 00 00 00 5A 00 00 00 51 00 00 00 25 00 00 00 03 00 00 00 0E 00 00 00 31 00 00 00 38 00 00 00 3F 00 00 00 1C 00 00 00 4F 00 00 00 22 00 00 00 4A 00 00 00 20 00 00 00 42 00 00 00 30 00 00 00 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 6D 00 64 00 35 00 64 00 65 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 41 00 64 00 6D 00 69 00 6E 00 2E 00 65 00 78 00 65 00 00 00 70 00 5F 00 34 00 2E 00 32 00 2E 00 33 00 2E 00 31 00 31 00 31 00 30 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 1C 93 92 56 C6 01 00 9E 00 00 00 00 00 00 CA 2D 19 3D C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 73 00 63 00 6E 00 74 00 66 00 79 00 2E 00 65 00 78 00 65 00 00 00 6C 00 2E 00 65 00 78 00 65 00 00 00 5C 00 69 00 64 00 6E 00 64 00 6C 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 E8 2D 10 D8 9D C8 01 00 36 00 00 00 00 00 00 FA FB FB 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 4E 00 49 00 52 00 43 00 4D 00 44 00 2E 00 65 00 78 00 65 00 00 00 6A 00 72 00 65 00 36 00 5C 00 62 00 69 00 6E 00 5C 00 6A 00 71 00 73 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 74 00 00 00 00 00 00 EA 38 CF 24 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 65 00 78 00 74 00 72 00 61 00 63 00 74 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 72 00 76 00 69 00 63 00 65 00 2E 00 65 00 78 00 65 00 00 00 6E 00 6C 00 6F 00 61 00 64 00 5C 00 37 00 62 00 36 00 65 00 30 00 38 00 34 00 65 00 38 00 39 00 37 00 61 00 34 00 31 00 36 00 64 00 61 00 64 00 36 00 32 00 30 00 34 00 66 00 65 00 63 00 35 00 34 00 64 00 31 00 65 00 30 00 30 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 CE 00 00 00 00 00 00 6E 7C 44 31 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 67 00 72 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6E 00 67 00 73 00 5C 00 46 00 6F 00 75 00 73 00 73 00 65 00 69 00 6E 00 65 00 5C 00 42 00 75 00 72 00 65 00 61 00 75 00 5C 00 4F 00 70 00 65 00 6E 00 4F 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 2E 00 30 00 20 00 28 00 66 00 72 00 29 00 20 00 49 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 6A 00 61 00 76 00 61 00 5C 00 6A 00 72 00 65 00 2D 00 36 00 75 00 37 00 2D 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 2D 00 69 00 35 00 38 00 36 00 2D 00 70 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 1C 3A 01 00 00 00 00 00 44 00 9F 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 70 00 76 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 20 01 00 00 00 00 00 D2 90 0D 42 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 65 00 62 00 63 00 68 00 65 00 63 00 6B 00 2E 00 64 00 6C 00 6C 00 00 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 47 00 44 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 54 00 72 00 61 00 79 00 2E 00 65 00 78 00 65 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CE BD F7 D7 9D C8 01 00 4C 04 00 00 00 00 00 60 51 0F CC BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 77 00 78 00 63 00 61 00 63 00 6C 00 73 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 72 00 2E 00 64 00 6C 00 6C 00 00 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 3E 03 00 00 00 00 00 0A 41 C9 20 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 76 00 65 00 72 00 63 00 6C 00 73 00 69 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 64 0E D8 9D C8 01 00 70 00 00 00 00 00 00 EC DD 28 06 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 33 00 32 00 37 00 38 00 38 00 52 00 32 00 32 00 46 00 57 00 4A 00 46 00 57 00 5C 00 67 00 72 00 65 00 70 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 74 00 6F 00 72 00 5C 00 73 00 64 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 4D 00 65 00 64 00 69 00 61 00 43 00 61 00 74 00 61 00 6C 00 6F 00 67 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 1C 3A 01 00 00 00 00 00 54 F4 3D E1 BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 43 00 61 00 74 00 63 00 68 00 6D 00 65 00 2E 00 74 00 6D 00 70 00 00 00 65 00 6D 00 75 00 6C 00 65 00 2E 00 65 00 78 00 65 00 00 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 5C 00 4D 00 65 00 64 00 69 00 61 00 43 00 61 00 74 00 61 00 6C 00 6F 00 67 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 3A 02 00 00 00 00 00 C2 76 CD 90 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 73 00 68 00 69 00 6D 00 67 00 76 00 77 00 2E 00 64 00 6C 00 6C 00 00 00 6B 00 2E 00 65 00 78 00 65 00 00 00 54 00 41 00 5C 00 41 00 56 00 4B 00 50 00 72 00 6F 00 78 00 79 00 5C 00 41 00 56 00 4B 00 50 00 72 00 6F 00 78 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 B0 91 F3 D7 9D C8 01 00 B8 06 00 00 00 00 00 E0 21 9A 4B B8 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 76 00 63 00 70 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 48 00 65 00 6C 00 70 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 7A 63 19 7D C7 01 00 A0 80 00 00 00 00 00 DA 32 41 6C BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 76 00 73 00 68 00 65 00 6C 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 73 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 5C 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 7A 63 19 7D C7 01 00 20 07 00 00 00 00 00 14 06 B6 6C BD 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 58 00 50 00 2D 00 4B 00 42 00 33 00 31 00 30 00 39 00 39 00 34 00 2D 00 53 00 50 00 32 00 2D 00 50 00 72 00 6F 00 2D 00 42 00 6F 00 6F 00 74 00 44 00 69 00 73 00 6B 00 2D 00 46 00 52 00 41 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1A 57 C1 28 72 80 C9 01 E8 86 46 00 00 00 00 00 EA C3 36 2B 72 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 65 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 61 00 5C 00 6A 00 72 00 65 00 36 00 5C 00 62 00 69 00 6E 00 5C 00 6A 00 75 00 73 00 63 00 68 00 65 00 64 00 2E 00 65 00 78 00 65 00 00 00 32 00 37 00 5C 00 63 00 76 00 74 00 72 00 65 00 73 00 2E 00 65 00 78 00 65 00 00 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 82 01 00 00 00 00 00 F8 C2 6C EA BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 65 00 74 00 63 00 73 00 75 00 6D 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 5C 00 46 00 69 00 72 00 65 00 77 00 61 00 6C 00 6C 00 5C 00 47 00 44 00 46 00 77 00 53 00 76 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B1 F7 4F 4A 17 C7 01 00 4E 00 00 00 00 00 00 32 E4 53 3E C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 73 00 68 00 64 00 6F 00 63 00 76 00 77 00 2E 00 64 00 6C 00 6C 00 00 00 35 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 5C 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 4C 00 45 00 52 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 EE 6D BD 2A 2F C9 01 00 E2 16 00 00 00 00 00 C6 AF 0A DD BF 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 5C 00 73 00 77 00 73 00 63 00 2E 00 63 00 66 00 65 00 78 00 65 00 00 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 5C 00 75 00 6E 00 6F 00 70 00 6B 00 67 00 2E 00 65 00 78 00 65 00 00 00 73 00 58 00 50 00 2D 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 2D 14 19 13 C0 01 00 16 02 00 00 00 00 00 9A 51 0F 30 C0 80 C9 01 5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 Key Modified Time : 27/01/2009 21:46:07 Data Length : 53 392 ================================================== ================================================== Registry Key : HKU\S-1-5-21-1606980848-1682526488-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs Name : Order Type : REG_BINARY Data : 08 00 00 00 02 00 00 00 72 13 00 00 01 00 00 00 22 00 00 00 C8 00 00 00 00 00 00 00 BA 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 A8 00 32 00 1B 06 00 00 29 3A 4C A3 20 00 43 4F 4E 46 49 47 7E 31 2E 4C 4E 4B 00 00 7E 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 66 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 65 00 72 00 20 00 6C 00 65 00 73 00 20 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 20 00 70 00 61 00 72 00 20 00 64 00 E9 00 66 00 61 00 75 00 74 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 30 30 37 37 00 00 1C 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1C 00 00 00 00 00 00 00 00 00 8A 00 00 00 02 00 00 00 7C 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 6A 00 32 00 1E 06 00 00 29 3A 9A 9E 20 00 4D 49 43 52 4F 53 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 9A 9E 3B 3A 88 A5 14 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1C 00 00 00 00 00 00 00 00 00 86 00 00 00 01 00 00 00 78 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 66 00 32 00 E3 05 00 00 36 3A 8D 85 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1C 00 00 00 00 00 00 00 00 00 EC 00 00 00 03 00 00 00 DE 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 68 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 62 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 0E 00 00 00 00 00 EF BE 03 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 6E 00 00 00 04 00 00 00 60 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 4E 00 31 00 00 00 00 00 29 3A 57 94 10 00 43 43 6C 65 61 6E 65 72 00 00 28 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 67 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 00 00 00 00 00 00 72 00 00 00 15 00 00 00 64 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 52 00 31 00 00 00 00 00 2D 3A 8A 6A 10 00 43 44 42 55 52 4E 7E 31 00 00 2C 00 03 00 04 00 EF BE 2D 3A 8A 6A 3B 3A 67 A5 14 00 00 00 43 00 44 00 42 00 75 00 72 00 6E 00 65 00 72 00 58 00 50 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 98 00 00 00 18 00 00 00 8A 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 78 00 31 00 00 00 00 00 33 3A 20 6F 10 00 43 4F 52 45 4C 50 7E 31 00 00 52 00 03 00 04 00 EF BE 33 3A 20 6F 3B 3A 67 A5 14 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 E4 00 00 00 05 00 00 00 D6 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 50 00 31 00 00 00 00 00 39 3A 12 90 10 00 44 4D 41 52 52 41 7E 31 00 00 2A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 41 A8 14 00 00 00 44 00 E9 00 6D 00 61 00 72 00 72 00 61 00 67 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 72 00 31 00 00 00 00 00 2B 3A 35 B7 11 00 44 4D 41 52 52 41 7E 31 00 00 3E 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 5D A4 14 00 28 00 44 00 E9 00 6D 00 61 00 72 00 72 00 61 00 67 00 65 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 37 00 18 00 0E 00 00 00 00 00 EF BE 03 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 64 00 00 00 10 00 00 00 56 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 44 00 31 00 00 00 00 00 2A 3A CE 01 10 00 65 4D 75 6C 65 00 22 00 03 00 04 00 EF BE 2A 3A CE 01 3B 3A 67 A5 14 00 00 00 65 00 4D 00 75 00 6C 00 65 00 00 00 14 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 14 00 00 00 00 00 00 00 00 00 7E 00 00 00 06 00 00 00 70 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5E 00 31 00 00 00 00 00 2F 3A 92 7D 10 00 47 44 41 54 41 54 7E 31 00 00 38 00 03 00 04 00 EF BE 2F 3A 92 7D 3B 3A 67 A5 14 00 00 00 47 00 20 00 44 00 41 00 54 00 41 00 20 00 54 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 70 00 00 00 17 00 00 00 62 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 50 00 31 00 00 00 00 00 2D 3A E1 AD 10 00 49 4D 42 4F 4F 53 7E 31 00 00 2A 00 03 00 04 00 EF BE 2D 3A D9 AD 3B 3A 67 A5 14 00 00 00 49 00 4D 00 42 00 6F 00 6F 00 73 00 74 00 65 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 68 00 00 00 1F 00 00 00 5A 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 48 00 31 00 00 00 00 00 38 3A 08 6C 10 00 69 54 75 6E 65 73 00 00 24 00 03 00 04 00 EF BE 38 3A 08 6C 3B 3A 67 A5 14 00 00 00 69 00 54 00 75 00 6E 00 65 00 73 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 16 00 00 00 00 00 00 00 00 00 76 00 00 00 07 00 00 00 68 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 56 00 31 00 00 00 00 00 29 3A 54 71 11 00 4A 65 75 78 00 00 34 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 67 A5 14 00 1E 00 4A 00 65 00 75 00 78 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 37 33 00 14 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 14 00 00 00 00 00 00 00 00 00 CC 00 00 00 08 00 00 00 BE 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 4E 00 31 00 00 00 00 00 29 3A 32 78 10 00 4C 6F 67 69 74 65 63 68 00 00 28 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 67 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 5C 00 31 00 00 00 00 00 29 3A 34 78 10 00 4C 6F 67 69 74 65 63 68 00 00 28 00 03 00 04 00 EF BE 29 3A 08 78 3B 3A 67 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 00 00 18 00 0E 00 00 00 00 00 EF BE 03 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 92 00 00 00 11 00 00 00 84 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 72 00 31 00 00 00 00 00 2A 3A F0 8D 10 00 4D 41 4C 57 41 52 7E 31 00 00 4C 00 03 00 04 00 EF BE 2A 3A F0 8D 3B 3A 67 A5 14 00 00 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 62 00 79 00 74 00 65 00 73 00 27 00 20 00 41 00 6E 00 74 00 69 00 2D 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 7C 00 00 00 12 00 00 00 6E 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5C 00 31 00 00 00 00 00 37 3A EF A0 10 00 4D 4F 5A 49 4C 4C 7E 31 00 00 36 00 03 00 04 00 EF BE 37 3A EF A0 3B 3A 67 A5 14 00 00 00 4D 00 6F 00 7A 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 6E 00 00 00 1A 00 00 00 60 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 4E 00 31 00 00 00 00 00 36 3A C8 80 10 00 4E 61 76 69 6C 6F 67 31 00 00 28 00 03 00 04 00 EF BE 36 3A C8 80 3B 3A 67 A5 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 84 00 00 00 1D 00 00 00 76 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 64 00 31 00 00 00 00 00 37 3A 3C AC 14 00 4F 50 45 4E 4F 46 7E 31 2E 30 00 00 3C 00 03 00 04 00 EF BE 37 3A 22 AC 3B 3A 67 A5 14 00 00 00 4F 00 70 00 65 00 6E 00 4F 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 2E 00 30 00 00 00 1A 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1A 00 00 00 00 00 00 00 00 00 74 00 00 00 1C 00 00 00 66 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 54 00 31 00 00 00 00 00 36 3A 52 87 10 00 50 41 52 45 54 4F 7E 31 00 00 2E 00 03 00 04 00 EF BE 36 3A 52 87 3B 3A 67 A5 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 4C 00 6F 00 67 00 69 00 63 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 70 00 00 00 20 00 00 00 62 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 50 00 31 00 00 00 00 00 38 3A C1 6B 10 00 51 55 49 43 4B 54 7E 31 00 00 2A 00 03 00 04 00 EF BE 38 3A C1 6B 3B 3A 67 A5 14 00 00 00 51 00 75 00 69 00 63 00 6B 00 54 00 69 00 6D 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 C4 00 00 00 1B 00 00 00 B6 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 4A 00 31 00 00 00 00 00 36 3A 28 85 10 00 52 65 67 43 75 72 65 00 26 00 03 00 04 00 EF BE 36 3A 27 85 3B 3A 67 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 16 00 00 00 58 00 31 00 00 00 00 00 36 3A 26 85 10 00 52 65 