TechSpot

Google redirection virus

Solved
By aznavatar
Jun 24, 2011
Topic Status:
Not open for further replies.
  1. I recently somehow managed to obtain the virus, not exactly sure, but I think it was from download a defective version of Firefox. It has gotten to the point where I cannot even access internet; router is working and other computers are having no problems accessing the internet, yet my computer says it is connected and everything is fine, but none of my connections (AIM, STEAM, web browser) work. Also, some programs do not properly run or install because there seems to be registry errors as well.

    I have tried many different methods to try to fix the internet issue and to remove the virus, none have been successful so far.

    I have done the 7 step preliminary instructions and I'll post the logs.

    Thank you guys in advance.
  2. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Mbam log

    /////////////////////////////////
    MBAM LOG
    ////////////////////////////////


    Malwarebytes' Anti-Malware 1.51.0.1200
    www.malwarebytes.org

    Database version: 6705

    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385

    6/24/2011 3:42:47 PM
    mbam-log-2011-06-24 (15-42-47).txt

    Scan type: Quick scan
    Objects scanned: 134968
    Time elapsed: 3 minute(s), 16 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 3
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66D8FBA6-D90F-40A9-AC55-84896F79CA69} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66D8FBA6-D90F-40A9-AC55-84896F79CA69} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{66D8FBA6-D90F-40A9-AC55-84896F79CA69} (Trojan.BHO) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
  3. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Gmer log

    ////////////////////////
    GMER LOG
    ////////////////////////



    GMER 1.0.15.15640 - http://www.gmer.net
    Rootkit scan 2011-06-24 16:36:53
    Windows 6.1.7600
    Running: gmer.exe


    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files (x86)\DAEMON Tools Lite\
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xAE 0x2B 0x78 0x2B ...
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x0E 0xFF 0x97 0x43 ...
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
    Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x4F 0x98 0xAA 0x9C ...
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files (x86)\DAEMON Tools Lite\
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xAE 0x2B 0x78 0x2B ...
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x0E 0xFF 0x97 0x43 ...
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x4F 0x98 0xAA 0x9C ...

    ---- EOF - GMER 1.0.15 ----
  4. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Dds log

    ///////////////////////
    DDS LOG
    ///////////////////////



    .
    DDS (Ver_2011-06-23.01) - NTFSAMD64
    Internet Explorer: 8.0.7600.16385
    Run by Administrator at 16:37:24 on 2011-06-24
    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4095.2819 [GMT -4:00]
    .
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
    C:\Windows\system32\atieclxx.exe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\taskeng.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\rundll32.exe
    C:\Windows\SysWOW64\rundll32.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
    C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
    C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SmcGui.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
    C:\Program Files (x86)\BattlePing\BattleP.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\Windows\system32\svchost.exe -k defragsvc
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\SysWOW64\cscript.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.startsearcher.com
    mStart Page = hxxp://www.startsearcher.com
    uInternet Settings,ProxyServer = http=127.0.0.1:59131
    uURLSearchHooks: H - No File
    mWinlogon: Userinit=userinit.exe,
    BHO: {1FD79A59-37B1-459B-9097-09F9FAB8A523} - No File
    BHO: BitComet Helper: {39f7e362-828a-4b5a-bcaf-5b79bfdfea60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll
    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
    uRun: [Aim] "C:\Program Files (x86)\AIM\aim.exe" /d locale=en-US
    uRun: [Google Update] "C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    uRun: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
    uRun: [Octoshape Streaming Services] "C:\Users\Administrator\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
    mRun: [ccApp] "C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"
    mRun: [HDAudDeck] "C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
    mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
    mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
    mRun: [conhost] C:\Users\Administrator\AppData\Roaming\Microsoft\conhost.exe
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    mPolicies-explorer: NoActiveDesktop = 1 (0x1)
    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
    IE: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
    IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll/206
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
    LSP: C:\Windows\system32\BattleP.dll
    TCP: DhcpNameServer = 192.168.11.1
    TCP: Interfaces\{0D5148E7-B61E-4012-897F-ACE048EE74EB} : DhcpNameServer = 192.168.11.1
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    BHO-X64: {1FD79A59-37B1-459B-9097-09F9FAB8A523} - No File
    BHO-X64: BitComet Helper: {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll
    BHO-X64: BitComet ClickCapture - No File
    BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    TB-X64: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
    mRun-x64: [ccApp] "C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"
    mRun-x64: [HDAudDeck] "C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
    mRun-x64: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
    mRun-x64: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
    mRun-x64: [conhost] C:\Users\Administrator\AppData\Roaming\Microsoft\conhost.exe
    mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun-x64: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
    mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    mRunOnce-x64: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    IE-X64: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll/206
    SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\ietlzerp.default\
    FF - prefs.js: browser.startup.homepage - www.yahoo.com
    FF - prefs.js: network.proxy.type - 0
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
    FF - plugin: C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false
    ============= SERVICES / DRIVERS ===============
    .
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
    R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-1-4 354304]
    R2 AMD Reservation Manager;AMD Reservation Manager;C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-6-17 194496]
    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-6-24 366640]
    R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-8-17 239648]
    R2 Symantec AntiVirus;Symantec Endpoint Protection;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe [2009-6-24 2440632]
    R3 amdiox64;AMD IO Driver;C:\Windows\system32\DRIVERS\amdiox64.sys --> C:\Windows\system32\DRIVERS\amdiox64.sys [?]
    R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
    R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
    R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]
    R3 BATTLEP;BATTLEP;C:\Program Files (x86)\BattlePing\BattleP.exe [2009-12-25 1568768]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-5-9 136824]
    R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
    R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;C:\Windows\system32\drivers\viahduaa.sys --> C:\Windows\system32\drivers\viahduaa.sys [?]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service;C:\Program Files (x86)\BitComet\tools\BitCometService.exe -service --> C:\Program Files (x86)\BitComet\tools\BitCometService.exe -service [?]
    S3 COH_Mon;COH_Mon;\??\C:\Windows\system32\Drivers\COH_Mon.sys --> C:\Windows\system32\Drivers\COH_Mon.sys [?]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
    .
    =============== File Associations ===============
    .
    regfile="regedit.exe "%1""
    txtfile=%SystemRoot%\NOTEPAD.EXE %1
    VBSFile=%SystemRoot%\SysWow64\WScript.exe "%1" %*
    .
    =============== Created Last 30 ================
    .
    2011-06-24 19:37:56 -------- d-----w- C:\Users\Administrator\AppData\Roaming\Malwarebytes
    2011-06-24 19:37:46 39984 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
    2011-06-24 19:37:46 -------- d-----w- C:\ProgramData\Malwarebytes
    2011-06-24 19:37:43 25912 ----a-w- C:\Windows\System32\drivers\mbam.sys
    2011-06-24 19:37:43 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2011-06-24 19:21:40 388096 ----a-r- C:\Users\Administrator\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2011-06-24 19:21:40 -------- d-----w- C:\Program Files (x86)\Trend Micro
    2011-06-24 18:51:27 -------- d-----w- C:\Program Files (x86)\Magical Jelly Bean
    2011-06-24 06:20:39 -------- d-----w- C:\Users\Administrator\AppData\Local\ElevatedDiagnostics
    2011-06-24 05:02:46 -------- d-----w- C:\Program Files (x86)\ESET
    2011-06-24 02:05:49 -------- d-----w- C:\Users\Administrator\AppData\Local\CrashDumps
    2011-06-24 02:04:20 -------- d-----w- C:\Users\Administrator\AppData\Local\Google
    2011-06-24 00:08:27 -------- d-----w- C:\ProgramData\PC Tools
    2011-06-23 20:16:22 -------- d-----w- C:\Users\Administrator\AppData\Local\AMD
    2011-06-23 20:15:20 -------- d-----w- C:\Users\Administrator\AppData\Local\ATI
    2011-06-23 19:44:19 404640 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2011-06-23 19:29:06 -------- d-----w- C:\ProgramData\AIM
    2011-06-23 19:29:03 -------- d-----w- C:\Program Files (x86)\Common Files\Software Update Utility
    2011-06-23 19:29:03 -------- d-----w- C:\Program Files (x86)\AIM
    2011-06-23 19:08:06 -------- d-----w- C:\Users\Administrator\AppData\Local\NPE
    2011-06-23 19:08:06 -------- d-----w- C:\ProgramData\Norton
    2011-06-23 18:54:30 -------- d-----w- C:\Users\Administrator\AppData\Local\Adobe
    2011-06-23 18:40:46 -------- d-----w- C:\Users\Administrator\AppData\Local\Symantec
    2011-06-23 18:40:18 -------- d-----w- C:\Users\Administrator\AppData\Local\AIM
    2011-06-23 18:39:50 -------- d-----w- C:\Users\Administrator\AppData\Local\Temp
    2011-06-23 18:21:30 -------- d-----w- C:\Users\Administrator\AppData\Local\AOL
    2011-06-23 18:20:56 -------- d-----w- C:\Users\Administrator\AppData\Local\Mozilla
    2011-06-23 18:20:07 -------- d-----w- C:\Users\Administrator\AppData\Local\Apps
    2011-06-23 16:18:25 163840 --sha-r- C:\Windows\SysWow64\onexuit.dll
    2011-06-23 16:18:22 133120 ----a-w- C:\Windows\Fbotaa.exe
    2011-06-21 23:44:28 8873296 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A731392F-13A2-4EAD-A657-C7B0DD6912C3}\mpengine.dll
    2011-06-16 04:09:22 102400 ----a-w- C:\Windows\System32\drivers\dfsc.sys
    2011-06-16 04:09:20 499712 ----a-w- C:\Windows\System32\drivers\afd.sys
    2011-06-16 04:09:20 1896832 ----a-w- C:\Windows\System32\drivers\tcpip.sys
    2011-06-16 04:09:18 759296 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
    2011-06-16 04:09:18 1110528 ----a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
    2011-06-16 04:09:17 287744 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
    2011-06-16 04:09:16 157696 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys
    2011-06-16 04:09:16 126464 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys
    2011-06-16 04:09:13 3133952 ----a-w- C:\Windows\System32\win32k.sys
    2011-06-16 04:07:43 461312 ----a-w- C:\Windows\System32\drivers\srv.sys
    2011-06-16 04:07:43 399872 ----a-w- C:\Windows\System32\drivers\srv2.sys
    2011-06-16 04:07:43 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys
    2011-06-16 04:07:41 861184 ----a-w- C:\Windows\System32\oleaut32.dll
    2011-06-16 04:07:41 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
    2011-06-16 04:07:29 976896 ----a-w- C:\Windows\System32\inetcomm.dll
    2011-06-16 04:07:28 740864 ----a-w- C:\Windows\SysWow64\inetcomm.dll
    2011-06-13 00:01:00 -------- d-----w- C:\ProgramData\Skype Extras
    2011-06-12 23:56:25 -------- d-----r- C:\Program Files (x86)\Skype
    .
    ==================== Find3M ====================
    .
    2011-05-28 03:25:16 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
    2011-05-28 03:00:02 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
    2011-05-24 23:14:10 270720 ------w- C:\Windows\System32\MpSigStub.exe
    2011-04-22 20:18:47 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
    2011-04-22 20:18:28 1197056 ----a-w- C:\Windows\System32\wininet.dll
    2011-04-22 20:14:08 57856 ----a-w- C:\Windows\System32\licmgr10.dll
    2011-04-22 19:31:50 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
    2011-04-22 19:31:26 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
    2011-04-22 18:49:57 482816 ----a-w- C:\Windows\System32\html.iec
    2011-04-22 18:23:59 386048 ----a-w- C:\Windows\SysWow64\html.iec
    2011-04-20 06:44:50 9319936 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
    2011-04-20 06:30:18 22900736 ----a-w- C:\Windows\System32\atio6axx.dll
    2011-04-20 06:09:20 151552 ----a-w- C:\Windows\System32\atiapfxx.exe
    2011-04-20 06:09:06 676864 ----a-w- C:\Windows\SysWow64\aticfx32.dll
    2011-04-20 06:07:48 795648 ----a-w- C:\Windows\System32\aticfx64.dll
    2011-04-20 06:07:04 17693184 ----a-w- C:\Windows\SysWow64\atioglxx.dll
    2011-04-20 06:05:08 462848 ----a-w- C:\Windows\System32\ATIDEMGX.dll
    2011-04-20 06:04:56 480256 ----a-w- C:\Windows\System32\atieclxx.exe
    2011-04-20 06:04:20 203776 ----a-w- C:\Windows\System32\atiesrxx.exe
    2011-04-20 06:03:06 120320 ----a-w- C:\Windows\System32\atitmm64.dll
    2011-04-20 06:02:50 423424 ----a-w- C:\Windows\System32\atipdl64.dll
    2011-04-20 06:02:44 356352 ----a-w- C:\Windows\SysWow64\atipdlxx.dll
    2011-04-20 06:02:32 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll
    2011-04-20 06:02:26 16384 ----a-w- C:\Windows\System32\atimuixx.dll
    2011-04-20 06:02:22 59392 ----a-w- C:\Windows\System32\atiedu64.dll
    2011-04-20 06:02:18 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
    2011-04-20 05:59:22 4161536 ----a-w- C:\Windows\SysWow64\atidxx32.dll
    2011-04-20 05:49:32 4951552 ----a-w- C:\Windows\System32\atidxx64.dll
    2011-04-20 05:46:18 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
    2011-04-20 05:46:16 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
    2011-04-20 05:46:06 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
    2011-04-20 05:46:04 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
    2011-04-20 05:45:54 7768064 ----a-w- C:\Windows\System32\aticaldd64.dll
    2011-04-20 05:42:06 6389760 ----a-w- C:\Windows\SysWow64\aticaldd.dll
    2011-04-20 05:40:50 1222656 ----a-w- C:\Windows\System32\atiumd6v.dll
    2011-04-20 05:40:16 1923584 ----a-w- C:\Windows\SysWow64\atiumdmv.dll
    2011-04-20 05:40:04 3868672 ----a-w- C:\Windows\System32\atiumd6a.dll
    2011-04-20 05:38:06 4286464 ----a-w- C:\Windows\SysWow64\atiumdag.dll
    2011-04-20 05:31:14 5440000 ----a-w- C:\Windows\System32\atiumd64.dll
    2011-04-20 05:30:38 4056576 ----a-w- C:\Windows\SysWow64\atiumdva.dll
    2011-04-20 05:27:00 58880 ----a-w- C:\Windows\System32\coinst.dll
    2011-04-20 05:23:14 366080 ----a-w- C:\Windows\System32\atiadlxx.dll
    2011-04-20 05:23:08 262144 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
    2011-04-20 05:22:56 14848 ----a-w- C:\Windows\System32\atig6pxx.dll
    2011-04-20 05:22:54 12800 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
    2011-04-20 05:22:54 12800 ----a-w- C:\Windows\System32\atiglpxx.dll
    2011-04-20 05:22:50 39936 ----a-w- C:\Windows\System32\atig6txx.dll
    2011-04-20 05:22:42 32768 ----a-w- C:\Windows\SysWow64\atigktxx.dll
    2011-04-20 05:22:34 306176 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
    2011-04-20 05:21:46 40960 ----a-w- C:\Windows\System32\atiuxp64.dll
    2011-04-20 05:21:40 31232 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
    2011-04-20 05:21:34 38912 ----a-w- C:\Windows\System32\atiu9p64.dll
    2011-04-20 05:21:26 29184 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
    2011-04-20 05:20:52 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
    2011-04-20 05:13:38 53760 ----a-w- C:\Windows\System32\atimpc64.dll
    2011-04-20 05:13:38 53760 ----a-w- C:\Windows\System32\amdpcom64.dll
    2011-04-20 05:13:30 52736 ----a-w- C:\Windows\SysWow64\atimpc32.dll
    2011-04-20 05:13:30 52736 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
    2011-04-12 23:23:41 258352 ----a-w- C:\Windows\SysWow64\unicows.dll
    2011-04-09 06:58:56 142336 ----a-w- C:\Windows\System32\poqexec.exe
    2011-04-09 06:45:48 5509504 ----a-w- C:\Windows\System32\ntoskrnl.exe
    2011-04-09 06:13:06 3957632 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
    2011-04-09 06:13:06 3901824 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
    2011-04-09 05:56:38 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe
    .
    ============= FINISH: 16:37:56.01 ===============
  5. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Attach log

