Kód: Vybrat vše
MBRScan v1.0.6
OS : Windows 7 Service Pack 1 (64 bit)
PROCESSOR : Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
BOOT : Normal Boot
DATE : 2012/01/22 (ISO 8601) at 19:29:23
________________________________________________________________________________
Device\Harddisk0\DR0 931.5 Go [Fixed] ==> HP Recovery Manager.. ==> PARTITION TABLE FAKED !!
MBR_MD5 : 4DA2FF269AF812C8F2CA2669285CFB1E
MBR_SHA1 : AA818CACAC054D26163B14DA4335626CFB5C6EF3
Device\Harddisk0\Partition1 100.0 Mo 0x07 NTFS / HPFS __ BOOTABLE __
Device\Harddisk0\Partition2 918.3 Go 0x07 NTFS / HPFS
Device\Harddisk0\Partition3 13.11 Go 0x07 NTFS / HPFS
________________________________________________________________________________
_______MBR \Device\Harddisk0\DR0
0x00000000 33 C0 8E D0 BC 00 7C FB 8E C0 8E D8 8B F4 BF 00 3À.м.|û.À.Ø.ô¿.
0x00000010 06 B9 00 02 FC F3 A4 EA 60 06 00 00 00 00 00 00 .¹..üó¤ê`.......
0x00000020 52 65 63 6F 76 65 72 79 4D 67 72 20 00 00 CD 72 RecoveryMgr ..Ír
0x00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0D 0A ................
0x00000050 00 00 00 00 57 00 00 00 FF FF FF FF FF FF FF FF ....W...........
0x00000060 86 4C BD BE 30 06 AC B4 0E 33 DB CD 10 0A C0 75 .L½¾0.¬´.3ÛÍ..Àu
0x00000070 F5 E3 0B FE 06 13 06 53 53 E8 70 00 EB 39 B4 11 õã.þ...SSèp.ë9´.
0x00000080 CD 16 74 2D B4 10 CD 16 80 FC 85 75 F1 3C 00 75 Í.t-´.Í..ü.uñ<.u
0x00000090 ED EB 24 8B 16 6C 04 FA 66 A1 1C 06 BF 54 06 B1 íë$..l.úf¡..¿T.±
0x000000A0 03 F2 66 AF FB 3D 00 00 6C 04 2B C2 83 F8 24 76 .òf¯û=..l.+Â.ø$v
0x000000B0 E6 B0 01 84 C0 75 1C BB C6 7D 66 8B 37 66 8B 3E æ°..Àu.»Æ}f.7f.>
0x000000C0 2C 06 66 3B F7 74 07 80 C3 10 73 EE EB 05 BB 28 ,.f;÷t..Ã.sîë.»(
0x000000D0 06 EB 10 BB C2 7D 80 7F FC 00 78 07 80 C3 10 73 .ë.»Â}..ü.x..Ã.s
0x000000E0 F5 EB FE 66 FF 77 04 E8 02 00 FF E4 C8 10 00 00 õëþf.w.è...äÈ...
0x000000F0 B4 08 B2 80 CD 13 8A C1 24 3F FE C6 8A D8 F6 E6 ´.².Í..Á$?þÆ.Øöæ
0x00000100 C0 E9 06 86 CD 41 91 F7 E1 39 56 06 8B 56 06 8B Àé..ÍA.÷á9V..V..
0x00000110 46 04 73 1C F7 F1 91 92 F6 F3 86 CD C0 E1 06 02 F.s.÷ñ..öó.ÍÀá..
0x00000120 CC 41 8A F0 B8 01 02 BB 00 7C 86 26 13 06 EB 14 ÌA.ð¸..».|.&..ë.
0x00000130 83 C4 10 0E 0E 52 50 0E 68 00 7C 6A 01 6A 10 8B .Ä...RP.h.|j.j..
0x00000140 F4 B8 00 42 B2 80 CD 13 C9 C2 04 00 1E 50 53 0E ô¸.B².Í.ÉÂ...PS.
0x00000150 1F BB 1B 06 A0 17 04 24 0F 88 47 04 E4 60 3C E0 .».....$..G.ä`<à
0x00000160 74 1A 3C 1D 74 10 3C 2A 74 0C 3C 36 74 08 3C 38 t.<.t.<*t.<6t.<8
0x00000170 74 04 84 C0 79 06 66 83 27 00 EB 06 FE 07 02 1F t..Ày.f.'.ë.þ...