67 43 75 72 65 00 26 00 03 00 04 00 EF BE 36 3A 26 85 3B 3A 67 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 00 00 16 00 0E 00 00 00 00 00 EF BE 03 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 16 00 00 00 00 00 00 00 00 00 72 00 00 00 21 00 00 00 64 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 52 00 31 00 00 00 00 00 3B 3A 1C A9 10 00 52 45 47 53 43 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 3B 3A 1B A9 3B 3A 1C A9 14 00 00 00 52 00 65 00 67 00 53 00 63 00 61 00 6E 00 6E 00 65 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 18 00 00 00 00 00 00 00 00 00 90 00 00 00 14 00 00 00 82 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 70 00 31 00 00 00 00 00 2B 3A 2A B9 10 00 53 50 59 42 4F 54 7E 31 00 00 4A 00 03 00 04 00 EF BE 2B 3A 2A B9 3B 3A 67 A5 14 00 00 00 53 00 70 00 79 00 62 00 6F 00 74 00 20 00 2D 00 20 00 53 00 65 00 61 00 72 00 63 00 68 00 20 00 26 00 20 00 44 00 65 00 73 00 74 00 72 00 6F 00 79 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 7A 00 00 00 13 00 00 00 6C 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5A 00 31 00 00 00 00 00 2A 3A 29 78 10 00 53 50 59 57 41 52 7E 31 00 00 34 00 03 00 04 00 EF BE 2A 3A 29 78 3B 3A 67 A5 14 00 00 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 20 00 44 00 6F 00 63 00 74 00 6F 00 72 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 76 00 00 00 19 00 00 00 68 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 56 00 31 00 00 00 00 00 34 3A 4F 72 10 00 57 49 4E 44 4F 57 7E 31 00 00 30 00 03 00 04 00 EF BE 34 3A 42 72 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4C 00 69 00 76 00 65 00 00 00 18 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 18 00 00 00 00 00 00 00 00 00 C0 00 00 00 16 00 00 00 B2 00 00 00 41 75 67 4D 02 00 00 00 02 00 00 00 48 00 31 00 00 00 00 00 2C 3A 9A 8A 10 00 57 69 6E 52 41 52 00 00 24 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 16 00 00 00 56 00 31 00 00 00 00 00 2C 3A 9A 8A 10 00 57 69 6E 52 41 52 00 00 24 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 00 00 16 00 0E 00 00 00 00 00 EF BE 03 00 00 00 16 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 16 00 00 00 00 00 00 00 00 00 86 00 00 00 09 00 00 00 78 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 66 00 32 00 0C 07 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 3B 3A 88 A5 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 94 00 00 00 1E 00 00 00 86 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 74 00 32 00 26 07 00 00 38 3A AC 6B 20 00 41 50 50 4C 45 53 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 38 3A AC 6B 3B 3A 88 A5 14 00 00 00 41 00 70 00 70 00 6C 00 65 00 20 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 BC 00 00 00 0A 00 00 00 AE 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 9C 00 32 00 3F 06 00 00 36 3A 8D 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 72 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 48 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 20 00 E0 00 20 00 64 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 72 63 62 64 79 63 74 6C 2E 64 6C 6C 2C 2D 31 35 32 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 A2 00 00 00 0B 00 00 00 94 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 82 00 32 00 FF 02 00 00 36 3A E6 89 20 00 49 4E 54 45 52 4E 7E 31 2E 4C 4E 4B 00 00 58 00 03 00 04 00 EF BE 29 3A 33 73 3B 3A 88 A5 14 00 40 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 31 30 30 31 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 94 00 00 00 0C 00 00 00 86 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 74 00 32 00 18 03 00 00 2A 3A B1 6C 20 00 4C 45 43 54 45 55 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 4C 00 65 00 63 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 9E 00 00 00 0D 00 00 00 90 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 7E 00 32 00 E2 02 00 00 36 3A E6 89 20 00 4F 55 54 4C 4F 4F 7E 31 2E 4C 4E 4B 00 00 54 00 03 00 04 00 EF BE 29 3A 34 73 3B 3A 88 A5 14 00 3C 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 31 30 30 34 00 00 1C 00 0E 00 00 00 0A 00 EF BE 02 00 00 00 1C 00 00 00 00 00 00 00 00 00 8C 00 00 00 0E 00 00 00 7E 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 6C 00 32 00 7D 02 00 00 29 3A 54 71 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 73 00 73 00 65 00 6E 00 67 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 BA 00 00 00 0F 00 00 00 AC 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 9A 00 32 00 12 03 00 00 29 3A 89 71 20 00 57 49 4E 44 4F 57 7E 32 2E 4C 4E 4B 00 00 70 00 03 00 04 00 EF BE 29 3A 89 71 3B 3A 88 A5 14 00 44 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 6F 00 76 00 69 00 65 00 20 00 4D 00 61 00 6B 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 50 52 4F 47 52 41 7E 31 5C 4D 4F 56 49 45 4D 7E 31 5C 77 6D 6D 32 72 65 73 2E 64 6C 6C 2C 2D 36 31 34 34 36 00 00 1C 00 0E 00 00 00 0A 00 EF BE 03 00 00 00 1C 00 00 00 00 00 00 00 00 00 Key Modified Time : 27/01/2009 22:09:10 Data Length : 4 986 ================================================== ================================================== Registry Key : HKU\S-1-5-21-1606980848-1682526488-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\RegCure Name : Order Type : REG_BINARY Data : 08 00 00 00 02 00 00 00 FE 00 00 00 01 00 00 00 02 00 00 00 76 00 00 00 00 00 00 00 68 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 56 00 32 00 C5 01 00 00 36 3A 26 85 20 00 52 65 67 43 75 72 65 2E 6C 6E 6B 00 2E 00 03 00 04 00 EF BE 36 3A 26 85 36 3A 32 A6 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 0E 00 00 00 0A 00 EF BE 01 00 00 00 1A 00 00 00 00 00 00 00 00 00 7C 00 00 00 01 00 00 00 6E 00 00 00 41 75 67 4D 02 00 00 00 01 00 00 00 5C 00 32 00 A1 02 00 00 36 3A 28 85 20 00 55 4E 49 4E 53 54 7E 31 2E 4C 4E 4B 00 00 32 00 03 00 04 00 EF BE 36 3A 28 85 36 3A 32 A6 14 00 00 00 55 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 0E 00 00 00 0A 00 EF BE 00 00 00 00 1C 00 00 00 00 00 00 00 00 00 Key Modified Time : 22/01/2009 22:12:33 Data Length : 262 ================================================== ================================================== Registry Key : HKU\S-1-5-21-1606980848-1682526488-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage Name : ProgramsCache Type : REG_BINARY Data : 09 00 00 00 0B 00 46 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 00 00 01 C0 00 00 00 BE 00 32 00 3F 06 00 00 36 3A 8D 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 20 00 E0 00 20 00 64 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 59 00 53 00 54 00 45 00 4D 00 52 00 4F 00 4F 00 54 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 63 00 69 00 6D 00 6C 00 62 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 D4 00 00 00 D2 00 32 00 FF 02 00 00 36 3A E6 89 20 00 49 4E 54 45 52 4E 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 33 73 3B 3A 88 A5 14 00 00 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 74 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 5C 00 69 00 65 00 78 00 70 00 6C 00 6F 00 72 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 E2 00 00 00 E0 00 32 00 18 03 00 00 2A 3A B1 6C 20 00 4C 45 43 54 45 55 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 4C 00 65 00 63 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 7A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 00 5C 00 77 00 6D 00 70 00 6C 00 61 00 79 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C6 00 00 00 C4 00 32 00 E2 02 00 00 36 3A E6 89 20 00 4F 55 54 4C 4F 4F 7E 31 2E 4C 4E 4B 00 00 3E 00 03 00 04 00 EF BE 29 3A 34 73 3B 3A 88 A5 14 00 00 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 6A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 5C 00 6D 00 73 00 69 00 6D 00 6E 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 A0 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 5A 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 00 00 01 C8 00 00 00 C6 00 32 00 82 01 00 00 29 3A AC 71 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 94 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 6A 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 43 00 6F 00 6D 00 70 00 61 00 74 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 20 00 64 00 65 00 73 00 20 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 63 6F 6D 70 61 74 55 49 2E 64 6C 6C 2C 2D 31 31 35 00 00 1C 00 16 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 00 00 00 00 1C 00 00 00 01 BE 00 00 00 BC 00 32 00 EF 05 00 00 36 3A 8D 85 20 00 42 4C 4F 43 2D 4E 7E 31 2E 4C 4E 4B 00 00 48 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 32 00 42 00 6C 00 6F 00 63 00 2D 00 6E 00 6F 00 74 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 35 31 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6E 00 6F 00 74 00 65 00 70 00 61 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 DA 00 00 00 D8 00 32 00 06 03 00 00 36 3A E5 89 20 00 43 41 52 4E 45 54 7E 31 2E 4C 4E 4B 00 00 56 00 03 00 04 00 EF BE 29 3A 35 73 3B 3A 88 A5 14 00 40 00 43 00 61 00 72 00 6E 00 65 00 74 00 20 00 64 00 27 00 61 00 64 00 72 00 65 00 73 00 73 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 31 37 00 1C 00 66 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 20 00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 5C 00 77 00 61 00 62 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C0 00 00 00 BE 00 32 00 CF 05 00 00 36 3A 8D 85 20 00 45 58 50 4C 4F 52 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 44 00 45 00 78 00 70 00 6C 00 6F 00 72 00 61 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 37 00 1C 00 48 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 65 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C8 00 00 00 C6 00 32 00 13 06 00 00 36 3A 8D 85 20 00 49 4E 56 49 54 45 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 44 00 49 00 6E 00 76 00 69 00 74 00 65 00 20 00 64 00 65 00 20 00 63 00 6F 00 6D 00 6D 00 61 00 6E 00 64 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 32 32 00 1C 00 50 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C2 00 00 00 C0 00 32 00 EF 05 00 00 36 3A 8D 85 20 00 53 59 4E 43 48 52 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 36 00 53 00 79 00 6E 00 63 00 68 00 72 00 6F 00 6E 00 69 00 73 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 32 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 6F 00 62 00 73 00 79 00 6E 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F6 00 00 00 F4 00 32 00 F7 05 00 00 36 3A 8D 85 20 00 56 49 53 49 54 45 7E 31 2E 4C 4E 4B 00 00 7C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 54 00 56 00 69 00 73 00 69 00 74 00 65 00 20 00 67 00 75 00 69 00 64 00 E9 00 65 00 20 00 64 00 65 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 58 00 50 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 74 6F 75 72 73 74 61 72 74 2E 65 78 65 2C 2D 31 00 1C 00 5C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 74 00 6F 00 75 00 72 00 73 00 74 00 61 00 72 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 FE 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 5A 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 5E 00 31 00 00 00 00 00 29 3A AC 71 11 00 41 43 43 45 53 53 7E 31 00 00 46 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 30 00 41 00 63 00 63 00 65 00 73 00 73 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 30 00 18 00 00 00 01 BE 00 00 00 BC 00 32 00 DD 05 00 00 36 3A 8D 85 20 00 43 4C 41 56 49 45 7E 31 2E 4C 4E 4B 00 00 50 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 3A 00 43 00 6C 00 61 00 76 00 69 00 65 00 72 00 20 00 76 00 69 00 73 00 75 00 65 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 35 32 00 1C 00 50 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6F 00 73 00 6B 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 DE 00 00 00 DC 00 32 00 03 06 00 00 36 3A 8D 85 20 00 47 45 53 54 49 4F 7E 31 2E 4C 4E 4B 00 00 68 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 52 00 47 00 65 00 73 00 74 00 69 00 6F 00 6E 00 6E 00 61 00 69 00 72 00 65 00 20 00 64 00 27 00 75 00 74 00 69 00 6C 00 69 00 74 00 61 00 69 00 72 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 35 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 75 00 74 00 69 00 6C 00 6D 00 61 00 6E 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B0 00 00 00 AE 00 32 00 F5 05 00 00 36 3A 8D 85 20 00 4C 6F 75 70 65 2E 6C 6E 6B 00 3E 00 03 00 04 00 EF BE 29 3A 2C 73 3B 3A 88 A5 14 00 28 00 4C 00 6F 00 75 00 70 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 34 31 00 18 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 61 00 67 00 6E 00 69 00 66 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 18 00 00 00 00 00 01 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 5A 00 31 00 00 00 00 00 29 3A 35 73 11 00 41 43 43 45 53 53 7E 31 00 00 42 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 2C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 31 00 18 00 60 00 31 00 00 00 00 00 2A 3A B1 6C 11 00 44 49 56 45 52 54 7E 31 00 00 48 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 32 00 44 00 69 00 76 00 65 00 72 00 74 00 69 00 73 00 73 00 65 00 6D 00 65 00 6E 00 74 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 37 32 00 18 00 00 00 01 E2 00 00 00 E0 00 32 00 24 03 00 00 2A 3A B1 6C 20 00 4C 45 43 54 45 55 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 88 A5 14 00 00 00 4C 00 65 00 63 00 74 00 65 00 75 00 72 00 20 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 7A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 64 00 69 00 61 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 00 5C 00 77 00 6D 00 70 00 6C 00 61 00 79 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 86 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 40 00 31 00 00 00 00 00 29 3A 57 94 10 00 43 43 6C 65 61 6E 65 72 00 00 28 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 67 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 00 00 18 00 00 00 01 B0 00 00 00 AE 00 32 00 18 06 00 00 29 3A 57 94 20 00 43 43 6C 65 61 6E 65 72 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 88 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 62 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 5C 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 A6 00 00 00 A4 00 32 00 4A 00 00 00 29 3A 57 94 20 00 43 43 4C 45 41 4E 7E 31 2E 55 52 4C 00 00 42 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 88 A5 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 20 00 48 00 6F 00 6D 00 65 00 70 00 61 00 67 00 65 00 2E 00 75 00 72 00 6C 00 00 00 1C 00 46 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 77 00 77 00 77 00 2E 00 63 00 63 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 63 00 6F 00 6D 00 2F 00 00 00 00 00 1C 00 00 00 01 C0 00 00 00 BE 00 32 00 