    ////////////////////////
    ATTACH LOG
    ////////////////////////



    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-06-23.01)
    .
    Microsoft Windows 7 Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 2/2/2010 6:13:37 PM
    System Uptime: 6/24/2011 2:46:38 PM (2 hours ago)
    .
    Motherboard: ASUSTeK Computer INC. | | M3A76-CM
    Processor: AMD Phenom(tm) II X4 965 Processor | AM2 | 3400/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 466 GiB total, 230.756 GiB free.
    D: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Description: COH_Mon
    Device ID: ROOT\LEGACY_COH_MON\0000
    Manufacturer:
    Name: COH_Mon
    PNP Device ID: ROOT\LEGACY_COH_MON\0000
    Service: COH_Mon
    .
    ==== System Restore Points ===================
    .
    RP223: 5/5/2011 10:08:13 AM - Windows Defender Checkpoint
    RP224: 5/5/2011 4:26:21 PM - Windows Update
    RP225: 5/6/2011 10:26:13 AM - Windows Update
    RP226: 5/7/2011 2:56:24 AM - Windows Update
    RP227: 5/10/2011 10:39:29 AM - Windows Update
    RP228: 5/12/2011 2:22:05 AM - Windows Update
    RP229: 5/13/2011 10:36:54 AM - Windows Update
    RP230: 5/17/2011 11:03:47 AM - Windows Update
    RP231: 5/20/2011 8:46:21 AM - Windows Update
    RP232: 5/24/2011 10:04:32 AM - Windows Update
    RP233: 5/25/2011 1:34:50 AM - Windows Update
    RP234: 5/25/2011 11:18:41 AM - Windows Update
    RP235: 5/27/2011 10:48:11 AM - Windows Update
    RP236: 5/31/2011 11:36:04 AM - Windows Update
    RP237: 6/3/2011 10:16:23 AM - Windows Update
    RP238: 6/7/2011 9:02:31 AM - Windows Update
    RP239: 6/10/2011 9:20:18 AM - Windows Update
    RP240: 6/14/2011 10:14:19 AM - Windows Update
    RP241: 6/16/2011 1:47:36 AM - Windows Update
    RP242: 6/17/2011 9:37:39 AM - Windows Update
    RP243: 6/21/2011 7:41:24 PM - Windows Update
    .
    ==== Installed Programs ======================
    .
    Update for Microsoft Office 2007 (KB2508958)
    ????????? ~????~
    Adobe Flash Player 10 Plugin
    AIM 7
    Aion
    ATI Catalyst Registration
    BattlePing
    BitComet 1.27
    Call of Duty: Black Ops - Multiplayer
    Catalyst Control Center - Branding
    Catalyst Control Center Graphics Previews Common
    Catalyst Control Center InstallProxy
    ccc-core-static
    CCC Help English
    Combined Community Codec Pack 2009-09-09
    Dell Driver Download Manager
    Dell Photo AIO Printer 924
    Download Updater (AOL LLC)
    ESET Online Scanner v3
    Fate/stay night English v3.2
    Google Chrome
    Heroes of Newerth
    HiJackThis
    Japanese Fonts Support For Adobe Reader 9
    Java Auto Updater
    LiveUpdate 3.3 (Symantec Corporation)
    Magical Jelly Bean KeyFinder
    Malwarebytes' Anti-Malware version 1.51.0.1200
    Media Player Classic
    Microsoft Office 2007 Service Pack 2 (SP2)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft VC9 runtime libraries
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
    Mozilla Firefox 5.0 (x86 en-US)
    NCsoft Launcher
    Notepad++
    NVIDIA PhysX
    NVIDIA Stereoscopic 3D Driver
    OpenAL
    PCSX2 - Playstation 2 Emulator
    Platform
    Realtek 8169 8168 8101E 8102E Ethernet Driver
    Security Update for 2007 Microsoft Office System (KB2288621)
    Security Update for 2007 Microsoft Office System (KB2288931)
    Security Update for 2007 Microsoft Office System (KB2345043)
    Security Update for 2007 Microsoft Office System (KB2509488)
    Security Update for 2007 Microsoft Office System (KB969559)
    Security Update for 2007 Microsoft Office System (KB976321)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft Office 2007 System (KB2541012)
    Security Update for Microsoft Office Access 2007 (KB979440)
    Security Update for Microsoft Office Excel 2007 (KB2541007)
    Security Update for Microsoft Office Groove 2007 (KB2494047)
    Security Update for Microsoft Office InfoPath 2007 (KB2510061)
    Security Update for Microsoft Office InfoPath 2007 (KB979441)
    Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
    Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
    Security Update for Microsoft Office Publisher 2007 (KB2284697)
    Security Update for Microsoft Office system 2007 (972581)
    Security Update for Microsoft Office system 2007 (KB974234)
    Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
    Security Update for Microsoft Office Word 2007 (KB2344993)
    Skype・5.3
    StarCraft II
    Steam
    The Lord of the Rings FREE Trial
    Update for 2007 Microsoft Office System (KB2284654)
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office 2007 System (KB2539530)
    Update for Microsoft Office Access 2007 Help (KB963663)
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office Infopath 2007 Help (KB963662)
    Update for Microsoft Office OneNote 2007 (KB980729)
    Update for Microsoft Office OneNote 2007 Help (KB963670)
    Update for Microsoft Office Outlook 2007 (KB2509470)
    Update for Microsoft Office Outlook 2007 Help (KB963677)
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Publisher 2007 Help (KB963667)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 Help (KB963665)
    Update for Outlook 2007 Junk Email Filter (KB2536413)
    Ventrilo Client
    VIA Platform Device Manager
    Warcraft III
    Winamp
    Winamp Detector Plug-in
    Xuse ????? (Remove Only)
    .
    ==== Event Viewer Messages From Past Week ========
    .
    6/24/2011 3:47:28 PM, Error: Service Control Manager [7000] - The COH_Mon service failed to start due to the following error: This driver has been blocked from loading
    6/24/2011 3:47:28 PM, Error: Application Popup [875] - Driver COH_Mon.sys has been blocked from loading.
    6/24/2011 2:47:18 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: sptd
    6/24/2011 2:28:28 AM, Error: Service Control Manager [7001] - The AMD FUEL Service service depends on the AMD Reservation Manager service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
    6/24/2011 2:19:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service BATTLEP with arguments "-Service" in order to run the server: {B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
    6/24/2011 2:19:38 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
    6/24/2011 2:19:25 PM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
    6/24/2011 2:14:09 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
    6/24/2011 2:14:09 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
    6/24/2011 2:14:03 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    6/24/2011 2:13:55 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
    6/24/2011 2:13:51 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: discache eeCtrl spldr sptd SRTSP SRTSPX Wanarpv6
    6/24/2011 2:12:13 AM, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
    6/24/2011 2:08:35 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Internet Explorer 9 for Windows 7 for x64-based Systems.
    6/24/2011 2:06:09 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service stisvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
    6/24/2011 2:04:07 PM, Error: Service Control Manager [7016] - The NVIDIA Display Driver Service service has reported an invalid current state 32.
    6/24/2011 1:29:20 AM, Error: Service Control Manager [7034] - The PC Tools Security Service service terminated unexpectedly. It has done this 1 time(s).
    6/23/2011 8:16:19 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
    6/23/2011 8:16:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
    6/23/2011 8:16:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC discache eeCtrl NetBIOS NetBT nsiproxy Psched rdbss spldr sptd SRTSP SRTSPX tdx Wanarpv6 WfpLwf ws2ifsl
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    6/23/2011 8:15:54 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    6/23/2011 8:15:22 PM, Error: sptd [4] - Driver detected an internal error in its data structures for .
    6/22/2011 10:58:39 PM, Error: Service Control Manager [7031] - The Windows Error Reporting Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
    6/17/2011 8:01:58 PM, Error: Microsoft-Windows-WMPNSS-Service [14332] - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.
    .
    ==== End Of File ===========================
  6. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running tools or applying updates other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ===================================================================

    Please download MiniToolBox and run it.

    Checkmark following boxes:
    • Report IE Proxy Settings
    • List content of Hosts
    • List IP configuration
    • List last 10 Event Viewer log
    Click Go and post the result.

    ==================================================================

    Download aswMBR to your desktop.
    Double click the aswMBR.exe to run it.
    Click the "Scan" button to start scan:
    [​IMG]

    On completion of the scan click "Save log", save it to your desktop and post in your next reply:
    [​IMG]

    NOTE. aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.
  7. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Minitoolbox result

    //////////////////////////
    MINITOOLBOX RESULT
    //////////////////////////



    MiniToolBox by Farbar
    Ran by Administrator (administrator) on 24-06-2011 at 22:40:20
    Windows 7 Home Premium (X64)

    ***************************************************************************


    ========================= IE Proxy Settings: ==============================

    Proxy is not enabled.
    ProxyServer: http=127.0.0.1:59131

    ========================= End of IE Proxy Settings ========================
    Hosts file not detected in the default diroctory
    ================= IP Configuration: =======================================

    # ----------------------------------
    # IPv4 Configuration
    # ----------------------------------
    pushd interface ipv4

    reset
    set global defaultcurhoplimit=64 icmpredirects=enabled


    popd
    # End of IPv4 configuration



    Windows IP Configuration

    Host Name . . . . . . . . . . . . : Nel
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : earthlink.net

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . : earthlink.net
    Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
    Physical Address. . . . . . . . . : 00-24-8C-D2-FE-81
    DHCP Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    Link-local IPv6 Address . . . . . : fe80::441:ae24:34f5:4126%11(Preferred)
    IPv4 Address. . . . . . . . . . . : 192.168.11.7(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Lease Obtained. . . . . . . . . . : Friday, June 24, 2011 10:39:20 PM
    Lease Expires . . . . . . . . . . : Sunday, June 26, 2011 10:39:22 PM
    Default Gateway . . . . . . . . . : 192.168.11.1
    DHCP Server . . . . . . . . . . . : 192.168.11.1
    DHCPv6 IAID . . . . . . . . . . . : 167781516
    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-46-62-C5-00-24-8C-D2-FE-81
    DNS Servers . . . . . . . . . . . : 192.168.11.1
    NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter isatap.earthlink.net:

    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . : earthlink.net
    Description . . . . . . . . . . . : Microsoft ISATAP Adapter
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Teredo Tunneling Pseudo-Interface:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:2ca8:3b68:e738:b34c(Preferred)
    Link-local IPv6 Address . . . . . : fe80::2ca8:3b68:e738:b34c%12(Preferred)
    Default Gateway . . . . . . . . . : ::
    NetBIOS over Tcpip. . . . . . . . : Disabled
    Server: UnKnown
    Address: 192.168.11.1

    Ping request could not find host google.com. Please check the name and try again.
    Server: UnKnown
    Address: 192.168.11.1

    Ping request could not find host yahoo.com. Please check the name and try again.

    Pinging 127.0.0.1 with 32 bytes of data:
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=64
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=64

    Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
    ===========================================================================
    Interface List
    11...00 24 8c d2 fe 81 ......Realtek RTL8168C(P)/8111C(P) Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
    1...........................Software Loopback Interface 1
    14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
    12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
    ===========================================================================

    IPv4 Route Table
    ===========================================================================
    Active Routes:
    Network Destination Netmask Gateway Interface Metric
    0.0.0.0 0.0.0.0 192.168.11.1 192.168.11.7 20
    127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
    127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
    127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
    192.168.11.0 255.255.255.0 On-link 192.168.11.7 276
    192.168.11.7 255.255.255.255 On-link 192.168.11.7 276
    192.168.11.255 255.255.255.255 On-link 192.168.11.7 276
    224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
    224.0.0.0 240.0.0.0 On-link 192.168.11.7 276
    255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
    255.255.255.255 255.255.255.255 On-link 192.168.11.7 276
    ===========================================================================
    Persistent Routes:
    None

    IPv6 Route Table
    ===========================================================================
    Active Routes:
    If Metric Network Destination Gateway
    12 58 ::/0 On-link
    1 306 ::1/128 On-link
    12 58 2001::/32 On-link
    12 306 2001:0:4137:9e76:2ca8:3b68:e738:b34c/128
    On-link
    11 276 fe80::/64 On-link
    12 306 fe80::/64 On-link
    11 276 fe80::441:ae24:34f5:4126/128
    On-link
    12 306 fe80::2ca8:3b68:e738:b34c/128
    On-link
    1 306 ff00::/8 On-link
    12 306 ff00::/8 On-link
    11 276 ff00::/8 On-link
    ===========================================================================
    Persistent Routes:
    None

    ================= End of IP Configuration =================================

    ========================= Event log errors: ===============================

    Application errors:
    ==================
    Error: (06/24/2011 09:36:28 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 09:30:08 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 09:25:23 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 09:15:22 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 08:59:40 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 08:53:21 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 08:18:34 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 07:59:54 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 07:40:13 PM) (Source: SescLU) (User: )
    Description: LiveUpdate returned a non-critical error. Available content updates may have failed to install.

    Error: (06/24/2011 07:31:26 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


    System errors:
    =============
    Error: (06/24/2011 10:39:26 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:39:24 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:39:23 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:39:23 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:39:21 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:39:21 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:39:20 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:39:20 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:35:20 PM) (Source: Service Control Manager) (User: )
    Description: The COH_Mon service failed to start due to the following error:
    %%1275

    Error: (06/24/2011 10:35:20 PM) (Source: Application Popup) (User: )
    Description: Driver COH_Mon.sys has been blocked from loading.


    Microsoft Office Sessions:
    =========================

    ========================= End of Event log errors =========================
  8. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    aswMRB LOG

    ///////////////////////////
    aswMBR LOG
    //////////////////////////



    aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST Software
    Run date: 2011-06-24 22:40:41
    -----------------------------
    22:40:41.890 OS Version: Windows x64 6.1.7600
    22:40:41.890 Number of processors: 4 586 0x403
    22:40:41.890 ComputerName: NEL UserName:
    22:40:43.216 Initialize success
    22:40:57.397 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
    22:40:57.397 Disk 0 Vendor: Hitachi_HDP725050GLA360 GM4OA5CA Size: 476940MB BusType: 3
    22:40:59.425 Disk 0 MBR read successfully
    22:40:59.425 Disk 0 MBR scan
    22:40:59.425 Disk 0 Windows 7 default MBR code
    22:40:59.440 Service scanning
    22:41:00.361 Disk 0 trace - called modules:
    22:41:00.376 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
    22:41:00.376 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80049f7790]
    22:41:00.376 3 CLASSPNP.SYS[fffff880011cd43f] -> nt!IofCallDriver -> [0xfffffa80044f89b0]
    22:41:00.392 5 ACPI.sys[fffff88000f08781] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004986060]
    22:41:00.407 Scan finished successfully
    22:41:20.219 Disk 0 MBR has been saved successfully to "C:\Users\Administrator\Desktop\MBR.dat"
    22:41:20.235 The log file has been saved successfully to "C:\Users\Administrator\Desktop\aswMBR.txt"
  9. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    Re-run MiniToolbox and...

    Checkmark following boxes:
    • Flush DNS
    • Report IE Proxy Settings
    • Reset IE Proxy Settings
    • List content of Hosts
    • List IP configuration
    • List last 10 Event Viewer log
    Click Go and post the result.
  10. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Minitoolbox result 2

    /////////////////////////
    MINITOOLBOX RESULT 2
    ////////////////////////



    MiniToolBox by Farbar
    Ran by Administrator (administrator) on 24-06-2011 at 23:01:53
    Windows 7 Home Premium (X64)

    ***************************************************************************


    ================= Flush DNS: ==============================================

    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.

    ================= End of Flush DNS ========================================

    ========================= IE Proxy Settings: ==============================

    Proxy is not enabled.
    ProxyServer: http=127.0.0.1:59131

    ========================= End of IE Proxy Settings ========================

    "Reset IE Proxy Settings": Proxy Settings were reset.

    Hosts file not detected in the default diroctory
    ================= IP Configuration: =======================================

    # ----------------------------------
    # IPv4 Configuration
    # ----------------------------------
    pushd interface ipv4

    reset
    set global defaultcurhoplimit=64 icmpredirects=enabled


    popd
    # End of IPv4 configuration



    Windows IP Configuration

    Host Name . . . . . . . . . . . . : Nel
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : earthlink.net

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . : earthlink.net
    Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
    Physical Address. . . . . . . . . : 00-24-8C-D2-FE-81
    DHCP Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    Link-local IPv6 Address . . . . . : fe80::441:ae24:34f5:4126%11(Preferred)
    IPv4 Address. . . . . . . . . . . : 192.168.11.7(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Lease Obtained. . . . . . . . . . : Friday, June 24, 2011 10:55:52 PM
    Lease Expires . . . . . . . . . . : Sunday, June 26, 2011 11:00:33 PM
    Default Gateway . . . . . . . . . : 192.168.11.1
    DHCP Server . . . . . . . . . . . : 192.168.11.1
    DHCPv6 IAID . . . . . . . . . . . : 167781516
    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-46-62-C5-00-24-8C-D2-FE-81
    DNS Servers . . . . . . . . . . . : 192.168.11.1
    NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter isatap.earthlink.net:

    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . : earthlink.net
    Description . . . . . . . . . . . : Microsoft ISATAP Adapter
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Teredo Tunneling Pseudo-Interface:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:2ca8:3b68:e738:b34c(Preferred)
    Link-local IPv6 Address . . . . . : fe80::2ca8:3b68:e738:b34c%12(Preferred)
    Default Gateway . . . . . . . . . : ::
    NetBIOS over Tcpip. . . . . . . . : Disabled
    Server: UnKnown
    Address: 192.168.11.1

    Ping request could not find host google.com. Please check the name and try again.
    Server: UnKnown
    Address: 192.168.11.1

    Ping request could not find host yahoo.com. Please check the name and try again.

