Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

rapport HiJackthis

Invité sebc

Par Invité sebc
dans Analyses et éradication malwares

 Partager

Messages recommandés

Invité sebc

Invité sebc

Posté(e)
Posté(e)

Bonjours, désolé pour mon absence j’était occupé avec mon boulot

 

 

 

Post second rapport avec modif de Combofix.txt plus CfScript.txt

Problème non résolut après redémarrage

 

ComboFix 08-04-20.5 - L'eau Vive 2008-04-26 16 h 17 h 09.2 - NTFSx86

Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.297 [GMT 2:00]

Endroit: C:\Users\L'eau Vive\Desktop\ComboFix.exe

Command switches used :: C:\Users\L'eau Vive\Desktop\CFScript.txt

* Création d'un nouveau point de restauration

.

 

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-26 to 2008-04-26 ))))))))))))))))))))))))))))))))))))

.

 

Pas de nouveau fichier cr‚‚ dans cet espace de temps

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-04-22 17:00 --------- d-----w C:\Users\L'eau Vive\AppData\Roaming\Spyware Terminator

2008-04-22 17:00 --------- d-----w C:\ProgramData\Spyware Terminator

2008-04-22 17:00 --------- d-----w C:\Program Files\Spyware Terminator

2008-04-22 16:19 --------- d-----w C:\Program Files\Trend Micro

2008-04-20 10:39 --------- d-----w C:\ProgramData\Avira

2008-04-16 18:30 --------- d---a-w C:\ProgramData\TEMP

2008-04-16 18:30 --------- d-----w C:\Program Files\Spyware Doctor

2008-04-16 17:50 --------- d-----w C:\Program Files\Windows Sidebar

2008-04-16 17:50 --------- d-----w C:\Program Files\Windows Mail

2008-04-16 17:44 --------- d-----w C:\ProgramData\Microsoft Help

2008-04-15 19:39 141,312 ----a-w C:\Windows\system32\drivers\sp_rsdrv2.sys

2008-04-15 19:35 --------- d-----w C:\Program Files\Yahoo!

2008-04-15 19:35 --------- d-----w C:\Program Files\CCleaner

2008-04-15 17:53 47,560 ----a-w C:\Windows\System32\SPReview.exe

2008-04-15 17:53 152,576 ----a-w C:\Windows\System32\SPWizUI.dll

2008-03-03 15:23 --------- d-----w C:\ProgramData\NtiDvdCopy

2008-02-29 04:16 2,027,008 ----a-w C:\Windows\System32\win32k.sys

2008-02-21 04:43 826,368 ----a-w C:\Windows\System32\wininet.dll

2008-02-21 04:43 56,320 ----a-w C:\Windows\System32\iesetup.dll

2008-02-21 04:43 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll

2008-02-21 04:43 296,448 ----a-w C:\Windows\System32\gdi32.dll

2008-02-21 04:43 26,624 ----a-w C:\Windows\System32\ieUnatt.exe

2008-01-29 04:16 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll

2008-01-29 04:16 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll

2008-01-29 04:16 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll

2008-01-29 04:16 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll

2008-01-29 04:16 1,686,528 ----a-w C:\Windows\System32\gameux.dll

2008-01-29 00:30 4,247,552 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll

2008-01-29 00:15 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll

2007-09-29 16:46 174 --sha-w C:\Program Files\desktop.ini

.

 

((((((((((((((((((((((((((((( snapshot@2008-04-22_19 h 06 h 07,59 )))))))))))))))))))))))))))))))))))))))))

.

- 2008-04-22 16:29:12 67,584 --s-a-w C:\Windows\bootstat.dat

+ 2008-04-26 14:23:56 67,584 --s-a-w C:\Windows\bootstat.dat

- 2008-04-22 16:29:14 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2008-04-26 14:23:57 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2008-04-26 14:23:57 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2008-04-22 16:44:22 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat

+ 2008-04-26 14:11:56 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat

- 2008-04-22 16:31:24 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT

+ 2008-04-26 14:25:09 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT

+ 2008-04-26 14:25:09 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1

- 2008-04-22 17:01:33 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat

+ 2008-04-26 14:20:16 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat

- 2008-04-22 16:31:55 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT

+ 2008-04-26 14:25:09 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT

+ 2008-04-26 14:25:09 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1

- 2008-04-22 16:31:50 9,226 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-912164730-2671607606-2786342950-1001_UserData.bin

+ 2008-04-26 14:11:29 9,234 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-912164730-2671607606-2786342950-1001_UserData.bin

- 2008-04-22 16:31:50 64,794 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

+ 2008-04-26 14:11:29 64,880 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

- 2008-04-22 16:31:46 47,926 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2008-04-26 14:11:23 47,926 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2007-12-16 13:41 1232896]

"????r"="" []

"EPSON Stylus DX5000 Series"="C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBVE.exe" [2006-09-22 06:01 139264]

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-10-29 17:48 171448]

"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]

"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2007-12-31 00:58 20480]

"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-09-29 15:06 1006264]

"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-07-11 18:12 90112]

"RtHDVCpl"="RtHDVCpl.exe" [2006-11-20 08:13 4018176 C:\Windows\RtHDVCpl.exe]

"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-23 05:00 815104]

"Acer Tour"="" []

"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-11-21 06:33 107112]

"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 21:48 57344]

"SetPanel"="" []

"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2006-11-15 08:02 614400]

"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2006-11-17 08:26 453120]

"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-25 14:47 98304]

"SetPoint"="C:\Program Files\Logitech\SetPoint\KEM.EXE" [2004-10-28 10:29 581632]

"MMTray"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe" [2004-03-31 17:57 114688]

 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 05:44:06 29696]

Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-12-31 00:58:39 450560]

Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\KEM.exe [2007-12-29 12:28:09 581632]

Std C Detect.lnk - C:\Program Files\I&M\Std C Detect\Std C Detect.exe [2007-12-19 18:36:21 184320]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"msacm.mkdmp3enc"= C:\PROGRA~1\ACERAR~1\DVWIZA~1\Kernel\Burner\MKDMP3Enc.ACM

"SENTINEL"= snti386.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{8EBFFF4D-3E7E-4664-B625-AF732DCAFA64}"= UDP:C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite

"{8A8B13C7-3F61-4116-A5E1-BF55907A7D2D}"= TCP:C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite

"TCP Query User{12F32AE1-C142-44D5-8620-56A852B8DBD8}C:\\program files\\adsltv\\adsltv.exe"= UDP:C:\program files\adsltv\adsltv.exe:adsltv

"UDP Query User{0E39E9E5-D429-4D29-A980-00F973AF4195}C:\\program files\\adsltv\\adsltv.exe"= TCP:C:\program files\adsltv\adsltv.exe:adsltv

"{50CFDDC2-C1AE-49E9-8271-F567558BBDC8}"= UDP:C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:BlueSoleil

"{EEE8F7F7-86D7-4435-BF41-ADD33ACB41F4}"= TCP:C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:BlueSoleil

"TCP Query User{58A4BB60-9802-4119-A1F9-8B87355E9928}C:\\program files\\logitech\\desktop messenger\\8876480\\program\\backweb-8876480.exe"= UDP:C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe:Logitech Desktop Messenger

"UDP Query User{62DEBA4C-DDE0-4A42-9CB3-D47250612DB8}C:\\program files\\logitech\\desktop messenger\\8876480\\program\\backweb-8876480.exe"= TCP:C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe:Logitech Desktop Messenger

"TCP Query User{784936C1-84C2-45F7-8E4E-B50E4455BFF6}C:\\program files\\logitech\\desktop messenger\\8876480\\program\\backweb-8876480.exe"= UDP:C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe:Logitech Desktop Messenger

"UDP Query User{FA4F4F14-7626-4490-877A-4D31198E19AC}C:\\program files\\logitech\\desktop messenger\\8876480\\program\\backweb-8876480.exe"= TCP:C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe:Logitech Desktop Messenger

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]

"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]

"EnableFirewall"= 0 (0x0)

 

R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2006-11-10 15:10]

R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2006-11-10 15:21]

R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2006-11-08 16:11]

R0 SI3112r;ATI-4379 Serial ATA Controller;C:\Windows\system32\DRIVERS\SI3112r.sys [2007-02-02 00:50]

R2 eNet Service;eNet Service;C:\Acer\Empowering Technology\eNet\eNet Service.exe [2006-11-20 21:43]

R2 eSettingsService;eSettings Service;C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2006-11-13 00:13]

R2 MobilityService;MobilityService;C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 13:57]

R2 WMIService;ePower Service;C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2006-12-01 10:34]

R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 11:39]

R3 athr;Atheros Extensible Wireless LAN device driver;C:\Windows\system32\DRIVERS\athr.sys [2007-06-19 06:34]

R3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-25 04:46]

S2 sentemul;sentemul;C:\Windows\system32\drivers\sentemul.sys [2003-03-24 19:06]

 

.

Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

"2008-04-26 14:10:33 C:\Windows\Tasks\User_Feed_Synchronization-{1D7769C0-2D83-4C00-9C9F-27D501625F2F}.job"

- C:\Windows\system32\msfeedssync.exe

.

**************************************************************************

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-04-26 16:25:14

Windows 6.0.6000 NTFS

 

Balayage processus cach‚s ...

 

Balayage cach‚ autostart entries ...

 

Balayage des fichiers cach‚s ...

 

Scan termin‚ avec succŠs

Les fichiers cach‚s: 0

 

**************************************************************************

.

--------------------- DLLs a charg‚ sous des processus courants ---------------------

 

PROCESS: C:\Windows\Explorer.exe

-> C:\Program Files\Logitech\SetPoint\lgscroll.dll

-> ?:\Windows\system32\cscapi.dll

.

------------------------ Other Running Processes ------------------------

.

C:\Windows\System32\Ati2evxx.exe

C:\Windows\System32\audiodg.exe

C:\Windows\System32\Ati2evxx.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Windows\System32\Crypserv.exe

C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe

C:\Program Files\Spyware Terminator\sp_rsser.exe

C:\Windows\System32\drivers\XAudio.exe

C:\Windows\System32\wbem\unsecapp.exe

C:\Windows\System32\conime.exe

C:\Program Files\Launch Manager\LManager.exe

C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files\Logitech\SetPoint\KHALMNPR.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe

C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe

C:\Windows\System32\dllhost.exe

.

**************************************************************************

.

Temps d'accomplissement: 2008-04-26 16:30:02 - machine was rebooted

ComboFix-quarantined-files.txt 2008-04-26 14:29:49

ComboFix2.txt 2008-04-22 17:06:45

 

Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.

Le texte du message associ‚ au num‚ro 0x2379 est introuvable dans le fichier de messages pour Application.

 

187 --- E O F --- 2008-04-20 08:02:01

Invité sebc

Invité sebc

Posté(e)
Posté(e)

Echec de Combofix

rapport clé

Rapport clé trop gros beaucoup trop gros

que doige faire ?????

pear Devil Member !

pear

Posté(e)
Posté(e) (modifié)

Bonjour,

 

 

 

Copier/coller ce qui suit dans le bloc notes,

sans ligne blanche au début.

Enregistrez sur le bureau sous regis.reg.

Cliquez droit sur le fichier ->fusionner

Acceptez la modification du Régistre:

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsServicesStartup"=-

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000000

HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:0000000

 

 

Rapport clé trop gros beaucoup trop gros

 

Ok.

 

pouvez vous nous confirmer cela:

 

Renseignements pris, les ?????? signifieraient des caractères illisibles par Hijackthis(chinois ?)

 

Pouvez vous vous rendre à cette clé et la copier par démarrer->Exécuter->Regedit et la poster ?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

 

Et , si possible, copier coller les premières lignes du rapport .

Modifié par pear
Invité sebc

Invité sebc

Posté(e)
Posté(e)

premières lignes du rapport clé.bat

 

 

:P

 

REGEDIT4

 

[HKEY_LOCAL_MACHINE]

 

[HKEY_LOCAL_MACHINE\BCD00000000]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Description]

"KeyName"="BCD00000000"

"System"=dword:00000001

"TreatAsSystem"=dword:00000001

"GuidCache"=hex:3f,0c,40,86,a4,66,c8,01,0e,27,00,00,4c,e5,00,11,67,74,be,d4,3c,\

00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{0ce4991b-e6b3-4b16-b23c-5e0d9250e5d9}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{0ce4991b-e6b3-4b16-b23c-5e0d9250e5d9}\Description]

"Type"=dword:20100000

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{0ce4991b-e6b3-4b16-b23c-5e0d9250e5d9}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{0ce4991b-e6b3-4b16-b23c-5e0d9250e5d9}\Elements\16000020]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{1afa9c49-16ab-4a5c-901b-212802da9460}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{1afa9c49-16ab-4a5c-901b-212802da9460}\Description]

"Type"=dword:20200004

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{1afa9c49-16ab-4a5c-901b-212802da9460}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{1afa9c49-16ab-4a5c-901b-212802da9460}\Elements\14000006]

"Element"=hex(7):7b,37,65,61,32,65,31,61,63,2d,32,65,36,31,2d,34,37,32,38,2d,\

61,61,61,33,2d,38,39,36,64,39,64,30,61,39,66,30,65,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{4636856e-540f-4170-a130-a84776f4c654}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{4636856e-540f-4170-a130-a84776f4c654}\Description]

"Type"=dword:20100000

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{4636856e-540f-4170-a130-a84776f4c654}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{4636856e-540f-4170-a130-a84776f4c654}\Elements\15000011]

"Element"=hex:00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{4636856e-540f-4170-a130-a84776f4c654}\Elements\15000013]

"Element"=hex:01,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{4636856e-540f-4170-a130-a84776f4c654}\Elements\15000014]

"Element"=hex:00,c2,01,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}\Description]

"Type"=dword:10300006

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}\Elements\11000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,00,10,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,ad,a5,52,cf,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}\Elements\12000002]

"Element"="\\ntldr"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}\Elements\12000004]

"Element"="Version antérieure de Windows"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}\Elements\45000001]

"Element"=hex:01,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{466f5a88-0af2-4f76-9038-095b170dc21c}\Elements\47000005]

"Element"=hex:04,00,00,12,00,00,00,00,06,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{5189b25c-5558-4bf2-bca4-289b11bd29e2}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{5189b25c-5558-4bf2-bca4-289b11bd29e2}\Description]

"Type"=dword:20100000

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{5189b25c-5558-4bf2-bca4-289b11bd29e2}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Description]

"Type"=dword:10200003

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\11000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7e,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\12000002]

"Element"="\\windows\\system32\\boot\\winload.exe"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\12000004]

"Element"="Windows Recovery Environment"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\21000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7e,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\22000002]

"Element"="\\windows"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\25000020]

"Element"=hex:00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\26000010]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\26000022]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{572bcd55-ffa7-11d9-aae0-0007e994107d}\Elements\46000010]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{6efb52bf-1766-41db-a6b3-0ee5eff72bd7}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{6efb52bf-1766-41db-a6b3-0ee5eff72bd7}\Description]

"Type"=dword:20200003

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{6efb52bf-1766-41db-a6b3-0ee5eff72bd7}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{6efb52bf-1766-41db-a6b3-0ee5eff72bd7}\Elements\14000006]

"Element"=hex(7):7b,37,65,61,32,65,31,61,63,2d,32,65,36,31,2d,34,37,32,38,2d,\

61,61,61,33,2d,38,39,36,64,39,64,30,61,39,66,30,65,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{7ea2e1ac-2e61-4728-aaa3-896d9d0a9f0e}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{7ea2e1ac-2e61-4728-aaa3-896d9d0a9f0e}\Description]

"Type"=dword:20100000

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{7ea2e1ac-2e61-4728-aaa3-896d9d0a9f0e}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{7ea2e1ac-2e61-4728-aaa3-896d9d0a9f0e}\Elements\14000006]

"Element"=hex(7):7b,34,36,33,36,38,35,36,65,2d,35,34,30,66,2d,34,31,37,30,2d,\

61,31,33,30,2d,61,38,34,37,37,36,66,34,63,36,35,34,7d,00,7b,30,63,65,34,39,\

39,31,62,2d,65,36,62,33,2d,34,62,31,36,2d,62,32,33,63,2d,35,65,30,64,39,32,\

35,30,65,35,64,39,7d,00,7b,35,31,38,39,62,32,35,63,2d,35,35,35,38,2d,34,62,\

66,32,2d,62,63,61,34,2d,32,38,39,62,31,31,62,64,32,39,65,32,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Description]