59 05 00 00 29 3A 57 94 20 00 55 4E 49 4E 53 54 7E 31 2E 4C 4E 4B 00 00 44 00 03 00 04 00 EF BE 29 3A 57 94 3B 3A 88 A5 14 00 00 00 55 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 20 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 5E 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 86 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 40 00 31 00 00 00 00 00 29 3A 32 78 10 00 4C 6F 67 69 74 65 63 68 00 00 28 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 67 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 00 00 18 00 00 00 01 E6 00 00 00 E4 00 32 00 EF 02 00 00 29 3A 32 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 88 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 7C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 5C 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 5C 00 66 00 77 00 50 00 72 00 69 00 6E 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 82 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 3C 00 31 00 00 00 00 00 36 3A 28 85 10 00 52 65 67 43 75 72 65 00 26 00 03 00 04 00 EF BE 36 3A 27 85 3B 3A 67 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 00 00 16 00 00 00 01 AC 00 00 00 AA 00 32 00 A1 02 00 00 36 3A 28 85 20 00 55 4E 49 4E 53 54 7E 31 2E 4C 4E 4B 00 00 32 00 03 00 04 00 EF BE 36 3A 28 85 3B 3A 88 A5 14 00 00 00 55 00 6E 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 5C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 5C 00 75 00 6E 00 69 00 6E 00 73 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 80 00 00 00 44 00 31 00 00 00 00 00 36 3A E4 89 10 00 50 52 4F 47 52 41 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A 2B 73 3B 3A 67 A5 14 00 00 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 18 00 3A 00 31 00 00 00 00 00 2C 3A 9A 8A 10 00 57 69 6E 52 41 52 00 00 24 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 67 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 00 00 16 00 00 00 01 B4 00 00 00 B2 00 32 00 D0 02 00 00 2C 3A 9A 8A 20 00 41 49 44 45 44 45 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 88 A5 14 00 00 00 41 00 69 00 64 00 65 00 20 00 64 00 65 00 20 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 63 00 68 00 6D 00 00 00 00 00 1C 00 00 00 01 C2 00 00 00 C0 00 32 00 BD 02 00 00 2C 3A 9A 8A 20 00 4D 41 4E 55 45 4C 7E 31 2E 4C 4E 4B 00 00 50 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 88 A5 14 00 00 00 4D 00 61 00 6E 00 75 00 65 00 6C 00 20 00 64 00 65 00 20 00 6C 00 61 00 20 00 63 00 6F 00 6E 00 73 00 6F 00 6C 00 65 00 20 00 52 00 41 00 52 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 54 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 5C 00 52 00 61 00 72 00 2E 00 74 00 78 00 74 00 00 00 00 00 1C 00 00 00 01 A2 00 00 00 A0 00 32 00 D0 02 00 00 2C 3A 9A 8A 20 00 57 69 6E 52 41 52 2E 6C 6E 6B 00 00 2C 00 03 00 04 00 EF BE 2C 3A 9A 8A 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 5C 00 57 00 69 00 6E 00 52 00 41 00 52 00 2E 00 65 00 78 00 65 00 00 00 00 00 1A 00 00 00 02 16 00 02 00 00 00 00 00 01 F4 00 00 00 F2 00 32 00 1B 06 00 00 29 3A 4C A3 20 00 43 4F 4E 46 49 47 7E 31 2E 4C 4E 4B 00 00 7E 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 66 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 65 00 72 00 20 00 6C 00 65 00 73 00 20 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 20 00 70 00 61 00 72 00 20 00 64 00 E9 00 66 00 61 00 75 00 74 00 2E 00 6C 00 6E 00 6B 00 00 00 40 78 70 73 70 31 72 65 73 2E 64 6C 6C 2C 2D 31 30 30 37 37 00 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 63 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B4 00 00 00 B2 00 32 00 1E 06 00 00 29 3A 9A 9E 20 00 4D 49 43 52 4F 53 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 9A 9E 3B 3A 88 A5 14 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 56 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B2 00 00 00 B0 00 32 00 E3 05 00 00 36 3A 8D 85 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 75 00 70 00 64 00 6D 00 67 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 5A 00 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 00 00 01 52 01 00 00 50 01 32 00 0C 07 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 3B 3A 88 A5 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 F8 00 00 00 0B 00 EF BE 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 41 00 64 00 6F 00 62 00 65 00 5C 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 30 00 5C 00 52 00 65 00 61 00 64 00 65 00 72 00 5C 00 41 00 63 00 72 00 6F 00 52 00 64 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 01 00 33 00 34 00 54 00 4C 00 60 00 6C 00 72 00 76 00 35 00 28 00 38 00 48 00 28 00 36 00 21 00 24 00 2C 00 43 00 43 00 21 00 52 00 65 00 61 00 64 00 65 00 72 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 46 00 69 00 6C 00 65 00 73 00 3E 00 6C 00 7B 00 6E 00 5E 00 72 00 79 00 3F 00 4F 00 74 00 40 00 32 00 64 00 31 00 6C 00 63 00 21 00 59 00 4A 00 51 00 72 00 00 00 00 00 1C 00 00 00 01 44 01 00 00 42 01 32 00 26 07 00 00 38 3A AC 6B 20 00 41 50 50 4C 45 53 7E 31 2E 4C 4E 4B 00 00 4A 00 03 00 04 00 EF BE 38 3A AC 6B 3B 3A 88 A5 14 00 00 00 41 00 70 00 70 00 6C 00 65 00 20 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 DC 00 00 00 0B 00 EF BE 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 41 00 70 00 70 00 6C 00 65 00 20 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 55 00 70 00 64 00 61 00 74 00 65 00 5C 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 00 65 00 00 00 01 00 2D 00 79 00 65 00 71 00 49 00 6A 00 3D 00 75 00 48 00 40 00 72 00 3D 00 56 00 5F 00 3F 00 66 00 66 00 6A 00 4C 00 34 00 3E 00 5D 00 3D 00 39 00 66 00 6D 00 74 00 75 00 72 00 57 00 3F 00 59 00 66 00 7D 00 66 00 4B 00 62 00 2E 00 27 00 5F 00 61 00 00 00 00 00 1C 00 00 00 01 C0 00 00 00 BE 00 32 00 7D 02 00 00 29 3A 54 71 20 00 57 49 4E 44 4F 57 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 65 00 73 00 73 00 65 00 6E 00 67 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 60 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4D 00 65 00 73 00 73 00 65 00 6E 00 67 00 65 00 72 00 5C 00 6D 00 73 00 6D 00 73 00 67 00 73 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F4 00 00 00 F2 00 32 00 12 03 00 00 29 3A 89 71 20 00 57 49 4E 44 4F 57 7E 32 2E 4C 4E 4B 00 00 70 00 03 00 04 00 EF BE 29 3A 89 71 3B 3A 88 A5 14 00 44 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4D 00 6F 00 76 00 69 00 65 00 20 00 4D 00 61 00 6B 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 50 52 4F 47 52 41 7E 31 5C 4D 4F 56 49 45 4D 7E 31 5C 77 6D 6D 32 72 65 73 2E 64 6C 6C 2C 2D 36 31 34 34 36 00 00 1C 00 66 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4D 00 6F 00 76 00 69 00 65 00 20 00 4D 00 61 00 6B 00 65 00 72 00 5C 00 6D 00 6F 00 76 00 69 00 65 00 6D 00 6B 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 A0 00 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 46 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 00 00 01 EA 00 00 00 E8 00 32 00 C6 02 00 00 38 3A B3 9B 20 00 53 43 41 4E 4E 45 7E 31 2E 4C 4E 4B 00 00 76 00 03 00 04 00 EF BE 29 3A 8E 78 3B 3A 88 A5 14 00 50 00 53 00 63 00 61 00 6E 00 6E 00 65 00 72 00 20 00 61 00 6E 00 64 00 20 00 43 00 61 00 6D 00 65 00 72 00 61 00 20 00 57 00 69 00 7A 00 61 00 72 00 64 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 73 74 69 5F 63 69 2E 64 6C 6C 2C 2D 31 31 00 1C 00 56 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 77 00 69 00 61 00 61 00 63 00 6D 00 67 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 BC 00 00 00 BA 00 32 00 DA 05 00 00 2B 3A 12 76 20 00 43 41 4C 43 55 4C 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 53 71 3B 3A 88 A5 14 00 36 00 43 00 61 00 6C 00 63 00 75 00 6C 00 61 00 74 00 72 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 31 39 00 1C 00 52 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 63 00 61 00 6C 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 C8 00 00 00 C6 00 32 00 87 06 00 00 29 3A 3D A3 20 00 43 4F 4E 4E 45 58 7E 31 2E 4C 4E 4B 00 00 56 00 03 00 04 00 EF BE 29 3A 3D A3 3B 3A 88 A5 14 00 00 00 43 00 6F 00 6E 00 6E 00 65 00 78 00 69 00 6F 00 6E 00 20 00 42 00 75 00 72 00 65 00 61 00 75 00 20 00 E0 00 20 00 64 00 69 00 73 00 74 00 61 00 6E 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 54 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 73 00 74 00 73 00 63 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 B0 00 00 00 AE 00 32 00 EB 05 00 00 36 3A 8C 85 20 00 50 61 69 6E 74 2E 6C 6E 6B 00 3E 00 03 00 04 00 EF BE 29 3A 53 71 3B 3A 88 A5 14 00 28 00 50 00 61 00 69 00 6E 00 74 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 35 34 00 18 00 58 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 6D 00 73 00 70 00 61 00 69 00 6E 00 74 00 2E 00 65 00 78 00 65 00 00 00 00 00 18 00 00 00 01 DA 00 00 00 D8 00 32 00 6F 03 00 00 29 3A 53 71 20 00 57 6F 72 64 50 61 64 2E 6C 6E 6B 00 42 00 03 00 04 00 EF BE 29 3A 53 71 3B 3A 88 A5 14 00 2C 00 57 00 6F 00 72 00 64 00 50 00 61 00 64 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 36 39 00 1A 00 7C 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 5C 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 5C 00 77 00 6F 00 72 00 64 00 70 00 61 00 64 00 2E 00 65 00 78 00 65 00 00 00 00 00 1A 00 00 00 00 EA 00 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 46 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 4A 00 31 00 00 00 00 00 29 3A 54 71 11 00 41 43 43 45 53 53 7E 31 00 00 32 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 00 00 18 00 00 00 01 D6 00 00 00 D4 00 32 00 F0 05 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 62 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 4C 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 41 00 63 00 63 00 65 00 73 00 73 00 69 00 62 00 69 00 6C 00 69 00 74 00 E9 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 31 36 00 1C 00 56 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 61 00 63 00 63 00 77 00 69 00 7A 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 00 00 01 00 00 58 00 31 00 00 00 00 00 38 3A 08 6C 11 00 50 52 4F 47 52 41 7E 31 00 00 40 00 03 00 04 00 EF BE 29 3A EA 76 3B 3A 67 A5 14 00 2A 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 6D 00 65 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 38 32 00 18 00 46 00 31 00 00 00 00 00 29 3A 3D A3 11 00 41 43 43 45 53 53 7E 31 00 00 2E 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 00 00 41 00 63 00 63 00 65 00 73 00 73 00 6F 00 69 00 72 00 65 00 73 00 00 00 18 00 60 00 31 00 00 00 00 00 29 3A 3D A3 11 00 43 4F 4D 4D 55 4E 7E 31 00 00 48 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 67 A5 14 00 32 00 43 00 6F 00 6D 00 6D 00 75 00 6E 00 69 00 63 00 61 00 74 00 69 00 6F 00 6E 00 73 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 31 37 36 38 00 18 00 00 00 01 02 01 00 00 00 01 32 00 68 06 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 32 2E 4C 4E 4B 00 00 8A 00 03 00 04 00 EF BE 29 3A 86 71 3B 3A 88 A5 14 00 60 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 74 00 69 00 6F 00 6E 00 20 00 64 00 75 00 20 00 72 00 E9 00 73 00 65 00 61 00 75 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 68 6E 65 74 77 69 7A 2E 64 6C 6C 2C 2D 33 30 38 35 00 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F8 00 00 00 F6 00 32 00 6E 06 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 31 2E 4C 4E 4B 00 00 80 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 88 A5 14 00 56 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 4E 00 6F 00 75 00 76 00 65 00 6C 00 6C 00 65 00 20 00 63 00 6F 00 6E 00 6E 00 65 00 78 00 69 00 6F 00 6E 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 6E 65 74 73 68 65 6C 6C 2E 64 6C 6C 2C 2D 31 30 31 30 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 F4 00 00 00 F2 00 32 00 78 06 00 00 36 3A 8C 85 20 00 41 53 53 49 53 54 7E 33 2E 4C 4E 4B 00 00 7C 00 03 00 04 00 EF BE 29 3A AC 71 3B 3A 88 A5 14 00 50 00 41 00 73 00 73 00 69 00 73 00 74 00 61 00 6E 00 74 00 20 00 52 00 E9 00 73 00 65 00 61 00 75 00 20 00 73 00 61 00 6E 00 73 00 20 00 66 00 69 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 78 70 73 70 32 72 65 73 2E 64 6C 6C 2C 2D 31 36 32 30 31 00 00 1C 00 5A 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 73 00 79 00 73 00 74 00 65 00 6D 00 33 00 32 00 5C 00 72 00 75 00 6E 00 64 00 6C 00 6C 00 33 00 32 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 D0 00 00 00 CE 00 32 00 DD 06 00 00 36 3A 8C 85 20 00 43 4F 4E 4E 45 58 7E 31 2E 4C 4E 4B 00 00 6A 00 03 00 04 00 EF BE 29 3A 26 71 3B 3A 88 A5 14 00 40 00 43 00 6F 00 6E 00 6E 00 65 00 78 00 69 00 6F 00 6E 00 73 00 20 00 72 00 E9 00 73 00 65 00 61 00 75 00 2E 00 6C 00 6E 00 6B 00 00 00 40 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 6E 65 74 73 68 65 6C 6C 2E 64 6C 6C 2C 2D 31 32 30 30 00 1C 00 48 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 65 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 00 00 1C 00 00 00 01 D2 00 00 00 D0 00 32 00 12 03 00 00 29 3A 54 71 20 00 48 59 50 45 52 54 7E 31 2E 4C 4E 4B 00 00 4E 00 03 00 04 00 EF BE 29 3A 54 71 3B 3A 88 A5 14 00 38 00 48 00 79 00 70 00 65 00 72 00 54 00 65 00 72 00 6D 00 69 00 6E 00 61 00 6C 00 2E 00 6C 00 6E 00 6B 00 00 00 40 73 68 65 6C 6C 33 32 2E 64 6C 6C 2C 2D 32 32 30 33 31 00 1C 00 66 00 00 00 0B 00 EF BE 00 00 00 00 00 00 00 00 43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 5C 00 68 00 79 00 70 00 65 Key Modified Time : 27/01/2009 22:09:07 Data Length : 39 910 ================================================== ================================================== Registry Key : HKU\S-1-5-21-1606980848-1682526488-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\3 Name : ViewView2 Type : REG_BINARY Data : 1C 00 00 00 06 00 00 00 00 00 00 00 00 00 9C 00 00 00 00 00 01 00 00 00 FF FF FF FF F0 F0 F0 F0 14 00 03 00 D2 04 00 00 00 00 00 00 30 00 00 00 FD DF DF FD 0F 00 06 00 28 00 10 00 34 00 48 00 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 04 00 00 00 05 00 00 00 B4 00 60 00 78 00 78 00 B4 00 B4 00 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 02 00 00 00 40 00 31 00 00 00 00 00 2B 3A CA B8 10 00 41 55 54 4F 52 55 4E 53 00 00 28 00 03 00 04 00 EF BE 2B 3A CA B8 2B 3A 00 B8 14 00 00 00 41 00 75 00 74 00 6F 00 72 00 75 00 6E 00 73 00 00 00 18 00 DC 00 00 00 1A 01 00 00 76 00 32 00 B8 F4 51 01 28 3A 7D 61 20 00 41 4E 54 49 56 49 7E 31 2E 45 58 45 00 00 5A 00 03 00 04 00 EF BE 30 3A 02 7D 2F 3A 00 B8 14 00 00 00 61 00 6E 00 74 00 69 00 76 00 69 00 72 00 5F 00 77 00 6F 00 72 00 6B 00 73 00 74 00 61 00 74 00 69 00 6F 00 6E 00 5F 00 77 00 69 00 6E 00 75 00 5F 00 66 00 72 00 5F 00 68 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 E2 00 00 00 52 00 32 00 00 C6 00 00 28 3A B6 60 20 00 41 54 46 2D 43 4C 7E 31 2E 45 58 45 00 00 36 00 03 00 04 00 EF BE 30 3A F1 7C 2F 3A 00 B8 14 00 00 00 