    Pinging 127.0.0.1 with 32 bytes of data:
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=64
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=64

    Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
    ===========================================================================
    Interface List
    11...00 24 8c d2 fe 81 ......Realtek RTL8168C(P)/8111C(P) Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
    1...........................Software Loopback Interface 1
    14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
    12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
    ===========================================================================

    IPv4 Route Table
    ===========================================================================
    Active Routes:
    Network Destination Netmask Gateway Interface Metric
    0.0.0.0 0.0.0.0 192.168.11.1 192.168.11.7 20
    127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
    127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
    127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
    192.168.11.0 255.255.255.0 On-link 192.168.11.7 276
    192.168.11.7 255.255.255.255 On-link 192.168.11.7 276
    192.168.11.255 255.255.255.255 On-link 192.168.11.7 276
    224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
    224.0.0.0 240.0.0.0 On-link 192.168.11.7 276
    255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
    255.255.255.255 255.255.255.255 On-link 192.168.11.7 276
    ===========================================================================
    Persistent Routes:
    None

    IPv6 Route Table
    ===========================================================================
    Active Routes:
    If Metric Network Destination Gateway
    12 58 ::/0 On-link
    1 306 ::1/128 On-link
    12 58 2001::/32 On-link
    12 306 2001:0:4137:9e76:2ca8:3b68:e738:b34c/128
    On-link
    11 276 fe80::/64 On-link
    12 306 fe80::/64 On-link
    11 276 fe80::441:ae24:34f5:4126/128
    On-link
    12 306 fe80::2ca8:3b68:e738:b34c/128
    On-link
    1 306 ff00::/8 On-link
    12 306 ff00::/8 On-link
    11 276 ff00::/8 On-link
    ===========================================================================
    Persistent Routes:
    None

    ================= End of IP Configuration =================================

    ========================= Event log errors: ===============================

    Application errors:
    ==================
    Error: (06/24/2011 10:57:13 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 09:36:28 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 09:30:08 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 09:25:23 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 09:15:22 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 08:59:40 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 08:53:21 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 08:18:34 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 07:59:54 PM) (Source: WinMgmt) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (06/24/2011 07:40:13 PM) (Source: SescLU) (User: )
    Description: LiveUpdate returned a non-critical error. Available content updates may have failed to install.


    System errors:
    =============
    Error: (06/24/2011 11:00:36 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 11:00:34 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 11:00:33 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 11:00:33 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 11:00:33 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:58:23 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:58:22 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:56:15 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.

    Error: (06/24/2011 10:56:10 PM) (Source: Service Control Manager) (User: )
    Description: The following boot-start or system-start driver(s) failed to load:
    sptd

    Error: (06/24/2011 10:55:59 PM) (Source: Microsoft-Windows-DNS-Client) (User: NETWORK SERVICE)
    Description: There was an error while attempting to read the local hosts file.


    Microsoft Office Sessions:
    =========================

    ========================= End of Event log errors =========================
  11. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    Please download ComboFix from Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG users: ComboFix will not run until AVG is uninstalled as a protective measure against the anti-virus. This is because AVG "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.



    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try one of the following:

    1. Run Combofix from Safe Mode.

    2. Delete Combofix file, download fresh one, but rename combofix.exe to yourname.exe BEFORE saving it to your desktop.
    Do NOT run it yet.

    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

    There are 4 different versions. If one of them won't run then download and try to run the other one.

    Vista and Win7 users need to right click Rkill and choose Run as Administrator

    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    Rkill.com
    Rkill.scr
    Rkill.exe

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    If normal mode still doesn't work, run BOTH tools from safe mode.

    In case #2, please post BOTH logs, rKill and Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
  12. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    ComboFix LOG part 1

    //////////////////////////
    COMBOFIX LOG Part 1
    //////////////////////////



    ComboFix 11-06-24.02 - Administrator 06/24/2011 23:16:04.1.4 - x64
    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4095.2427 [GMT -4:00]
    Running from: c:\users\Administrator\Desktop\ComboFix.exe
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    C:\install.exe
    c:\users\Administrator\AppData\Roaming\Setup.exe
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-05-25 to 2011-06-25 )))))))))))))))))))))))))))))))
    .
    .
    2011-06-25 03:21 . 2011-06-25 03:21 -------- d-----w- c:\users\Default\AppData\Local\temp
    2011-06-25 01:09 . 2011-06-25 01:06 4770816 ----a-w- C:\unetbtin.exe
    2011-06-25 00:56 . 2011-06-25 00:56 -------- d-----w- c:\program files (x86)\PowerISO
    2011-06-25 00:56 . 2011-06-15 08:30 93240 ----a-w- c:\windows\system32\drivers\scdemu.sys
    2011-06-24 22:13 . 2011-06-24 22:13 -------- d-----w- c:\users\Administrator\AppData\Roaming\Uniblue
    2011-06-24 22:13 . 2011-06-24 22:13 -------- dc-h--w- c:\programdata\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}
    2011-06-24 22:13 . 2011-06-24 22:13 -------- d-----w- c:\program files (x86)\Uniblue
    2011-06-24 22:13 . 2011-06-24 22:13 -------- d-----w- c:\users\Administrator\AppData\Local\PackageAware
    2011-06-24 19:37 . 2011-06-24 19:37 -------- d-----w- c:\users\Administrator\AppData\Roaming\Malwarebytes
    2011-06-24 19:37 . 2011-06-24 19:37 -------- d-----w- c:\programdata\Malwarebytes
    2011-06-24 19:37 . 2011-05-29 13:11 39984 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
    2011-06-24 19:37 . 2011-06-24 19:37 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
    2011-06-24 19:37 . 2011-05-29 13:11 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-06-24 19:21 . 2011-06-24 19:21 388096 ----a-r- c:\users\Administrator\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2011-06-24 19:21 . 2011-06-24 19:21 -------- d-----w- c:\program files (x86)\Trend Micro
    2011-06-24 18:51 . 2011-06-24 18:51 -------- d-----w- c:\program files (x86)\Magical Jelly Bean
    2011-06-24 06:20 . 2011-06-25 02:51 -------- d-----w- c:\users\Administrator\AppData\Local\ElevatedDiagnostics
    2011-06-24 05:02 . 2011-06-24 05:02 -------- d-----w- c:\program files (x86)\ESET
    2011-06-24 02:05 . 2011-06-25 03:14 -------- d-----w- c:\users\Administrator\AppData\Local\CrashDumps
    2011-06-24 02:04 . 2011-06-24 02:04 -------- d-----w- c:\users\Administrator\AppData\Local\Google
    2011-06-24 00:08 . 2011-06-24 05:32 -------- d-----w- c:\programdata\PC Tools
    2011-06-23 20:16 . 2011-06-23 20:16 -------- d-----w- c:\users\Administrator\AppData\Local\AMD
    2011-06-23 20:15 . 2011-06-23 20:15 -------- d-----w- c:\users\Administrator\AppData\Local\ATI
    2011-06-23 19:44 . 2011-06-23 19:44 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2011-06-23 19:29 . 2011-06-23 19:29 -------- d-----w- c:\programdata\AIM
    2011-06-23 19:29 . 2011-06-23 19:29 -------- d-----w- c:\program files (x86)\AIM
    2011-06-23 19:29 . 2011-06-23 19:29 -------- d-----w- c:\program files (x86)\Common Files\Software Update Utility
    2011-06-23 19:08 . 2011-06-24 05:01 -------- d-----w- c:\users\Administrator\AppData\Local\NPE
    2011-06-23 19:08 . 2011-06-23 19:08 -------- d-----w- c:\programdata\Norton
    2011-06-23 18:54 . 2011-06-23 18:54 -------- d-----w- c:\users\Administrator\AppData\Local\Adobe
    2011-06-23 18:41 . 2011-06-24 20:37 -------- d-----r- c:\users\Public
    2011-06-23 18:40 . 2011-06-23 18:40 -------- d-----w- c:\users\Administrator\AppData\Local\Symantec
    2011-06-23 18:40 . 2011-06-23 19:29 -------- d-----w- c:\users\Administrator\AppData\Local\AIM
    2011-06-23 18:39 . 2011-06-25 03:21 -------- d-----w- c:\users\Administrator\AppData\Local\Temp
    2011-06-23 18:21 . 2011-06-23 18:21 -------- d-----w- c:\users\Administrator\AppData\Local\AOL
    2011-06-23 18:20 . 2011-06-23 18:20 -------- d-----w- c:\users\Administrator\AppData\Local\Mozilla
    2011-06-23 18:20 . 2011-06-23 18:20 -------- d-----w- c:\users\Administrator\AppData\Local\Apps
    2011-06-23 16:18 . 2011-06-23 16:18 163840 --sha-r- c:\windows\SysWow64\onexuit.dll
    2011-06-23 16:18 . 2011-06-23 16:18 133120 ----a-w- c:\windows\Fbotaa.exe
    2011-06-21 23:44 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A731392F-13A2-4EAD-A657-C7B0DD6912C3}\mpengine.dll
    2011-06-16 04:09 . 2011-04-27 02:57 102400 ----a-w- c:\windows\system32\drivers\dfsc.sys
    2011-06-16 04:09 . 2011-04-25 05:32 1896832 ----a-w- c:\windows\system32\drivers\tcpip.sys
    2011-06-16 04:09 . 2011-04-25 02:44 499712 ----a-w- c:\windows\system32\drivers\afd.sys
    2011-06-16 04:09 . 2011-04-29 05:47 1110528 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
    2011-06-16 04:09 . 2011-04-29 05:08 759296 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
    2011-06-16 04:09 . 2011-05-04 02:51 287744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
    2011-06-16 04:09 . 2011-05-04 02:51 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
    2011-06-16 04:09 . 2011-05-04 02:51 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
    2011-06-16 04:09 . 2011-05-28 03:07 3133952 ----a-w- c:\windows\system32\win32k.sys
    2011-06-16 04:07 . 2011-04-29 03:13 461312 ----a-w- c:\windows\system32\drivers\srv.sys
    2011-06-16 04:07 . 2011-04-29 03:12 399872 ----a-w- c:\windows\system32\drivers\srv2.sys
    2011-06-16 04:07 . 2011-04-29 03:12 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys
    2011-06-16 04:07 . 2010-12-18 06:13 861184 ----a-w- c:\windows\system32\oleaut32.dll
    2011-06-16 04:07 . 2010-12-18 05:31 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
    2011-06-16 04:07 . 2011-05-03 05:21 976896 ----a-w- c:\windows\system32\inetcomm.dll
    2011-06-16 04:07 . 2011-05-03 04:50 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll
    2011-06-13 00:01 . 2011-06-22 04:04 -------- d-----w- c:\users\Administrator\AppData\Roaming\skypePM
    2011-06-13 00:01 . 2011-06-20 06:50 -------- d-----w- c:\programdata\Skype Extras
    2011-06-12 23:57 . 2011-06-22 06:01 -------- d-----w- c:\users\Administrator\AppData\Roaming\Skype
    2011-06-12 23:56 . 2011-06-12 23:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
    2011-06-12 23:56 . 2011-06-23 18:52 -------- d-----r- c:\program files (x86)\Skype
    2011-06-12 23:56 . 2011-06-12 23:56 -------- d-----w- c:\programdata\Skype
    2011-06-10 20:42 . 2011-06-10 20:42 -------- d-----w- c:\users\Administrator\AppData\Roaming\Notepad++
    2011-06-10 20:42 . 2011-06-10 20:42 -------- d-----w- c:\program files (x86)\Notepad++
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-05-24 23:14 . 2009-10-02 21:00 270720 ------w- c:\windows\system32\MpSigStub.exe
    2011-04-22 20:18 . 2011-05-25 14:34 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
    2011-04-20 06:44 . 2011-04-20 06:44 9319936 ----a-w- c:\windows\system32\drivers\atikmdag.sys
    2011-04-20 06:30 . 2011-04-20 06:30 22900736 ----a-w- c:\windows\system32\atio6axx.dll
    2011-04-20 06:09 . 2011-04-20 06:09 151552 ----a-w- c:\windows\system32\atiapfxx.exe
    2011-04-20 06:09 . 2011-01-05 03:02 676864 ----a-w- c:\windows\SysWow64\aticfx32.dll
    2011-04-20 06:07 . 2011-01-05 03:01 795648 ----a-w- c:\windows\system32\aticfx64.dll
    2011-04-20 06:07 . 2011-04-20 06:07 17693184 ----a-w- c:\windows\SysWow64\atioglxx.dll
    2011-04-20 06:05 . 2011-01-05 02:58 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
    2011-04-20 06:04 . 2011-01-05 02:58 480256 ----a-w- c:\windows\system32\atieclxx.exe
    2011-04-20 06:04 . 2011-01-05 02:57 203776 ----a-w- c:\windows\system32\atiesrxx.exe
    2011-04-20 06:03 . 2011-04-20 06:03 120320 ----a-w- c:\windows\system32\atitmm64.dll
    2011-04-20 06:02 . 2011-01-05 02:56 423424 ----a-w- c:\windows\system32\atipdl64.dll
    2011-04-20 06:02 . 2011-04-20 06:02 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
    2011-04-20 06:02 . 2011-04-20 06:02 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
    2011-04-20 06:02 . 2011-04-20 06:02 16384 ----a-w- c:\windows\system32\atimuixx.dll
    2011-04-20 06:02 . 2011-04-20 06:02 59392 ----a-w- c:\windows\system32\atiedu64.dll
    2011-04-20 06:02 . 2011-04-20 06:02 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
    2011-04-20 05:59 . 2011-04-20 05:59 4161536 ----a-w- c:\windows\SysWow64\atidxx32.dll
    2011-04-20 05:49 . 2011-01-05 02:43 4951552 ----a-w- c:\windows\system32\atidxx64.dll
    2011-04-20 05:46 . 2011-04-20 05:46 51200 ----a-w- c:\windows\system32\aticalrt64.dll
    2011-04-20 05:46 . 2011-04-20 05:46 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
    2011-04-20 05:46 . 2011-04-20 05:46 44544 ----a-w- c:\windows\system32\aticalcl64.dll
    2011-04-20 05:46 . 2011-04-20 05:46 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
    2011-04-20 05:45 . 2011-04-20 05:45 7768064 ----a-w- c:\windows\system32\aticaldd64.dll
    2011-04-20 05:42 . 2011-04-20 05:42 6389760 ----a-w- c:\windows\SysWow64\aticaldd.dll
    2011-04-20 05:40 . 2011-04-20 05:40 1222656 ----a-w- c:\windows\system32\atiumd6v.dll
    2011-04-20 05:40 . 2011-04-20 05:40 1923584 ----a-w- c:\windows\SysWow64\atiumdmv.dll
    2011-04-20 05:40 . 2011-01-05 02:32 3868672 ----a-w- c:\windows\system32\atiumd6a.dll
    2011-04-20 05:38 . 2011-01-05 02:33 4286464 ----a-w- c:\windows\SysWow64\atiumdag.dll
    2011-04-20 05:31 . 2011-01-05 02:27 5440000 ----a-w- c:\windows\system32\atiumd64.dll
    2011-04-20 05:30 . 2011-01-05 02:25 4056576 ----a-w- c:\windows\SysWow64\atiumdva.dll
    2011-04-20 05:27 . 2011-01-05 02:28 58880 ----a-w- c:\windows\system32\coinst.dll
    2011-04-20 05:23 . 2011-01-05 02:20 366080 ----a-w- c:\windows\system32\atiadlxx.dll
    2011-04-20 05:23 . 2011-04-20 05:23 262144 ----a-w- c:\windows\SysWow64\atiadlxy.dll
    2011-04-20 05:22 . 2011-04-20 05:22 14848 ----a-w- c:\windows\system32\atig6pxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 12800 ----a-w- c:\windows\system32\atiglpxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 39936 ----a-w- c:\windows\system32\atig6txx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 306176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
    2011-04-20 05:21 . 2011-01-05 02:18 40960 ----a-w- c:\windows\system32\atiuxp64.dll
    2011-04-20 05:21 . 2011-01-05 02:18 31232 ----a-w- c:\windows\SysWow64\atiuxpag.dll
    2011-04-20 05:21 . 2011-01-05 02:18 38912 ----a-w- c:\windows\system32\atiu9p64.dll
    2011-04-20 05:21 . 2011-01-05 02:18 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
    2011-04-20 05:20 . 2011-04-20 05:20 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
    2011-04-20 05:13 . 2011-04-20 05:13 53760 ----a-w- c:\windows\system32\atimpc64.dll
    2011-04-20 05:13 . 2011-04-20 05:13 53760 ----a-w- c:\windows\system32\amdpcom64.dll
    2011-04-20 05:13 . 2011-04-20 05:13 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
    2011-04-20 05:13 . 2011-04-20 05:13 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
    2011-04-12 23:23 . 2011-04-12 23:23 258352 ----a-w- c:\windows\SysWow64\unicows.dll
    2011-04-09 06:58 . 2011-05-24 15:14 142336 ----a-w- c:\windows\system32\poqexec.exe
    2011-04-09 06:45 . 2011-05-11 18:07 5509504 ----a-w- c:\windows\system32\ntoskrnl.exe
    2011-04-09 06:13 . 2011-05-11 18:07 3957632 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
    2011-04-09 06:13 . 2011-05-11 18:07 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
    2011-04-09 05:56 . 2011-05-24 15:14 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Aim"="c:\program files (x86)\AIM\aim.exe" [2011-05-03 4321112]
    "Steam"="c:\program files (x86)\Steam\Steam.exe" [2010-11-19 1242448]
    "RegistryBooster"="c:\program files (x86)\Uniblue\RegistryBooster\launcher.exe" [2011-06-02 67456]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "ccApp"="c:\program files (x86)\Common Files\Symantec Shared\ccApp.exe" [2009-06-24 115560]
    "HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2009-02-17 17798144]
    "WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2010-07-12 74752]
    "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-05 336384]
    "ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
    "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
    "PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2011-06-15 307200]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001
    .
    R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
    R3 BATTLEP;BATTLEP;c:\program files (x86)\BattlePing\BattleP.exe [2009-12-25 1568768]
    R3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service;c:\program files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
    R3 COH_Mon;COH_Mon;c:\windows\system32\Drivers\COH_Mon.sys [x]
    R3 DisplayLinkUsbPort;DisplayLink USB Device;c:\windows\system32\DRIVERS\DisplayLinkUsbPort_5.2.21746.0.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
    S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-01-05 354304]
    S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-08-17 239648]
    S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
    S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
    S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
    S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
    S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-09 136824]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
    S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
    .
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500Core.job
    - c:\users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-24 02:04]
    .
    2011-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500UA.job
    - c:\users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-24 02:04]
    .
    2011-06-25 c:\windows\Tasks\RegistryBooster.job
    - c:\program files (x86)\Uniblue\RegistryBooster\rbmonitor.exe [2011-06-24 09:42]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "DLCCCATS"="c:\windows\system32\spool\DRIVERS\x64\3\DLCCtime.dll" [2006-02-24 28672]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "LoadAppInit_DLLs"=0x0
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = hxxp://www.startsearcher.com
    mStart Page = hxxp://www.startsearcher.com
    mLocal Page = c:\windows\SysWOW64\blank.htm
    IE: &D&ownload &with BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddLink.htm
    IE: &D&ownload all with BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddAllLink.htm
    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
    LSP: c:\windows\system32\BattleP.dll
    TCP: DhcpNameServer = 192.168.11.1
    FF - ProfilePath - c:\users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\ietlzerp.default\
    FF - prefs.js: browser.startup.homepage - www.yahoo.com
    FF - prefs.js: network.proxy.type - 0
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false
    .
    .
    ------- File Associations -------
    .
    txtfile=%SystemRoot%\NOTEPAD.EXE %1
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Wow6432Node-HKCU-Run-Octoshape Streaming Services - c:\users\Administrator\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
    Wow6432Node-HKLM-Run-Adobe Reader Speed Launcher - c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
    Wow6432Node-HKLM-Run-Adobe ARM - c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    AddRemove-Dell Photo AIO Printer 924 - c:\program files (x86) (x86)\Dell Photo AIO Printer 924\Install\x64\Uninst.exe
    AddRemove-Xuse ????? - c:\program files\Xuse\?????\Xuse_Inst.exe
    AddRemove-????????? - c:\program files (x86)\Guilty\?????????\UNINST.EXE
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Internet Explorer\User Preferences]
    @Denied: (2) (Administrator)
    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,bc,d6,4d,72,5c,90,46,9a,c1,f3,\
    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,bc,d6,4d,72,5c,90,46,9a,c1,f3,\
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3G2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3GP"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3G2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3GP"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.669\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.669"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.AAC"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADT\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ADTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADTS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ADTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.AIFF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.AIFF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.aiff"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.amf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.ASF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.au"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.AVI"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avr\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.avr"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.B4S\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.caf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.caf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.CDA"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.far\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.far"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FLAC\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.FLAC"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FLV\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.FLV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htk\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.htk"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.iff"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.it\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.it"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.itz"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.KAR\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.KAR"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2T\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.M2TS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2TS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.M2TS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2V\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.M2V"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M3U8\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M4A\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.M4A"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MP4"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mat\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mat"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mdz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mdz"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MID"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MIDI"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MIZ\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MIZ"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MKV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MOD\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mod"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MOV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MP1\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP1"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP3"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MP4\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP4"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MP4"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MPG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mtm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mtm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MTS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.M2TS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.NSA\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.NSA"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nst\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.nst"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.NSV\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.NSV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.OGG\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.OGG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.okt\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.okt"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.paf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.paf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PLS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ptm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.ptm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pvf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.pvf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.raw"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rf64\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.rf64"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.RMI"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.s3m\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.s3m"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.s3z\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.s3z"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sd2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.sd2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sds\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.sds"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.sf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.AU"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.stm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.stm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.stz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.stz"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.SWF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.TTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.TTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Applications\\NOTEPAD.EXE"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ult\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.ult"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbs\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Applications\\wscript.exe"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.VLB\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.VLB"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.voc\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.voc"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.w64\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.w64"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wal\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.SkinZip"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.wav"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WAX"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.webm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wlz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.LangZip"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ASF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.WMA"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WMD"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WMS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.WMV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ASX"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WMZ"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpl\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wsz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.SkinZip"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wve\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.wve"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WVX"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.xi"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.xm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.xmz"
    .
  13. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    ComboFix LOG Part 2

