infiltracia Win32/Sirefef.EV

Zpráva

Peterovo · #1 Příspěvek od **Peterovo** » 03 pro 2012 20:47

Dobry den, po kratkom case si opat neviem rady. Chcel by som Vas poprosit o riesenie problemu s PC. ESET SS6 nasiel infiltraciu v operacnej pamati (Win32/Sirefef.EV), nemozno ju vyliecit. Pocitac je spomaleny, internetove prehliadace (vratane int. spojenia, ktore je spomalene) nezobrazuju stranky, ktore vyzaduju niektore moduly.
Dakujem,

a pripajam log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jozef at 2012-12-03 20:38:23
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 15 GB (13%) free of 117 GB
Total RAM: 511 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:38:54, on 3. 12. 2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Documents and Settings\Jozef\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Jozef\Dokumenty\Preberanie\RSIT.exe
C:\Program Files\trend micro\Jozef.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Jozef\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Startup: Orezávač obrazovky a spúšťač programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 5883 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Jozef\Data aplikací\Mozilla\Firefox\Profiles\20ai1lmb.default

prefs.js - "browser.startup.homepage" - "www.google.sk"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, jqs@sun.com:1.0, {f999a48b-1950-4d81-9971-79018f807b4b}:2.7.2.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Zásvuný modul iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
np32asw.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np32asw.dll
NPOFF12.DLL
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-01 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-01 155384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-05-14 55296]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-03 1848648]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-05-30 59280]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-11-14 5074384]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Octoshape Streaming Services"=C:\Documents and Settings\Jozef\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [2009-01-08 70936]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-17 1667584]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Documents and Settings\Jozef\Nabídka Start\Programy\Po spuštění
Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.divxa32"=msaud32_divx.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.ac3filter"=ac3filter.acm

======List of files/folders created in the last 1 month======

2012-12-03 20:38:23 ----D---- C:\rsit
2012-12-03 20:26:59 ----SHD---- C:\Config.Msi
2012-12-01 15:27:13 ----D---- C:\Program Files\Common Files\Java
2012-12-01 14:55:45 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2012-12-01 14:55:45 ----A---- C:\WINDOWS\system32\javaws.exe
2012-12-01 14:55:26 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2012-12-01 14:55:25 ----A---- C:\WINDOWS\system32\javaw.exe
2012-12-01 14:55:25 ----A---- C:\WINDOWS\system32\java.exe
2012-12-01 14:46:40 ----D---- C:\Program Files\Google

======List of files/folders modified in the last 1 month======

2012-12-03 20:38:54 ----D---- C:\Program Files\trend micro
2012-12-03 20:27:13 ----RD---- C:\Program Files
2012-12-03 20:27:09 ----D---- C:\WINDOWS\system32
2012-12-03 20:26:59 ----SHD---- C:\WINDOWS\Installer
2012-12-03 20:25:38 ----RD---- C:\Program Files\Skype
2012-12-03 20:24:45 ----SD---- C:\WINDOWS\Tasks
2012-12-03 20:23:03 ----D---- C:\WINDOWS
2012-12-03 20:22:33 ----D---- C:\WINDOWS\temp
2012-12-03 20:20:54 ----D---- C:\Program Files\Common Files
2012-12-03 19:59:41 ----D---- C:\WINDOWS\system32\drivers
2012-12-03 19:58:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-12-03 19:51:49 ----D---- C:\WINDOWS\Prefetch
2012-12-03 19:51:03 ----HD---- C:\WINDOWS\inf
2012-12-03 19:50:02 ----D---- C:\Program Files\ESET
2012-12-03 19:50:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2012-12-03 19:49:29 ----D---- C:\WINDOWS\system32\CatRoot2
2012-12-03 17:07:49 ----D---- C:\Program Files\Mozilla Firefox
2012-12-03 16:42:58 ----A---- C:\WINDOWS\Filzip.ini
2012-12-01 14:54:56 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-12-01 14:54:45 ----D---- C:\Program Files\Java
2012-12-01 14:44:52 ----D---- C:\Documents and Settings\Jozef\Data aplikací\uTorrent
2012-11-06 01:48:00 ----SD---- C:\Documents and Settings\Jozef\Data aplikací\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2004-08-04 42368]
R1 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2012-10-08 159832]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2012-10-08 121216]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2012-10-08 62512]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-18 39936]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2012-10-08 149568]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-05-14 740044]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-08-17 701440]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2012-10-08 40376]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-18 20480]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2012-04-25 43520]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-05-24 55184]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2012-11-14 1329304]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2012-12-01 161768]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
S3 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-06-07 821648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-26 115168]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 03 pro 2012 20:48