41 00 54 00 46 00 2D 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 1C 00 DC 00 00 00 02 00 00 00 42 00 32 00 BA 16 08 00 28 3A 45 62 20 00 4C 4F 50 53 44 2E 45 58 45 00 2A 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 4C 00 6F 00 70 00 53 00 44 00 2E 00 65 00 78 00 65 00 00 00 18 00 DC 00 00 00 3A 00 00 00 50 00 32 00 D0 27 29 00 28 3A A9 5E 20 00 4D 42 41 4D 2D 53 7E 31 2E 45 58 45 00 00 34 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 6D 00 62 00 61 00 6D 00 2D 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 DC 00 00 00 72 00 00 00 4C 00 32 00 64 CD 08 00 27 3A 31 74 20 00 4E 41 56 49 4C 4F 47 31 2E 45 58 45 00 00 30 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 AA 00 00 00 40 00 32 00 70 F8 2A 00 2B 3A 35 9E 20 00 6E 74 66 73 2E 65 78 65 00 00 28 00 03 00 04 00 EF BE 2B 3A C8 B8 2F 3A 00 B8 14 00 00 00 6E 00 74 00 66 00 73 00 2E 00 65 00 78 00 65 00 00 00 18 00 DC 00 00 00 AA 00 00 00 40 00 32 00 1B EE 0B 00 26 3A E6 53 20 00 52 53 49 54 2E 65 78 65 00 00 28 00 03 00 04 00 EF BE 2B 3A C9 B8 2F 3A 00 B8 14 00 00 00 52 00 53 00 49 00 54 00 2E 00 65 00 78 00 65 00 00 00 18 00 DC 00 00 00 E2 00 00 00 52 00 32 00 00 28 E6 00 2B 3A 2A B1 20 00 53 50 59 42 4F 54 7E 31 2E 45 58 45 00 00 36 00 03 00 04 00 EF BE 2B 3A C9 B8 2F 3A 00 B8 14 00 00 00 73 00 70 00 79 00 62 00 6F 00 74 00 73 00 64 00 31 00 36 00 30 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 1A 01 00 00 5E 00 32 00 78 C1 3A 00 2B 3A 7B AF 20 00 53 50 59 42 4F 54 7E 32 2E 45 58 45 00 00 42 00 03 00 04 00 EF BE 2B 3A CA B8 2F 3A 00 B8 14 00 00 00 73 00 70 00 79 00 62 00 6F 00 74 00 73 00 64 00 5F 00 69 00 6E 00 63 00 6C 00 75 00 64 00 65 00 73 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 3A 00 00 00 5A 00 32 00 88 83 57 00 36 3A E7 7B 20 00 50 41 52 45 54 4F 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A 4A 7C 35 3A 00 B8 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 5F 00 50 00 43 00 5F 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 72 00 00 00 5A 00 32 00 F8 EC 14 00 36 3A DC 79 20 00 52 45 47 43 55 52 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A 4E 7C 35 3A 00 B8 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 53 00 65 00 74 00 75 00 70 00 5F 00 43 00 42 00 2E 00 65 00 78 00 65 00 00 00 1C 00 02 00 00 00 72 00 00 00 00 00 00 00 Key Modified Time : 22/01/2009 16:34:29 Data Length : 1 234 ================================================== ================================================== Registry Key : HKU\S-1-5-21-1606980848-1682526488-682003330-1003\Software\Microsoft\Windows\Shell\Bags\1\Desktop Name : ItemPos800x600(1) Type : REG_BINARY Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E8 02 00 00 E8 01 00 00 14 00 1F 60 40 F0 5F 64 81 50 1B 10 9F 08 00 AA 00 2F 95 4E 18 00 00 00 F5 00 00 00 14 00 1F 80 D0 67 B5 86 3C 31 D2 11 89 85 00 80 AD A9 6E 9B 18 00 00 00 46 01 00 00 58 00 3A 00 C1 06 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 36 3A B9 8A 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 97 01 00 00 50 00 3A 00 50 06 00 00 2D 3A 8A 6A 20 00 43 44 42 55 52 4E 7E 31 2E 4C 4E 4B 00 00 34 00 03 00 04 00 EF BE 2D 3A 8A 6A 36 3A 8C 85 14 00 00 00 43 00 44 00 42 00 75 00 72 00 6E 00 65 00 72 00 58 00 50 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 A8 01 00 00 02 00 00 00 76 00 3A 00 1B 08 00 00 33 3A 20 6F 20 00 43 4F 52 45 4C 50 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 33 3A 20 6F 36 3A B9 8A 14 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 E8 01 00 00 42 00 3A 00 8C 02 00 00 2A 3A D0 01 20 00 65 4D 75 6C 65 2E 6C 6E 6B 00 2A 00 03 00 04 00 EF BE 2A 3A D0 01 36 3A 8C 85 14 00 00 00 65 00 4D 00 75 00 6C 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 18 00 68 00 00 00 02 00 00 00 5C 00 3A 00 B5 06 00 00 2F 3A 92 7D 20 00 47 44 41 54 41 54 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 2F 3A 92 7D 36 3A B9 8A 14 00 00 00 47 00 20 00 44 00 41 00 54 00 41 00 20 00 54 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 53 00 00 00 5C 00 3A 00 95 07 00 00 29 3A 07 9C 20 00 49 4E 53 54 41 4C 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 07 9C 36 3A B9 8A 14 00 00 00 49 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 20 00 4D 00 53 00 4E 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 53 00 00 00 5E 00 3A 00 6C 06 00 00 29 3A 34 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 34 78 36 3A B9 8A 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 51 00 75 00 69 00 63 00 6B 00 43 00 61 00 6D 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 A4 00 00 00 70 00 3A 00 B8 02 00 00 2A 3A F0 8D 20 00 4D 41 4C 57 41 52 7E 31 2E 4C 4E 4B 00 00 54 00 03 00 04 00 EF BE 2A 3A F0 8D 36 3A B9 8A 14 00 00 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 62 00 79 00 74 00 65 00 73 00 27 00 20 00 41 00 6E 00 74 00 69 00 2D 00 4D 00 61 00 6C 00 77 00 61 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 18 00 00 00 A4 00 00 00 62 00 3A 00 4D 06 00 00 29 3A 34 78 20 00 4D 45 53 50 48 4F 7E 31 2E 4C 4E 4B 00 00 46 00 03 00 04 00 EF BE 29 3A 34 78 36 3A B9 8A 14 00 00 00 4D 00 65 00 73 00 20 00 70 00 68 00 6F 00 74 00 6F 00 73 00 20 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 F5 00 00 00 5A 00 3A 00 42 06 00 00 34 3A 45 77 20 00 4D 4F 5A 49 4C 4C 7E 31 2E 4C 4E 4B 00 00 3E 00 03 00 04 00 EF BE 34 3A 1B 77 36 3A B9 8A 14 00 00 00 4D 00 6F 00 7A 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 A8 01 00 00 53 00 00 00 4C 00 3A 00 76 02 00 00 36 3A C8 80 20 00 4E 61 76 69 6C 6F 67 31 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 36 3A C8 80 36 3A B9 8A 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 A8 01 00 00 A4 00 00 00 48 00 3A 00 B9 01 00 00 36 3A 26 85 20 00 52 65 67 43 75 72 65 2E 6C 6E 6B 00 2E 00 03 00 04 00 EF BE 36 3A 26 85 36 3A 26 85 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 68 00 00 00 46 01 00 00 58 00 3A 00 65 06 00 00 2A 3A 29 78 20 00 53 50 59 57 41 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 2A 3A 29 78 36 3A B9 8A 14 00 00 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 20 00 44 00 6F 00 63 00 74 00 6F 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 68 00 00 00 97 01 00 00 40 00 31 00 00 00 00 00 2C 3A D4 01 10 00 41 75 74 6F 72 75 6E 73 00 00 28 00 03 00 04 00 EF BE 2B 3A CD B5 36 3A 01 86 14 00 00 00 41 00 75 00 74 00 6F 00 72 00 75 00 6E 00 73 00 00 00 18 00 68 00 00 00 E8 01 00 00 50 00 31 00 00 00 00 00 2B 3A 86 9E 10 00 44 4F 53 53 49 45 7E 31 00 00 38 00 03 00 04 00 EF BE 2B 3A 74 9E 36 3A 01 86 14 00 00 00 64 00 6F 00 73 00 73 00 69 00 65 00 72 00 20 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 B8 00 00 00 02 00 00 00 44 00 31 00 00 00 00 00 29 3A DD 78 10 00 46 54 45 4C 59 43 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A DA 78 36 3A 01 86 14 00 00 00 66 00 EA 00 74 00 65 00 20 00 6C 00 79 00 63 00 E9 00 65 00 00 00 18 00 A8 01 00 00 F5 00 00 00 50 00 31 00 00 00 00 00 31 3A 04 7A 10 00 4E 4F 4F 42 50 52 7E 31 00 00 38 00 03 00 04 00 EF BE 31 3A 04 7A 36 3A 01 86 14 00 00 00 6E 00 6F 00 6F 00 62 00 70 00 72 00 6F 00 6F 00 66 00 5F 00 6C 00 61 00 74 00 65 00 73 00 74 00 00 00 18 00 08 01 00 00 A4 00 00 00 3A 00 31 00 00 00 00 00 35 3A 68 B2 10 00 70 68 6F 74 6F 73 00 00 24 00 03 00 04 00 EF BE 2E 3A 98 0B 36 3A 01 86 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 00 00 16 00 A8 01 00 00 46 01 00 00 42 00 31 00 00 00 00 00 34 3A 7D 82 10 00 50 48 4F 54 4F 53 7E 31 00 00 2A 00 03 00 04 00 EF BE 34 3A 19 78 36 3A 01 86 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 62 00 69 00 73 00 00 00 18 00 58 01 00 00 97 01 00 00 40 00 31 00 00 00 00 00 35 3A 41 86 10 00 73 65 63 75 72 69 74 65 00 00 28 00 03 00 04 00 EF BE 2B 3A 9D B8 36 3A 01 86 14 00 00 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 A8 01 00 00 97 01 00 00 40 00 32 00 36 07 00 00 30 3A 33 85 20 00 33 32 36 33 2E 67 69 66 00 00 28 00 03 00 04 00 EF BE 30 3A 33 85 36 3A C6 7E 14 00 00 00 33 00 32 00 36 00 33 00 2E 00 67 00 69 00 66 00 00 00 18 00 B8 00 00 00 53 00 00 00 5A 00 32 00 20 D5 95 01 98 39 1D 95 20 00 41 44 42 45 52 44 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 29 3A E5 78 35 3A F6 85 14 00 00 00 41 00 64 00 62 00 65 00 52 00 64 00 72 00 39 00 30 00 5F 00 66 00 72 00 5F 00 46 00 52 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 A4 00 00 00 76 00 32 00 B8 F4 51 01 28 3A 7D 61 20 00 41 4E 54 49 56 49 7E 31 2E 45 58 45 00 00 5A 00 03 00 04 00 EF BE 29 3A E3 78 36 3A DC 7E 14 00 00 00 61 00 6E 00 74 00 69 00 76 00 69 00 72 00 5F 00 77 00 6F 00 72 00 6B 00 73 00 74 00 61 00 74 00 69 00 6F 00 6E 00 5F 00 77 00 69 00 6E 00 75 00 5F 00 66 00 72 00 5F 00 68 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 F5 00 00 00 52 00 32 00 00 C6 00 00 28 3A B6 60 20 00 41 54 46 2D 43 4C 7E 31 2E 45 58 45 00 00 36 00 03 00 04 00 EF BE 29 3A E7 78 36 3A D6 7E 14 00 00 00 41 00 54 00 46 00 2D 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 46 01 00 00 4C 00 32 00 6E D0 08 00 2B 3A 6D AF 20 00 41 75 74 6F 72 75 6E 73 2E 7A 69 70 00 00 30 00 03 00 04 00 EF BE 2B 3A 6D AF 36 3A DA 7E 14 00 00 00 41 00 75 00 74 00 6F 00 72 00 75 00 6E 00 73 00 2E 00 7A 00 69 00 70 00 00 00 1C 00 B8 00 00 00 97 01 00 00 4C 00 32 00 0C 06 00 00 29 3A 57 94 20 00 43 43 6C 65 61 6E 65 72 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 29 3A 57 94 36 3A 01 86 14 00 00 00 43 00 43 00 6C 00 65 00 61 00 6E 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 08 01 00 00 F5 00 00 00 68 00 32 00 4E 92 30 00 2D 3A 71 67 20 00 43 44 42 58 50 5F 7E 31 2E 45 58 45 00 00 4C 00 03 00 04 00 EF BE 2D 3A 67 67 36 3A 2F 80 14 00 00 00 63 00 64 00 62 00 78 00 70 00 5F 00 73 00 65 00 74 00 75 00 70 00 5F 00 34 00 2E 00 32 00 2E 00 33 00 2E 00 31 00 31 00 31 00 30 00 2E 00 65 00 78 00 65 00 00 00 1C 00 A8 01 00 00 E8 01 00 00 74 00 32 00 68 F3 85 01 31 3A 61 77 20 00 43 4C 41 4D 58 41 7E 31 2E 44 4D 47 00 00 58 00 03 00 04 00 EF BE 31 3A 3A 77 36 3A E1 7E 14 00 00 00 43 00 6C 00 61 00 6D 00 58 00 61 00 76 00 5F 00 31 00 2E 00 31 00 2E 00 31 00 5F 00 55 00 6E 00 69 00 76 00 65 00 72 00 73 00 61 00 6C 00 5F 00 65 00 39 00 34 00 32 00 2E 00 64 00 6D 00 67 00 00 00 1C 00 08 01 00 00 46 01 00 00 5A 00 32 00 10 28 2D 00 2D 3A 25 68 20 00 44 4F 54 4E 45 54 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 2D 3A 22 68 36 3A E4 7E 14 00 00 00 64 00 6F 00 74 00 6E 00 65 00 74 00 66 00 78 00 33 00 35 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 02 00 00 00 AA 00 32 00 43 66 89 11 7E 39 70 78 20 00 44 52 41 47 4F 4E 7E 31 2E 4D 4B 56 00 00 8E 00 03 00 04 00 EF BE 33 3A 92 8D 36 3A E6 7E 14 00 00 00 44 00 72 00 61 00 67 00 6F 00 6E 00 2E 00 42 00 61 00 6C 00 6C 00 2E 00 5A 00 2E 00 4F 00 73 00 73 00 75 00 21 00 2E 00 4B 00 61 00 65 00 74 00 74 00 65 00 2E 00 4B 00 69 00 74 00 61 00 2E 00 53 00 6F 00 6E 00 67 00 6F 00 6B 00 75 00 2E 00 54 00 6F 00 2E 00 4E 00 61 00 6B 00 61 00 6D 00 61 00 2D 00 54 00 61 00 63 00 68 00 69 00 2E 00 6D 00 6B 00 76 00 00 00 1C 00 F8 01 00 00 53 00 00 00 68 00 32 00 A0 8A 5D 00 34 3A 03 73 20 00 46 49 52 45 46 4F 7E 31 2E 45 58 45 00 00 4C 00 03 00 04 00 EF BE 34 3A F4 72 36 3A ED 7E 14 00 00 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 20 00 53 00 65 00 74 00 75 00 70 00 20 00 32 00 2E 00 30 00 2E 00 30 00 2E 00 32 00 30 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 A4 00 00 00 62 00 32 00 20 3C 74 00 34 3A 36 77 20 00 46 49 52 45 46 4F 7E 32 2E 45 58 45 00 00 46 00 03 00 04 00 EF BE 34 3A 2D 77 36 3A F4 7E 14 00 00 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 20 00 53 00 65 00 74 00 75 00 70 00 20 00 33 00 2E 00 30 00 2E 00 35 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B8 00 00 00 E8 01 00 00 54 00 32 00 A0 7D ED 0F 5C 39 54 63 20 00 47 44 54 43 32 30 7E 31 2E 45 58 45 00 00 38 00 03 00 04 00 EF BE 29 3A EC 78 36 3A F1 7E 14 00 00 00 47 00 44 00 54 00 43 00 32 00 30 00 30 00 39 00 46 00 52 00 41 00 31 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 02 00 00 00 66 00 32 00 20 66 E1 00 2A 3A 45 8D 20 00 49 45 37 2D 57 49 7E 31 2E 45 58 45 00 00 4A 00 03 00 04 00 EF BE 2A 3A 42 8D 36 3A 76 8A 14 00 00 00 49 00 45 00 37 00 2D 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 58 00 50 00 2D 00 78 00 38 00 36 00 2D 00 66 00 72 00 61 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 97 01 00 00 8A 00 32 00 D0 40 67 00 2D 3A C9 AD 20 00 49 4D 42 4F 4F 53 7E 32 2E 45 58 45 00 00 6E 00 03 00 04 00 EF BE 2D 3A B9 AD 36 3A F5 7E 14 00 00 00 49 00 4D 00 42 00 6F 00 6F 00 73 00 74 00 65 00 72 00 53 00 65 00 74 00 75 00 70 00 2E 00 6A 00 6A 00 73 00 33 00 6D 00 34 00 6A 00 66 00 70 00 6A 00 66 00 68 00 6C 00 76 00 76 00 6D 00 64 00 71 00 64 00 31 00 7A 00 68 00 35 00 35 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 53 00 00 00 92 00 32 00 63 00 00 00 29 3A FB A5 20 00 49 4E 54 45 52 4E 7E 31 2E 55 52 4C 00 00 76 00 03 00 04 00 EF BE 29 3A FB A5 36 3A F1 7E 14 00 00 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 20 00 2D 00 20 00 72 00 E9 00 73 00 6F 00 6C 00 75 00 74 00 69 00 6F 00 6E 00 20 00 64 00 65 00 20 00 70 00 72 00 6F 00 62 00 6C 00 E8 00 6D 00 65 00 73 00 2E 00 75 00 72 00 6C 00 00 00 1C 00 F8 01 00 00 F5 00 00 00 54 00 32 00 28 05 00 04 35 3A 48 BA 20 00 49 54 55 4E 45 53 7E 31 2E 45 58 45 00 00 38 00 03 00 04 00 EF BE 35 3A 12 BA 36 3A 0A 7F 14 00 00 00 69 00 54 00 75 00 6E 00 65 00 73 00 38 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 18 00 00 00 02 00 00 00 68 00 32 00 E3 02 00 00 29 3A 32 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 32 78 36 3A 27 87 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 58 01 00 00 02 00 00 00 42 00 32 00 BA 16 08 00 28 3A 45 62 20 00 4C 6F 70 53 44 2E 65 78 65 00 2A 00 03 00 04 00 EF BE 29 3A FB 78 36 3A 81 83 14 00 00 00 4C 00 6F 00 70 00 53 00 44 00 2E 00 65 00 78 00 65 00 00 00 18 00 58 01 00 00 53 00 00 00 50 00 32 00 D0 27 29 00 28 3A A9 5E 20 00 4D 42 41 4D 2D 53 7E 31 2E 45 58 45 00 00 34 00 03 00 04 00 EF BE 29 3A 00 79 36 3A 24 80 14 00 00 00 6D 00 62 00 61 00 6D 00 2D 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 46 01 00 00 5C 00 32 00 E7 62 0B 00 30 3A 9A 8A 20 00 4D 49 53 53 49 4E 7E 31 2E 45 58 45 00 00 40 00 03 00 04 00 EF BE 30 3A 9A 8A 36 3A 0A 80 14 00 00 00 6D 00 69 00 73 00 73 00 69 00 6E 00 67 00 66 00 69 00 6C 00 65 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 58 01 00 00 A4 00 00 00 4C 00 32 00 64 CD 08 00 27 3A 31 74 20 00 4E 61 76 69 6C 6F 67 31 2E 65 78 65 00 00 30 00 03 00 04 00 EF BE 29 3A 03 79 36 3A BD 80 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 65 00 78 00 65 00 00 00 1C 00 F8 01 00 00 97 01 00 00 5C 00 32 00 80 2B 0C 00 31 3A FC 79 20 00 4E 4F 4F 42 50 52 7E 31 2E 5A 49 50 00 00 40 00 03 00 04 00 EF BE 31 3A FB 79 36 3A 27 80 14 00 00 00 6E 00 6F 00 6F 00 62 00 70 00 72 00 6F 00 6F 00 66 00 5F 00 6C 00 61 00 74 00 65 00 73 00 74 00 2E 00 7A 00 69 00 70 00 00 00 1C 00 