    /////////////////////
    ComboFix Log part 2
    ////////////////////


    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Common Client\ccService\Channels]
    @Denied: (C D) (Everyone)
    "{5EB21974-BD31-4299-B220-04956AFCADD5}"="{55ABBDCA-CF4D-43FC-86E3-B4938CDF9D4A}"
    "{744C51EC-F222-4B73-9753-94C4FC67AB13}"="{D1D24E8E-B9E8-4F3F-9866-9CA7F87AC112}"
    "{A9C9DC0E-6C77-44F5-8162-140C348650D4}"="{55ABBDCA-CF4D-43FC-86E3-B4938CDF9D4A}"
    "{08297EE5-5E94-4249-8F88-BDBFAADFB82D}"="{0C3D2B91-D8C1-4A92-A205-90017BF83E48}"
    "{D9F3D96B-7AC1-474D-B8D8-FC2967D34D41}"="{0C3D2B91-D8C1-4A92-A205-90017BF83E48}"
    "{4508171B-91D2-4E75-838B-F1A206EB0813}"="{0C3D2B91-D8C1-4A92-A205-90017BF83E48}"
    "{33F59D45-DA80-42A0-9F0D-EA3744FB74BC}"="{05A90C04-3F34-4F8B-93D9-C16FA93A2572}"
    "{7B02DB8B-71DA-4A01-A5B2-6ECF0ECD9893}"="{8653E247-87E7-4659-909C-BD4F70E4D370}"
    "{2211F091-1486-4550-8B9A-A54C2F32841A}"="{FF8F40C7-561B-4935-9C42-2FB333623D69}"
    "{E2907489-525F-4213-AC00-D8440EBE4855}"="{8B7EC4B5-1932-4BC4-9019-9A460230CCEB}"
    "{545C1C63-9E7B-4593-9D5F-F4610A5ECE02}"="{0C1E0FB7-72B8-4DE7-8D54-AB4552143D1D}"
    "{A9F1A853-A6E9-467D-9964-617386D224E9}"="{BA2A5A3A-2F34-4DA1-91AA-7FB3EFD4AD42}"
    "{3FFE1801-375F-4891-8A97-54434021ACF4}"="{161B1D17-B1BF-4DAB-87C4-BDA8B38960BB}"
    "{43DC7920-9FA3-4F18-8255-993BC9D023FE}"="{CB10E746-3C8C-4887-A196-96077CF8C4D4}"
    "{AFE7DB34-5F60-41F8-B79B-FFB9685C71A9}"="{54F04AED-FE15-444C-BC73-D259406A95FC}"
    "{E7DCA3DF-3B47-461C-AF2B-6CA1B39BA52A}"="{D140232A-9986-4856-8C3F-A1EA9333233C}"
    "{9C0B9353-C996-4C0F-A4D8-73E51F9E469F}"="{D4AF0217-E63B-418B-89F6-8047BEC20664}"
    "{0F4CDD1C-E86E-4E4F-BA39-5139995D5345}"="{D4AF0217-E63B-418B-89F6-8047BEC20664}"
    "{A341F4F6-CB55-4821-BFF0-706AF6F61A85}"="{D4AF0217-E63B-418B-89F6-8047BEC20664}"
    "{D7960AF4-168C-497F-823A-C81469FB004B}"="{5A0B0EE9-1739-41B3-A2C4-F6D93F2EAD6B}"
    "{02BD0716-400F-407D-91EF-72B9EF443C33}"="{77203AEB-6992-45FB-B465-CD103B665139}"
    "{153D9D73-6170-4FD2-AFBC-F01C62F6C9FA}"="{DEDAD06E-424C-4BA1-BE24-B39DA447CE85}"
    "{5F6C77DA-983D-4A94-8256-A4D80943BC05}"="{09172FA5-3299-41DA-B303-C924DA938C58}"
    "{06A915AA-6B09-4E30-8844-F40F887C18C8}"="{7F1846FB-EF7F-4573-A236-8B16FE664DB9}"
    "{FD2BEFEC-1B4B-4517-987B-34F228E11E5D}"="{3DCC36C1-7F7B-4B62-AFCA-3FCB0A222097}"
    "{EE27E572-FE6E-48B7-B3A7-B90E1E8591BF}"="{650B25FD-35B3-451D-B918-936996316E1C}"
    "{21F1E8F3-26E1-4181-9A3C-6AC0740216DC}"="{DE822FE7-DFDB-4CFA-BFC2-3E9D8EE126C8}"
    "{6B55074D-618C-4E41-9D42-2444238340C6}"="{BD37A3E2-3778-4B8E-9BB9-B329E0C31E0E}"
    "{A15C6EEC-C9BC-4C44-85BD-F110EF32433B}"="{12E55219-B21F-47FF-9204-F6312266837E}"
    "{382D816C-88BC-4E65-A331-94166E0C04FE}"="{527383E2-9F60-44A1-89AA-AD4E98805FEB}"
    "{A414D8EA-A2C2-4695-BEFB-12734638A1E2}"="{19301E58-CBC7-4A6D-A45D-C9BC8CD8328D}"
    "{3CF61695-C76A-458D-80D9-F79D44C8F70F}"="{7627FA60-C3D8-497D-8851-99B8A76CCF40}"
    "{A14DBF65-421F-4697-B4E2-B30C5C1CFC0C}"="{29D357CC-46B3-4567-9E0E-52A89D914189}"
    "{840D8F94-5953-46C8-9334-86A3F11FDB2E}"="{0D558BC2-AF4B-4F40-AE7B-B54C0485BCA6}"
    "{D1878F09-0B35-480C-88F2-0FE134F5AD7C}"="{BAD569E0-76AA-46E6-94BF-323FC5EA13CB}"
    "{99ABD933-E152-4F1E-942C-0560328677BF}"="{F8B5BC95-18AE-4DA6-B86D-D04A5AF1A066}"
    "{C2548626-A39A-4C5C-A5C7-7C205E97DC5B}"="{7F686B9B-A4D6-429D-BB04-AA2756E7D3D5}"
    "{70C7DC6B-46B5-4F3C-AEF8-1686F2495BD3}"="{7F686B9B-A4D6-429D-BB04-AA2756E7D3D5}"
    "{B0860B49-00FB-4E5C-B55F-8FEF9A9FA580}"="{904E7568-44C7-47C6-A373-891717E6B869}"
    "{D8BD9F19-9530-4A4E-9B9E-1ED1D452F690}"="{1AA011FD-C33B-41AC-9D48-45A9F55E8522}"
    "{2BA2DB24-43AB-4640-A6B8-359EE538D297}"="{1AA011FD-C33B-41AC-9D48-45A9F55E8522}"
    "{904812B9-892F-48D1-B854-D01FFBF7EDDB}"="{1AA011FD-C33B-41AC-9D48-45A9F55E8522}"
    "{2687CE02-24D8-4BA4-AE27-79BAA69EF701}"="{7ED2DB77-EA04-4B6D-A99F-15D87EFDF921}"
    "{3667FFD0-EE3D-4304-8AB9-489A631CC92C}"="{3A8033BB-D784-4BC7-934A-E9F85169ECF2}"
    "{245B7828-94EC-4657-B400-3E9E5928090B}"="{9394D44F-BA2B-4593-BC2A-6C222F9D6CF5}"
    "{CDD4A1A6-A9DA-4243-B3B7-A083191A60D2}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{868AEA16-4248-44E3-BE87-D8CF66B3E582}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{96045BC1-7FFF-4867-85D9-3D08C41404B2}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{36BDDBFC-5871-40E2-B05F-B0B800FA53AA}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{45C9CB16-BEE9-43CF-930A-F86F2FF06DEE}"="{0D2519C3-45DE-4542-87BA-CAD9BA8848AD}"
    "{4F08FF78-BB4B-45F1-8124-B4654463E584}"="{B020489D-0F9A-4CFF-AD28-3EBEF67055AF}"
    "{671737B7-AFC3-41DB-866F-FDF4F751183C}"="{A6A9C0C8-26BB-48E6-9912-6FA61A7215DE}"
    "{1522A513-79F7-40FE-913A-106CE792A362}"="{B7339BD5-DF4F-4A94-BC98-3CFC938C188F}"
    "{C2E3FC2B-56A1-4BE7-904C-8953AAD693A3}"="{4F676E7F-4912-457E-B838-66BEFD91870A}"
    "{E5916F2A-CA05-4B87-BA97-1496BAC3B2C0}"="{4F676E7F-4912-457E-B838-66BEFD91870A}"
    "{A103C6EC-2A67-4108-A8D3-2B6557BF6696}"="{4F676E7F-4912-457E-B838-66BEFD91870A}"
    "{CFB21088-FD99-4AF8-8089-5AEF4CDC63A3}"="{864B9C27-010C-407E-8D55-0084B5876665}"
    "{95748C40-C750-4203-8524-9994563437F3}"="{2010F731-853A-496A-8C42-5DDF7DF85D1B}"
    "{CF8B7F0A-DB70-4571-9E02-5FF255870531}"="{0E31941B-A348-4773-874E-DB2B5A1D100D}"
    "{7FEEFCB0-0CC8-4695-A8B7-BB1AB3233393}"="{08FC0A19-C99F-46E3-B640-8C7B48A71184}"
    "{9CC2C117-811D-4244-818B-F2E9CAE43B59}"="{4795AC6C-8380-4489-B848-EA4E60353D03}"
    "{0C273A0D-765F-4401-B4C0-1757C97BE768}"="{A0B51A48-82EA-418C-854D-20EFB72B9B8A}"
    "{5170D007-A9EA-4721-B3FB-FC8CC760CE49}"="{712D7692-CC94-46D8-B488-B2C9EDFFBF00}"
    "{3B3E1A96-76BA-4F73-8EC5-DCE5B766B614}"="{712D7692-CC94-46D8-B488-B2C9EDFFBF00}"
    "{CDC4615E-6C96-4259-8FB9-B9026897265B}"="{712D7692-CC94-46D8-B488-B2C9EDFFBF00}"
    "{8B938AD5-20F0-41B2-A51E-1474B3647E08}"="{D24DF994-908C-493F-8A2D-7E186A204DA4}"
    "{8E895CE5-40BB-4A56-8560-96CFD067DCD6}"="{8715563A-DA1F-4C22-956E-693EAEECD623}"
    "{A2DDFAA2-37A2-4782-ABAA-C9246A83A35D}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{42E904BD-F548-4C37-A790-8F58D8E7EC37}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{4B455F26-CD85-49A9-80F8-D8901E11221C}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{F263689C-7A1D-4E64-A9A3-2E322B84E63C}"="{82DEF56B-1D69-4576-8D85-022C04D4CC57}"
    "{6B507C66-A24D-4992-B6C2-DF348012C4FE}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{CC7B9F22-701A-4B79-9068-644E1AE01CAC}"="{82E90A03-A52E-442B-8AC7-9A79701CD77B}"
    "{98E90EEE-2D6E-4198-A1DE-CF7FF0C9AF8B}"="{7519AC85-74B4-49AA-9E7C-935FD00098B7}"
    "{1F497241-6728-4B94-BBF7-3A27A764FB36}"="{6C3EAEBB-83C1-4690-8469-A94540A2DDEA}"
    "{344196DD-44D5-4EDF-9E5E-26DC33A651C2}"="{6C3EAEBB-83C1-4690-8469-A94540A2DDEA}"
    "{C9388C68-E31F-4C78-82A6-3AEFA375769D}"="{40AEA6F8-8363-4D22-86E1-1515DDB1E637}"
    "{6CEFA565-52AC-4607-A367-B63899708C12}"="{1A44D81D-8C5E-4ACA-B085-05964B81130A}"
    "{2008173F-7A13-4B7F-9020-24E800108084}"="{47BBB87D-D2B0-4A4C-B508-10D7C3728595}"
    "{92BA8873-83B5-49D5-89D2-626F7FD25679}"="{8ADAA8AD-6FCF-4449-B3A0-3ABBD6761819}"
    "{5BF9DA0A-0608-4847-9CB2-2C0AB5B0D274}"="{122AC196-C53A-4A29-A891-7C4889E55553}"
    "{BEF7A9E5-7C7D-4382-B3A6-7C3A8B6E8435}"="{689B3F52-AB4C-4ADF-9035-68CAD60E9D4D}"
    "{A7FBD34E-1AF1-4D57-A8C5-5FB0B197CC61}"="{CE15B1B7-5921-4B44-811A-96B5569DDAA5}"
    "{7611B934-258D-4B52-93D5-A857036A8E7E}"="{14954578-A240-4DD0-8CAA-5C3895C10606}"
    "{B4D10713-FF4A-4A91-85C5-E32EFEB3322E}"="{C614F33B-E95C-4645-97A4-F98F6F3BCF44}"
    "{4D09156B-82D4-4AAF-9F84-B1D7CC54319C}"="{38F16B94-300B-4D45-9061-BDCB80F2244C}"
    "{8DB85689-FDDC-4E95-8FCE-4B99ABB0816E}"="{8A67F5D7-FD61-4647-937F-984801F41A13}"
    "{748AFCF4-56BF-4303-A3C5-9697C488A9B1}"="{E3DF0339-BA2A-4901-9704-C294B07FD316}"
    "{CDA01207-AFF2-4224-AE58-52E000CE7B6A}"="{E3DF0339-BA2A-4901-9704-C294B07FD316}"
    "{DF70F7A7-4FE4-4E1A-A512-7FC888EF3EDA}"="{41CFC676-2264-4104-8217-8D2BDC67B778}"
    "{B84CEA78-15BF-48A3-BFD1-A97EC0C3E0E0}"="{7D89411E-33E9-4EBA-A12A-E0FC701F3CA3}"
    "{0B894F55-89EE-4773-BC8A-7694382B1B33}"="{7D89411E-33E9-4EBA-A12A-E0FC701F3CA3}"
    "{2BCFC112-57D3-4A3C-B036-7023F002AE77}"="{7D89411E-33E9-4EBA-A12A-E0FC701F3CA3}"
    "{FD7E28A2-86E0-4F8A-839B-465C5069A8D4}"="{E77BF470-12F9-4515-A210-961A9020BBA8}"
    "{D7F05C10-7114-4EB8-AE7D-C929210F2529}"="{EDFFD2AE-166A-4C4E-83FB-F377D3E3690F}"
    "{3A5657C3-8D90-43EF-8B3D-8CF8D601F587}"="{CE72A70F-78EC-4E1E-A620-5CD0CE66E4EB}"
    "{00869AAB-1955-4B19-A426-6FF54DA4AA08}"="{52162211-1E7C-448E-B2DA-A7E100083192}"
    "{DAA17E6A-D8C0-4A9D-AAD0-A25EEE740451}"="{078C9A92-FEA2-4115-BC1D-72C9BF985C3C}"
    "{683CEBE9-5B6D-435D-8CCB-2FA6E5473D50}"="{E1C58FB8-F5D4-4D74-9CF4-5507C9251AB2}"
    "{6970DB92-B2B8-4A9D-B943-DF0F05B5738F}"="{E1C58FB8-F5D4-4D74-9CF4-5507C9251AB2}"
    "{6C4C26CF-087D-4713-90B4-CE29A57EF9B9}"="{CA7EFB3D-430F-4E5E-BAB8-AD8F0FEE930F}"
    "{3A9B95C7-15B7-4ACA-BECC-500832B4410D}"="{79168EC4-DCB7-4021-B8C6-8F85B811791B}"
    "{2D7063E5-BD11-4B0A-93B7-76FABCA9959C}"="{33638A0F-F191-41D6-B867-0D0A141A6260}"
    "{9A874D7C-335D-430D-834E-9798A0827A9B}"="{2D14D758-2987-4793-A7BB-D106696EF785}"
    "{370EF4F3-8176-4821-B21D-4A712E1E96B9}"="{2D14D758-2987-4793-A7BB-D106696EF785}"
    "{ACEC9C81-BD2E-444E-8528-29B8CAD78B98}"="{C75AF5DE-5398-4C56-A10A-8056A380EF17}"
    "{BC120D0C-C7D9-4B7C-A59D-2661E9C1CBCC}"="{2D14D758-2987-4793-A7BB-D106696EF785}"
    "{853A21A1-17F1-4A16-9861-3CFEB4B6AA4E}"="{CA6E58FF-823C-4629-89DA-00904839A2B5}"
    "{048EDB22-70F4-4831-97B1-1DDC6240D3FA}"="{C1F64D01-10D0-4CC3-A5E1-2DE973D51088}"
    "{EEF8BC5E-98C7-41C4-93EE-4E8D289FCF9C}"="{C1F64D01-10D0-4CC3-A5E1-2DE973D51088}"
    "{F6DE35FC-3B09-4419-9316-1026D45D184D}"="{169DDA8F-61C3-4A21-8746-20EBED4367ED}"
    "{7005D8C8-0742-4B50-A312-4C7AFD709FC5}"="{C1F64D01-10D0-4CC3-A5E1-2DE973D51088}"
    "{BE2C8AD6-F70C-4758-A3BB-AD336435A098}"="{49242E76-E2E6-4206-AA9D-0A1DDB10A53C}"
    "{2BDEAF99-C0CA-41EA-AE18-5C88FB5E41D9}"="{FF859B7E-EBD9-4E4B-8339-1E807B1F531B}"
    "{104DA529-85D1-41E7-B24D-5011A949F173}"="{FF859B7E-EBD9-4E4B-8339-1E807B1F531B}"
    "{7AD0E556-1E10-4993-9284-9B25387A4E0A}"="{D905EE11-E9B2-4537-872B-0F02831FE1E0}"