"Type"=dword:10100002

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\11000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7a,4c,38,01,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\12000004]

"Element"="Windows Boot Manager"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\12000005]

"Element"="fr-FR"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\14000006]

"Element"=hex(7):7b,37,65,61,32,65,31,61,63,2d,32,65,36,31,2d,34,37,32,38,2d,\

61,61,61,33,2d,38,39,36,64,39,64,30,61,39,66,30,65,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\23000003]

"Element"="{a6274ea0-84e6-11db-8438-bf22cfa73734}"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\23000006]

"Element"="{a6274ea1-84e6-11db-8438-bf22cfa73734}"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\24000001]

"Element"=hex(7):7b,61,36,32,37,34,65,61,30,2d,38,34,65,36,2d,31,31,64,62,2d,\

38,34,33,38,2d,62,66,32,32,63,66,61,37,33,37,33,34,7d,00,7b,63,34,38,32,61,\

35,32,66,2d,64,32,39,37,2d,31,31,64,63,2d,61,35,34,63,2d,30,30,31,31,36,37,\

37,34,62,65,64,34,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\24000010]

"Element"=hex(7):7b,62,32,37,32,31,64,37,33,2d,31,64,62,34,2d,34,63,36,32,2d,\

62,66,37,38,2d,63,35,34,38,61,38,38,30,31,34,32,64,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\25000004]

"Element"=hex:1e,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\45000001]

"Element"=hex:01,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Description]

"Type"=dword:10200003

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\11000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7a,4c,38,01,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\12000002]

"Element"="\\Windows\\system32\\winload.exe"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\12000004]

"Element"="Windows Vista"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\12000005]

"Element"="fr-FR"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\14000006]

"Element"=hex(7):7b,36,65,66,62,35,32,62,66,2d,31,37,36,36,2d,34,31,64,62,2d,\

61,36,62,33,2d,30,65,65,35,65,66,66,37,32,62,64,37,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\14000008]

"Element"=hex(7):7b,35,37,32,62,63,64,35,35,2d,66,66,61,37,2d,31,31,64,39,2d,\

61,61,65,30,2d,30,30,30,37,65,39,39,34,31,30,37,64,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\16000009]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\21000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7a,4c,38,01,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\22000002]

"Element"="\\Windows"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\23000003]

"Element"="{a6274ea1-84e6-11db-8438-bf22cfa73734}"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea0-84e6-11db-8438-bf22cfa73734}\Elements\25000020]

"Element"=hex:00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Description]

"Type"=dword:10200004

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\11000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7a,4c,38,01,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\12000002]

"Element"="\\Windows\\system32\\winresume.exe"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\12000004]

"Element"="Windows Resume Application"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\12000005]

"Element"="fr-FR"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\14000006]

"Element"=hex(7):7b,31,61,66,61,39,63,34,39,2d,31,36,61,62,2d,34,61,35,63,2d,\

39,30,31,62,2d,32,31,32,38,30,32,64,61,39,34,36,30,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\21000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7a,4c,38,01,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\22000002]

"Element"="\\hiberfil.sys"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\26000004]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\26000006]

"Element"=hex:00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\42000002]

"Element"="\\system32\\winresume.exe"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\45000001]

"Element"=hex:02,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a6274ea1-84e6-11db-8438-bf22cfa73734}\Elements\46000004]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Description]

"Type"=dword:10200005

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\11000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,7a,4c,38,01,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\12000002]

"Element"="\\boot\\memtest.exe"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\12000004]

"Element"="Diagnostics mémoire Windows"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\12000005]

"Element"="fr-FR"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\14000006]

"Element"=hex(7):7b,37,65,61,32,65,31,61,63,2d,32,65,36,31,2d,34,37,32,38,2d,\

61,61,61,33,2d,38,39,36,64,39,64,30,61,39,66,30,65,7d,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\1600000b]

"Element"=hex:01

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\45000001]

"Element"=hex:01,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{b2721d73-1db4-4c62-bf78-c548a880142d}\Elements\47000005]

"Element"=hex:04,00,00,12,00,00,00,00,02,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}\Description]

"Type"=dword:10300006

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}\Elements]

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}\Elements\11000001]

"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,\

00,00,00,48,00,00,00,00,00,00,00,00,fc,7f,75,0e,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,01,00,00,00,f5,c5,f5,c5,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}\Elements\12000002]

"Element"="\\ntldr"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}\Elements\12000004]

"Element"="Windows XP Pro"

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}\Elements\45000001]

"Element"=hex:01,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\BCD00000000\Objects\{c482a52f-d297-11dc-a54c-00116774bed4}\Elements\47000005]

"Element"=hex:04,00,00,12,00,00,00,00,06,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\COMPONENTS]

"StoreFormatVersion"=hex:30,00,2e,00,30,00,2e,00,30,00,2e,00,35,00

"StoreArchitecture"=hex:00,00,00,00

"PublisherPolicyChangeTime"=hex(b):a1,46,45,70,e9,9f,c8,01

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData]

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs]

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\00792014bfd9457c8e139d3b99f38f517c51f2af06cf77d7c876ef2fe405bed1]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_ded629285e5a09cd"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\00c543d684efca34c18c5561cf1c4a0642526d4a5a8f2f24245d60e4295f80ee]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_94baa8f5fe6cc253"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0175ce8250a7d80221cb9e26ca2d5413fd275e8ae9dd22fcb38f90d98eeaa296]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_c95e95c37e34e69d"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\026010efddce1bc0416b304cb1d841af4bd1a7e9b96f9344180c3e1a5d94fdad]

"c!bd19dc2847f..2d8684bbc02_31bf3856ad364e35_6.0.6000.20734_3f8ee29258d9a4aa"=hex:

"c!28d29941af7..03928b17e52_31bf3856ad364e35_6.0.6000.16609_53f6b4a3de156bd6"=hex:

"c!9000b1e3f62..6ed7cfdfd55_31bf3856ad364e35_6.0.6000.20734_df884a6b2fbfe7ee"=hex:

"c!b09b075e6a1..7a24441a2cf_31bf3856ad364e35_6.0.6000.16609_cd1078dcc278ce57"=hex:

"c!356817df3f7..c603137f169_31bf3856ad364e35_6.0.6000.20734_0a35f20f69f537e5"=hex:

"c!a0be91edb89..8fa76f3a2e9_31bf3856ad364e35_6.0.6000.16609_1d0a205c84cc6ec3"=hex:

"c!7954ea0b6b1..fd8ae9f9788_31bf3856ad364e35_6.0.6000.20734_090c7a0fb205ed57"=hex:

"c!c92d1941055..dd4eee24bc9_31bf3856ad364e35_6.0.6000.16609_3535ae30bed46b96"=hex:

"c!0b03593eda1..a0bcf5d8a92_31bf3856ad364e35_6.0.6000.20734_d895adb46b0c7409"=hex:

"c!18ad6e7cc71..98c0792555d_31bf3856ad364e35_6.0.6000.16609_71e8bd87424097a3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0270162b505df3c566e609f4ceebe30b92a575dc25138252c15d76463c750cf1]

"c!c4df9b3ac7f..75c667fd34a_31bf3856ad364e35_6.0.6001.18000_ab058290cbcbcb15"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\047a18d9c723b8b3b2d194f8d964687a32d51f70912f2339fc8b5240afc7cb7a]

"c!3c052dccc0f..5f9486b04c3_31bf3856ad364e35_6.0.6000.20708_ab7825804a6b6366"=hex:

"c!4ca9376ab40..30cef2e402b_31bf3856ad364e35_6.0.6000.16585_e3d40226d9081367"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\04c8203f04ecb13933a84f9f17c2d9fb74567a82aa7208a47b3f14abc4fae53c]

"c!7f1dea71107..45365700728_31bf3856ad364e35_6.0.6000.20728_66274f9d29c348ae"=hex:

"c!9c21a35c255..d6e272d5503_31bf3856ad364e35_6.0.6000.16603_18d5bca520c933d7"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\04fa2d7b8124018620d3ea20914c05b8d23dd1e12e8e23c934d48fe7093ba3cc]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_5ef83b269788cd38"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_c499e739bfbeb6f3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\05e57da245ecfe72c4a896ca9a28608d471ce68248b5756315c807c512a45172]