F8 01 00 00 E8 01 00 00 5A 00 32 00 88 83 57 00 36 3A E7 7B 20 00 50 41 52 45 54 4F 7E 32 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A C8 7B 36 3A 46 87 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 5F 00 50 00 43 00 5F 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 48 02 00 00 02 00 00 00 6C 00 32 00 58 6F 41 00 36 3A B5 7A 20 00 50 41 52 45 54 4F 7E 31 2E 45 58 45 00 00 50 00 03 00 04 00 EF BE 36 3A AB 7A 36 3A 26 80 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 4C 00 6F 00 67 00 69 00 63 00 20 00 41 00 6E 00 74 00 69 00 20 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 2E 00 65 00 78 00 65 00 00 00 1C 00 48 02 00 00 53 00 00 00 90 00 32 00 D8 DA 60 14 33 3A A4 6D 20 00 50 53 50 50 31 32 7E 31 2E 45 58 45 00 00 74 00 03 00 04 00 EF BE 33 3A 74 6B 36 3A 18 7F 14 00 00 00 50 00 53 00 50 00 50 00 31 00 32 00 5F 00 43 00 6F 00 72 00 65 00 6C 00 5F 00 54 00 42 00 59 00 42 00 5F 00 45 00 4E 00 5F 00 49 00 45 00 5F 00 46 00 52 00 5F 00 44 00 45 00 5F 00 45 00 53 00 5F 00 49 00 54 00 5F 00 4E 00 4C 00 5F 00 45 00 53 00 44 00 2E 00 65 00 78 00 65 00 00 00 1C 00 08 01 00 00 E8 01 00 00 6A 00 32 00 15 02 00 00 2A 3A 0D 6B 20 00 52 41 43 43 4F 55 7E 31 2E 4C 4E 4B 00 00 4E 00 03 00 04 00 EF BE 2A 3A 0D 6B 36 3A 27 87 14 00 00 00 52 00 61 00 63 00 63 00 6F 00 75 00 72 00 63 00 69 00 20 00 76 00 65 00 72 00 73 00 20 00 49 00 6E 00 63 00 6F 00 6D 00 69 00 6E 00 67 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 48 02 00 00 A4 00 00 00 5A 00 32 00 F8 EC 14 00 36 3A DC 79 20 00 52 45 47 43 55 52 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A DB 79 36 3A 24 85 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 53 00 65 00 74 00 75 00 70 00 5F 00 43 00 42 00 2E 00 65 00 78 00 65 00 00 00 1C 00 58 01 00 00 E8 01 00 00 40 00 32 00 1B EE 0B 00 26 3A E6 53 20 00 52 53 49 54 2E 65 78 65 00 00 28 00 03 00 04 00 EF BE 29 3A 05 79 36 3A 26 7F 14 00 00 00 52 00 53 00 49 00 54 00 2E 00 65 00 78 00 65 00 00 00 18 00 48 02 00 00 F5 00 00 00 48 00 32 00 28 D9 E6 01 36 3A 70 80 20 00 73 64 73 65 74 75 70 2E 65 78 65 00 2E 00 03 00 04 00 EF BE 36 3A 58 80 36 3A 70 80 14 00 00 00 73 00 64 00 73 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1A 00 48 02 00 00 46 01 00 00 7A 00 32 00 00 60 98 2B 8F 39 32 18 20 00 54 52 41 49 54 4F 7E 31 2E 41 56 49 00 00 5E 00 03 00 04 00 EF BE 33 3A 9B 8D 36 3A 1B 7F 14 00 00 00 54 00 72 00 61 00 69 00 74 00 6F 00 72 00 2E 00 46 00 52 00 45 00 4E 00 43 00 48 00 2E 00 44 00 56 00 44 00 52 00 69 00 70 00 2E 00 58 00 76 00 69 00 44 00 2D 00 4D 00 4F 00 4E 00 4B 00 2E 00 61 00 76 00 69 00 00 00 1C 00 58 01 00 00 F5 00 00 00 7E 00 32 00 88 EB F8 03 28 3A 8D 66 20 00 54 52 45 4E 44 4D 7E 31 2E 45 58 45 00 00 62 00 03 00 04 00 EF BE 29 3A 09 79 36 3A 28 7F 14 00 00 00 54 00 72 00 65 00 6E 00 64 00 4D 00 69 00 63 00 72 00 6F 00 5F 00 54 00 49 00 53 00 5F 00 31 00 37 00 2E 00 30 00 30 00 5F 00 65 00 6E 00 2D 00 55 00 53 00 5F 00 33 00 32 00 2D 00 62 00 69 00 74 00 2E 00 65 00 78 00 65 00 00 00 1C 00 58 01 00 00 46 01 00 00 46 00 32 00 40 9D 08 00 28 3A BB 62 20 00 55 73 62 46 69 78 2E 65 78 65 00 00 2C 00 03 00 04 00 EF BE 29 3A 07 79 36 3A 2B 7F 14 00 00 00 55 00 73 00 62 00 46 00 69 00 78 00 2E 00 65 00 78 00 65 00 00 00 1A 00 48 02 00 00 97 01 00 00 58 00 32 00 48 B9 11 00 34 3A 65 70 20 00 57 4C 53 45 54 55 7E 31 2E 45 58 45 00 00 3C 00 03 00 04 00 EF BE 34 3A 65 70 36 3A 2D 7F 14 00 00 00 77 00 6C 00 73 00 65 00 74 00 75 00 70 00 2D 00 63 00 75 00 73 00 74 00 6F 00 6D 00 2E 00 65 00 78 00 65 00 00 00 1C 00 48 02 00 00 97 01 00 00 00 00 00 00 Key Modified Time : 27/01/2009 21:48:04 Data Length : 5 494 ================================================== ================================================== Registry Key : HKU\S-1-5-21-1606980848-1682526488-682003330-1003\Software\Microsoft\Windows\Shell\Bags\1\Desktop Name : ItemPos1024x768(1) Type : REG_BINARY Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 02 00 00 EE 01 00 00 14 00 1F 60 40 F0 5F 64 81 50 1B 10 9F 08 00 AA 00 2F 95 4E B3 00 00 00 9C 01 00 00 14 00 1F 68 80 53 1C 87 A0 42 69 10 A2 EA 08 00 2B 30 30 9D 65 00 00 00 4A 01 00 00 14 00 1F 80 D0 67 B5 86 3C 31 D2 11 89 85 00 80 AD A9 6E 9B 65 00 00 00 F8 00 00 00 58 00 3A 00 C1 06 00 00 29 3A CD 79 20 00 41 44 4F 42 45 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 29 3A CD 79 3B 3A 89 A5 14 00 00 00 41 00 64 00 6F 00 62 00 65 00 20 00 52 00 65 00 61 00 64 00 65 00 72 00 20 00 39 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 EE 01 00 00 50 00 3A 00 50 06 00 00 2D 3A 8A 6A 20 00 43 44 42 55 52 4E 7E 31 2E 4C 4E 4B 00 00 34 00 03 00 04 00 EF BE 2D 3A 8A 6A 3B 3A 89 A5 14 00 00 00 43 00 44 00 42 00 75 00 72 00 6E 00 65 00 72 00 58 00 50 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 EE 01 00 00 76 00 3A 00 1B 08 00 00 33 3A 20 6F 20 00 43 4F 52 45 4C 50 7E 31 2E 4C 4E 4B 00 00 5A 00 03 00 04 00 EF BE 33 3A 20 6F 3B 3A 89 A5 14 00 00 00 43 00 6F 00 72 00 65 00 6C 00 20 00 50 00 61 00 69 00 6E 00 74 00 20 00 53 00 68 00 6F 00 70 00 20 00 50 00 72 00 6F 00 20 00 50 00 68 00 6F 00 74 00 6F 00 20 00 58 00 32 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 92 02 00 00 42 00 3A 00 8C 02 00 00 2A 3A D0 01 20 00 65 4D 75 6C 65 2E 6C 6E 6B 00 2A 00 03 00 04 00 EF BE 2A 3A D0 01 3B 3A 89 A5 14 00 00 00 65 00 4D 00 75 00 6C 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 18 00 65 00 00 00 9C 01 00 00 5C 00 3A 00 B5 06 00 00 2F 3A 92 7D 20 00 47 44 41 54 41 54 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 2F 3A 92 7D 3B 3A 89 A5 14 00 00 00 47 00 20 00 44 00 41 00 54 00 41 00 20 00 54 00 6F 00 74 00 61 00 6C 00 43 00 61 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 9C 01 00 00 5C 00 3A 00 95 07 00 00 29 3A 07 9C 20 00 49 4E 53 54 41 4C 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 29 3A 07 9C 3B 3A 89 A5 14 00 00 00 49 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 20 00 4D 00 53 00 4E 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 40 02 00 00 46 00 3A 00 59 08 00 00 39 3A 9B 93 20 00 69 54 75 6E 65 73 2E 6C 6E 6B 00 00 2C 00 03 00 04 00 EF BE 38 3A 08 6C 3B 3A 89 A5 14 00 00 00 69 00 54 00 75 00 6E 00 65 00 73 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 17 00 00 00 54 00 00 00 5E 00 3A 00 6C 06 00 00 29 3A 34 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 42 00 03 00 04 00 EF BE 29 3A 34 78 3B 3A 89 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 51 00 75 00 69 00 63 00 6B 00 43 00 61 00 6D 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 A6 00 00 00 62 00 3A 00 4D 06 00 00 29 3A 34 78 20 00 4D 45 53 50 48 4F 7E 31 2E 4C 4E 4B 00 00 46 00 03 00 04 00 EF BE 29 3A 34 78 3B 3A 89 A5 14 00 00 00 4D 00 65 00 73 00 20 00 70 00 68 00 6F 00 74 00 6F 00 73 00 20 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 17 00 00 00 F8 00 00 00 5A 00 3A 00 42 06 00 00 37 3A 07 A1 20 00 4D 4F 5A 49 4C 4C 7E 31 2E 4C 4E 4B 00 00 3E 00 03 00 04 00 EF BE 37 3A EF A0 3B 3A 89 A5 14 00 00 00 4D 00 6F 00 7A 00 69 00 6C 00 6C 00 61 00 20 00 46 00 69 00 72 00 65 00 66 00 6F 00 78 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 B3 00 00 00 F8 00 00 00 4C 00 3A 00 76 02 00 00 36 3A C8 80 20 00 4E 61 76 69 6C 6F 67 31 2E 6C 6E 6B 00 00 30 00 03 00 04 00 EF BE 36 3A C8 80 3B 3A 89 A5 14 00 00 00 4E 00 61 00 76 00 69 00 6C 00 6F 00 67 00 31 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 A6 00 00 00 60 00 3A 00 81 03 00 00 37 3A 23 AC 20 00 4F 50 45 4E 4F 46 7E 31 2E 4C 4E 4B 00 00 44 00 03 00 04 00 EF BE 37 3A 23 AC 3B 3A 89 A5 14 00 00 00 4F 00 70 00 65 00 6E 00 4F 00 66 00 66 00 69 00 63 00 65 00 2E 00 6F 00 72 00 67 00 20 00 33 00 2E 00 30 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 02 00 00 00 5C 00 3A 00 44 06 00 00 38 3A C1 6B 20 00 51 55 49 43 4B 54 7E 31 2E 4C 4E 4B 00 00 40 00 03 00 04 00 EF BE 38 3A C1 6B 3B 3A 89 A5 14 00 00 00 51 00 75 00 69 00 63 00 6B 00 54 00 69 00 6D 00 65 00 20 00 50 00 6C 00 61 00 79 00 65 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 B3 00 00 00 54 00 00 00 48 00 3A 00 B9 01 00 00 36 3A 26 85 20 00 52 65 67 43 75 72 65 2E 6C 6E 6B 00 2E 00 03 00 04 00 EF BE 36 3A 26 85 3B 3A 89 A5 14 00 00 00 52 00 65 00 67 00 43 00 75 00 72 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1A 00 B3 00 00 00 02 00 00 00 58 00 3A 00 65 06 00 00 2A 3A 29 78 20 00 53 50 59 57 41 52 7E 31 2E 4C 4E 4B 00 00 3C 00 03 00 04 00 EF BE 2A 3A 29 78 3B 3A 89 A5 14 00 00 00 53 00 70 00 79 00 77 00 61 00 72 00 65 00 20 00 44 00 6F 00 63 00 74 00 6F 00 72 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 9D 01 00 00 F8 00 00 00 3A 00 31 00 00 00 00 00 39 3A 55 99 10 00 64 69 76 65 72 73 00 00 24 00 03 00 04 00 EF BE 39 3A 08 99 3B 3A A7 A5 14 00 00 00 64 00 69 00 76 00 65 00 72 00 73 00 00 00 16 00 EB 01 00 00 F8 00 00 00 50 00 31 00 00 00 00 00 2B 3A 86 9E 10 00 44 4F 53 53 49 45 7E 31 00 00 38 00 03 00 04 00 EF BE 2B 3A 74 9E 3B 3A A7 A5 14 00 00 00 64 00 6F 00 73 00 73 00 69 00 65 00 72 00 20 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 9D 01 00 00 9C 01 00 00 44 00 31 00 00 00 00 00 29 3A DD 78 10 00 46 54 45 4C 59 43 7E 31 00 00 2C 00 03 00 04 00 EF BE 29 3A DA 78 3B 3A A7 A5 14 00 00 00 66 00 EA 00 74 00 65 00 20 00 6C 00 79 00 63 00 E9 00 65 00 00 00 18 00 EB 01 00 00 4A 01 00 00 3A 00 31 00 00 00 00 00 35 3A 68 B2 10 00 70 68 6F 74 6F 73 00 00 24 00 03 00 04 00 EF BE 2E 3A 98 0B 3B 3A A7 A5 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 00 00 16 00 9D 01 00 00 4A 01 00 00 42 00 31 00 00 00 00 00 34 3A 7D 82 10 00 50 48 4F 54 4F 53 7E 31 00 00 2A 00 03 00 04 00 EF BE 34 3A 19 78 3B 3A A7 A5 14 00 00 00 70 00 68 00 6F 00 74 00 6F 00 73 00 62 00 69 00 73 00 00 00 18 00 EB 01 00 00 9C 01 00 00 40 00 31 00 00 00 00 00 39 3A 4F 99 10 00 73 65 63 75 72 69 74 65 00 00 28 00 03 00 04 00 EF BE 2B 3A 9D B8 3B 3A A7 A5 14 00 00 00 73 00 65 00 63 00 75 00 72 00 69 00 74 00 65 00 00 00 18 00 17 00 00 00 40 02 00 00 40 00 32 00 36 07 00 00 30 3A 33 85 20 00 33 32 36 33 2E 67 69 66 00 00 28 00 03 00 04 00 EF BE 30 3A 33 85 3A 3A 71 AC 14 00 00 00 33 00 32 00 36 00 33 00 2E 00 67 00 69 00 66 00 00 00 18 00 01 01 00 00 02 00 00 00 5A 00 32 00 20 D5 95 01 98 39 1D 95 20 00 41 44 42 45 52 44 7E 31 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 29 3A E5 78 3A 3A F7 BB 14 00 00 00 41 00 64 00 62 00 65 00 52 00 64 00 72 00 39 00 30 00 5F 00 66 00 72 00 5F 00 46 00 52 00 2E 00 65 00 78 00 65 00 00 00 1C 00 39 02 00 00 92 02 00 00 42 00 32 00 0D 55 1D 00 54 2B 55 6A 20 00 63 6F 72 61 6E 2E 70 64 66 00 2A 00 03 00 04 00 EF BE 3A 3A 66 87 3A 3A 78 AC 14 00 00 00 63 00 6F 00 72 00 61 00 6E 00 2E 00 70 00 64 00 66 00 00 00 18 00 B3 00 00 00 EE 01 00 00 50 00 32 00 1C 1D 00 00 3B 3A 7A 5D 20 00 48 49 4A 41 43 4B 7E 31 2E 4C 4F 47 00 00 34 00 03 00 04 00 EF BE 3A 3A B0 B4 3B 3A 7A 5D 14 00 00 00 68 00 69 00 6A 00 61 00 63 00 6B 00 74 00 68 00 69 00 73 00 2E 00 6C 00 6F 00 67 00 00 00 1C 00 B3 00 00 00 4A 01 00 00 3C 00 32 00 38 21 06 00 3A 3A AC B3 20 00 48 4A 54 2E 65 78 65 00 26 00 03 00 04 00 EF BE 3A 3A AB B3 3B 3A 74 5D 14 00 00 00 48 00 4A 00 54 00 2E 00 65 00 78 00 65 00 00 00 16 00 17 00 00 00 4A 01 00 00 92 00 32 00 63 00 00 00 29 3A FB A5 20 00 49 4E 54 45 52 4E 7E 31 2E 55 52 4C 00 00 76 00 03 00 04 00 EF BE 29 3A FB A5 3B 3A 89 A5 14 00 00 00 49 00 6E 00 74 00 65 00 72 00 6E 00 65 00 74 00 20 00 45 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 20 00 2D 00 20 00 72 00 E9 00 73 00 6F 00 6C 00 75 00 74 00 69 00 6F 00 6E 00 20 00 64 00 65 00 20 00 70 00 72 00 6F 00 62 00 6C 00 E8 00 6D 00 65 00 73 00 2E 00 75 00 72 00 6C 00 00 00 1C 00 17 00 00 00 92 02 00 00 46 00 32 00 00 9A 04 00 37 3A 66 A4 20 00 6B 69 6B 69 68 32 2E 70 70 73 00 00 2C 00 03 00 04 00 EF BE 37 3A 66 A4 3A 3A C5 AC 14 00 00 00 6B 00 69 00 6B 00 69 00 68 00 32 00 2E 00 70 00 70 00 73 00 00 00 1A 00 17 00 00 00 02 00 00 00 68 00 32 00 E3 02 00 00 29 3A 32 78 20 00 4C 4F 47 49 54 45 7E 31 2E 4C 4E 4B 00 00 4C 00 03 00 04 00 EF BE 29 3A 32 78 3B 3A 89 A5 14 00 00 00 4C 00 6F 00 67 00 69 00 74 00 65 00 63 00 68 00 20 00 50 00 72 00 69 00 6E 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 65 00 00 00 54 00 00 00 84 00 32 00 B0 1A 92 08 37 3A 33 A5 20 00 4F 4F 4F 5F 33 30 7E 31 2E 45 58 45 00 00 68 00 03 00 04 00 EF BE 37 3A C8 A4 3A 3A C5 AC 14 00 00 00 4F 00 4F 00 6F 00 5F 00 33 00 2E 00 30 00 2E 00 30 00 5F 00 57 00 69 00 6E 00 33 00 32 00 49 00 6E 00 74 00 65 00 6C 00 5F 00 69 00 6E 00 73 00 74 00 61 00 6C 00 6C 00 5F 00 77 00 4A 00 52 00 45 00 5F 00 66 00 72 00 2E 00 65 00 78 00 65 00 00 00 1C 00 B3 00 00 00 A6 00 00 00 5A 00 32 00 88 83 57 00 36 3A E7 7B 20 00 50 41 52 45 54 4F 7E 32 2E 45 58 45 00 00 3E 00 03 00 04 00 EF BE 36 3A C8 7B 3A 3A CA AD 14 00 00 00 50 00 61 00 72 00 65 00 74 00 6F 00 5F 00 50 00 43 00 5F 00 53 00 65 00 74 00 75 00 70 00 2E 00 65 00 78 00 65 00 00 00 1C 00 9D 01 00 00 02 00 00 00 6A 00 32 00 15 02 00 00 2A 3A 0D 6B 20 00 52 41 43 43 4F 55 7E 31 2E 4C 4E 4B 00 00 4E 00 03 00 04 00 EF BE 2A 3A 0D 6B 3B 3A 89 A5 14 00 00 00 52 00 61 00 63 00 63 00 6F 00 75 00 72 00 63 00 69 00 20 00 76 00 65 00 72 00 73 00 20 00 49 00 6E 00 63 00 6F 00 6D 00 69 00 6E 00 67 00 2E 00 6C 00 6E 00 6B 00 00 00 1C 00 B3 00 00 00 40 02 00 00 48 00 32 00 E2 83 2E 00 3A 3A 8E BB 21 00 54 52 41 4C 41 4C 41 2E 65 78 65 00 2E 00 03 00 04 00 EF BE 3A 3A 8E BB 3B 3A 68 A5 14 00 00 00 54 00 52 00 41 00 4C 00 41 00 4C 00 41 00 2E 00 65 00 78 00 65 00 00 00 1A 00 B3 00 00 00 40 02 00 00 00 00 00 00 Key Modified Time : 27/01/2009 21:48:04 Data Length : 3 162 ================================================== ================================================== Registry Key : HKU\S-1-5-21-1606980848-1682526488-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache Name : C:\Program Files\RegCure\RegCure.exe Type : REG_SZ Data : RegCure Application Key Modified Time : 27/01/2009 22:09:13 Data Length : 20 ================================================== -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