    "{AF158CD2-41CA-4519-8C9D-379461A20F1F}"="{847ADEE7-DA81-474F-8DC4-41F430BC302E}"
    "{F40D3D1E-1D78-4764-8758-A4D0D776CA33}"="{847ADEE7-DA81-474F-8DC4-41F430BC302E}"
    "{01213862-EBE9-4535-8135-646E438BA357}"="{847ADEE7-DA81-474F-8DC4-41F430BC302E}"
    "{C685DA2A-396F-4A06-8DF1-6D0753E7815B}"="{B2BEB123-FC40-46FD-BEB8-992F566315E4}"
    "{77E13497-8D00-4ABA-AA4E-C7684F3C217C}"="{86154E3C-96F5-4BD6-9A5A-88E7C3AE29D1}"
    "{EA7625FF-8681-412E-A38D-5114EA27FA14}"="{B9857E54-F7D5-465B-B4B3-066747ACE29F}"
    "{537CB0C8-14B0-42B8-B3AF-D5237BC3A4CF}"="{3E14BABD-6D12-4B49-8537-38B3EF914B47}"
    "{E30DFF7C-9CF8-4CAE-9D1F-998BEFA2604F}"="{0AB21E22-D214-40D5-B13B-1B1AC2B7BCAA}"
    "{994E54C2-1637-4A4A-AB0C-791198D2347B}"="{EB4E99C2-0DF8-46D8-AA4E-13024F0F7CFF}"
    "{3AC57293-3A20-496F-8122-D90FEE7836F5}"="{E8C6F264-CD77-4967-859C-BC717F9F2682}"
    "{65120356-2D54-4276-8BD0-2CEF08668F1C}"="{E8C6F264-CD77-4967-859C-BC717F9F2682}"
    "{C8CFFD0D-0851-47A0-8387-99E908E7D1EA}"="{4C1D9910-801F-4B3A-80BB-58A5F776955C}"
    "{8136F5EE-B4D3-4A2A-92AA-8777A5EBD28F}"="{32B17DA5-0E75-4D53-AC4C-4D2D73DADA9E}"
    "{5CF7DA36-BB34-4827-8E54-28CCA8FF66F7}"="{CC0A2113-51CA-4BD5-8DFC-38A0BA282EBE}"
    "{186F3B53-9254-4156-8D03-6A7A7C6EBAD3}"="{001AA5DA-A4F3-4787-8EE3-59B19DFF5687}"
    "{0E128F65-65F7-41AA-94DE-BED4F85EBE09}"="{102ED26D-527C-40CA-9B24-574F105165B2}"
    "{5D55648A-D73C-4600-86FA-ACCABAC74DD2}"="{FD8E8D69-A21A-4AC1-BBDD-EEC7586808EF}"
    "{1B8BDA77-08FA-4164-B459-5AC6370C6390}"="{BE83CB62-4C1E-4DA1-9B77-9C3675B275B9}"
    "{424F37F5-6A75-4621-AAF4-EB3798F0CC67}"="{9B2FDC9A-9146-452C-95F3-9E67F756FBD9}"
    "{636A02DB-85B7-492F-AB10-6BA9D29942BC}"="{B60C3078-2389-491A-8BA9-AB89E09A352F}"
    "{5D82EF13-628A-42F1-885C-FF0DEB4D40E6}"="{D335743B-2E4F-45DC-B325-980ECAD68F5A}"
    "{9B7D11B9-0DC3-40CF-B989-B1D9D48F5F44}"="{898BBC7D-5452-4D7F-865A-86A875D65C3C}"
    "{722272AC-D1FD-48CA-812B-67060E719F56}"="{170DA129-1AE9-462D-8E2B-01318C2C4F15}"
    "{5A542AF7-C310-4A37-AC88-F1B101D85C34}"="{0C63418C-4D6D-4A2E-878F-291556E92BFB}"
    "{A9D87CE2-BE10-4900-8127-97595E2FF96F}"="{CF682105-7229-4056-8917-8546EC1CC247}"
    "{92D0F44E-7F76-4393-A0C7-B853CCB477B9}"="{D0169151-B61E-4820-97B4-6507BE79E8F6}"
    "{CAD09480-8116-4A48-A9D1-4CB9EDDF4A13}"="{069120A6-5BD5-485C-9A4F-25AC504829CD}"
    "{D24D0731-74D9-4AAE-BFAB-BE573587BDB6}"="{55B219F5-3B72-4975-86BF-6FEFD8A7D4F8}"
    "{896F2790-E8F6-4438-AA69-1BF2AC38F65F}"="{D85F5E16-E359-4A86-8925-D751AA662B10}"
    "{C2EF9078-B158-47DE-9623-3DC20E3FFB6D}"="{767C864B-E1D0-43C3-9A07-D453F9C823B6}"
    "{FEC5F57E-13AB-4F27-9002-EAADAF65CD6F}"="{4768C96A-BFE5-4E66-A44F-7AF05B2CDC6E}"
    "{8EFA208B-AD13-4D7A-81CE-0405D7DFB200}"="{B7EDCFC1-303E-4398-BC08-01B9154BBE3F}"
    "{D5D893DE-C68F-446A-93FD-3CEBBDC5E336}"="{3B63D2CF-5FE6-4767-BB15-0728A7416270}"
    "{D564E4CA-BC7E-412B-8664-E2AC5025276F}"="{91BCF486-0100-41EC-BEA2-31BFBECA5169}"
    "{5C2950EF-6B17-4AC5-84DB-E4470039FE12}"="{3C7BD662-FF34-4B3F-99C0-6B323CDD136F}"
    "{DCEAF446-0304-47C7-B38E-0E26D2A1D9DA}"="{2334F828-53D2-4086-AB95-DBA610399FF2}"
    "{BB26C9B5-9CC8-4BD3-8508-DD340C9B5885}"="{778AC5DD-B80E-43BE-8F22-D16830E6D306}"
    "{8387DA6D-ED58-44A2-8A4E-00FCEBECE225}"="{E15EB805-CA75-4088-B963-527C58FD6EA6}"
    "{D5C196C9-370D-470C-AA86-F8C6A2A859DB}"="{D138C831-B8A2-451B-AA8C-34219F98379F}"
    "{44C8A260-EAC0-4354-B1EF-69F10BDCB2DF}"="{CC2D453C-FA70-4C7A-B42D-2899FA12F525}"
    "{6EA27CBA-949C-4D19-A70E-4B77C1809629}"="{75F816E5-0B12-49CF-A456-1F2E5D04DFAD}"
    "{F84704C2-2448-45D1-B7F1-3A6032DFC9DC}"="{3F37ECBF-3685-4772-BB35-98BB81B33BEE}"
    "{7FE4FCD8-CC75-4E7D-A9B3-4780654FFAAE}"="{2E81969C-3F36-47E4-91B0-18FA28C5D72A}"
    "{DC090BFC-C8F8-47CE-B540-609030B46CE1}"="{9BBAFD60-28CA-45B4-AEF7-27DEF8F8E495}"
    "{9AA3DBA4-6BB3-4E75-90A5-DA2FA04C10C6}"="{39C6882A-E40C-4BB9-BE2A-6C74702E8EFD}"
    "{E1E12608-883A-483B-B93F-B5C05BABD795}"="{523D5577-3378-4AC8-8DE2-B8BA2F5630D8}"
    "{8B9140CF-EF79-4ED7-9229-3DCEEE1206AC}"="{0140621F-3F0E-4808-AFCD-E30671C47CBC}"
    "{099088D9-79EA-4AE5-96B0-F560D1C74713}"="{7709CE7B-CEC0-4246-8E84-FF31CF58EB67}"
    "{12F9E83B-6830-49F3-ADEA-BF61815938BA}"="{07B9DE1A-8565-4DE8-9B04-613173740A2D}"
    "{9B8E90AB-FDE1-4D6C-8F7D-310B1440F47E}"="{9A9B4718-ED11-44E6-8B90-6A0BD460D1CF}"
    "{A9D94B89-5F8B-46A4-BEBF-7FD00B283A6A}"="{9A9B4718-ED11-44E6-8B90-6A0BD460D1CF}"
    "{3A70290D-3518-4014-8237-C835A44A64C6}"="{E236ABDB-0E40-4CAC-8016-3744DA2C0CE2}"
    "{77909F7B-A56A-4319-ABD9-70064FE937B7}"="{9A9B4718-ED11-44E6-8B90-6A0BD460D1CF}"
    "{62FD0EF1-000E-4AA8-91F7-7540C4C614C2}"="{58DABEE6-B81A-4F72-81EA-AE6F82C53F07}"
    "{B7DD6E51-B2A7-436B-A5F2-1908B0CE8006}"="{084E7665-4773-4B5D-89BA-54361483E048}"
    "{D11019D5-96E8-4268-A685-51A5671698A7}"="{F7BFE683-70EE-431C-B7D9-851F069FCA97}"
    "{6038A140-D60F-4613-B8E4-7EC0FA770207}"="{F7BFE683-70EE-431C-B7D9-851F069FCA97}"
    "{1418789B-5E4A-4326-A7C1-40DE89E4BE92}"="{F7BFE683-70EE-431C-B7D9-851F069FCA97}"
    "{D2229581-083B-4244-AC53-8EDE65E7265A}"="{9155889F-C162-4DBE-85C7-38D54A837F69}"
    "{804210B2-1C6C-4738-9302-C129222CF622}"="{10F9CA7D-3432-41A1-AAF2-38B2B41F5D4C}"
    "{9A6A4AC7-BF69-497E-85D4-B70BF51BC5D9}"="{72C21623-4B37-403C-9A4E-54DC715B281A}"
    "{89B1A352-7A90-4537-B1D3-6A5D038FE672}"="{4D0B4E62-7290-4686-9CB5-75564A6B3267}"
    "{EF15DED2-BE32-45B3-889D-E5C5B8FAF92B}"="{2140CC40-3C35-4988-AACF-B71D1B1EA631}"
    "{5D50C6CB-E31B-4105-A7BF-427F6ED0298E}"="{BA1A6129-D687-405D-A630-AE64D4B1C64A}"
    "{3174F7F9-BF17-465C-8819-B97E73F60525}"="{D7497F7A-317A-435E-8847-702CED81FF55}"
    "{5C2B96E8-E56E-4A1C-9A44-350BBC65A522}"="{35664E10-191B-4EBC-8F6E-584FB2D4E901}"
    "{AC385FF2-BCCB-4E6C-AF86-ECD53F64D9F3}"="{95DB291F-6091-4A10-8443-49AC10A58392}"
    "{731A2C6E-6747-4369-B029-D9F4FEB9021D}"="{EB736682-5B02-479D-A753-E68AABB73807}"
    "{A1015EFC-1E8F-4C10-B395-7B3840DB4BCA}"="{3B123272-8BF5-45B3-B8FE-0A07D5BADCB3}"
    "{28279B68-855D-4A25-BCAA-2FEC01115089}"="{F676CD72-227A-4C6D-ACA7-68BEC0A6F743}"
    "{CA0A61F8-2C52-40B7-AF0C-DAB19F10C6C7}"="{181D3CEB-D217-4ED1-BA03-AC0B6232D859}"
    "{A8EDA804-EF37-472E-AA91-69544CF3A065}"="{2734497F-5662-4C1F-A0C3-500371C2266C}"
    "{68920BDE-B203-4AA7-AE65-876614AEB826}"="{2734497F-5662-4C1F-A0C3-500371C2266C}"
    "{6C9F0A73-5FA3-4975-A8A2-AA31F572249C}"="{0C93F6D6-A2EE-4B80-8BAF-DB92B7C02544}"
    "{D40619D1-669F-44ED-8A87-9B2A7C7B9526}"="{2734497F-5662-4C1F-A0C3-500371C2266C}"
    "{AF9D97A9-79D7-4D3A-B201-B14A551A4BD1}"="{BB6F3534-3F71-49EF-94A8-31CCC56E457A}"
    "{EA9A9FAF-3A1F-4A94-9669-04B09E20DBDD}"="{BB6F3534-3F71-49EF-94A8-31CCC56E457A}"
    "{B47DB645-889F-43F5-B10C-BE6ADA2FFAB6}"="{BB6F3534-3F71-49EF-94A8-31CCC56E457A}"
    "{48B310AC-BCCF-4566-B4D7-328BAF173EC1}"="{28265AD9-B5CB-4A26-B86A-97CB1277CBDE}"
    "{B1FD8A1C-6D2B-4BE4-A284-B5710C80A443}"="{0AE54CAA-0DE4-42C7-94C7-053E924C4220}"
    "{49C6448D-456A-4326-BA90-8722E2680C13}"="{30AC2B64-5BDD-4672-B331-69C911380E58}"
    "{82A61CCC-6EAF-4B7E-B2DA-F0680774D269}"="{30AC2B64-5BDD-4672-B331-69C911380E58}"
    "{4F8DDDCE-61ED-4E11-9FB7-EB03F1912517}"="{5F859511-4682-428E-AE3C-055D3CD7D946}"
    "{164E460E-4A5D-477F-9849-DD145CCC4973}"="{3C98CD04-DA16-46B9-A77D-CF09D4507C73}"
    "{64BB072C-0AB2-4ED1-8C10-38BFFEA28738}"="{20DF0616-AECE-4FE5-8B78-07AB663D5E5D}"
    "{3DBA6B9F-B906-4162-83B9-7C2245424EE6}"="{E987930B-D332-40A4-AC73-63F3F21EE264}"
    "{DADE9EC6-DC69-4A56-88A0-F2F5552FE606}"="{351CEDB2-3444-4D97-9E68-8EAB0A8ED3CD}"
    "{CCDC1DAB-07D2-4880-B4FE-C144C765CE77}"="{53469DDC-F611-47B9-BF58-561986DFD95E}"
    "{2EEB4BDA-16F4-4F34-926B-144A8F7B731C}"="{590F06AF-CC53-4FDE-B493-18B109444DA1}"
    "{0DB6E09C-7868-4E42-AB66-089B41DA8209}"="{F9F92E2D-58B4-4472-8324-137DAF00EDC1}"
    "{18FFC85E-5063-4CD0-A768-A64A27B2C9DD}"="{E7EE9149-7D8C-4160-94F9-F8E0E4AFA4FF}"
    "{97C724F5-0D83-4382-A6C0-CB5F00A3BF38}"="{40593A46-FE8F-4721-92B8-BD071F4626AC}"
    "{9D3E2D24-ED9C-45F0-B854-3A92AA518353}"="{557D6677-DF6D-40D3-9479-CF0C5F15B98C}"
    "{B8CB5450-104A-48D7-944A-D1AEB550395C}"="{8DB5951C-80FA-4DC8-9984-971FD935A990}"
    "{CA3EF8DE-92BE-4FB6-833A-5AF520173B67}"="{448FAEE3-2A1F-45FA-8967-EA6179FBC39D}"
    "{651E0D43-6133-4F5F-8B1F-9BEE0E5DACB0}"="{602D0C5F-9E0C-486F-89FD-0AD1CFA4B29A}"
    "{E2529FE3-D0C3-4FBD-B881-73DC69DB5E5C}"="{08DD8F6B-9380-4B2F-8CA3-1FA5525E992C}"
    "{155BA0D6-EFAD-4FEE-8B62-28EA8600EA6F}"="{EBE0870F-39EF-459D-B7B8-0FFFFC329CF3}"
    "{188DACA8-E075-4C96-9C1F-52D03CB71BCB}"="{20024AF0-50B7-46E6-AF4D-24E838ED635D}"
    "{4BC94A9B-3DA5-4AE3-9937-A458CF648D16}"="{E50E3203-32DB-4B2A-A1B5-AD8FA0EFC34C}"
    "{55065624-9EB0-40FF-8DD6-44E760BE5B13}"="{6F11B743-B4EA-47F8-AD62-2F19A00A49D7}"
    "{34D87102-7C00-4C76-B032-316BE56D2EFB}"="{D5461C0E-1BC5-4655-8F4C-4D6D50B641D0}"
    "{A86B83EB-89C4-4195-B79A-3755F41EBB7A}"="{6740A2E1-EC54-4052-9606-4D967DFFFDF1}"
    "{B4DCBDAD-FC73-4FCF-9779-2CE0160A4765}"="{DE11E07F-3D73-4969-9178-A2FBD47445F7}"
    "{93306EAC-5BE7-43B8-B81A-2A7A252A503F}"="{99CE4A2A-501B-4483-8084-6FBC548F3153}"
    "{31B3131F-8AD9-4479-85AF-B9903A185AD6}"="{42D3BBA7-800F-471F-9E6F-965DCFBC6EB4}"
    "{5781564B-0509-4D12-8E58-8063ED66D319}"="{BCF27F2B-7577-4D13-A214-BB3D4AA6975D}"
    "{232FBE10-7FF2-475C-8AE3-81DB60512303}"="{9C7FA736-74BA-4B5E-BA10-1011E8CE6476}"
    "{5956BD62-DE46-41E1-A76E-9C2A58B3EB19}"="{BC1ECAD8-B9A1-4299-8A03-135D2410B905}"
    "{9ACC6923-F205-443D-85DD-5D1F6F78D20D}"="{253B6E6B-F5EF-4AC7-A829-1BADF7FEA9E6}"
    "{3AC9E752-E59A-43B4-9E12-D0023D1698F4}"="{7BB374A0-9BA9-44B3-ABF5-76A30221657D}"
    "{8D221939-0409-4FF5-AECA-9E0FEFDA5959}"="{CA5F187E-E335-473C-B850-BCE0B84FA58B}"
    "{B6EF5BBE-BA3E-40F3-A271-5E2514EC4FA6}"="{CDCD750B-4310-42FF-9488-279674F15CEF}"
    "{693C225E-9CDD-4E1F-8A83-A34F7798A245}"="{E1C9A1A8-ABBD-44A2-8EC1-ABA9A1A8E89E}"
    "{9EC9CC61-8B32-4119-B438-A8136EAC863C}"="{F271BB6A-F513-4C4B-A47C-A5BAFF18845B}"
    "{5D984350-8A20-4D06-8EEE-89F57F63F4B8}"="{4DB30515-FE91-484E-B62D-5CFC870425FF}"
    "{BDEB475F-1873-4188-AEF6-3071AF6C2D3E}"="{A7F5CDF3-9771-47EB-9158-4D161C53F62F}"
    "{74D148D9-B817-4556-ABCF-812F9541F75D}"="{20886920-6D41-4150-8B87-B8D3BFDFF0B8}"
    "{4378B02D-873C-4894-A58C-1CE9FE053C31}"="{7CAE42ED-1B3E-479D-9615-32887254B40D}"