Zdravim a pekny vecer preji

Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

Ulozte nejlepe na Plochu a rozbalte
Spustte kliknutim na mbanr
Nyni postupne kliknete na Next a Update
Po dokonceni update (aktualizace) databaze kliknete opet na Next
Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
PC bude restartovan
Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

Peterovo · #3 Příspěvek od **Peterovo** » 03 pro 2012 21:41

scan prebehol uspesne, pripajam log:

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.01.0.1009

(c) Malwarebytes Corporation 2011-2012

OS version: 5.1.2600 Windows XP Service Pack 2 x86

Account is Administrative

Internet Explorer version: 6.0.2900.2180

Java version: 1.6.0_21

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 2.393000 GHz
Memory total: 536330240, free: 267509760

------------ Kernel report ------------
12/03/2012 21:19:53
------------ Loaded modules -----------
\WINDOWS\system32\ntoskrnl.exe
\WINDOWS\system32\hal.dll
\WINDOWS\system32\KDCOM.DLL
\WINDOWS\system32\BOOTVID.dll
ACPI.sys
\WINDOWS\system32\DRIVERS\WMILIB.SYS
pci.sys
isapnp.sys
PCIIde.sys
\WINDOWS\System32\Drivers\PCIIDEX.SYS
intelide.sys
MountMgr.sys
ftdisk.sys
dmload.sys
dmio.sys
PartMgr.sys
VolSnap.sys
atapi.sys
disk.sys
\WINDOWS\system32\DRIVERS\CLASSPNP.SYS
fltMgr.sys
sr.sys
KSecDD.sys
Ntfs.sys
NDIS.sys
Mup.sys
agp440.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\ati2mtag.sys
\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
\SystemRoot\system32\DRIVERS\usbuhci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\RTL8139.SYS
\SystemRoot\system32\DRIVERS\fdc.sys
\SystemRoot\system32\DRIVERS\serial.sys
\SystemRoot\system32\DRIVERS\serenum.sys
\SystemRoot\system32\DRIVERS\parport.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\drivers\msmpu401.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\DRIVERS\gameenum.sys
\SystemRoot\system32\DRIVERS\imapi.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\DRIVERS\redbook.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\drivers\ALCXWDM.SYS
\SystemRoot\system32\DRIVERS\Epfwndis.sys
\SystemRoot\system32\DRIVERS\audstub.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\DRIVERS\psched.sys
\SystemRoot\system32\DRIVERS\msgpc.sys
\SystemRoot\system32\DRIVERS\ptilink.sys
\SystemRoot\system32\DRIVERS\raspti.sys
\SystemRoot\system32\DRIVERS\rdpdr.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\update.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\flpydisk.sys
\SystemRoot\System32\Drivers\i2omgmt.SYS
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\eamon.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\System32\Drivers\Fs_Rec.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\system32\DRIVERS\ehdrv.sys
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\Drivers\mnmdd.SYS
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\rasacd.sys
\SystemRoot\system32\DRIVERS\ipsec.sys
\SystemRoot\system32\DRIVERS\tcpip.sys
\SystemRoot\system32\DRIVERS\epfwtdi.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\netbt.sys
\SystemRoot\System32\drivers\afd.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\System32\Drivers\Fips.SYS
\SystemRoot\System32\Drivers\Cdfs.SYS
\SystemRoot\System32\Drivers\dump_atapi.sys
\SystemRoot\System32\Drivers\dump_WMILIB.SYS
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\watchdog.sys
\SystemRoot\System32\drivers\dxg.sys
\SystemRoot\System32\drivers\dxgthk.sys
\SystemRoot\System32\ati2dvag.dll
\SystemRoot\System32\ati2cqag.dll
\SystemRoot\System32\ati3duag.dll
\SystemRoot\System32\ativvaxx.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\DRIVERS\epfw.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\drivers\wdmaud.sys
\SystemRoot\system32\drivers\sysaudio.sys
\SystemRoot\system32\DRIVERS\mrxdav.sys
\SystemRoot\System32\Drivers\ParVdm.SYS
\SystemRoot\system32\DRIVERS\srv.sys
\SystemRoot\System32\Drivers\HTTP.sys
\SystemRoot\System32\Drivers\Fastfat.SYS
\??\C:\WINDOWS\system32\drivers\mbamchameleon.sys
\??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys
\WINDOWS\system32\ntdll.dll
----------- End -----------
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xffffffff82392ab8
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-3\
Lower Device Object: 0xffffffff82393d98
Lower Device Driver Name: \Driver\atapi\
Driver name found: atapi
DriverEntry returned 0x0
Function returned 0x0
Downloaded database version: v2012.12.03.12
Downloaded database version: v2012.11.30.01
Initializing...
Done!
Scanning directory: C:\WINDOWS\system32\drivers...
<<<2>>>
Device number: 0, partition: 1
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xffffffff82392ab8, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff82326e08, DeviceName: Unknown, DriverName: \Driver\PartMgr\
DevicePointer: 0xffffffff82392ab8, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xffffffff8237ff18, DeviceName: \Device\00000061\, DriverName: \Driver\ACPI\
DevicePointer: 0xffffffff82393d98, DeviceName: \Device\Ide\IdeDeviceP0T0L0-3\, DriverName: \Driver\atapi\
------------ End ----------
Upper DeviceData: 0xffffffffe31e86d8, 0xffffffff82392ab8, 0xffffffff81e1c738
Lower DeviceData: 0xffffffffe295b250, 0xffffffff82393d98, 0xffffffff81818040
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Replacement file found for a file C:\WINDOWS\system32\drivers\mrxsmb.sys
File C:\WINDOWS\system32\drivers\mrxsmb.sys --> [Forged file]
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: B4B94FF8