ok c'est fait voici ComboFix 09-01-21.04 - Fousseine 2009-01-27 21:44:11.3 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2047.1121 [GMT 1:00] Lancé depuis: c:\documents and settings\Fousseine\Bureau\TRALALA.exe Commutateurs utilisés :: c:\documents and settings\Fousseine\Bureau\CFScript.txt AV: G DATA TotalCare 2009 *On-access scanning disabled* (Updated) FW: Pare-feu personnel G DATA *enabled* * Un nouveau point de restauration a été créé FILE :: c:\windows\Tasks\RegCure Program Check.job c:\windows\Tasks\RegCure.job . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\RegCure c:\program files\RegCure\0_days.htm c:\program files\RegCure\1_days.htm c:\program files\RegCure\15_days.htm c:\program files\RegCure\2_days.htm c:\program files\RegCure\30_days.htm c:\program files\RegCure\5_days.htm c:\program files\RegCure\Animated-Bar.gif c:\program files\RegCure\AutoUpdate.dll c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\1(5).jpg.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\10.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\100_0541.JPG.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\11.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\12.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\13.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\14.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\15.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\16.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\17.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\9.aspx.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_45_34\Lecteur CD.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_48_13.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_48_13.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_48_18.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_49_53.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_55_30.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_57_22.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_57_22.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_17_57_26.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_22_51.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_22_51.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_22_51\Launch Privacy Controls.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_35_54.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_35_54.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_35_54\Launch Privacy Controls.lnk c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_35_58.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_35_58.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_36_18.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_36_18.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_36_21.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_36_40.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_36_40.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_36_43.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_37_04.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_37_27.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_37_31.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_02.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_06.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_06.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_21.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_21.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_43.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_43.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_18_38_44.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_21_48_25.bak c:\program files\RegCure\Backup\RegCureBak_January_22_09_21_48_25.reg c:\program files\RegCure\Backup\RegCureBak_January_22_09_21_48_25\Launch Privacy Controls.lnk c:\program files\RegCure\Backup\RegCureBak_January_24_09_13_38_25.bak c:\program files\RegCure\Backup\RegCureBak_January_24_09_13_38_25.reg c:\program files\RegCure\Backup\RegCureBak_January_24_09_13_38_25\Launch Privacy Controls.lnk c:\program files\RegCure\Backup\RegCureBak_January_25_09_03_51_33.bak c:\program files\RegCure\Backup\RegCureBak_January_25_09_03_51_33.reg c:\program files\RegCure\Backup\RegCureBak_January_25_09_03_51_33\Launch Privacy Controls.lnk c:\program files\RegCure\Backup\RegCureBak_January_25_09_17_34_16.bak c:\program files\RegCure\Backup\RegCureBak_January_25_09_17_34_16.reg c:\program files\RegCure\Backup\RegCureBak_January_25_09_17_34_16\Launch Privacy Controls.lnk c:\program files\RegCure\Backup\RegCureBak_January_26_09_18_02_22.bak c:\program files\RegCure\Backup\RegCureBak_January_26_09_18_02_22.reg c:\program files\RegCure\Backup\RegCureBak_January_26_09_18_02_28.bak c:\program files\RegCure\Backup\RegCureBak_January_26_09_18_02_28.reg c:\program files\RegCure\Backup\RegCureBak_January_26_09_18_02_28\Launch Privacy Controls.lnk c:\program files\RegCure\buttonfill.jpg c:\program files\RegCure\buttonfill_expire.jpg c:\program files\RegCure\buttonfill_mo.jpg c:\program files\RegCure\buttonfill_mo_expire.jpg c:\program files\RegCure\config.xml c:\program files\RegCure\contentwrapper.gif c:\program files\RegCure\expire.css c:\program files\RegCure\footerbar.gif c:\program files\RegCure\help.chm c:\program files\RegCure\info_bubble.jpg c:\program files\RegCure\Logs\Regcure-22-01-09-17-45-40.zip c:\program files\RegCure\Logs\Regcure-22-01-09-17-48-18.zip c:\program files\RegCure\Logs\Regcure-22-01-09-17-48-22.zip c:\program files\RegCure\Logs\Regcure-22-01-09-17-49-57.zip c:\program files\RegCure\Logs\Regcure-22-01-09-17-55-39.zip c:\program files\RegCure\Logs\Regcure-22-01-09-17-57-26.zip c:\program files\RegCure\Logs\Regcure-22-01-09-17-57-31.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-22-58.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-35-58.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-36-02.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-36-21.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-36-25.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-36-44.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-36-47.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-37-31.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-37-35.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-38-05.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-38-10.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-38-25.zip c:\program files\RegCure\Logs\Regcure-22-01-09-18-38-47.zip c:\program files\RegCure\Logs\Regcure-22-01-09-21-48-29.zip c:\program files\RegCure\Logs\Regcure-24-01-09-13-38-29.zip c:\program files\RegCure\Logs\Regcure-25-01-09-03-51-37.zip c:\program files\RegCure\Logs\Regcure-25-01-09-17-34-22.zip c:\program files\RegCure\Logs\Regcure-26-01-09-18-02-28.zip c:\program files\RegCure\Logs\SystemInfo.zip c:\program files\RegCure\LogSettings.xml c:\program files\RegCure\main.css c:\program files\RegCure\process-animation.gif c:\program files\RegCure\RegCure.exe c:\program files\RegCure\settings.xml c:\program files\RegCure\subtitlebar.gif c:\program files\RegCure\tile_titlebar.jpg c:\program files\RegCure\Tip1.html c:\program files\RegCure\Tip10.html c:\program files\RegCure\Tip11.html c:\program files\RegCure\Tip12.html c:\program files\RegCure\Tip13.html c:\program files\RegCure\Tip14.html c:\program files\RegCure\Tip15.html c:\program files\RegCure\Tip2.html c:\program files\RegCure\Tip3.html c:\program files\RegCure\Tip4.html c:\program files\RegCure\Tip5.html c:\program files\RegCure\Tip6.html c:\program files\RegCure\Tip7.html c:\program files\RegCure\Tip8.html c:\program files\RegCure\Tip9.html c:\program files\RegCure\uninst.exe c:\program files\RegCure\whitelist.dat c:\program files\RegCure\zlibwapi.dll c:\windows\Tasks\RegCure Program Check.job c:\windows\Tasks\RegCure.job . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-27 au 2009-01-27 )))))))))))))))))))))))))))))))))))) . 2009-01-25 18:57 . 2009-01-25 18:57 <REP> d-------- c:\documents and settings\Fousseine\Application Data\OpenOffice.org 2009-01-25 17:28 . 2009-01-25 17:28 <REP> d-------- c:\documents and settings\NetworkService\Menu Démarrer 2009-01-24 14:32 . 2009-01-24 14:32 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Apple Computer 2009-01-24 14:31 . 2009-01-24 14:32 <REP> d-------- c:\program files\iTunes 2009-01-24 14:31 . 2009-01-24 14:31 <REP> d-------- c:\program files\iPod 2009-01-24 14:31 . 2009-01-24 14:31 <REP> d-------- c:\program files\Bonjour 2009-01-24 14:31 . 2009-01-24 14:32 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2009-01-24 14:29 . 2009-01-24 14:32 <REP> d----c--- c:\windows\system32\DRVSTORE 2009-01-24 14:29 . 2009-01-24 14:31 <REP> d-------- c:\program files\QuickTime 2009-01-24 14:29 . 2009-01-24 14:29 <REP> d-------- c:\program files\Fichiers communs\Apple 2009-01-24 14:29 . 2009-01-24 14:29 <REP> d-------- c:\program files\Apple Software Update 2009-01-24 14:29 . 2009-01-24 14:31 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple Computer 2009-01-24 14:29 . 2009-01-24 14:29 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple 2009-01-23 22:32 . 2009-01-23 22:32 <REP> d-------- c:\program files\OpenOffice.org 3 2009-01-23 22:32 . 2009-01-23 22:32 <REP> d-------- c:\program files\JRE 2009-01-23 22:31 . 2009-01-23 22:31 <REP> d-------- c:\program files\Fichiers communs\Java 2009-01-22 18:13 . 2009-01-22 18:13 <REP> d-------- c:\documents and settings\LocalService\Menu Démarrer 2009-01-22 18:00 . 2009-01-22 18:00 <REP> d-------- c:\documents and settings\Fousseine\Application Data\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\program files\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\program files\Fichiers communs\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\documents and settings\All Users\Application Data\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\documents and settings\All Users\Application Data\Downloaded Installations 2009-01-20 15:18 . 2009-01-20 15:18 <REP> d-------- c:\program files\Microsoft 2009-01-20 15:17 . 2009-01-20 15:18 <REP> d-------- c:\program files\Windows Live 2009-01-20 03:00 . 2009-01-20 03:00 <REP> d-------- c:\program files\MSXML 4.0 2009-01-19 15:03 . 2009-01-26 17:02 88 -r-hs---- c:\windows\system32\1AF5C4D55F.sys 2009-01-19 14:58 . 2009-01-19 15:03 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Corel 2009-01-19 14:58 . 2009-01-19 14:58 <REP> d-------- c:\documents and settings\All Users\Application Data\Corel 2009-01-19 14:55 . 2009-01-19 14:56 <REP> d-------- c:\program files\Fichiers communs\Corel 2009-01-19 14:51 . 2009-01-26 17:02 2,516 --ahs---- c:\windows\system32\KGyGaAvL.sys 2009-01-19 14:50 . 2009-01-19 14:55 <REP> d-------- c:\program files\Corel 2009-01-19 14:50 . 2009-01-19 14:50 <REP> d-------- c:\documents and settings\Fousseine\Application Data\InstallShield 2009-01-15 16:51 . 2009-01-15 16:51 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Iminent 2009-01-15 16:44 . 2009-01-15 17:05 32,328 --a------ c:\windows\system32\drivers\HookCentre.sys 2009-01-15 16:36 . 2009-01-15 16:36 <REP> d--hs---- C:\#GDATA.Trash.Store# 2009-01-13 22:46 . 2009-01-13 22:46 <REP> d--h----- c:\documents and settings\All Users\Application Data\{7DE2D9B5-C959-4D68-9E63-E73738EF6F02} 2009-01-13 22:35 . 2009-01-13 22:47 <REP> d-------- c:\program files\Iminent 2009-01-13 14:20 . 2009-01-13 14:20 <REP> d-------- c:\program files\CDBurnerXP 2009-01-13 14:20 . 2009-01-13 14:20 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Canneverbe_Limited 2009-01-13 14:19 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll 2009-01-13 14:15 . 2009-01-13 14:18 <REP> d-------- c:\windows\system32\XPSViewer 2009-01-13 14:15 . 2009-01-13 14:15 <REP> d-------- c:\program files\MSBuild 2009-01-13 14:14 . 2009-01-13 14:14 <REP> d-------- c:\program files\Reference Assemblies 2009-01-13 14:13 . 2009-01-13 14:14 <REP> d-------- C:\d99b0078b1ce9919245a 2009-01-13 14:13 . 2008-07-06 13:06 1,676,288 --------- c:\windows\system32\xpssvcs.dll 2009-01-13 14:13 . 2008-07-06 13:06 575,488 --------- c:\windows\system32\xpsshhdr.dll 2009-01-13 14:13 . 2008-07-06 13:06 117,760 --------- c:\windows\system32\prntvpt.dll 2009-01-12 00:09 . 2009-01-12 00:09 <REP> d-------- c:\program files\Spybot - Search & Destroy 2009-01-12 00:09 . 2009-01-12 00:18 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage réseau 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage d'impression 2009-01-11 23:59 . 2009-01-09 15:10 <REP> d--h----- c:\documents and settings\Administrateur\Modèles 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d-------- c:\documents and settings\Administrateur\Mes documents 2009-01-11 23:59 . 2009-01-09 15:55 <REP> dr------- c:\documents and settings\Administrateur\Menu Démarrer 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d-------- c:\documents and settings\Administrateur\Favoris 2009-01-11 23:59 . 2009-01-12 00:11 <REP> d-------- c:\documents and settings\Administrateur\Bureau 2009-01-11 23:59 . 2009-01-11 23:59 <REP> d-------- c:\documents and settings\Administrateur 2009-01-10 20:41 . 2009-01-10 20:41 <REP> d--h----- c:\windows\system32\GroupPolicy 2009-01-10 19:28 . 2009-01-10 19:28 0 --a------ c:\windows\nsreg.dat 2009-01-10 18:48 . 2009-01-22 17:22 <REP> d-------- c:\program files\Navilog1 2009-01-10 18:47 . 2009-01-10 18:47 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-01-10 18:47 . 2009-01-10 18:47 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Malwarebytes 2009-01-10 18:47 . 2009-01-10 18:47 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-01-10 18:47 . 2009-01-04 18:38 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-01-10 18:47 . 2009-01-04 18:38 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-01-10 16:01 . 2008-08-25 12:36 81,288 --a------ c:\windows\system32\drivers\iksyssec.sys 2009-01-10 16:01 . 2008-08-25 12:36 66,952 --a------ c:\windows\system32\drivers\iksysflt.sys 2009-01-10 16:01 . 2008-08-25 12:36 40,840 --a------ c:\windows\system32\drivers\ikfilesec.sys 2009-01-10 16:01 . 2008-06-02 16:19 29,576 --a------ c:\windows\system32\drivers\kcom.sys 2009-01-10 16:00 . 2009-01-26 10:00 <REP> d-------- c:\program files\Spyware Doctor 2009-01-10 16:00 . 2009-01-10 16:00 <REP> d-------- c:\documents and settings\Fousseine\Application Data\PC Tools 2009-01-10 15:31 . 2009-01-27 00:37 <REP> d-a------ c:\documents and settings\All Users\Application Data\TEMP 2009-01-10 14:37 . 2008-04-14 03:33 221,184 --a------ c:\windows\system32\wmpns.dll 2009-01-10 11:23 . 2008-10-16 14:06 268,648 --a------ c:\windows\system32\mucltui.dll 2009-01-10 11:23 . 2008-10-16 14:06 27,496 --a------ c:\windows\system32\mucltui.dll.mui 2009-01-10 01:14 . 2009-01-27 21:38 <REP> d-------- c:\program files\eMule 2009-01-09 22:19 . 2009-01-09 22:19 <REP> d-------- c:\windows\system32\Kaspersky Lab 2009-01-09 22:16 . 2009-01-09 22:39 <REP> d-------- c:\documents and settings\Fousseine\.housecall6.6 2009-01-09 22:14 . 2009-01-09 22:14 <REP> d-------- c:\windows\Sun 2009-01-09 22:11 . 2009-01-23 22:31 <REP> d-------- c:\program files\Java 2009-01-09 22:11 . 2009-01-09 22:11 410,984 --a------ c:\windows\system32\deploytk.dll 2009-01-09 22:11 . 2009-01-09 22:11 73,728 --a------ c:\windows\system32\javacpl.cpl 2009-01-09 21:46 . 2009-01-27 21:48 <REP> d-------- c:\documents and settings\Fousseine\Tracing 2009-01-09 21:45 . 2009-01-09 21:45 <REP> d-------- c:\program files\Windows Live SkyDrive 2009-01-09 21:42 . 2009-01-09 21:42 <REP> d-------- c:\program files\Microsoft CAPICOM 2.1.0.2 2009-01-09 21:42 . 2009-01-09 21:42 <REP> d-------- c:\program files\Fichiers communs\Windows Live 2009-01-09 21:32 . 