    "{884569B1-C084-423E-BA80-0BA4A2D338CD}"="{F8B4FC92-7A38-41A3-A058-8EFB87EA9C49}"
    "{678726B8-2C31-4C24-9378-25336E05FD66}"="{0E5C9636-E3F5-4B90-8A06-F8B47C6FAC08}"
    "{CE498363-3E39-4F34-94F9-7543A3C84A33}"="{0E5C9636-E3F5-4B90-8A06-F8B47C6FAC08}"
    "{8D29606A-8B30-4465-822E-70D88D58ACDE}"="{F768AEF3-3F02-40D8-9BE7-951B34AC8B02}"
    "{6D75E441-174D-42D6-A81F-D0C4317A350E}"="{DAEC5F13-668E-42BD-8956-F952771D7147}"
    "{9C444249-59D4-4F34-96A7-333886EE13E2}"="{56B285EC-65BF-47CD-844E-176002BDAA2C}"
    "{C7528843-A016-475D-BF59-3941CDC8C8BD}"="{0547D627-156D-49C1-85BD-501CDB28B0EB}"
    "{64AE4804-C521-4D9D-A1F8-1D9B0196ADB1}"="{E391F307-6DB5-4066-8955-4BB6413D8BBB}"
    "{B1A0E6A7-247F-4EE8-89BD-95CDE8C77F3F}"="{C554604F-A57F-45B8-8EA0-EC84F601DE01}"
    "{AD93D01D-B257-4839-ADBE-F77A81056F16}"="{FB9FB6B5-4ED2-4D03-BC6C-AD9129900E2D}"
    "{85254D52-36E7-40DE-A78B-276F6482662C}"="{15242B1D-F358-46B1-B2CC-46914622C59F}"
    "{29F2946D-C709-4B49-8706-FA9CCD3A9A27}"="{C757C079-7F97-4EAF-868B-C577E3234E2C}"
    "{F0FEC015-5EB4-4F73-8D8F-E6E17EF9D9A7}"="{B8FD5262-5152-497D-8C45-9C7C8364293A}"
    "{D4328E9B-B826-4A94-A498-791C7AF90F6D}"="{206A890F-77BB-4C12-880C-1C3D30E1FC55}"
    "{AFF0925A-BFEA-4F8F-B40F-DC62E1D16F12}"="{308920C5-AE8D-4CDF-B12A-251E6653EF23}"
    "{77B61FB6-4CF7-49E5-BE0F-F9AC78BBAFF5}"="{0D8F30DE-7516-4841-9B1B-748EE8E5A02E}"
    "{ACDEEF18-BE57-4F39-BB1B-FA9EBAD92621}"="{8943D534-431E-44A3-A799-C95341EFBE86}"
    "{09F09EE0-C444-4201-9244-18080D48B477}"="{8943D534-431E-44A3-A799-C95341EFBE86}"
    "{9EB77BB6-4AEF-4ED6-946B-05766C0EA434}"="{1981CFFF-A597-4EB5-A273-73F713FC8213}"
    "{35697A43-27D3-4C03-B148-910A74C860C7}"="{D3ACE51F-B549-4DAA-B957-3D55BA4DA532}"
    "{23F741D4-31C5-4FEE-BBB3-CBE96B4B0A90}"="{A15C9600-CBD4-4875-92B7-1623548F4FC6}"
    "{06140025-A07C-4EEA-806E-D9140D1F4067}"="{13B0D3EA-F841-4178-B819-AB53E9BE1DD1}"
    "{484752F8-9E09-42EE-8433-B1330D5F67CE}"="{54EAEF88-ABF7-499D-B657-4EC4E5188268}"
    "{9F1780B8-B6C9-4A50-8EB9-5D6D8B2009C0}"="{4BB792F5-D44E-4FFA-AFA6-DEB5C14367C1}"
    "{3659F068-D6F9-4AFE-87D7-C60B37D8CCA1}"="{CBD237F7-9B0D-423C-A521-F2305D08C343}"
    "{F72AC446-D42D-406B-BEB2-9EA29BD3E6BA}"="{FDF23654-6850-4177-A79F-29F3383D5B5B}"
    "{9C44D4C2-69BE-45E9-84AD-27B0094B8A41}"="{FDF23654-6850-4177-A79F-29F3383D5B5B}"
    "{9F07C024-5D82-4E8C-B20B-876396FA48CF}"="{25456777-EFF3-44B4-B341-65192B81C2CE}"
    "{9C8F829C-D834-4DF3-9CA0-FE5A98EA12DD}"="{FDF23654-6850-4177-A79F-29F3383D5B5B}"
    "{9158313F-4D87-4014-AB6D-4C60BCAA1A55}"="{63E73359-A019-4B99-AA4C-90763749D018}"
    "{96CB8A05-8748-4AAA-8B38-A855BF710567}"="{BA9CA23F-208A-49A5-820A-004688FF534E}"
    "{BE11415B-B34B-4616-8382-73E01D3817A1}"="{82562CAA-C065-43FB-93AC-99DE2F5F936D}"
    "{DC6E89AB-3424-4EFE-A7A9-EBE837D7F742}"="{9B037015-D500-48D7-ADBC-8E60F1FBC699}"
    "{77CF70CD-769F-413C-A9DC-EB128B5828E8}"="{69A6F8D0-6FA3-4561-AFC5-D4933900E712}"
    "{32778D17-759D-4143-9B62-7B5001FCD382}"="{A4E7F2A2-50ED-42AD-9C19-74B0835178BF}"
    "{19066123-B4E5-412C-8438-04230715A0D9}"="{4E88F45B-B868-401B-88FE-66F7163C8D71}"
    "{26D1A2A0-59DC-44ED-BB21-0B3EFD9BBF4F}"="{4E88F45B-B868-401B-88FE-66F7163C8D71}"
    "{B5E399B5-1E20-4C9F-807F-E38EFC975B7D}"="{0E69406E-93D5-4BB7-8134-D3A9432311CC}"
    "{C51557F3-A62B-4B33-807B-0DC463573A81}"="{4E88F45B-B868-401B-88FE-66F7163C8D71}"
    "{23A930A6-34E4-423F-BA18-A56767047AF5}"="{C32227C6-8582-4945-98F4-AF40B81FCEBF}"
    "{9111A05F-1F3E-4F09-ACF1-2956C9E9D03F}"="{F8AB80E0-E786-46E9-8729-D48E542AC48E}"
    "{F9FC85C2-A92F-4BB3-9D4F-C41DE16CEEF8}"="{F8AB80E0-E786-46E9-8729-D48E542AC48E}"
    "{6E6E118E-92F4-4EC5-B782-72B488008535}"="{529B01D8-DE7F-422D-A7E7-B87A2B6E2431}"
    "{3A65ACA5-1364-41DB-9E41-D115E8FC1DC5}"="{60D9602F-2D8D-450D-B998-EAC80D249A8B}"
    "{E897283B-79FE-4CCC-B8ED-2B5A6B29FFE9}"="{4D5E1C6E-3ACB-4626-A187-3DF44C6E900A}"
    "{AE1DFD77-1861-47BC-A8B1-8E4BC14499B8}"="{5971BA33-EC43-4C96-836B-7C8DCEDDA420}"
    "{7B9F7043-FC52-44C7-A88E-5C2782E903A6}"="{F6E6AB45-5739-4267-A045-5E23268E5C37}"
    "{BB056109-3608-4432-B027-4660784B9DBC}"="{1612DA11-C7D6-48B3-A2ED-8AD95D55BE47}"
    "{FA36DEB7-EFD0-4A24-8509-EA47DE03DDAB}"="{9679C448-9697-4B96-9559-986E5625FB92}"
    "{2952E472-ADB7-4881-A323-CFABF941BDEE}"="{EB20ECAD-3D1C-4B51-A3CA-CFBF70583D9F}"
    "{55BC185C-DC3E-4B46-A266-68E260EB29EB}"="{87C431C4-31B2-4B74-B35E-27411E1DAEE1}"
    "{07350A37-A26F-4D79-AB14-795B85B1DE9A}"="{1E0D62AD-28F3-4492-8A50-C4A4AF3EB5C7}"
    "{6513D67B-2324-4336-B509-3EB37F21EF0E}"="{A7F54069-7764-47AE-B555-DED34CB152FC}"
    "{4B6E5A2C-75BF-4FDE-8A70-57FDD725C1A6}"="{FB1AC353-3D0C-4134-A0B7-DCF468AD69B9}"
    "{B3BB5C70-1FE1-44F8-9A37-FC99D43976BB}"="{C44FAB20-5091-4FB8-A043-4F67CAE3DE31}"
    "{B6B2FF8D-6659-46D4-895B-FAA06B209B90}"="{1DACB073-5775-45C6-88BE-E709A52C0489}"
    "{13C5C943-2C26-4DD8-A002-EEC486CF5026}"="{8D373B8F-E90E-4197-A7E6-2B5F9B0B385A}"
    "{50A571B7-812D-4FB4-93B1-C1D7AC028CF2}"="{8AE0832D-7485-4FBA-9394-DD51B0369947}"
    "{F5B4BED0-1D15-4447-BFFA-BED29AB00004}"="{49E8947A-3E05-4B8E-B7A4-72F3C45808C0}"
    "{E3A4F0BF-D627-4E6D-8150-E6FD1C128675}"="{8B645985-180F-4340-9153-566BCCA3F2E6}"
    "{27179A6E-EBC1-4CCF-BFCB-5F903F7FB659}"="{D5DF9D76-3E2B-425B-AD10-71D88AAB548A}"
    "{3D7C8D1B-A77A-4637-949B-66754007A030}"="{6EDB13D8-8212-4B52-8D34-E915286C9357}"
    "{73028612-6101-468F-93D9-77BC22864286}"="{48B64F4A-A3AE-4D7E-A58E-E6405253DCBC}"
    "{27481C50-7D3C-49A8-AD5B-F369711F364D}"="{5D52119F-E96F-4ACB-BA22-806C64545254}"
    "{2C582D72-43FA-4275-8F61-F64152C8D08E}"="{CE1A6970-2392-429C-9ACE-7FEFA232991B}"
    "{726B7C5A-0CD7-487F-B102-99DB6DB9F900}"="{14EB63A5-D520-4961-892D-893F4FBB608B}"
    "{2FDAED0D-380D-4A22-BC66-A6774AA02E5F}"="{B1E29E94-AF85-49BE-AD75-549D4BCE6BF4}"
    "{0506ACAD-07CC-425C-AAE2-D97C302A4D8E}"="{CA138CE3-0D1B-412B-889D-0AD8F8E763B8}"
    "{76401902-FA9C-4CB4-926B-D456A3D61A5F}"="{60731F19-3A5C-478B-8CFA-1926B6115574}"
    "{B71C1FD6-7BA3-49FA-847D-82FC1464E88F}"="{2D93455F-96B9-4978-8B11-E02421037A80}"
    "{CB86D8C2-B1D1-4B73-B7C8-C73FDFAB4187}"="{5A27648A-FE58-4A88-B564-3076028EF88E}"
    "{445E621D-5589-4DA1-BF9A-8E006F7C00B3}"="{590EE354-92C2-462E-9AC8-9F637D09B5B5}"
    "{45A12B02-A96A-4A64-80C2-423A50F4B0F4}"="{38128674-58DF-49E4-A9A4-54C5554B5990}"
    "{5BFEE50F-4515-4AF2-B38E-D73F36E56733}"="{E0FB1CFD-39EE-4643-85E9-834FCFA5B778}"
    "{39846504-8FF3-4673-8D61-7BE16CA792B3}"="{48668CEE-AB81-45C2-8390-7056E304EACD}"
    "{227CFA2E-EB06-46B3-A78C-FF8CBFC4811B}"="{46E2BA37-4B51-4B14-9449-34E40C1CA6EE}"
    "{9FA1BD8A-70D4-4A82-9793-B7154197D87A}"="{DCF24111-CCF1-4058-9DF8-67CEBAF5A30C}"
    "{EE739D2E-80C2-4D8D-82A8-0B4FC7B32DB1}"="{FB0CBCA7-9F97-42A3-8254-732DC97FA8B2}"
    "{3C7EF6CB-2844-45D6-BD59-5AC185F2A314}"="{5B2ED4A7-C5F1-47D5-A513-89604FE84CB7}"
    "{EF04C39E-B5DA-4364-B88F-2397C927F3B1}"="{D5ADDB95-77D1-4714-8431-3FDBE3571751}"
    "{BFC72B83-2963-48CF-B795-823973684B3F}"="{DC2CB297-5168-489C-9A9F-2C60D2AEEA78}"
    "{9A03FA77-1E05-4029-ADA4-32F33B712AEE}"="{FBD07062-5B3C-4572-90B4-18341E879D0B}"
    "{B44B1686-1CC8-48EE-B932-CB78153896CF}"="{E2C96D2A-2FB0-4462-B49C-C4A68BD5336F}"
    "{7A99BE94-8116-42EF-9A59-0E2ACAA35B3B}"="{7EBA2874-9DA4-4BB2-B5EF-7E72F2CB0934}"
    "{B76F39CD-5547-4243-9CA6-A2691BADFCF2}"="{8EA87287-9E3F-4EF3-8C95-E7A439F9FB52}"
    "{706FCE5C-D7A6-41D3-8730-8B38B1CDB90E}"="{AEF75197-3F91-4961-9EAF-51899FE00D3A}"
    "{23AC3CD3-A03C-4B2A-93E7-A8D38E842A59}"="{013C060C-6454-446B-8A64-87C9094399DA}"
    "{C393D5E9-722E-4A15-995B-E2FAF019C220}"="{10FBB9C4-80EE-445F-A147-F6C1BCFE943B}"
    "{97CC8964-B5C7-4984-B482-9867BD567D1C}"="{B84903BC-0F47-41AF-9F64-1C106CD81850}"
    "{BCEB68FE-AAD8-4349-BD27-8E40D0D1E8CE}"="{1889CBC5-EBDE-4959-9F9E-E0B044C1B505}"
    "{CD36B2F2-A849-46B8-BE5F-8CC34E351051}"="{D41E204E-8E47-4FCB-B6BD-BAE9E3129108}"
    "{4708D711-F6ED-4237-B3A2-7FFB5F0079B2}"="{70ABA596-E427-4411-A664-4F24A3CCC6BA}"
    "{48AFE84C-01B8-4AF3-83C4-68C3A90B11CA}"="{EACB46C7-9672-4108-9A99-CA1B643AC384}"
    "{2F410EBC-01C2-4AD6-8F61-989A677B16F9}"="{6A7AE41C-B013-41E5-AB15-D0C2958F897A}"
    "{1FA02835-6620-42FA-B7FE-F5B04FA5EB74}"="{ED2A8653-336D-48C5-8D70-9E965B550EB1}"
    "{2719429F-CDF0-489B-A0FD-479B418811B4}"="{85360AE9-E3DD-41D6-A832-B5B03607D343}"
    "{E767EE55-7222-4AFB-8475-1B704844F3D1}"="{35363C09-5810-4853-A8F5-6517F421F1D5}"
    "{EFCC5399-7714-41DC-B90D-A2106C361AAB}"="{2A96FA3C-7995-4A07-82B5-328230AC5A02}"
    "{086947FD-3779-405E-8DA0-F138D859DEED}"="{D8B43105-EB4A-4F3D-9327-B9434D7D0C02}"
    "{B5D6A9A9-FB89-4EB4-90AC-34CB3B047CA5}"="{15AB51B4-D005-4131-A123-51ECF25F258A}"
    "{A8D0E0EE-EA23-4DEC-B7C4-F7177648312B}"="{128A496E-0513-45BA-980F-37EC23C8863D}"
    "{526EFB97-1AF4-4A3A-892E-24878F8F897C}"="{125DF721-D753-4F80-B6B7-FFF8BA47C7FB}"
    "{21976417-217D-4398-9116-04D029542372}"="{125DF721-D753-4F80-B6B7-FFF8BA47C7FB}"
    "{4323C012-CDEF-4F68-A36E-D358061AF5EB}"="{62B41462-7163-42FF-A576-954B792560F4}"
    "{DE62F9A8-578A-491A-9946-946A99F73048}"="{9722FA82-799E-47E2-AFEF-C2DACCDC54B2}"
    "{E83A7166-3791-4274-BADE-A179517258C8}"="{7E5D47BE-23F2-40C6-A0E8-FF90D07677EC}"
    "{6CC82FC3-B547-432E-A779-75FC03A7A7F8}"="{6B03F6CF-F7D4-4B7E-816E-6A47D0E481BA}"
    "{25735689-4705-402B-8345-6F3843DAB7A7}"="{2C897CCD-E4D4-44C9-9375-8E83271CB13A}"
    "{A4CA478A-06E5-43A2-B053-99FCB8642FD7}"="{F20DBF27-C9E0-4B7C-B96E-549A5D4F8AAB}"
    "{E722A905-C6DE-4F22-AD56-5A29AF29D3D5}"="{11C937A2-B21B-4E36-AE27-73AC81CECE47}"
    "{327A4CFB-2D6F-4379-BB47-A1EC9D2A3EA8}"="{0ABF045B-C9AE-4363-8453-D10D16084141}"
    "{6737B9B1-0B7C-4E76-9636-FC926C14ED54}"="{5F6B8C82-98C4-4952-9CA9-44F0BA1A09E3}"
    "{A38C2F57-FB4E-44C6-AD74-F502E54B7958}"="{25049CC5-C3C7-4203-8CDE-CAC0FE7E0ADD}"
    "{C455592D-421A-44E5-936F-91AC5DA66BF0}"="{6D79A906-1165-410D-920D-0164513EADD9}"
    "{C9AFF3D4-DDE0-4C57-A3B4-7C0F82310164}"="{A9694919-2C66-4FC6-9B29-C5ECF6EB36CA}"
    "{6AA8E343-AEF7-4043-9B32-D7791A120362}"="{7DB25B2C-AD16-4608-902E-9DA999FDCB25}"
    "{E015DD0F-03CB-4049-A840-0E9E9EC7746B}"="{CDAE2F8F-80D2-4256-8C40-54D98A4CBFEE}"
    "{CA6700EB-1A67-4D49-824E-995C24124007}"="{321A9EE7-2C67-442A-AB26-2A4E06BDA304}"
    "{A145F645-99C9-46B0-A8D8-C1D70BEF657C}"="{F8254F22-2307-403F-9416-40C406D3912A}"