0x00000180 88 07 5B 58 1F EA 00 00 00 00 00 00 00 00 00 00 ..[X.ê..........
0x00000190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001B0 00 00 00 00 00 00 00 00 8B D5 2F BA 00 00 80 20 .........Õ/º...
0x000001C0 21 00 07 DF 13 0C 00 08 00 00 00 20 03 00 00 DF !..ß....... ...ß
0x000001D0 14 0C 07 FE FF FF 00 28 03 00 00 D8 C9 72 00 FE ...þ...(...ØÉr.þ
0x000001E0 FF FF 07 FE FF FF 00 00 CD 72 00 60 A3 01 00 00 ...þ....Ír.`£...
0x000001F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
__________________________16_BIT_ASM_CODE
0x0000 33c0 XOR AX, AX
0x0002 8ed0 MOV SS, AX
0x0004 bc 007c MOV SP, 0x7c00
0x0007 fb STI
0x0008 8ec0 MOV ES, AX
0x000A 8ed8 MOV DS, AX
0x000C 8bf4 MOV SI, SP
0x000E bf 0006 MOV DI, 0x600
0x0011 b9 0002 MOV CX, 0x200
0x0014 fc CLD
0x0015 f3 a4 REP MOVSB
0x0017 ea 6006 0000 JMP FAR 0x0:0x660
0x001C 0000 ADD [BX+SI], AL
0x001E 0000 ADD [BX+SI], AL
0x0020 52 PUSH DX
0x0021 65 636f 76 ARPL GS:[BX+0x76], BP
0x0025 65 DB 0x65
0x0025 65 72 79 JB 0xa1
0x0028 4d DEC BP
0x0029 67 DB 0x67
0x0029 67 72 20 JB 0x4c
0x002C 0000 ADD [BX+SI], AL
0x002E cd 72 INT 0x72
0x0030 0000 ADD [BX+SI], AL
0x0032 0000 ADD [BX+SI], AL
0x0034 0000 ADD [BX+SI], AL
0x0036 0000 ADD [BX+SI], AL
0x0038 0000 ADD [BX+SI], AL
0x003A 0000 ADD [BX+SI], AL
0x003C 0000 ADD [BX+SI], AL
0x003E 0000 ADD [BX+SI], AL
0x0040 0000 ADD [BX+SI], AL
0x0042 0000 ADD [BX+SI], AL
0x0044 0000 ADD [BX+SI], AL
0x0046 0000 ADD [BX+SI], AL
0x0048 0000 ADD [BX+SI], AL
0x004A 0000 ADD [BX+SI], AL
0x004C 0000 ADD [BX+SI], AL
0x004E 0d 0a00 OR AX, 0xa
0x0051 0000 ADD [BX+SI], AL
0x0053 0057 00 ADD [BX+0x0], DL
0x0056 0000 ADD [BX+SI], AL
0x0058 ff DB 0xff
0x0059 ff DB 0xff
0x005A ff DB 0xff
0x005B ff DB 0xff
0x005C ff DB 0xff
0x005D ff DB 0xff
0x005E ff DB 0xff
0x005F ff86 4cbd INC WORD [BP-0x42b4]
0x0063 be 3006 MOV SI, 0x630
0x0066 ac LODSB
0x0067 b4 0e MOV AH, 0xe
0x0069 33db XOR BX, BX
0x006B cd 10 INT 0x10
0x006D 0ac0 OR AL, AL
0x006F 75 f5 JNZ 0x66
0x0071 e3 0b JCXZ 0x7e
0x0073 fe06 1306 INC BYTE [0x613]
0x0077 53 PUSH BX
0x0078 53 PUSH BX
0x0079 e8 7000 CALL 0xec
0x007C eb 39 JMP 0xb7
0x007E b4 11 MOV AH, 0x11
0x0080 cd 16 INT 0x16
0x0082 74 2d JZ 0xb1
0x0084 b4 10 MOV AH, 0x10
0x0086 cd 16 INT 0x16