2009-01-09 21:32 <REP> d-------- c:\windows\system32\CatRoot_bak 2009-01-09 21:24 . 2009-01-13 14:18 <REP> d-------- c:\windows\system32\fr-fr 2009-01-09 21:24 . 2009-01-09 21:24 <REP> d-------- c:\windows\system32\fr 2009-01-09 21:24 . 2009-01-09 21:24 <REP> d-------- c:\windows\system32\bits 2009-01-09 21:24 . 2009-01-09 21:24 <REP> d-------- c:\windows\l2schemas 2009-01-09 21:22 . 2009-01-09 21:24 <REP> d-------- c:\windows\ServicePackFiles 2009-01-09 20:51 . 2009-01-14 03:01 <REP> d--h----- c:\windows\$hf_mig$ 2009-01-09 20:51 . 2009-01-25 17:31 <REP> d---s---- c:\documents and settings\Fousseine\UserData 2009-01-09 19:44 . 2009-01-22 17:40 <REP> d-------- C:\Lop SD 2009-01-09 19:34 . 2009-01-09 19:34 <REP> d-------- c:\program files\CCleaner 2009-01-09 17:59 . 2009-01-15 17:11 68,424 --a------ c:\windows\system32\drivers\GRD.sys 2009-01-09 17:26 . 2009-01-15 17:06 48,712 --a------ c:\windows\system32\drivers\MiniIcpt.sys 2009-01-09 17:25 . 2009-01-15 17:08 51,016 --a------ c:\windows\system32\drivers\GDTdiIcpt.sys 2009-01-09 17:25 . 2009-01-09 17:25 22,272 --a------ c:\windows\system32\drivers\GDNdisIc.sys 2009-01-09 17:24 . 2009-01-15 16:42 <REP> d-------- c:\program files\G DATA 2009-01-09 17:24 . 2009-01-15 16:42 <REP> d-------- c:\program files\Fichiers communs\G DATA 2009-01-09 17:24 . 2009-01-21 18:57 <REP> d-------- c:\documents and settings\All Users\Application Data\G DATA 2009-01-09 16:14 . 2009-01-09 16:14 <REP> d-------- c:\program files\Fichiers communs\Adobe 2009-01-09 16:01 . 2009-01-09 16:01 <REP> d-------- c:\program files\Fichiers communs\FotoWire 2009-01-09 16:01 . 2009-01-09 16:01 <REP> d-------- c:\documents and settings\Fousseine\Application Data\FotoWire 2009-01-09 16:01 . 2004-10-08 12:46 53,248 -ra------ c:\windows\system32\InstMed.exe 2009-01-09 16:00 . 2009-01-09 16:01 <REP> d-------- c:\program files\Logitech 2009-01-09 16:00 . 2009-01-09 16:00 <REP> d-------- c:\program files\Fichiers communs\Logitech . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-09 15:00 81,920 ------r c:\windows\bwUnin-6.1.4.68-8876480L.exe 2009-01-09 15:00 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-09 14:59 --------- d-----w c:\program files\Fichiers communs\InstallShield 2009-01-09 14:31 --------- d-----w c:\program files\Realtek 2009-01-09 14:30 315,392 ----a-w c:\windows\HideWin.exe 2009-01-09 14:29 --------- d-----w c:\program files\Intel 2009-01-09 14:13 --------- d-----w c:\program files\microsoft frontpage 2009-01-09 14:12 --------- d-----w c:\program files\Services en ligne 2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys . ((((((((((((((((((((((((((((( snapshot@2009-01-27_ 0.41.24,39 ))))))))))))))))))))))))))))))))))))))))) . + 2009-01-27 20:48:00 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_4e8.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2008-12-02 3882312] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GDFirewallTray"="c:\program files\G DATA\TotalCare\Firewall\GDFirewallTray.exe" [2008-09-09 1037992] "G DATA AntiVirus Trayapplication"="c:\program files\G DATA\TotalCare\AVKTray\AVKTray.exe" [2008-11-24 958024] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-04-12 8429568] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-09 136600] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576] "Corel Photo Downloader"="c:\program files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" [2007-08-28 531272] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "EditLevel"= 0 (0x0) "NoCommonGroups"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\firefox.exe] "Debugger"=StripMyRights.exe /D /L N [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\iexplore.exe] "Debugger"=StripMyRights.exe /D /L N [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\outlook.exe] "Debugger"=StripMyRights.exe /D /L N [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk] backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-06-12 02:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner] --a------ 2008-12-19 19:28 1434864 c:\program files\CCleaner\CCleaner.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader] --a------ 2007-08-28 12:00 531272 c:\program files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] --a------ 2008-04-14 03:33 15360 c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMBooster] --a------ 2008-11-26 17:18 415232 c:\program files\Iminent\IMBooster.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate] --a------ 2004-10-08 12:06 196608 c:\program files\Logitech\Video\ManifestEngine.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair] --a------ 2004-10-08 12:31 458752 c:\program files\Logitech\Video\ISStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray] --a------ 2004-10-08 12:24 217088 c:\program files\Logitech\Video\LogiTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] --a------ 2004-10-08 11:52 221184 c:\windows\system32\LVCOMSX.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] --a------ 2008-12-02 22:41 3882312 c:\program files\Windows Live\Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] --a------ 2007-04-12 16:44 8429568 c:\windows\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] --a------ 2007-04-12 16:44 81920 c:\windows\system32\nvmctray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pareto_Update] --a------ 2008-02-22 12:25 189808 c:\program files\Fichiers communs\ParetoLogic\UUS2\Pareto_Update.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2009-01-09 22:11 136600 c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] -r------- 2005-05-03 11:43 69632 c:\windows\Alcmtr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] --a------ 2007-04-12 16:44 1626112 c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] -r------- 2007-04-10 08:28 16126464 c:\windows\RTHDCPL.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= R0 GDNdisIc;GDNdisIc;c:\windows\system32\drivers\GDNdisIc.sys [2009-01-09 22272] R1 GRD;G DATA Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys [2009-01-09 68424] R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;c:\windows\system32\drivers\l251x86.sys [2009-01-09 29696] R3 GDFwSvc;Pare-feu personnel G DATA;c:\program files\G DATA\TotalCare\Firewall\GDFwSvc.exe [2008-08-15 1407976] R3 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys [2009-01-09 48712] R3 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys [2009-01-15 32328] R4 AVKProxy;G DATA AntiVirus Proxy;c:\program files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe [2008-09-08 1016904] R4 AVKService;Planificateur G DATA;c:\program files\G DATA\TotalCare\AVK\AVKService.exe [2008-09-08 386120] R4 AVKWCtl;Gardien d'AntiVirus;c:\program files\G DATA\TotalCare\AVK\AVKWCtl.exe [2008-08-14 1185496] R4 GDTdiInterceptor;GDTdiInterceptor;c:\windows\system32\drivers\GDTdiIcpt.sys [2009-01-09 51016] S3 G DATA Tuner Service;G DATA Tuner Service;c:\program files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe [2008-08-19 925768] S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-01-10 356920] S3 Service de sauvegarde G DATA;Service de sauvegarde G DATA;c:\program files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe [2008-08-22 880200] . Contenu du dossier 'Tâches planifiées' 2009-01-24 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34] 2009-01-26 c:\windows\Tasks\ParetoLogic Privacy Controls_{E8F6CB1E-E8A5-11DD-AC06-001BFC8593A1}.job - c:\program files\ParetoLogic\Privacy Controls\Pareto_PC.exe [2008-11-25 11:27] 2009-01-27 c:\windows\Tasks\ParetoLogic Registration.job - c:\program files\Fichiers communs\ParetoLogic\UUS2\UUS.dll [2008-02-22 12:25] 2009-01-26 c:\windows\Tasks\ParetoLogic Update Version2.job - c:\program files\Fichiers communs\ParetoLogic\UUS2\Pareto_Update.exe [2008-02-22 12:25] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc+KhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=homepage uInternet Connection Wizard,ShellNext = hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc+KhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=homepage uInternet Settings,ProxyOverride = *.local TCP: {F0E8C117-203A-462F-AE5A-A4FCDB10BCBD} = 212.27.40.241,212.27.40.240 FF - ProfilePath - c:\documents and settings\Fousseine\Application Data\Mozilla\Firefox\Profiles\w5kxgs35.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2032792&SearchSource=3&q= FF - prefs.js: browser.search.selectedEngine - iminent-en Customized Web Search FF - prefs.js: browser.startup.homepage - hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc+KhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=homepage FF - prefs.js: keyword.URL - hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc%2bKhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=errscope&q= FF - component: c:\documents and settings\Fousseine\Application Data\Mozilla\Firefox\Profiles\w5kxgs35.default\extensions\{6a7400d6-6615-4a06-a4d1-48979fa6e868}\components\FFAlert.dll FF - component: c:\program files\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}\components\avkwebfilterff.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-27 21:48:08 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\CDBurnerXP\NMSAccessU.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\PSIService.exe c:\program files\iPod\bin\iPodService.exe c:\windows\system32\wbem\wmiapsrv.exe . ************************************************************************** . Heure de fin: 2009-01-27 21:53:14 - La machine a redémarré ComboFix-quarantined-files.txt 2009-01-27 20:53:10 ComboFix2.txt 2009-01-27 11:30:22 ComboFix3.txt 2009-01-26 23:42:22 Avant-CF: 37 544 321 024 octets libres Après-CF: 37,599,076,352 octets libres 419 --- E O F --- 2009-01-20 02:00:18 -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
si j'ai fait le scripte et jai fait comme indiquer je vais reesayer encore -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
pour mes 20 fichier en quarantaine l'antivirus me dit toujour qu'il peu pas les nettoyer ou les reinserer -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
et voici le rapport hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:43:51, on 27/01/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PSIService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\notepad.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Fousseine\Bureau\HJT.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.iminent.com/?appId=e0198ecc-...mp;ref=homepage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://search.iminent.com/?appId=e0198ecc-...mp;ref=homepage R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - AutorunsDisabled - (no file) O2 - BHO: Iminent.SearchTheWeb.HelperObject - {0E896FCA-D07E-45FE-901F-6A26FCF59C02} - mscoree.dll (file missing) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AVKWebIE.dll O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1231530761796 O17 - HKLM\System\CCS\Services\Tcpip\..\{F0E8C117-203A-462F-AE5A-A4FCDB10BCBD}: NameServer = 212.27.40.241,212.27.40.240 O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: Service de sauvegarde G DATA - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe -- End of file - 7451 bytes -
[RESOLU]win32:beagle-ahu[trj] infecté help plz
euuh a répondu à un(e) sujet de euuh dans Analyses et éradication malwares
ok j'ai installer la console et fait se que vous avez demander voici le rapport ComboFix 09-01-21.04 - Fousseine 2009-01-27 12:28:00.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2047.1398 [GMT 1:00] Lancé depuis: c:\documents and settings\Fousseine\Bureau\TRALALA.exe Commutateurs utilisés :: c:\documents and settings\Fousseine\Bureau\CFScript AV: G DATA TotalCare 2009 *On-access scanning disabled* (Updated) FW: Pare-feu personnel G DATA *disabled* * Un nouveau point de restauration a été créé . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-27 au 2009-01-27 )))))))))))))))))))))))))))))))))))) . 2009-01-25 18:57 . 2009-01-25 18:57 <REP> d-------- c:\documents and settings\Fousseine\Application Data\OpenOffice.org 2009-01-25 17:28 . 2009-01-25 17:28 <REP> d-------- c:\documents and settings\NetworkService\Menu Démarrer 2009-01-24 14:32 . 2009-01-24 14:32 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Apple Computer 2009-01-24 14:31 . 2009-01-24 14:32 <REP> d-------- c:\program files\iTunes 2009-01-24 14:31 . 2009-01-24 14:31 <REP> d-------- c:\program files\iPod 2009-01-24 14:31 . 2009-01-24 14:31 <REP> d-------- c:\program files\Bonjour 2009-01-24 14:31 . 2009-01-24 14:32 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2009-01-24 14:29 . 2009-01-24 14:32 <REP> d----c--- c:\windows\system32\DRVSTORE 2009-01-24 14:29 . 2009-01-24 14:31 <REP> d-------- c:\program files\QuickTime 2009-01-24 14:29 . 2009-01-24 14:29 <REP> d-------- c:\program files\Fichiers communs\Apple 2009-01-24 14:29 . 2009-01-24 14:29 <REP> d-------- c:\program files\Apple Software Update 2009-01-24 14:29 . 2009-01-24 14:31 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple Computer 2009-01-24 14:29 . 2009-01-24 14:29 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple 2009-01-23 22:32 . 2009-01-23 22:32 <REP> d-------- c:\program files\OpenOffice.org 3 2009-01-23 22:32 . 2009-01-23 22:32 <REP> d-------- c:\program files\JRE 2009-01-23 22:31 . 2009-01-23 22:31 <REP> d-------- c:\program files\Fichiers communs\Java 2009-01-22 18:13 . 2009-01-22 18:13 <REP> d-------- c:\documents and settings\LocalService\Menu Démarrer 2009-01-22 18:00 . 2009-01-22 18:00 <REP> d-------- c:\documents and settings\Fousseine\Application Data\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\program files\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\program files\Fichiers communs\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\documents and settings\All Users\Application Data\ParetoLogic 2009-01-22 17:58 . 2009-01-22 17:58 <REP> d-------- c:\documents and settings\All Users\Application Data\Downloaded Installations 2009-01-22 17:41 . 2009-01-22 17:45 <REP> d-------- c:\program files\RegCure 2009-01-20 15:18 . 2009-01-20 15:18 <REP> d-------- c:\program files\Microsoft 2009-01-20 15:17 . 2009-01-20 15:18 <REP> d-------- c:\program files\Windows Live 2009-01-20 03:00 . 2009-01-20 03:00 <REP> d-------- c:\program files\MSXML 4.0 2009-01-19 15:03 . 2009-01-26 17:02 88 -r-hs---- c:\windows\system32\1AF5C4D55F.sys 2009-01-19 14:58 . 2009-01-19 15:03 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Corel 2009-01-19 14:58 . 2009-01-19 14:58 <REP> d-------- c:\documents and settings\All Users\Application Data\Corel 2009-01-19 14:55 . 2009-01-19 14:56 <REP> d-------- c:\program files\Fichiers communs\Corel 2009-01-19 14:51 . 2009-01-26 17:02 2,516 --ahs---- c:\windows\system32\KGyGaAvL.sys 2009-01-19 14:50 . 