    "{629FFC04-0D04-4250-8AAC-05B92A9EE10D}"="{6A9B5624-551F-4013-BE55-F9FA0775C2A7}"
    "{8999ABD8-4547-4AE6-9487-B6C76E8FD279}"="{DA098127-2265-41AA-A0C4-05CB9DB21570}"
    "{97D06EA5-FC76-45FB-BDA1-82825E966AE3}"="{A314474C-7F69-4A53-8DB8-7FD3DC362228}"
    "{E449BD7E-9FAF-422C-80CD-1A0832C7932F}"="{6B2E9CB8-BFFE-4D0B-ADD6-F63BC047D0F8}"
    "{0CBB2EBC-D3CB-4C78-83C3-236121E58CC1}"="{F09E1272-E2F4-4AA8-A782-8E36C14533A6}"
    "{0577CFBD-A79A-4F65-8249-A752EA298770}"="{42AFDBC8-EFF2-4463-A95B-1A0299E2E158}"
    "{4447F9A1-F5E6-437F-AC47-65698776310E}"="{3642E738-6D9B-4E4A-B0B8-7077DFCA91CA}"
    "{EF045355-77BF-4EE8-9819-AA6D3FFB6903}"="{D65D0D54-E9F5-4CA7-BA59-60D720871699}"
    "{3C53D6BB-F851-4818-8276-653D2833717C}"="{45D3917F-A89A-4D00-8758-B83DB4E62836}"
    "{0C7C3C12-58DB-4B49-80A0-47D7D3051804}"="{87B5DDE6-8D18-4CEB-BDE7-6548DDB3FE98}"
    "{E7029CD6-E9D4-47D8-8EE7-0EABC6256798}"="{848031CB-C719-4871-9DDC-5D2A918C53D1}"
    "{899BEF20-B7B0-4F0A-92C2-97548D24E978}"="{3C940A0B-9C27-4425-8A67-3A094EC099DA}"
    "{CEBBD978-5AB8-417F-B5E2-40FDBDCB6132}"="{87D8D154-7EC0-4A4C-8FA0-979A19BA8390}"
    "{5EC04BD1-7E5E-4B6B-97CE-C3F3B5C4F3F6}"="{DD84E3B1-2727-4406-81FD-EE7E8D3A8792}"
    "{AF9E20E4-75DE-4B9C-BAAA-DA8AD6A97D81}"="{A820DA40-0E7D-49D2-8233-CB1A57F0F9A6}"
    "{496E3308-8EF9-4B19-A545-D9C902621C83}"="{958AA414-788C-49CB-8237-87182D000329}"
    "{3B7D7446-7CED-4C6D-8648-DA7729041E3B}"="{3A5AAEB0-D211-4087-AF5A-C7419A5DB519}"
    "{2F0A5A8E-48ED-4F41-A1AE-CBDF97F67E48}"="{42689088-1654-409F-8A69-7FC1636A45A3}"
    "{DB2876E2-0E52-4817-A0D0-FFCD2A534558}"="{42689088-1654-409F-8A69-7FC1636A45A3}"
    "{83F1CC07-4992-4D12-AD12-C11D119F6ECA}"="{42689088-1654-409F-8A69-7FC1636A45A3}"
    "{F59F4D5F-F8E7-4F29-8AFF-03F2C0DF60BF}"="{7342BC26-F029-48BA-A0A6-A120A8DA0723}"
    "{915631EC-A269-4784-9E84-C5F8E9241655}"="{1BE40C44-8108-4C06-829B-24E82B2EB4B9}"
    "{459D0723-DE40-42B6-BFE9-21074999035B}"="{5AF58F8D-74C4-4BDD-988A-7AE3E1780C3D}"
    "{D8766444-17CA-4FF6-9E80-3B6BB88B3854}"="{890AEDC8-5F80-47C1-A828-59BD3FEDCFAF}"
    "{B439151F-6FAD-4790-8096-A2B927C4DC50}"="{2D741BD4-6FD7-42C4-835C-45588245A42D}"
    "{D2F419E5-4772-4DF8-90BD-B4116A059AED}"="{D73CB427-1005-4AF0-AB56-03A621018ADA}"
    "{61E30BC5-2854-466F-B128-994123D533ED}"="{6054F0D9-2B09-4C0A-9D1E-DD6CF43573CA}"
    "{E93A335E-33DA-43A2-B799-9B1E514A7238}"="{EC060F54-1427-4A73-AEE2-81D89E712119}"
    "{9C6F62E2-6FED-4C6E-9DFD-AF63EE6A6706}"="{AF314485-5267-4093-A9CE-1C3EE253154D}"
    "{31FAC956-439E-4D50-AEA1-3304E194C4FB}"="{AE033DD4-5503-489F-AA9D-CAFE4655D390}"
    "{2A702882-AEA6-485C-AE15-9DAF1EDF504A}"="{62C7DC91-C6F5-4FF2-8DC7-DF9EEC41802D}"
    "{0EDF0B71-C986-4475-ACD3-D21C20523DDD}"="{E939B180-A257-4965-8058-260448823863}"
    "{04D5D572-3E3B-4B77-A3DD-5BCDA7BB207D}"="{C499DA1C-7E7B-413B-98D0-5015CDD32AA3}"
    "{7B1E5E55-8943-48C7-8424-60D338ADC347}"="{9D32E893-F15C-45E6-8ED0-A374B772F6E2}"
    "{2BFF25A9-28CD-4F47-8253-02B63E5C2229}"="{429A8BFE-8961-4DB5-ABF1-FB04EC02F1E9}"
    "{2153AFBA-E1A0-4FE6-BB50-F8E80794D4F9}"="{8186CE4C-D37A-4954-B49E-894CE3A7BD7B}"
    "{D63B182C-9858-4832-8EE1-550EB25984FE}"="{4CF61F95-6412-43AB-8E5A-590C33D31CBA}"
    "{E937C363-FA50-478D-963D-1DABA399C460}"="{1B73F669-EEB5-4669-8D8C-8F6FF29ACA8D}"
    "{4B439E55-444B-418E-814B-A50A0D2EF88B}"="{564BC0F3-ACCB-460E-ABC6-0972497E3B3F}"
    "{E019E871-A8D0-4247-B6E1-C57279A21E60}"="{8DBD4D96-8AD9-4138-8684-9D1F31FC6496}"
    "{FE5F06C1-0B05-4AA7-A9FA-D87983F26CDD}"="{20482F83-49D4-4D5D-92D7-AD9501F91D3E}"
    "{2E9E5988-922D-4A6A-BE1D-607CA0DD754F}"="{22659278-0A0F-4CA4-BD0C-95B6079B27E2}"
    "{1AAFA515-7A25-4679-B8F4-209240F1B1B4}"="{6B3024B5-674E-46C2-BE34-D854985DBEC6}"
    "{0333BC3D-73F6-477E-BD23-BEEC6862CCA0}"="{F2B42CE0-7E8A-49EC-8AE0-0FCD368D7091}"
    "{E994F6E4-CA66-4D21-B4B6-F2BFC76EAF2A}"="{8DB61C13-588B-4E8A-9929-3A10F4EA06FC}"
    "{2F2E8294-1403-4461-9C65-103213026707}"="{0285ADC4-E7CF-4527-A2C8-FC1FD6864262}"
    "{395C265F-DFF6-403D-A5BC-B6556362092F}"="{0285ADC4-E7CF-4527-A2C8-FC1FD6864262}"
    "{2C3AC05F-8632-4D8E-ADCF-6B7AA0952637}"="{DEFC2393-2A6A-4B7F-87E8-FCA112435E1A}"
    "{DC95CD5B-EBB1-4C72-A311-895B24F523F1}"="{61CB57C2-7C7C-4988-94D2-FFC597E7F0D2}"
    "{8E27C78B-BF68-4EDD-9BAB-2FCF32B91EB4}"="{E851E8D2-F22A-4A8C-83A5-D181FAF56D55}"
    "{CC1F67A4-8671-4330-8066-486B7E518D59}"="{6E63E133-4994-4191-A395-6FD6BEF81A16}"
    "{64996DE4-C0DF-4715-8781-F1ABE95FFA12}"="{1C16F331-766D-42BF-8C90-DBB007094E9C}"
    "{88793BE8-11AC-48D9-856E-D4A933BA33CA}"="{548F8EE8-890E-4953-BB8E-D99F70C7545C}"
    "{BE643699-4A30-4700-8BE7-FA8FC87AFF9D}"="{9369FEF3-EAC4-42C9-A138-58E27176954D}"
    "{CBC10796-7A01-4601-9F8A-F2358BDDF26B}"="{9369FEF3-EAC4-42C9-A138-58E27176954D}"
    "{DD9192E2-8265-43FF-B378-D4F5878472B6}"="{FD7F5BBD-ED07-4446-852C-202AFDE626C2}"
    "{3168E200-F49C-4AA8-A3B1-7BCD1AC93301}"="{F50FEE47-BA7C-4724-B5AE-54E90EA93EBF}"
    "{7A80D02E-B89F-4C9F-90C5-58A6DD685D39}"="{6C72BE91-AEDA-431C-869F-7C2B682126EB}"
    "{E3EDB57A-5CAD-4AC2-B4CF-9BF617AFC283}"="{F65F5387-B55A-4225-BB3A-1048F11CE053}"
    "{A8F60B23-A9A6-4F77-889B-1269D98D07AE}"="{7BBD48B8-AFEE-4DDD-A8F3-468CD2577BAA}"
    "{E5173343-983B-4960-A711-002D6F0AFB04}"="{58F20403-F2C0-4988-9337-54AFCF3A4D0C}"
    "{6EB55896-3D10-4D3E-9303-1226A691BE30}"="{0D1207AB-1A34-44FB-8EC4-53E9ED341EA2}"
    "{4EFCE673-7B6D-4C78-8B1C-B8645181591D}"="{515D9DDA-D95A-4652-99DC-6574F4CBA4E8}"
    "{AD9BC1A4-1C71-4289-8A44-00F5FCFE7F77}"="{515D9DDA-D95A-4652-99DC-6574F4CBA4E8}"
    "{63D7A98D-3CCC-4112-9A41-B9D4B9351D32}"="{1D7CEB31-EE0F-44F8-9827-8C9F3B3E2131}"
    "{76CB08FB-A9EA-4F92-A6BC-F6961E3AD9A6}"="{095BABE9-DD1C-4FBE-BA71-9FBFE3EF2887}"
    "{035B180A-4F77-4AD8-BB18-FC4FB2FE8D73}"="{F6AB8C76-B534-4692-A3AD-4311CDB2E2D5}"
    "{A782BAFA-C9C4-4B2E-8ABC-324F80B90DD6}"="{ABA56AFB-695F-4307-BCE7-2DDC07FB2B9A}"
    "{77D5CD3E-B7B5-4232-B626-CB9D8A3442B8}"="{564E04D4-505A-4CE5-86D3-85ED447944E1}"
    "{BD0783F4-D3B2-481B-925F-45591F32D6D9}"="{9DC28FCC-F86C-46AF-941C-971779C2CF10}"
    "{EFA127AF-ECFD-446C-8EC9-01B6A8A44C6A}"="{0765443A-4B67-4348-8DAC-E68CC67CFCE8}"
    "{FF4D9ED2-A2DC-4B76-851E-9CA12B4D1455}"="{D95E9036-1C39-4AB9-86D1-C8DD59AF4D4B}"
    "{0CA3AD5C-93F0-4C32-9FA3-E03655AED897}"="{E8585AB9-00DC-42FF-9DDF-A27F382B25A0}"
    "{F05724F6-2B6F-45FA-9B44-0FFFD102214A}"="{079C86F0-BBBD-4F80-BD49-356446468161}"
    "{FF8EB5DE-2B50-443B-8083-507DA9584BE9}"="{3A64FA19-C532-487B-869B-DB4F50BD07EE}"
    "{ADE5DE8F-4C83-4F66-A2E6-DF80B1041B9A}"="{E3475A61-615E-49CF-A0A6-648B23BA91D6}"
    "{DE3AEF8B-C47E-4181-9C33-D9ED909AE137}"="{E3475A61-615E-49CF-A0A6-648B23BA91D6}"
    "{0B89ABF6-D6FD-4E97-9AFB-2F562FCA07AC}"="{618733AB-4A41-4412-946C-4216C6A7CBF2}"
    "{891DC037-347E-43B9-81B0-ADD635AEEEF5}"="{5283C44D-7D2D-47EF-8590-2D1D807459CF}"
    "{BC91B7F9-BD86-4D93-82B9-09AB80E3F087}"="{24FD0581-562E-4C1C-9F85-9D9650B0620A}"
    "{8176D63B-6BB5-438A-B723-309387FB60E0}"="{62A70B47-04BA-4881-8E1E-8BF6F13A2A46}"
    "{A0268BF7-0458-4D9F-AE72-5A7498B25CF9}"="{8973B8E7-483B-4388-8C6F-B206712747B1}"
    "{300068D6-CEC1-46C8-B83F-8E275E18684F}"="{8DF5F9C5-F8C4-4F02-8E3F-ED9BF8A8BA96}"
    "{B3D092F8-AFF6-4CD1-BC77-B819301F880E}"="{84DC630A-E5A8-433C-9A00-DBF9B4E8593C}"
    "{B0252B97-5B46-4BF8-B636-5B76288D3285}"="{EFDA749F-C5A8-449F-AF49-F7024A90273C}"
    "{B76CF205-DA27-4142-9B79-25F3BB021AA0}"="{72DC2F48-3BC9-4A2F-98ED-E7C2BEB13432}"
    "{7CDE58B9-7536-43B2-8083-AABE19078CBC}"="{984FF61B-4EE7-4FF0-AE1C-9AD08C59EB85}"
    "{F5769BB4-CD79-42D5-B6AD-7E897920FFA2}"="{78AF5883-4970-40D5-BE3A-69D6B3CCFA14}"
    "{C3EF244A-3C95-44DA-B6F1-FE691910301A}"="{C5481189-8CC0-4A3E-8DB0-8C942D47BB3C}"
    "{4E4B0061-ED90-4BBC-BAE5-E34F38CDFC47}"="{43176B90-3B58-49C0-AE3F-8DCFBDD10324}"
    "{E75B4FC7-1277-4239-8406-3E8337AE136D}"="{FA156B6D-F25F-4DAC-892D-EB803F8A0F67}"
    "{F4AE22BF-DFF9-4D01-AEF2-AFB0C6A3EA39}"="{8B619DCA-41E0-4574-8A81-AD642DA836DC}"
    "{FC726EA8-B93C-4398-9E7D-F2B744D418C5}"="{336EF896-CA00-411E-8BE1-E32CDD1A2120}"
    "{82AB97C3-848A-4236-B2FE-DB146552D307}"="{4B07B23B-C3A7-4B1C-849A-A77AC036DE58}"
    "{D460B10B-8022-4035-93D1-BB87C416B4AF}"="{AD540013-B3DA-4FBB-BBAC-E802ACF345E1}"
    "{70D4A337-81D9-40F7-9FF4-49ADBE3166FD}"="{717144E3-E95B-435E-BDCE-9AFE2D2387E6}"
    "{E6531A30-10A2-47FD-BB05-D5C8630DDFAF}"="{7E0A6FBB-9F96-4C92-BB41-C96C2B687E85}"
    "{DE43CB6B-AFDD-4B25-8D58-0F402B212994}"="{06B33CA7-C474-4518-959F-58635AD387C1}"
    "{4A5B8C08-B823-4B22-B099-22C09924945E}"="{6C7BBD73-5523-4560-9C76-DDBF2762682A}"
    "{9A1CFB0F-25F8-4C0C-B035-71131E0A2EF5}"="{07A1A508-4D93-4CDD-A180-00A7DE000F0B}"
    "{B39D59D4-0EA6-4385-8E65-6C065052E667}"="{DE09AB61-7661-4381-AB51-F4A6256C70C7}"
    "{A5B5199C-3C2B-4F2F-9FE2-324A1EE5E6FF}"="{D9538975-132C-464A-AB76-B58C8B83281D}"
    "{391E9AAF-DE9D-41DF-AD11-3945B3F52A93}"="{8931D302-CF5B-41C0-9BB4-55C196FA7E48}"
    "{EC80610F-89B8-4981-8497-F26CCC22A5EA}"="{547DBAFA-887D-4A6B-851D-C51D59E1FDFF}"
    "{58C384AA-59FF-4513-93FD-E99CFDA58810}"="{4658CA8D-7791-444E-9A0C-94CB89A874B8}"
    "{91DD19F6-326B-4ECB-8379-2C3A9C6274D4}"="{27BE7D0D-C360-4B4D-BE61-6CA1CE5D347D}"
    "{0C3020C7-02BE-4CF2-87D7-5978E7114CCA}"="{5E4BD155-0A5A-472F-BC7D-CC11D703AFE5}"
    "{33AB929F-147D-418F-8C34-E2851A3A064D}"="{7B5B71BC-A441-460F-98EF-1A8D6B8AA6AB}"
    "{5D40333C-7156-4CA4-B393-964E364287A7}"="{7B5B71BC-A441-460F-98EF-1A8D6B8AA6AB}"
    "{7A583928-C5C6-400C-9141-341CE589A6EC}"="{B0227548-0A0D-435D-BF88-21C98C62BDD6}"
    "{26CB93F2-3886-4F46-9457-C53180CF278D}"="{B0227548-0A0D-435D-BF88-21C98C62BDD6}"
    "{B403372E-472A-4BCC-B51B-A0575A1E0251}"="{B0227548-0A0D-435D-BF88-21C98C62BDD6}"
    "{E09A5343-D303-406A-9B6F-2205AFA63ED8}"="{CABE078E-EC1E-4679-A62C-70794EB79604}"
    "{49B66DDE-A7C2-454C-A060-03F250B526EF}"="{76C08328-CE91-4CC5-A6F6-0AE5BC0A4C2B}"
    "{F3404CBC-E834-4EAE-9F64-4D1E0EE5F6D7}"="{76C08328-CE91-4CC5-A6F6-0AE5BC0A4C2B}"
    "{5C85A92E-DAA2-4F39-B6B0-662CDF0E78FF}"="{829A5C1A-E072-4CE6-8F89-D6E966C8EB42}"
    "{93DA82F1-2FD3-4942-B9B5-3CFE2469B4EC}"="{8C845982-9B36-461C-8617-0B3B85086CD3}"
    "{73A261F9-41BF-4929-9095-90FB07D147D2}"="{2222845B-30EF-4A22-95F8-46254833930E}"
  14. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    ComboFix LOG Part 3