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 63 Numsec = 240091362
Partition file system is NTFS
Partition is bootable

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 122942324736 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-240101728-240121728)...
Done!
Performing system, memory and registry scan...
Infected: c:\windows\$ntuninstallkb26621$\2667247879\l\00000004.@ --> [Backdoor.0Access]
Read File: File "c:\windows\$ntuninstallkb26621$\2667247879\l\201d3dde" is compressed (flags = 1)
Infected: c:\windows\$ntuninstallkb26621$\2667247879\l\201d3dde --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\l\4cce1f70 --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\l\gxptogbm --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\u\00000004.@ --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\u\00000008.@ --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\u\000000cb.@ --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\u\80000000.@ --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\u\80000032.@ --> [Backdoor.0Access]
Infected: C:\Documents and Settings\Jozef\Data aplikací\avdrn.dat --> [Malware.Trace]
Infected: C:\Documents and Settings\Jozef\Data aplikací\fvgqad.dat --> [Malware.Trace]
Infected: C:\Documents and Settings\NetworkService\Data aplikací\fvgqad.dat --> [Malware.Trace]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\l --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\u --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879 --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\@ --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\2667247879\desktop.ini --> [Backdoor.0Access]
Infected: c:\windows\$ntuninstallkb26621$\122570829 --> [Backdoor.0Access]
Done!
Scan finished
Creating System Restore point...
Scheduling clean up...
<<<2>>>
Device number: 0, partition: 1
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Removal scheduling successful. System shutdown needed.
System shutdown occured
=======================================

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.01.0.1009

(c) Malwarebytes Corporation 2011-2012

OS version: 5.1.2600 Windows XP Service Pack 2 x86

Account is Administrative

Internet Explorer version: 6.0.2900.2180

Java version: 1.6.0_21

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 2.393000 GHz
Memory total: 536330240, free: 280354816

#4 Příspěvek od **vyosek** » 03 pro 2012 21:42

Fajn, jdeme dale

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Peterovo · #5 Příspěvek od **Peterovo** » 03 pro 2012 22:12

vykonane, pripajam log:

ComboFix 12-12-02.01 - Jozef . 12. 2012 21:59:27.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.511.254 [GMT 1:00]
Running from: c:\documents and settings\Jozef\Plocha\ComboFix.exe
AV: ESET Smart Security 6.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Created a new restore point
* Resident AV is active
.
.
.
((((((((((((((((((((((((( Files Created from 2012-11-03 to 2012-12-03 )))))))))))))))))))))))))))))))
.
.
2012-12-03 20:19 . 2012-12-03 20:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-12-03 19:38 . 2012-12-03 19:38 -------- d-----w- C:\rsit
2012-12-01 17:11 . 2012-12-01 17:11 -------- d-----w- c:\documents and settings\Jozef\Local Settings\Data aplikací\Sun
2012-12-01 14:27 . 2012-12-01 14:27 -------- d-----w- c:\program files\Common Files\Java
2012-12-01 13:55 . 2012-12-01 13:54 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-12-01 13:55 . 2012-12-01 13:55 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-12-01 13:46 . 2012-12-03 19:24 -------- d-----w- c:\program files\Google
2012-12-01 13:46 . 2012-12-01 13:48 -------- d-----w- c:\documents and settings\Jozef\Local Settings\Data aplikací\Google
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-01 13:55 . 2010-10-11 17:18 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-12-01 13:54 . 2010-10-11 17:18 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-09 10:35 . 2012-07-13 22:32 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 10:35 . 2012-02-18 00:28 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-08 07:21 . 2010-08-03 12:28 62512 ----a-w- c:\windows\system32\drivers\epfwtdi.sys
2012-10-08 07:21 . 2010-07-29 12:31 40376 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2012-10-08 07:21 . 2010-07-29 12:31 149568 ----a-w- c:\windows\system32\drivers\epfw.sys
2012-10-08 07:21 . 2010-07-29 12:31 121216 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2012-10-08 07:21 . 2010-08-04 10:50 159832 ----a-w- c:\windows\system32\drivers\eamon.sys
2012-10-26 21:44 . 2012-10-26 21:43 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-01-15 . D848BF051C124ED811832F826A83B854 . 1548288 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Octoshape Streaming Services"="c:\documents and settings\Jozef\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2003-05-14 55296]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-03 1848648]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2012-11-14 5074384]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-18 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" [2004-08-18 100352]
.
c:\documents and settings\Jozef\Nabídka Start\Programy\Po spuštění\
Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [29. 7. 2010 13:31 121216]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [14. 11. 2012 10:07 1329304]
S0 rjaty;rjaty;c:\windows\system32\drivers\imofugc.sys --> c:\windows\system32\drivers\imofugc.sys [?]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [7. 6. 2012 18:12 160944]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
*NewlyCreated* - WUAUSERV
.
.
------- Supplementary Scan -------
.
uStart Page =
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Jozef\Data aplikací\Mozilla\Firefox\Profiles\20ai1lmb.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - www.google.sk
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-12-03 22:06
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěę*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@h*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\0o*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@o*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ho*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\řv*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\y*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\~*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨€*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¬‰*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\đ‰*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ř‰*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¸Š*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĽŠ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\‹*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÔŤ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\HŽ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hŽ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\,Ź*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\„“*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\H•*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|•*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\P*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Č*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěž*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|ź*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨ź*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěź*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\( *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\< *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\T *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ě *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ô *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ü *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Tˇ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|ˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Śˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěˇ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\˘*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$¤*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(¤*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ř¦*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ Ş*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\`Ş*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\„«*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\d¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Č¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\č¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\D*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ľ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ě*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\4®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\`®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\p®*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ś®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\°®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ŕ®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Č®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*Ż*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(Ż*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hŻ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÄŻ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚŻ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŘŻ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕŻ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\°*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$°*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@°*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|°*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\,ą*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hą*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Čą*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\đą*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<ş*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<»*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä»*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŚĽ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚĽ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Đż*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÜŔ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Â*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\LÂ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¬Ă*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĐĂ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\8Ć*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚČ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚČ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<É*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕÉ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\čÉ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĐË*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*Ě*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ě*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\XÍ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\HÎ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÔÎ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(Đ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\0Đ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ń*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨Ń*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\0Ň*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ň*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@Ô*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\XÔ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<Ö*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\h×*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ä×*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*Ř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ř*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÄŘ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ČŘ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚŘđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ů*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ú*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ Ű*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\pŰ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĽŰ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\čŰ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\xÜ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ü*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Üđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨Üđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚÜđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\äÜ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ôÜđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ýđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ý*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$Ţ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hŢ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŔŢ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÜŢ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ôŢ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ßđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ ß*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\”ŕ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<â*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\”â*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\üă*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĺ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\řĺ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\´ç*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Äç*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\üç*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ŕč*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\é*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\€é*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śé*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Čé*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ ë*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\íđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|í*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\°í*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ľí*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\€î*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Śî*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ôî*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕî*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ đ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđâ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđë*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđň*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđô*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđř*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđý*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđţ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$ô*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$ő*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Äő*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\čő*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ö*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śöń*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śöő*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Řö*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\P÷¶*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä÷*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Đř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ů*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ú*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ű*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\,ü*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Completion time: 2012-12-03 22:09:08
ComboFix-quarantined-files.txt 2012-12-03 21:09
.
Pre-Run: Volných bajtů: 15 855 890 432
Post-Run: Volných bajtů: 15 852 986 368
.
- - End Of File - - 0BC3C2E8F7485BFAAB6ABDFE5A28807E