0x0088 80fc 85 CMP AH, 0x85
0x008B 75 f1 JNZ 0x7e
0x008D 3c 00 CMP AL, 0x0
0x008F 75 ed JNZ 0x7e
0x0091 eb 24 JMP 0xb7
0x0093 8b16 6c04 MOV DX, [0x46c]
0x0097 fa CLI
0x0098 66 a1 1c06 MOV EAX, [0x61c]
0x009C bf 5406 MOV DI, 0x654
0x009F b1 03 MOV CL, 0x3
0x00A1 f2 66 af REPNZ SCASD
0x00A4 fb STI
0x00A5 3d 0000 CMP AX, 0x0
0x00A8 6c INSB
0x00A9 04 2b ADD AL, 0x2b
0x00AB c2 83f8 RET 0xf883
0x00AE 24 76 AND AL, 0x76
0x00B0 e6 b0 OUT 0xb0, AL
0x00B2 0184 c075 ADD [SI+0x75c0], AX
0x00B6 1c bb SBB AL, 0xbb
0x00B8 c6 DB 0xc6
0x00B9 7d 66 JGE 0x121
0x00BB 8b37 MOV SI, [BX]
0x00BD 66 8b3e 2c06 MOV EDI, [0x62c]
0x00C2 66 3bf7 CMP ESI, EDI
0x00C5 74 07 JZ 0xce
0x00C7 80c3 10 ADD BL, 0x10
0x00CA 73 ee JAE 0xba
0x00CC eb 05 JMP 0xd3
0x00CE bb 2806 MOV BX, 0x628
0x00D1 eb 10 JMP 0xe3
0x00D3 bb c27d MOV BX, 0x7dc2
0x00D6 807f fc 00 CMP BYTE [BX-0x4], 0x0
0x00DA 78 07 JS 0xe3
0x00DC 80c3 10 ADD BL, 0x10
0x00DF 73 f5 JAE 0xd6
0x00E1 eb fe JMP 0xe1
0x00E3 66 ff77 04 PUSH DWORD [BX+0x4]
0x00E7 e8 0200 CALL 0xec
0x00EA ffe4 JMP SP
0x00EC c8 1000 00 ENTER 0x10, 0x0
0x00F0 b4 08 MOV AH, 0x8
0x00F2 b2 80 MOV DL, 0x80
0x00F4 cd 13 INT 0x13
0x00F6 8ac1 MOV AL, CL
0x00F8 24 3f AND AL, 0x3f
0x00FA fec6 INC DH
0x00FC 8ad8 MOV BL, AL
0x00FE f6e6 MUL DH
0x0100 c0e9 06 SHR CL, 0x6
0x0103 86cd XCHG CH, CL
0x0105 41 INC CX
0x0106 91 XCHG CX, AX
0x0107 f7e1 MUL CX
0x0109 3956 06 CMP [BP+0x6], DX
0x010C 8b56 06 MOV DX, [BP+0x6]
0x010F 8b46 04 MOV AX, [BP+0x4]
0x0112 73 1c JAE 0x130
0x0114 f7f1 DIV CX
0x0116 91 XCHG CX, AX
0x0117 92 XCHG DX, AX
0x0118 f6f3 DIV BL
0x011A 86cd XCHG CH, CL
0x011C c0e1 06 SHL CL, 0x6
0x011F 02cc ADD CL, AH
0x0121 41 INC CX
0x0122 8af0 MOV DH, AL
0x0124 b8 0102 MOV AX, 0x201
0x0127 bb 007c MOV BX, 0x7c00
0x012A 8626 1306 XCHG [0x613], AH
0x012E eb 14 JMP 0x144
0x0130 83c4 10 ADD SP, 0x10
0x0133 0e PUSH CS
0x0134 0e PUSH CS
0x0135 52 PUSH DX
0x0136 50 PUSH AX
0x0137 0e PUSH CS
0x0138 68 007c PUSH 0x7c00
0x013B 6a 01 PUSH 0x1
0x013D 6a 10 PUSH 0x10
0x013F 8bf4 MOV SI, SP
0x0141 b8 0042 MOV AX, 0x4200
0x0144 b2 80 MOV DL, 0x80
0x0146 cd 13 INT 0x13
0x0148 c9 LEAVE
0x0149 c2 0400 RET 0x4
0x014C 1e PUSH DS
0x014D 50 PUSH AX
0x014E 53 PUSH BX
0x014F 0e PUSH CS
0x0150 1f POP DS
0x0151 bb 1b06 MOV BX, 0x61b