2009-01-19 14:55 <REP> d-------- c:\program files\Corel 2009-01-19 14:50 . 2009-01-19 14:50 <REP> d-------- c:\documents and settings\Fousseine\Application Data\InstallShield 2009-01-15 16:51 . 2009-01-15 16:51 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Iminent 2009-01-15 16:44 . 2009-01-15 17:05 32,328 --a------ c:\windows\system32\drivers\HookCentre.sys 2009-01-15 16:36 . 2009-01-15 16:36 <REP> d--hs---- C:\#GDATA.Trash.Store# 2009-01-13 22:46 . 2009-01-13 22:46 <REP> d--h----- c:\documents and settings\All Users\Application Data\{7DE2D9B5-C959-4D68-9E63-E73738EF6F02} 2009-01-13 22:35 . 2009-01-13 22:47 <REP> d-------- c:\program files\Iminent 2009-01-13 14:20 . 2009-01-13 14:20 <REP> d-------- c:\program files\CDBurnerXP 2009-01-13 14:20 . 2009-01-13 14:20 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Canneverbe_Limited 2009-01-13 14:19 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll 2009-01-13 14:15 . 2009-01-13 14:18 <REP> d-------- c:\windows\system32\XPSViewer 2009-01-13 14:15 . 2009-01-13 14:15 <REP> d-------- c:\program files\MSBuild 2009-01-13 14:14 . 2009-01-13 14:14 <REP> d-------- c:\program files\Reference Assemblies 2009-01-13 14:13 . 2009-01-13 14:14 <REP> d-------- C:\d99b0078b1ce9919245a 2009-01-13 14:13 . 2008-07-06 13:06 1,676,288 --------- c:\windows\system32\xpssvcs.dll 2009-01-13 14:13 . 2008-07-06 13:06 575,488 --------- c:\windows\system32\xpsshhdr.dll 2009-01-13 14:13 . 2008-07-06 13:06 117,760 --------- c:\windows\system32\prntvpt.dll 2009-01-12 00:09 . 2009-01-12 00:09 <REP> d-------- c:\program files\Spybot - Search & Destroy 2009-01-12 00:09 . 2009-01-12 00:18 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage réseau 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage d'impression 2009-01-11 23:59 . 2009-01-09 15:10 <REP> d--h----- c:\documents and settings\Administrateur\Modèles 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d-------- c:\documents and settings\Administrateur\Mes documents 2009-01-11 23:59 . 2009-01-09 15:55 <REP> dr------- c:\documents and settings\Administrateur\Menu Démarrer 2009-01-11 23:59 . 2009-01-09 15:55 <REP> d-------- c:\documents and settings\Administrateur\Favoris 2009-01-11 23:59 . 2009-01-12 00:11 <REP> d-------- c:\documents and settings\Administrateur\Bureau 2009-01-11 23:59 . 2009-01-11 23:59 <REP> d-------- c:\documents and settings\Administrateur 2009-01-10 20:41 . 2009-01-10 20:41 <REP> d--h----- c:\windows\system32\GroupPolicy 2009-01-10 19:28 . 2009-01-10 19:28 0 --a------ c:\windows\nsreg.dat 2009-01-10 18:48 . 2009-01-22 17:22 <REP> d-------- c:\program files\Navilog1 2009-01-10 18:47 . 2009-01-10 18:47 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-01-10 18:47 . 2009-01-10 18:47 <REP> d-------- c:\documents and settings\Fousseine\Application Data\Malwarebytes 2009-01-10 18:47 . 2009-01-10 18:47 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-01-10 18:47 . 2009-01-04 18:38 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-01-10 18:47 . 2009-01-04 18:38 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-01-10 16:01 . 2008-08-25 12:36 81,288 --a------ c:\windows\system32\drivers\iksyssec.sys 2009-01-10 16:01 . 2008-08-25 12:36 66,952 --a------ c:\windows\system32\drivers\iksysflt.sys 2009-01-10 16:01 . 2008-08-25 12:36 40,840 --a------ c:\windows\system32\drivers\ikfilesec.sys 2009-01-10 16:01 . 2008-06-02 16:19 29,576 --a------ c:\windows\system32\drivers\kcom.sys 2009-01-10 16:00 . 2009-01-26 10:00 <REP> d-------- c:\program files\Spyware Doctor 2009-01-10 16:00 . 2009-01-10 16:00 <REP> d-------- c:\documents and settings\Fousseine\Application Data\PC Tools 2009-01-10 15:31 . 2009-01-27 00:37 <REP> d-a------ c:\documents and settings\All Users\Application Data\TEMP 2009-01-10 14:37 . 2008-04-14 03:33 221,184 --a------ c:\windows\system32\wmpns.dll 2009-01-10 11:23 . 2008-10-16 14:06 268,648 --a------ c:\windows\system32\mucltui.dll 2009-01-10 11:23 . 2008-10-16 14:06 27,496 --a------ c:\windows\system32\mucltui.dll.mui 2009-01-10 01:14 . 2009-01-27 12:13 <REP> d-------- c:\program files\eMule 2009-01-09 22:19 . 2009-01-09 22:19 <REP> d-------- c:\windows\system32\Kaspersky Lab 2009-01-09 22:16 . 2009-01-09 22:39 <REP> d-------- c:\documents and settings\Fousseine\.housecall6.6 2009-01-09 22:14 . 2009-01-09 22:14 <REP> d-------- c:\windows\Sun 2009-01-09 22:11 . 2009-01-23 22:31 <REP> d-------- c:\program files\Java 2009-01-09 22:11 . 2009-01-09 22:11 410,984 --a------ c:\windows\system32\deploytk.dll 2009-01-09 22:11 . 2009-01-09 22:11 73,728 --a------ c:\windows\system32\javacpl.cpl 2009-01-09 21:46 . 2009-01-27 12:23 <REP> d-------- c:\documents and settings\Fousseine\Tracing 2009-01-09 21:45 . 2009-01-09 21:45 <REP> d-------- c:\program files\Windows Live SkyDrive 2009-01-09 21:42 . 2009-01-09 21:42 <REP> d-------- c:\program files\Microsoft CAPICOM 2.1.0.2 2009-01-09 21:42 . 2009-01-09 21:42 <REP> d-------- c:\program files\Fichiers communs\Windows Live 2009-01-09 21:32 . 2009-01-09 21:32 <REP> d-------- c:\windows\system32\CatRoot_bak 2009-01-09 21:24 . 2009-01-13 14:18 <REP> d-------- c:\windows\system32\fr-fr 2009-01-09 21:24 . 2009-01-09 21:24 <REP> d-------- c:\windows\system32\fr 2009-01-09 21:24 . 2009-01-09 21:24 <REP> d-------- c:\windows\system32\bits 2009-01-09 21:24 . 2009-01-09 21:24 <REP> d-------- c:\windows\l2schemas 2009-01-09 21:22 . 2009-01-09 21:24 <REP> d-------- c:\windows\ServicePackFiles 2009-01-09 20:51 . 2009-01-14 03:01 <REP> d--h----- c:\windows\$hf_mig$ 2009-01-09 20:51 . 2009-01-25 17:31 <REP> d---s---- c:\documents and settings\Fousseine\UserData 2009-01-09 19:44 . 2009-01-22 17:40 <REP> d-------- C:\Lop SD 2009-01-09 19:34 . 2009-01-09 19:34 <REP> d-------- c:\program files\CCleaner 2009-01-09 17:59 . 2009-01-15 17:11 68,424 --a------ c:\windows\system32\drivers\GRD.sys 2009-01-09 17:26 . 2009-01-15 17:06 48,712 --a------ c:\windows\system32\drivers\MiniIcpt.sys 2009-01-09 17:25 . 2009-01-15 17:08 51,016 --a------ c:\windows\system32\drivers\GDTdiIcpt.sys 2009-01-09 17:25 . 2009-01-09 17:25 22,272 --a------ c:\windows\system32\drivers\GDNdisIc.sys 2009-01-09 17:24 . 2009-01-15 16:42 <REP> d-------- c:\program files\G DATA 2009-01-09 17:24 . 2009-01-15 16:42 <REP> d-------- c:\program files\Fichiers communs\G DATA 2009-01-09 17:24 . 2009-01-21 18:57 <REP> d-------- c:\documents and settings\All Users\Application Data\G DATA 2009-01-09 16:14 . 2009-01-09 16:14 <REP> d-------- c:\program files\Fichiers communs\Adobe 2009-01-09 16:01 . 2009-01-09 16:01 <REP> d-------- c:\program files\Fichiers communs\FotoWire 2009-01-09 16:01 . 2009-01-09 16:01 <REP> d-------- c:\documents and settings\Fousseine\Application Data\FotoWire 2009-01-09 16:01 . 2004-10-08 12:46 53,248 -ra------ c:\windows\system32\InstMed.exe 2009-01-09 16:00 . 2009-01-09 16:01 <REP> d-------- c:\program files\Logitech 2009-01-09 16:00 . 2009-01-09 16:00 <REP> d-------- c:\program files\Fichiers communs\Logitech . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-10 18:36 65,536 ----a-w c:\windows\system32\StripMyRights.exe 2009-01-09 15:00 81,920 ------r c:\windows\bwUnin-6.1.4.68-8876480L.exe 2009-01-09 15:00 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-09 14:59 --------- d-----w c:\program files\Fichiers communs\InstallShield 2009-01-09 14:31 --------- d-----w c:\program files\Realtek 2009-01-09 14:30 315,392 ----a-w c:\windows\HideWin.exe 2009-01-09 14:29 --------- d-----w c:\program files\Intel 2009-01-09 14:13 --------- d-----w c:\program files\microsoft frontpage 2009-01-09 14:12 --------- d-----w c:\program files\Services en ligne 2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys 2008-12-02 21:37 49,480 ----a-w c:\windows\system32\sirenacm.dll . ((((((((((((((((((((((((((((( snapshot@2009-01-27_ 0.41.24,39 ))))))))))))))))))))))))))))))))))))))))) . + 2009-01-27 11:23:35 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_274.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2008-12-02 3882312] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GDFirewallTray"="c:\program files\G DATA\TotalCare\Firewall\GDFirewallTray.exe" [2008-09-09 1037992] "G DATA AntiVirus Trayapplication"="c:\program files\G DATA\TotalCare\AVKTray\AVKTray.exe" [2008-11-24 958024] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-04-12 8429568] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-09 136600] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576] "Corel Photo Downloader"="c:\program files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" [2007-08-28 531272] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "EditLevel"= 0 (0x0) "NoCommonGroups"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\firefox.exe] "Debugger"=StripMyRights.exe /D /L N [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\iexplore.exe] "Debugger"=StripMyRights.exe /D /L N [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\outlook.exe] "Debugger"=StripMyRights.exe /D /L N [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk] backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-06-12 02:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner] --a------ 2008-12-19 19:28 1434864 c:\program files\CCleaner\CCleaner.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader] --a------ 2007-08-28 12:00 531272 c:\program files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] --a------ 2008-04-14 03:33 15360 c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMBooster] --a------ 2008-11-26 17:18 415232 c:\program files\Iminent\IMBooster.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate] --a------ 2004-10-08 12:06 196608 c:\program files\Logitech\Video\ManifestEngine.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair] --a------ 2004-10-08 12:31 458752 c:\program files\Logitech\Video\ISStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray] --a------ 2004-10-08 12:24 217088 c:\program files\Logitech\Video\LogiTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] --a------ 2004-10-08 11:52 221184 c:\windows\system32\LVCOMSX.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] --a------ 2008-12-02 22:41 3882312 c:\program files\Windows Live\Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] --a------ 2007-04-12 16:44 8429568 c:\windows\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] --a------ 2007-04-12 16:44 81920 c:\windows\system32\nvmctray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pareto_Update] --a------ 2008-02-22 12:25 189808 c:\program files\Fichiers communs\ParetoLogic\UUS2\Pareto_Update.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2009-01-09 22:11 136600 c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] -r------- 2005-05-03 11:43 69632 c:\windows\Alcmtr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] --a------ 2007-04-12 16:44 1626112 c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] -r------- 2007-04-10 08:28 16126464 c:\windows\RTHDCPL.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= R0 GDNdisIc;GDNdisIc;c:\windows\system32\drivers\GDNdisIc.sys [2009-01-09 22272] R1 GRD;G DATA Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys [2009-01-09 68424] R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;c:\windows\system32\drivers\l251x86.sys [2009-01-09 29696] R3 GDFwSvc;Pare-feu personnel G DATA;c:\program files\G DATA\TotalCare\Firewall\GDFwSvc.exe [2008-08-15 1407976] R3 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys [2009-01-09 48712] R3 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys [2009-01-15 32328] R4 AVKProxy;G DATA AntiVirus Proxy;c:\program files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe [2008-09-08 1016904] R4 AVKService;Planificateur G DATA;c:\program files\G DATA\TotalCare\AVK\AVKService.exe [2008-09-08 386120] R4 AVKWCtl;Gardien d'AntiVirus;c:\program files\G DATA\TotalCare\AVK\AVKWCtl.exe [2008-08-14 1185496] R4 GDTdiInterceptor;GDTdiInterceptor;c:\windows\system32\drivers\GDTdiIcpt.sys [2009-01-09 51016] S3 G DATA Tuner Service;G DATA Tuner Service;c:\program files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe [2008-08-19 925768] S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-01-10 356920] S3 Service de sauvegarde G DATA;Service de sauvegarde G DATA;c:\program files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe [2008-08-22 880200] . Contenu du dossier 'Tâches planifiées' 2009-01-24 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34] 2009-01-26 c:\windows\Tasks\ParetoLogic Privacy Controls_{E8F6CB1E-E8A5-11DD-AC06-001BFC8593A1}.job - c:\program files\ParetoLogic\Privacy Controls\Pareto_PC.exe [2008-11-25 11:27] 2009-01-26 c:\windows\Tasks\ParetoLogic Registration.job - c:\program files\Fichiers communs\ParetoLogic\UUS2\UUS.dll [2008-02-22 12:25] 2009-01-26 c:\windows\Tasks\ParetoLogic Update Version2.job - c:\program files\Fichiers communs\ParetoLogic\UUS2\Pareto_Update.exe [2008-02-22 12:25] 2009-01-27 c:\windows\Tasks\RegCure Program Check.job - c:\program files\RegCure\RegCure.exe [2008-11-27 19:55] 2009-01-25 c:\windows\Tasks\RegCure.job - c:\program files\RegCure\RegCure.exe [2008-11-27 19:55] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc+KhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=homepage uInternet Connection Wizard,ShellNext = hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc+KhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=homepage uInternet Settings,ProxyOverride = *.local TCP: {F0E8C117-203A-462F-AE5A-A4FCDB10BCBD} = 212.27.40.241,212.27.40.240 FF - ProfilePath - c:\documents and settings\Fousseine\Application Data\Mozilla\Firefox\Profiles\w5kxgs35.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2032792&SearchSource=3&q= FF - prefs.js: browser.search.selectedEngine - iminent-en Customized Web Search FF - prefs.js: browser.startup.homepage - hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc+KhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=homepage FF - prefs.js: keyword.URL - hxxp://search.iminent.com/?appId=e0198ecc-02a1-46b2-9393-73247769bdc6&euid=l4nGv9PNRa73AVMbiJUgc%2bKhRSvfEIUtp0HbPRt4gMsMQ17YARFmQglMA6RCPtS1&lcid=1036&ref=errscope&q= FF - component: c:\documents and settings\Fousseine\Application Data\Mozilla\Firefox\Profiles\w5kxgs35.default\extensions\{6a7400d6-6615-4a06-a4d1-48979fa6e868}\components\FFAlert.dll FF - component: c:\program files\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}\components\avkwebfilterff.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-27 12:29:01 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . Heure de fin: 2009-01-27 12:30:21 ComboFix-quarantined-files.txt 2009-01-27 11:30:18 ComboFix2.txt 2009-01-26 23:42:22 Avant-CF: 43 637 243 904 octets libres Après-CF: 43,627,622,400 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect 277 --- E O F --- 2009-01-20 02:00:18