"c!7c2611837b1..438b49e78cf_31bf3856ad364e35_6.0.6001.18000_4bcea3cb88b987e3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0629b66de4c61820b0e17b0c96323c175e1dccc2ca4f9e0b1600405b7bcb18e9]

"c!523dd6d4b38..d00f13745b0_31bf3856ad364e35_6.0.6001.18000_dfea5803f3276b5c"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\06bc82649da21d456a8101b40ed2a95f0c34183e03bd32eea9c17d607007a131]

"c!microsoft-w..anguagepack_31bf3856ad364e35_7.0.6000.381_d8e7ba0c3cd079a5"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\06cff2ad1d4af4543bd0a62da82b01473f5ecf8c9daf6aff87e07ca66e4675d0]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_8b0b702b131b934e"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\07a40dfabedef0960c3d9699fa5629cb4276c6952885c3e5411555a35ff5862e]

"c!cf5d73de715..5a37c6724eb_31bf3856ad364e35_6.0.6001.18000_ea093e88d9df424e"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\07e919f7b820a254166da9e10ebeb223880fb80cb5fd7a4796a02b921ed25c32]

"c!5e5f57cc347..5bcbd3e2c1d_31bf3856ad364e35_6.0.6000.16546_35b10d84ea7dc1fe"=hex:

"c!0634a62a26c..8ee3da17673_31bf3856ad364e35_6.0.6000.20663_830d7156c27bbe1f"=hex:

"c!b30c4c3b404..24de82f5d50_31bf3856ad364e35_6.0.6000.16546_1eb2a954c2069922"=hex:

"c!a09fd5d338a..9ac15c2f59d_31bf3856ad364e35_6.0.6000.20663_073c7fd16f755cca"=hex:

"c!20fc6cfa11d..da9b4d6d813_31bf3856ad364e35_6.0.6000.16546_89a7869c0a9db5ca"=hex:

"c!f34fb1f0d6a..0c9f015b58e_31bf3856ad364e35_6.0.6000.20663_d0503f19f1ea6bc5"=hex:

"c!f5cc3b5ec3b..4827b971d6e_31bf3856ad364e35_6.0.6000.16546_445a2a9dc91fdc5e"=hex:

"c!52d201681b3..b6970f637b6_31bf3856ad364e35_6.0.6000.20663_e4f4c654deb83497"=hex:

"c!791a2922165..4443d8739b4_31bf3856ad364e35_6.0.6000.16546_f2277ebb71e2137e"=hex:

"c!bbe9adeccc1..883ca0a0796_31bf3856ad364e35_6.0.6000.20663_80e56b89d0bfa833"=hex:

"c!1f999e6c314..7a0bb9e5124_31bf3856ad364e35_6.0.6000.16546_9cd7c7e0a6f68e11"=hex:

"c!26b4bcee266..1efefe938d1_31bf3856ad364e35_6.0.6000.20663_71efddc908258c78"=hex:

"c!edd08dcdce2..87bc66cdbe8_31bf3856ad364e35_6.0.6000.16546_3397936468f5a837"=hex:

"c!e0e65872bac..5cb5bb47635_31bf3856ad364e35_6.0.6000.20663_66ef24513bebec2b"=hex:

"c!816de358d18..eface620897_31bf3856ad364e35_6.0.6000.16546_f7153e36e113594f"=hex:

"c!1097afdaee9..48bb58df4ec_31bf3856ad364e35_6.0.6000.20663_aad1dbd80fe6d6e0"=hex:

"c!eb280567121..e0bf3a6599c_31bf3856ad364e35_6.0.6000.16546_0ca42bdf587faa8f"=hex:

"c!a9b9a7596ac..d8549ef92a3_31bf3856ad364e35_6.0.6000.20663_fc20babb1db0e726"=hex:

"c!f5dc063d465..bb232b35a22_31bf3856ad364e35_6.0.6000.16546_941b4c6260fb5adf"=hex:

"c!62405e939e7..06c73955ea6_31bf3856ad364e35_6.0.6000.20663_a6ceb5ddf49bca9f"=hex:

"c!7d29a8111cf..7a8f8094161_31bf3856ad364e35_6.0.6000.16546_681fd8355ff41279"=hex:

"c!a9ec1e63175..2334cdb6619_31bf3856ad364e35_6.0.6000.20663_a3de5119ac541e91"=hex:

"c!6561e4e7723..7593f87cd78_31bf3856ad364e35_6.0.6000.16546_339e33e9fe9ee5ca"=hex:

"c!4db03179a9b..4f125c0e9b2_31bf3856ad364e35_6.0.6000.20663_b833c1eb4e933669"=hex:

"c!bcf0aa84fd6..451e591648a_31bf3856ad364e35_6.0.6000.16546_8a8395f8dad21031"=hex:

"c!4daad1c05ee..23c5179b672_31bf3856ad364e35_6.0.6000.20663_6ec5f0fe09d49342"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\08b829c0b76785423661ffdf037cd0a699a13dca00f1f263d2bb077091db1acf]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_e5f003e137ea3454"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_c256d407daa8a381"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_19a481e7befa133d"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\097f1748f3075ac01a0548115f794079953011f28c928c5011462b00193eed9d]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_611bdf225eb47527"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\09c946f04c1a7244a2b3297780c6484f756aa11b88fb1351948bbfc9cc7d3b65]

"c!135a9c42e7b..5dbd3ab845d_31bf3856ad364e35_6.0.6000.20734_ff4d894e26950ce5"=hex:

"c!74e10eaa112..6851736f0ac_31bf3856ad364e35_6.0.6000.16609_ba3fc29cdd8d7cb3"=hex:

"c!0e8a5dd4731..03daf495b40_31bf3856ad364e35_6.0.6000.20734_4a7ff8e08d6d6a99"=hex:

"c!dd3edeede0a..6a91dfd528c_31bf3856ad364e35_6.0.6000.16609_896941e0829ef02d"=hex:

"c!e481ec18553..bf63e86b9df_31bf3856ad364e35_6.0.6000.20734_25c9da60c8b19f44"=hex:

"c!7f96fac1104..05083e8a5bc_31bf3856ad364e35_6.0.6000.16609_fd03b866ef703d59"=hex:

"c!a44c1e52d41..821213a0a6c_31bf3856ad364e35_6.0.6000.20734_4543dc61b88ebf20"=hex:

"c!78be7f46f73..081d2bdde9c_31bf3856ad364e35_6.0.6000.16609_a92479361bd4a4b1"=hex:

"c!dfd3238ac94..88c30a49668_31bf3856ad364e35_6.0.6000.20734_d4c8e7210ddf63fc"=hex:

"c!5632035a555..f29a94b2341_31bf3856ad364e35_6.0.6000.16609_03bbb99f1e687d77"=hex:

"c!55e2eae5730..4a780e5b0b7_31bf3856ad364e35_6.0.6000.20734_2f46f93478b2d308"=hex:

"c!1581598667e..3eb1f465595_31bf3856ad364e35_6.0.6000.16609_faa4413d4b4ec9c9"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0a048ae0930781431b10e8126d98db8d32ac590118a93c4ddf3b2b66ee37b130]

"c!da5b25d1cf4..13eda151a33_31bf3856ad364e35_6.0.6001.18000_1ced86db2f755565"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0a6b8f528e61965f4f743a8ff7865ad80a08e6296cee97b838bc67824aa72bed]

"c!52c87598e9a..8e30758e9d6_31bf3856ad364e35_6.0.6000.20734_5ac95f31ae6647b0"=hex:

"c!0e37897244e..1ed656e685d_31bf3856ad364e35_6.0.6000.16609_8f68fccfc7899f02"=hex:

"c!ce0fb1a6aa0..4e00c294b73_31bf3856ad364e35_6.0.6000.20734_92d7383912f9c75e"=hex:

"c!c7ad479c63c..8784aa0937d_31bf3856ad364e35_6.0.6000.16609_7d20afec1e64bc48"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0b03831aabceeafe7fa17dd97c567c79aa1a91b1faffd7919d64922f307e02a3]

"c!a31c7aabdcc..472661c3f16_31bf3856ad364e35_6.0.6000.20728_6c94cf7e9a70ae81"=hex:

"c!2c34fc8404d..9622f0524d0_31bf3856ad364e35_6.0.6000.16603_abe9e072a85c51b3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0b94d7cfa0797c5c8b8404648dd0483509a8f4aa4b407606d9f8cd0be16e888a]

"c!f7ffba8e3ad..f44415c441d_31bf3856ad364e35_6.0.6000.20728_d05015644dd1832e"=hex:

"c!f9cf9c82f96..efcecf975c6_31bf3856ad364e35_6.0.6000.16603_b4a348bee4fbedf2"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0ba21d9a29688f1e688923e561a8f06f343ef402c38ef2a00f9acfd3be37b561]

"c!aa7eabc8360..baf2636e1c0_31bf3856ad364e35_6.0.6000.16485_11050dbc28275780"=hex:

"c!7b87827d354..03d18d4f341_31bf3856ad364e35_6.0.6000.20597_c7f345e6309dcdf1"=hex:

"c!1e3c5492e5c..fd5729c1af3_31bf3856ad364e35_6.0.6000.16485_ad6ac38d230d2951"=hex:

"c!bf775abae35..ac896246f1e_31bf3856ad364e35_6.0.6000.20597_729c5665464b280f"=hex:

"c!d76e02da846..e62d23b8e73_31bf3856ad364e35_6.0.6000.16485_0c57c1d5042d7978"=hex:

"c!2edc4f38ab9..f3ad261209f_31bf3856ad364e35_6.0.6000.20597_b85e1775781d8e68"=hex:

"c!3f23d55de71..bf755a72f58_31bf3856ad364e35_6.0.6000.16485_0aa164c18418942b"=hex:

"c!29c898e477d..99464ecd464_31bf3856ad364e35_6.0.6000.20597_ec6ca3245ce79656"=hex:

"c!0851f30b226..195f92181d5_31bf3856ad364e35_6.0.6000.16485_be785b012e565947"=hex:

"c!abf3156ea0a..6224a7e061f_31bf3856ad364e35_6.0.6000.20597_449beb75019384b8"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0be5d7e4055dde43ee82f1e5709cfa2c2c62f8c615cde107b104987a3ab3b7a6]

"c!72dcfb59150..796017d4f3e_31bf3856ad364e35_6.0.6000.20728_fbb268327d072d6a"=hex:

"c!9a9b1ff98c9..cc47e145ff0_31bf3856ad364e35_6.0.6000.16603_2c989df0a1d22cab"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0d7d4311097b696025b89ec5d0c157d5a9898fd1dcd88ebd5279d45bac0f9085]

"c!b5983a9475c..521e2bc17c9_31bf3856ad364e35_6.0.6000.20734_8c51e31c68ee8f2e"=hex:

"c!e1514c69f04..8de962b8423_31bf3856ad364e35_6.0.6000.16609_03dfe75022750a62"=hex:

"c!0e11d34c5a4..b6324759d18_31bf3856ad364e35_6.0.6000.20734_6a4e7531253039e1"=hex:

"c!3bc98f87c36..90070be6a63_31bf3856ad364e35_6.0.6000.16609_e489394c8aceffe0"=hex:

"c!bc8fd286d4a..b41ab35ceb7_31bf3856ad364e35_6.0.6000.20734_d4afdcd6a85c2244"=hex:

"c!5dd0f50bf7e..89f91a7ba0d_31bf3856ad364e35_6.0.6000.16609_769fb3b246e9b743"=hex:

"c!16c04d8cabf..132bbdb8e6b_31bf3856ad364e35_6.0.6000.20734_e65e1e4c3a62d12a"=hex:

"c!3e0ee3e0d62..a4606c0e7f9_31bf3856ad364e35_6.0.6000.16609_5c770f23757f64df"=hex:

"c!a17e9fd094e..a6037c0e3d7_31bf3856ad364e35_6.0.6000.20734_9c9f2e76fe69183c"=hex:

"c!fba2d0b620e..894e7a7a248_31bf3856ad364e35_6.0.6000.16609_b64d1862b09dbb26"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0dc390cd4cf216a1704b2f203c6edf100c3f8cefbdc3a061c1b2cd277430734c]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_a24ba7e7b5a5a409"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0df98d4c1bfc29c24f4a2f0896d21557ed32962ead9f092cb37a4a0d837f3ed8]

"c!4fd48b6c943..3e663f2a51c_31bf3856ad364e35_6.0.6001.18000_5be225ff7674c950"=hex:

"c!97304af11c7..ed69bbd540b_31bf3856ad364e35_6.0.6001.18000_67b080640a04cc81"=hex:

"c!2c6d1c4d9a3..c08255f885f_31bf3856ad364e35_6.0.6001.18000_cb71975b6d1b91f2"=hex:

"c!c3e241eb9ec..c5c40bd1dbf_31bf3856ad364e35_6.0.6001.18000_bd34f4c1577b72ea"=hex:

"c!c70feb0324e..978783a74ff_31bf3856ad364e35_6.0.6001.18000_39bba989cd3e2e2c"=hex:

"c!76f704e06a4..7c024af03af_31bf3856ad364e35_6.0.6001.18000_57d60468cfbbcf47"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0ea06fb502ed3df6e6b5935587b3dbc56b03d4723a16ff6e9ae8d331334c823c]

"c!3a8a18eb2d6..4f5afcd34ad_31bf3856ad364e35_6.0.6001.18000_2b522cf2e25b28c7"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\0f5b22cc310b203d7fdc8e8a422af16ea5172bfd0fd75d58316e778e0152d012]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_92af04df1a6bb1ed"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_55dac56a7590609a"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_0ed22f9b2f6687d8"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_b00d75c5e745d9b5"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_0c7db0e1192b3a1d"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_efd2f79fe8e307c4"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_3efe2ad1ad9c8810"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\110852ce7473b7d9b8121eaa3a5598769d3f02846c4bdbcb1d416bf22c173629]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_e2a2d8dd9051186d"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_e69263536c89f3c1"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_203eff459274c446"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_ab0c2ce1260dbb29"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\11a08feb73a2df2d9f23bbab0b105856a328dbff696d97d9feaf8cbdb648a95b]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_056d32fadd21b197"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\11f0989c1aa06316adf4b6aabb6dcef9b67ab03afb2138b24e97a123474f1ca8]

"c!ca5766aadbf..6ab7436fa8b_31bf3856ad364e35_6.0.6001.18000_ac3642529f6840ae"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\12adf2345f18be8e9005d59233baaaf97f3b2157ea73a08d9296605e298aedde]

"c!1442b62051c..b1f4e5628af_31bf3856ad364e35_6.0.6001.18000_4cb62d1dd119862f"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\12c71b64fd3f5a3c839a6b6f7023ac73804624e880517833889b30f781dfe11d]

"c!1e33f0c0d81..9e44cc84ace_31bf3856ad364e35_6.0.6000.20728_e9380a45c2cbcf2e"=hex:

"c!f46e9c3b61e..7d6d71446ce_31bf3856ad364e35_6.0.6000.16603_ab0f143333cc2677"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1349b5e68e5c8407d2ef77dd5d9b4ebabdf5244a494feb860659c474b3fe0b56]

"c!695e5846598..1968d80a523_31bf3856ad364e35_6.0.6001.18000_4b117281d0713600"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\13e6adc740ec01bc32343079d3a1c3a36d7cf29bc9badfb2a511f2b01b0d3980]

"c!e270f321d33..193dd6f20e2_31bf3856ad364e35_6.0.6000.20728_4b1d55737a4e5db3"=hex:

"c!cccf08e5ddf..ccb33d1ded2_31bf3856ad364e35_6.0.6000.16603_fa76ae0ffecb5ee5"=hex:

"c!750ccdff52d..3a8decc2e7f_31bf3856ad364e35_6.0.6000.20728_7d41868e11764077"=hex:

"c!26fdc902bef..8c29e080ed4_31bf3856ad364e35_6.0.6000.16603_1a3e3d24314760d3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1447caca636f2cd35f680a0a9622a3a9cf7da83d39108a2f87ca6270a6b33a2e]

"c!ee04ab51c77..5a68410b426_31bf3856ad364e35_6.0.6000.16528_9222039a6e3b1e96"=hex:

"c!d72277f02c8..74f4e693ef8_31bf3856ad364e35_6.0.6000.20644_ca77f8ddf45e3469"=hex:

"c!970ea6401fb..1de9116f499_31bf3856ad364e35_6.0.6000.16528_6f3975f88b76de8f"=hex:

"c!bb6739cc484..504dd2588ac_31bf3856ad364e35_6.0.6000.20644_7790463369132b75"=hex:

"c!5f8b3f204be..2ac488dccb6_31bf3856ad364e35_6.0.6000.16528_57e18724ecb8ef02"=hex:

"c!705608f4b90..ac0686358f5_31bf3856ad364e35_6.0.6000.20644_8ecae8a7abe7ff5d"=hex:

"c!29c1ba0b659..2ac76466ad2_31bf3856ad364e35_6.0.6000.16528_1abe49d3ff7518f6"=hex:

"c!040feacd23d..ecaeb939d68_31bf3856ad364e35_6.0.6000.20644_308a1eb937e55d60"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\144a58dd06aeddce5ced1c1fc363603c6de908ea60f41ec49ae4cd3eb88bdcfe]

"c!024d7a64025..22cea2e14d1_31bf3856ad364e35_6.0.6000.20734_96d594688c83112c"=hex:

"c!efeab19f31e..534ce54b21d_31bf3856ad364e35_6.0.6000.16609_c42569dee6872029"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\151cd96630cf80db32cc645da3f5227d92e8db44c145ba30b12a976ae897f152]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_fef6b37bdcb5ee42"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\163015d10118b3169148b2f14d68802d415f9240b2bdb551035971298b1e96dd]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_f8529378f23e8686"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\169b808f1c7cf49ca7addc84cad43d62e89a1a3495599bc259544486ecba4227]

"c!9ebcc959f45..c05765cf1a9_31bf3856ad364e35_6.0.6001.18000_0f884246ae88df70"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\169dce313b6d0967d7fbb8e5917186ae2a04b87552d467028e7043b5e9200eab]

"c!b8b85d39357..6a88b512829_31bf3856ad364e35_6.0.6000.20734_10fdebd431d715d4"=hex:

"c!427c55677ff..def4dac2f3d_31bf3856ad364e35_6.0.6000.16609_e619c7ccc6f72cd2"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1859e4ca438ff0e93754997ec185a37c9f38e42e340ecf26808bc840f0901929]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_01caaa27d2d7936b"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\18f983d22f3428897ae7779ffe3d350f7b18f8fba17f76d2501bbb64917c7895]

"c!cef38b9497b..4f1c69f0375_31bf3856ad364e35_6.0.6000.16509_3dbb2d5422335202"=hex:

"c!1bb9c504430..d9d073d6a4b_31bf3856ad364e35_6.0.6000.20624_fddb8725a057edb2"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\198481198f72ff6e811a0180d1a27f58ca070c5e51e8bac4b4af94e49322229a]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_9b9446380301ca31"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1a3194f88073e6c03595db376a21306107a54b38fed11cf525c81d285871cd2f]

"c!4e790e30dc9..343eb11ae3e_31bf3856ad364e35_6.0.6000.20751_53394a2423a4063c"=hex:

"c!1fb91069092..768678fcc80_31bf3856ad364e35_6.0.6000.16626_2f1d1f7cf48af9cd"=hex:

"c!02760b8fedc..a013194bbf6_31bf3856ad364e35_6.0.6000.16626_5d6f1ac0bc9b8e27"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1a48e683c6f87d2d5799b148c8eb2045ef0df4f8ce78a2465928c55a00071bf5]

"c!f6b68388669..5ad840a3268_31bf3856ad364e35_6.0.6000.20668_71712ae611c37b2e"=hex:

"c!aed49df0043..81e61f946d6_31bf3856ad364e35_6.0.6000.16549_03b906cb3b7496a3"=hex:

"c!76765f96f73..bf9ddc003f5_31bf3856ad364e35_6.0.6000.20670_a55a47ab33b2936f"=hex:

"c!a31fd3bc15f..cb88d145cbb_31bf3856ad364e35_6.0.6000.16551_3499fac42d0b6dd6"=hex:

"c!30afc3ac374..1d67bbb51f4_31bf3856ad364e35_6.0.6000.20668_2828f14c63ff900b"=hex:

"c!bb13ff288bd..eef7d4c930f_31bf3856ad364e35_6.0.6000.16549_971bb37c07c597d4"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1abd19ac13c311567017e409b52684906d2249b29f69318b4bccf3b882bf9cab]

"c!311c30688d1..f972e5e45ad_31bf3856ad364e35_6.0.6000.20734_cf199ba54254a13f"=hex:

"c!34fdd5b8ab6..c3ee158b5b7_31bf3856ad364e35_6.0.6000.16609_4569c63d51dfacf2"=hex:

"c!0ac78b8d85f..30750b09828_31bf3856ad364e35_6.0.6000.20734_eeaad1f868fd9b91"=hex:

"c!6159f2f4403..b97569e47d3_31bf3856ad364e35_6.0.6000.16609_5a683621bb4306d8"=hex:

"c!7792aa55aa6..fbfa3ec5966_31bf3856ad364e35_6.0.6000.20734_61869f7d3bacf9f5"=hex:

"c!2a4ad2edfe9..e96259f2e95_31bf3856ad364e35_6.0.6000.16609_69d16d4a85c075e5"=hex:

"c!e9d8ac32a3f..872b6e68464_31bf3856ad364e35_6.0.6000.20734_02e943a94cf6b494"=hex:

"c!92ea99e8bbc..58879ff2b39_31bf3856ad364e35_6.0.6000.16609_94d3dd8df58e7b02"=hex:

"c!c81955fe808..fa43728ed4c_31bf3856ad364e35_6.0.6000.20734_5dd2f9a4bad99756"=hex:

"c!a2944f83e9c..097684f8704_31bf3856ad364e35_6.0.6000.16609_177d81b7e9c74b35"=hex:

"c!1fcd1033fb8..3b5d4f42c08_31bf3856ad364e35_6.0.6000.20734_f4215ff93b5af50e"=hex:

"c!388f2e752e8..4968ccec331_31bf3856ad364e35_6.0.6000.16609_2260198d84bb45ac"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1b21afec1f50c8d5cb45edbff2ac611363e80ee03167cf8da3cf15510773a0a6]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_6d9aa1bda7490006"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1b38700edba3dc505a41e38f5cba0553b1ad85fe9e439151b853ded11f409a6d]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_ff39a23a724132d6"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1bc290f6f0ab33b64ae8618627579d935bb52bfcba359faf586299b22ca7665c]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_da748206cb810d6f"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_67ce1a00821817be"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_4ad6bea84d7e95c0"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1ed75ceef0254b5f7edf129424200d1dcd5b217c4bc6068fc49453b470fff4f0]

"c!b593edcc2ca..220543e6b9a_31bf3856ad364e35_6.0.6001.18000_09745b5aa6ca9555"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1fdc8bef94018d9ce1e4267f7830387c27fe05cc5ee524af0705dd66c5f3bded]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_14e2371417a0cdcc"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\1fe5a888ee7a61b3f76e679ac5d8656e7d3283fb1af7e718513854de8ffd8866]

"c!d24166d59eb..3a877699819_31bf3856ad364e35_6.0.6001.18000_64d89e4cdfdaf410"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\20e605dd039d54cc4d1122c6f51581efbbcf031bd80eb3552f70f68d1dd8da2c]

"c!256ce5f1112..facec69d187_31bf3856ad364e35_6.0.6001.18000_d4ea8c0c066625ff"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\224563418fac6ea5857983dbc6620ba79abb501eb744b6c51f3f535c1a13325c]

"c!fdfaef99fc6..083d127acbb_31bf3856ad364e35_6.0.6001.18000_148f397adaf07abc"=hex:

"c!46894d99499..4d4e25fc301_31bf3856ad364e35_6.0.6001.18000_675cecbc03235e56"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\22eeac6221eb049c84d34bc87db99e47b603dc57394381970a8742e913b44f85]

"c!b305e65ba44..907e7f747f1_31bf3856ad364e35_6.0.6000.20734_5368f0feaf045dbb"=hex:

"c!39726e4a500..ce722900604_31bf3856ad364e35_6.0.6000.16609_5cf5381323b3b7b5"=hex:

"c!b20e5e4e13b..82abaeee0fc_31bf3856ad364e35_6.0.6000.20734_da2ff14e95cf3797"=hex:

"c!47f50077bea..e93521e9bfb_31bf3856ad364e35_6.0.6000.16609_44e1e5fe056075a9"=hex:

"c!2b5a9b66900..44fa4b9cba2_31bf3856ad364e35_6.0.6000.20734_785b7b119be42c57"=hex:

"c!c0552204dbe..2644b6971a8_31bf3856ad364e35_6.0.6000.16609_33c4371b89259a35"=hex:

"c!eb615067ede..0a050668668_31bf3856ad364e35_6.0.6000.20734_482e4329ee52b0f2"=hex:

"c!8a3a349c742..179c2bbc0e3_31bf3856ad364e35_6.0.6000.16609_03eafaaf03b1a975"=hex:

"c!fb15b7ba297..a7039678c57_31bf3856ad364e35_6.0.6000.20734_b2ccd443425c02e3"=hex:

"c!da0ec770847..b93a8edb944_31bf3856ad364e35_6.0.6000.16609_4afcdaa578471245"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\24377ccd22ccfc1d0074dee5164572a956dcedeaaf78ed74ded3215001057852]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_a3080a4aacea9cd4"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_21cfece60624be86"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_0f2410f85b852f1c"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_400e8c2738f28fc9"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_4a8381119d37e8ad"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_ec86d3d8077a9d2c"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_e4642c38f5773e63"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\255a97972d783fe4dcc7576751c2c7e3b53049bbdc1b2fd6e0c44ebb34b251ae]

"c!microsoft-w...deployment_31bf3856ad364e35_7.0.6000.381_716913dab37a04a5"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\27e00d6d534772bb3ddbd1d90bb35b74967b965d5c6bf2ee80d66ce836680a9e]

"c!b9f0502e913..59e5ccce15c_31bf3856ad364e35_6.0.6000.20734_091201deb6434755"=hex:

"c!7bfac86eda9..2881ebc6368_31bf3856ad364e35_6.0.6000.16609_9c08a65787ede3a4"=hex:

"c!fcda8d38a08..ef9545ec366_31bf3856ad364e35_6.0.6000.20734_36e4914fd8d66bd1"=hex:

"c!59b7e993fd2..6e04e3181fe_31bf3856ad364e35_6.0.6000.16609_e138f4fc96944654"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\28cef63210d7da543d223bcee3ffd5e4c86e394b57d325e1a3e31c81ed10262f]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_2600e44876e85b02"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_c27584f2a0c7fea1"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_8bce1803345afc71"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_67677c24e9d228fa"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_8cb0ff110c2f3373"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_ddc821e73d066734"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_8ac3caf6ea19bd17"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_775f29d23a5871d2"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_75c3dabf251526ca"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_4243a270fad6e304"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_23bf4483a761da52"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_3178b5253e077f76"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_52205b475cd87093"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_253615f3bd632015"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_7a82be5a151627fb"=hex:

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_9b62ae4593b3ad53"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\29f2f682e0f0458447a408f160f59165a15effb9ad6cd8d0e45c2a5913147b9e]

"c!b471fbe3abf..b89129fe71c_31bf3856ad364e35_6.0.6000.20712_32d331f5b93a9cd9"=hex:

"c!b976f656d83..aef9dcd9f9c_31bf3856ad364e35_6.0.6000.16589_87aa81f76957dc54"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2a2616af89c2d65e131e926941a674c35fa2aa9daf2eb44a929144fa1bca108f]

"c!40a15b63449..9f07adc7565_31bf3856ad364e35_6.0.6001.18000_7c6819dc831abf8c"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2a8115fabc3e06cfd126d88e5a2231fcfbc4ffcde1684dabfa9fbce5635ec6c6]

"c!cc1723983eb..982fe1b9e8f_31bf3856ad364e35_6.0.6001.18000_5aa9048f44f82911"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2ab0acabbcdf39eb87e56663b00bde9846871c06fc7d933ba7c875f15743bc27]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_a55678e1ff2c743b"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2b39951ee5a1417fd796efd7b39b5771dce49fbf802a848d1d74e511b6ef7c74]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_1ea9fc9c4bea7d69"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2c2c7dfcd0b285fd35fd8a8dd2b2fa18c55dcb2825508840bab9b8a75ba1dc4f]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_05ebf8de2bf7b2e0"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2c5f47b7ae8868334501c228bbfa15209d4b7203ae74b806ed91e55511f242f5]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_aabc48b3e0446453"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_797e4f9dd260fe36"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_c340e322232011a0"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_5c3e082ea05f6c51"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_6198e5e95ce33128"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_42d0966ae932d455"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_861417cca2cc208c"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_ffdca6155487406e"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_5c2a76062718ced2"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_ed3368511041ca7e"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_01b3f429fdb19044"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_5df1291c2a31ce8e"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_0f12ba7712e1dcaa"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_6f1c5f7abc9c2114"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_542e5110df5a3443"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_8bc1f77f7961cfd1"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_1ab96e75a2c1a8d2"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2d52e15c4f24c0e18569cea92dc2d54e6c03093eda161af1def9c0d083bc82c2]

"c!b8c83534d86..559281bc515_31bf3856ad364e35_6.0.6000.20728_e07e436aea2cdee4"=hex:

"c!d39b80a6648..83f3e69898d_31bf3856ad364e35_6.0.6000.16603_f0f4edcc5052a2a9"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2d5719fd57faf5ad70793b12b8573028f78ed70b9f9163f7567afa7a7f63219c]

"c!0ce5114daff..715d82fa427_31bf3856ad364e35_6.0.6000.20728_84e5bd7d6852da23"=hex:

"c!97ecafcf7f0..f6babcab7cc_31bf3856ad364e35_6.0.6000.16603_20347cae134cbbed"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2dca4de748732d401017c0a4f0bc6b97366a7bbbf36cc083b04aac263b803700]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_1580b6e276533d6e"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2de0a53e4687e594c24bfb45a43c3b1f9bb336ef3960cc2e900b52f5b277d1a9]

"c!71d5e82a383..2bcce10661c_31bf3856ad364e35_6.0.6001.18000_0ab6db17cd1232d2"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2f6d83127ae97eb5088b90e7a17effeb203a3a9bcd45c5ee00312a3f9f6013c8]

"c!c31623ddabe..2a6cf3e9cec_31bf3856ad364e35_6.0.6000.16510_261bec04196c5779"=hex:

"c!ad8367a27c9..062afce8815_31bf3856ad364e35_6.0.6000.20625_fbf0d0f0af1815ac"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\2fd2e16b16f9c7a01aafe12dbb2bcb413cf5fe07954d953694b902c8353eb1cb]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_bdc71b06690d198a"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\305332c6603abd0a68a8b539eeaeb0addbd3669a46e8e620adc3986def4a3401]

"c!7f1261eb1ee..a78985ab554_b03f5f7f11d50a3a_6.0.6001.18000_b985bfcc6c331637"=hex:

"c!f7111c30848..0828218fcce_31bf3856ad364e35_6.0.6001.18000_828bd46f32485966"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\309be9f955d964728f47e20b39e9f43b6547630c9270ea451aaf1e560c1a128c]

"c!a9f1ec91046..a099b01bf35_31bf3856ad364e35_6.0.6000.20792_00477765a505b196"=hex:

"c!be3b44c4ce6..61c1d44ef4c_31bf3856ad364e35_6.0.6000.16652_548506addc9796d3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\313fd98286c19b4fabbd6e1dcf5ec5d3fa8de0c453482a86d7ee8633dc8bf81f]

"c!e03e80cc937..60398806ea7_31bf3856ad364e35_6.0.6000.16512_109815c47b097959"=hex:

"c!f7d47a8f754..79153423c72_31bf3856ad364e35_6.0.6000.20627_71955a9c2554bbec"=hex:

"c!b03e5cc4c2d..5d694ca3864_31bf3856ad364e35_6.0.6000.16512_0f40e39d47041a73"=hex:

"c!620020332b1..84765a7309b_31bf3856ad364e35_6.0.6000.20627_9e7537de5df26f8e"=hex:

"c!626e35c9e01..54bc265ed92_31bf3856ad364e35_6.0.6000.16527_06a0b50a31ebe742"=hex:

"c!19a521592e8..0eaeaaf9252_31bf3856ad364e35_6.0.6000.20643_0d5115994edb5bd3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\3163d62242d7ec800b0155f13403e9b478df9da43c0f28dcfddbf735cfbb9622]

"c!05c6ca7246c..32afe75baf6_31bf3856ad364e35_6.0.6000.20728_1ec639a3461f6764"=hex:

"c!8d694d38e72..6925d380263_31bf3856ad364e35_6.0.6000.16603_f8c878c49d1b25c6"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\31fd8423449cedf1a268579908faa0f5d215920d1d5aeafb212fc326a24983fd]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_fa16d3cdf242bb4b"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\32405ef33df127c83eabdb4a414842f87fb141207ed6bd2aa2f5eb461f82c296]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_aa4faa728eff4de0"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\328a942880ffd0ce3f9a0651e61f6ac78e6122bdc0570d3c805f2611489ee68c]

"c!9eabd5d6805..86c5300de0b_31bf3856ad364e35_6.0.6000.20728_69791c5839f9faf0"=hex:

"c!33c7108c1a0..67b08aebad8_31bf3856ad364e35_6.0.6000.16603_b86fd472737081b3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\348af2f512be7b04af659ec2b12d0d60cf9a5697e9f4b72a0b72ffeb60cb5b86]

"c!f2dd01f2032..661bf24827f_31bf3856ad364e35_6.0.6000.16478_e38721a2fccac79f"=hex:

"c!3062b910f83..463846fbca1_31bf3856ad364e35_6.0.6000.20588_4e137d9609394891"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\35045fc1921833be28ccd7fdd7afe8d8873d45bc4b221bf16e146a69c21b338a]

"c!8f6b6d03aaa..e70291a0736_31bf3856ad364e35_6.0.6001.18000_13114691f51a704b"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\353ec79a1e246a21b099c5646a2f896913c3b75c810926ce6f3e8494114fd166]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_f995b5384380b0aa"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\354c403e559cfec0fbd2199ffb752618804df222ccf1d0e9dcadf0ffbcbcab32]

"c!223d1da6253..d479f117912_31bf3856ad364e35_6.0.6000.20734_3f88711951f21d97"=hex:

"c!1b3a35b87fa..4de24ea299e_31bf3856ad364e35_6.0.6000.16609_0af83418657af8cd"=hex:

"c!c7a2f8be6e3..85c13bb0ed2_31bf3856ad364e35_6.0.6000.20734_d5de4510d1b54b00"=hex:

"c!8488f8385e8..37e395bc61d_31bf3856ad364e35_6.0.6000.16609_1e7f0af1f0e241e7"=hex:

"c!29f0fbbacb9..93383236d09_31bf3856ad364e35_6.0.6000.20734_52393eb4e8861a4f"=hex:

"c!baa9e14d372..e15716ac6eb_31bf3856ad364e35_6.0.6000.16609_8ee0ce1a902874b8"=hex:

"c!92145528367..528da2a2f30_31bf3856ad364e35_6.0.6000.20734_544b6eac49d93598"=hex:

"c!109b48d9723..cd859be9f04_31bf3856ad364e35_6.0.6000.16609_aef09f6dfc370ef4"=hex:

"c!4a36f5e2293..b23d6bae436_31bf3856ad364e35_6.0.6000.20734_c6b0aa0c20a46fb9"=hex:

"c!94bd61a7bed..68363e8bc01_31bf3856ad364e35_6.0.6000.16609_0721f536b250da68"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\35b7752d8a1acec279014345c067d8832720acc714d520dc69c6c495cb90700e]

"c!microsoft-w..anguagepack_31bf3856ad364e35_6.0.6000.16386_b10d838422788dc3"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\36b3466c3a580d1ecdc368e016348dbbe6ca39b6fb7f89384b044ccc28db4438]

"c!2f2d7fdfd1a..a906a3df702_31bf3856ad364e35_6.0.6001.22136_8ef1eb2205ae335a"=hex:

"c!9007c71cf49..0721c02f291_31bf3856ad364e35_6.0.6001.18035_f1962f8e396ae0a6"=hex:

 

[HKEY_LOCAL_MACHINE\COMPONENTS\CanonicalData\Catalogs\36d0c650c811fbb6d5f85d38078d6fe3dba6406de9107917f1eef4dfc974f454]

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_98ba08a4d6f3d0d0"=hex:

"c!microsoft-w..-deployment_31bf3856ad364e35_6.0.6000.16386_b256179a654543a2"=hex:

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

On ne s'est pas compris.C'est la clé run qui m'intéresse.

Or il semblerait que votre rapport clé.bat contienne toute la clé HKEY_LOCAL_MACHINE\

Vous aviez bien copié/collé ?

 

copiez/collez les lignes suivantes dans le bloc notes,

enregistez sous clé.bat et double clic sur le fichier bat.

 

regedit /a /e %systemdrive%\regkey.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"

notepad %systemdrive%\regkey.txt

del /q %systemdrive%\regkey.txt

 

 

Comment se comporte votre pc après la dernière manipulation(fichier .reg du 26)?

Invité sebc

Invité sebc

Posté(e)
Posté(e)

Salut

je m’excuse pour les erreurs commises car je ne suis pas un grand expert en la matière

Mon Pc après la dernière manipulation du fichier .reg du 26 na rien changé dans le principe ou quand je lance Combofix le redémarrage du Pc se fait sans le message d’erreur mais lors d’un redémarrage demandé par moi le message d’erreur revient de plus belle.

Quand a la clé « run » quand je le fait par les lignes que tu me donne cela donne toujours la même chose un rapport immense, si je le fait manuellement je trouve plusieurs fichier dans le fichier run

Comme :

(par défaut)

Acer Tour

ATICCC

ccApp

eDataSecurity Loader

LManager

MMTray

QuickTime Trask

RtHDVCpl

SetPanel

SetPoint

SynTPEnh

WarReg_PopUp

Windows Defender

Tous c’est fichier son en REG_SZ sauf Windows Defender qui est en REG_EXPAND_SZ

Donc voila tous ce que je peut te dire a par un oublie de ma par au début en n’ayant pas dit que toutes les périphéries USB ne reconnaisse plus rien

 

Ci non toutes t’est consignes ont été respecté a la lettre

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

dans hijackthis, cochez cette ligne:

 

O4 - HKLM\..\Run: [WindowsServicesStartup] C:\Users\L'EAUV~1\AppData\Local\Temp\svchost.exe 1

 

Dans AppData, supprimez ce fichier:Temp\svchost.exe 1

 

Imprimez ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

 

 

Télécharger Malwarebytes' Anti-Malware (MBAM)

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes.

 

Double-cliquer sur l'icône Download_mbam-setup.exe sur le bureau pour démarrer l'installation.

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet).

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

vérifiez que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

 

MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse.

Comme il se met automatiquement à jour en fin d'installation, cliquer sur OK pour fermer la boîte de dialogue.

La fenêtre principale de MBAM s'affiche :

 

Dans l'onglet analyse, vérifier que "Exécuter une analyse approfondie" est coché et cliquer sur le bouton Rechercher pour démarrer l'analyse.

 

L' analyse prendra un certain temps, soyez patient !

Un message s'affichera, en indiquant la fin .

Cliquer sur OK pour continuer.

 

Si des malwares ont été détectés, leur liste s'affiche.

En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

 

MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

Fermer le bloc-note.

Fermer MBAM en cliquant sur Quitter.

Poster le rapport .

Invité sebc

Invité sebc

Posté(e)
Posté(e)

Salut,

 

dans hijackthis

 

O4 - HKLM\..\Run: [WindowsServicesStartup] C:\Users\L'EAUV~1\AppData\Local\Temp\svchost.exe 1

cette ligne n'existe plus

 

Temp\svchost.exe 1

 

ce fichier est introuvable

 

Rapport d'analyse

 

Malwarebytes' Anti-Malware 1.11

Version de la base de données: 719

 

Type de recherche: Examen complet (C:\|D:\|)

Eléments examinés: 174581

Temps écoulé: 1 hour(s), 24 minute(s), 56 second(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...