0x0154 a0 1704 MOV AL, [0x417]
0x0157 24 0f AND AL, 0xf
0x0159 8847 04 MOV [BX+0x4], AL
0x015C e4 60 IN AL, 0x60
0x015E 3c e0 CMP AL, 0xe0
0x0160 74 1a JZ 0x17c
0x0162 3c 1d CMP AL, 0x1d
0x0164 74 10 JZ 0x176
0x0166 3c 2a CMP AL, 0x2a
0x0168 74 0c JZ 0x176
0x016A 3c 36 CMP AL, 0x36
0x016C 74 08 JZ 0x176
0x016E 3c 38 CMP AL, 0x38
0x0170 74 04 JZ 0x176
0x0172 84c0 TEST AL, AL
0x0174 79 06 JNS 0x17c
0x0176 66 8327 00 AND DWORD [BX], 0x0
0x017A eb 06 JMP 0x182
0x017C fe07 INC BYTE [BX]
0x017E 021f ADD BL, [BX]
0x0180 8807 MOV [BX], AL
0x0182 5b POP BX
0x0183 58 POP AX
0x0184 1f POP DS
0x0185 ea 0000 0000 JMP FAR 0x0:0x0
0x018A 0000 ADD [BX+SI], AL
0x018C 0000 ADD [BX+SI], AL
0x018E 0000 ADD [BX+SI], AL
0x0190 0000 ADD [BX+SI], AL
0x0192 0000 ADD [BX+SI], AL
0x0194 0000 ADD [BX+SI], AL
0x0196 0000 ADD [BX+SI], AL
0x0198 0000 ADD [BX+SI], AL
0x019A 0000 ADD [BX+SI], AL
0x019C 0000 ADD [BX+SI], AL
0x019E 0000 ADD [BX+SI], AL
0x01A0 0000 ADD [BX+SI], AL
0x01A2 0000 ADD [BX+SI], AL
0x01A4 0000 ADD [BX+SI], AL
0x01A6 0000 ADD [BX+SI], AL
0x01A8 0000 ADD [BX+SI], AL
0x01AA 0000 ADD [BX+SI], AL
0x01AC 0000 ADD [BX+SI], AL
0x01AE 0000 ADD [BX+SI], AL
0x01B0 0000 ADD [BX+SI], AL
0x01B2 0000 ADD [BX+SI], AL
0x01B4 0000 ADD [BX+SI], AL
0x01B6 0000 ADD [BX+SI], AL
0x01B8 8bd5 MOV DX, BP
0x01BA 2f DAS
0x01BB ba 0000 MOV DX, 0x0
0x01BE 8020 21 AND BYTE [BX+SI], 0x21
0x01C1 0007 ADD [BX], AL
0x01C3 df13 FIST WORD [BP+DI]
0x01C5 0c 00 OR AL, 0x0
0x01C7 0800 OR [BX+SI], AL
0x01C9 0000 ADD [BX+SI], AL
0x01CB 2003 AND [BP+DI], AL
0x01CD 0000 ADD [BX+SI], AL
0x01CF df14 FIST WORD [SI]
0x01D1 0c 07 OR AL, 0x7
0x01D3 fe DB 0xfe
0x01D4 ff DB 0xff
0x01D5 ff00 INC WORD [BX+SI]
0x01D7 2803 SUB [BP+DI], AL
0x01D9 0000 ADD [BX+SI], AL
0x01DB d8c9 FMUL ST, ST(1)
0x01DD 72 00 JB 0x1df
0x01DF fe DB 0xfe
0x01E0 ff DB 0xff
0x01E1 ff07 INC WORD [BX]
0x01E3 fe DB 0xfe
0x01E4 ff DB 0xff
0x01E5 ff00 INC WORD [BX+SI]
0x01E7 00cd ADD CH, CL
0x01E9 72 00 JB 0x1eb
0x01EB 60 PUSHA
0x01EC a3 0100 MOV [0x1], AX
0x01EF 0000 ADD [BX+SI], AL
0x01F1 0000 ADD [BX+SI], AL
0x01F3 0000 ADD [BX+SI], AL
0x01F5 0000 ADD [BX+SI], AL
0x01F7 0000 ADD [BX+SI], AL
0x01F9 0000 ADD [BX+SI], AL
0x01FB 0000 ADD [BX+SI], AL
0x01FD 0055 aa ADD [DI-0x56], DL