Peterovo · #6 Příspěvek od **Peterovo** » 03 pro 2012 22:13

ale neviem, ci sa po restarte neaktivoval antivirus a tak combofix pracoval spravne...

#7 Příspěvek od **vyosek** » 03 pro 2012 23:30

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"=-

Driver::
rjaty

Collect::
c:\windows\system32\drivers\imofugc.sys

RegLock::
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěę*•‘|\comctl32.dll]
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

ClearJavaCache::

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Peterovo · #8 Příspěvek od **Peterovo** » 04 pro 2012 00:02

prebehlo bez problemov, log:

ComboFix 12-12-02.01 - Jozef . 12. 2012 23:47:31.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.511.253 [GMT 1:00]
Running from: c:\documents and settings\Jozef\Plocha\ComboFix.exe
Command switches used :: c:\documents and settings\Jozef\Plocha\CFScript.txt
AV: ESET Smart Security 6.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Created a new restore point
* Resident AV is active
.
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_rjaty
.
.
((((((((((((((((((((((((( Files Created from 2012-11-03 to 2012-12-03 )))))))))))))))))))))))))))))))
.
.
2012-12-03 20:19 . 2012-12-03 20:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-12-03 19:38 . 2012-12-03 19:38 -------- d-----w- C:\rsit
2012-12-01 17:11 . 2012-12-01 17:11 -------- d-----w- c:\documents and settings\Jozef\Local Settings\Data aplikací\Sun
2012-12-01 14:27 . 2012-12-01 14:27 -------- d-----w- c:\program files\Common Files\Java
2012-12-01 13:55 . 2012-12-01 13:54 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-12-01 13:55 . 2012-12-01 13:55 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-12-01 13:46 . 2012-12-03 19:24 -------- d-----w- c:\program files\Google
2012-12-01 13:46 . 2012-12-01 13:48 -------- d-----w- c:\documents and settings\Jozef\Local Settings\Data aplikací\Google
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-01 13:55 . 2010-10-11 17:18 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-12-01 13:54 . 2010-10-11 17:18 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-09 10:35 . 2012-07-13 22:32 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 10:35 . 2012-02-18 00:28 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-08 07:21 . 2010-08-03 12:28 62512 ----a-w- c:\windows\system32\drivers\epfwtdi.sys
2012-10-08 07:21 . 2010-07-29 12:31 40376 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2012-10-08 07:21 . 2010-07-29 12:31 149568 ----a-w- c:\windows\system32\drivers\epfw.sys
2012-10-08 07:21 . 2010-07-29 12:31 121216 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2012-10-08 07:21 . 2010-08-04 10:50 159832 ----a-w- c:\windows\system32\drivers\eamon.sys
2012-10-26 21:44 . 2012-10-26 21:43 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-01-15 . D848BF051C124ED811832F826A83B854 . 1548288 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Octoshape Streaming Services"="c:\documents and settings\Jozef\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2003-05-14 55296]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-03 1848648]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2012-11-14 5074384]
.
c:\documents and settings\Jozef\Nabídka Start\Programy\Po spuštění\
Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [29. 7. 2010 13:31 121216]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [14. 11. 2012 10:07 1329304]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [7. 6. 2012 18:12 160944]
.
.
------- Supplementary Scan -------
.
uStart Page =
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Jozef\Data aplikací\Mozilla\Firefox\Profiles\20ai1lmb.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - www.google.sk
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-12-03 23:57
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěę*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@h*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\0o*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@o*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ho*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\řv*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\y*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\~*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨€*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¬‰*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\đ‰*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ř‰*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¸Š*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĽŠ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\‹*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÔŤ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\HŽ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hŽ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\,Ź*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\„“*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\H•*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|•*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\P*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Č*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěž*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|ź*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨ź*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěź*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\( *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\< *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\T *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ě *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ô *•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ü *•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Tˇ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|ˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Śˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śˇ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ěˇ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\˘*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$¤*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(¤*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ř¦*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ Ş*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\`Ş*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\„«*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\d¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Č¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\č¬*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\D*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ľ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ě*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\4®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\`®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\p®*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ś®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\°®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ŕ®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Č®*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*Ż*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(Ż*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hŻ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÄŻ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚŻ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŘŻ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕŻ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\°*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$°*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@°*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|°*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\,ą*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hą*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Čą*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\đą*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<ş*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<»*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä»*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŚĽ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚĽ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Đż*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÜŔ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Â*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\LÂ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¬Ă*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĐĂ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\8Ć*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚČ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚČ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<É*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕÉ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\čÉ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĐË*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*Ě*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ě*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\XÍ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\HÎ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÔÎ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\(Đ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\0Đ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ń*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨Ń*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\0Ň*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ň*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\@Ô*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\XÔ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<Ö*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\h×*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ä×*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\*Ř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ř*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÄŘ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ČŘ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚŘđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ů*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ú*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ Ű*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\pŰ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĽŰ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\čŰ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\xÜ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ü*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Üđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\¨Üđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĚÜđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\äÜ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ôÜđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ýđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ý*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$Ţ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\hŢ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŔŢ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ÜŢ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ôŢ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ßđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ ß*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\”ŕ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\<â*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\”â*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\üă*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ĺ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\řĺ*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\´ç*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Äç*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\üç*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ŕč*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\é*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\€é*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śé*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Čé*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ ë*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\íđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\|í*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\°í*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ľí*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\€î*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Śî*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ôî*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕî*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ đ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđâ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđë*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđđ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđň*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđô*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđř*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđý*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ěđţ*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$ô*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\$ő*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Äő*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\čő*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ö*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śöń*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\śöő*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Řö*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\P÷¶*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Ä÷*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\Đř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ŕř*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ů*•‘|\comctl32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ú*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\ű*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
[HKEY_USERS\S-1-5-21-1214440339-2000478354-682003330-1003\Software\Microsoft\Windows\CurrentVersion\MUILanguages\FileVersions\,ü*•‘|\COMCTL32.dll]
"MUIVer"=hex(b):52,04,f0,0a,00,00,06,00
"000600000b540ba6"=dword:00000001
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\windows\SOUNDMAN.EXE
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2012-12-03 23:59:27 - machine was rebooted
ComboFix-quarantined-files.txt 2012-12-03 22:59
ComboFix2.txt 2012-12-03 21:09
.
Pre-Run: Volných bajtů: 15 838 003 200
Post-Run: Volných bajtů: 15 813 017 600
.
- - End Of File - - 58B48AE0652B96561BDB83338C3FD4F4

#9 Příspěvek od **vyosek** » 04 pro 2012 00:06

Fajn, jak se chova PC

Peterovo · #10 Příspěvek od **Peterovo** » 04 pro 2012 00:11

zatazenie procesora a strankovanie ma omnoho nizsie hodnoty, internetovy prehliadac funguje spravne, neziaduci adware zmizol = PC vyzera byt v poriadku

#11 Příspěvek od **vyosek** » 04 pro 2012 00:12

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Peterovo · #12 Příspěvek od **Peterovo** » 04 pro 2012 00:26

Ste machri, dakujem Vam!

#13 Příspěvek od **vyosek** » 04 pro 2012 00:28

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

infiltracia Win32/Sirefef.EV

infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV

Re: infiltracia Win32/Sirefef.EV