    ///////////////////////
    COMBOFiX LOG PART 3
    ///////////////////////


    "{238F3318-7B01-4594-9183-DD928B7009FC}"="{87ECE80F-0E4B-4AFE-B24F-C18A4BFCEC14}"
    "{BCA22667-6B50-4B28-88B5-58D817C797A6}"="{AA09A07C-364A-460F-92B2-682664BD21F8}"
    "{30DA508F-2CFD-47DB-953E-FBBFC7DFDE47}"="{AEB38B5C-DBAF-432A-BA9A-7E766168ED27}"
    "{92958433-E496-4833-AFF7-EE6C1ED36BB1}"="{348D5D65-CF5A-4B97-96BE-5CCB6FC54DA4}"
    "{3ED3639D-446E-427B-A53B-E6128C6BCB9D}"="{194FFB4A-08A8-42DC-BFFF-3D783FCFD124}"
    "{F5943434-CF62-45DC-90C6-2795CA696B87}"="{D753D332-2E6E-493F-9B3B-7A14A6F1C0EB}"
    "{D8DBC07D-96D3-423B-B91F-F4A358CB478B}"="{EA3054C3-BAA0-4859-8698-8323AB15069E}"
    "{76CE9982-5ADE-49E0-B66E-4C3A71E2BB86}"="{ABF0EA46-0015-46A9-AC57-9761B22AA508}"
    "{DF740035-6AB1-49B1-8AC4-E1AD0461C6C3}"="{0BCB607A-70D5-4525-BD46-FDA7653F0A43}"
    "{CD0722F6-95E2-4614-8743-C595E69959ED}"="{9F2EB56A-701A-4059-9753-75F84A82410B}"
    "{4A2A8E87-FF31-4DBF-AAB6-2CADA677584F}"="{9F2EB56A-701A-4059-9753-75F84A82410B}"
    "{2A4EB56C-DF81-471F-83B6-5AFF827398BC}"="{9F2EB56A-701A-4059-9753-75F84A82410B}"
    "{3C0C0E76-D80C-4225-AD91-CDA1E8D4188C}"="{9212D7CC-6477-4186-A6B5-99E086DFD16F}"
    "{00DB49AB-FE58-49CF-9A0F-6A2112B6CEF4}"="{5E256954-1A5E-463C-BB77-A66C63713DA8}"
    "{22A532EA-0027-41E3-9923-C06ADB0A338F}"="{01ED3770-7EF5-4E57-A073-85CDBB73C734}"
    "{206B6CAD-9946-4931-8288-502134196348}"="{75230356-575B-4013-806C-6E49B1C4B98F}"
    "{FE64E025-6F74-4CAD-BE6C-C590A0E32952}"="{736E5959-A9B6-4A64-BE1D-904FF4DC668B}"
    "{E354268D-7D8B-48AA-B53F-19D336050C9D}"="{6708A30F-9D65-4C8A-B104-EB1410E55E93}"
    "{3F11A112-D64E-4A75-BC9D-D6991377D864}"="{935EFB3C-51D5-4CC3-B0F7-F4D9EBF32CF7}"
    "{E24BD992-2587-4D79-A51B-E395A5EF8CE3}"="{C4E7AE05-79D0-41FE-9AC0-7FA8259C16FA}"
    "{980EA278-30B1-4954-B471-877FC0A47D1A}"="{9F017785-9FA1-4088-BC12-33754FC45EB6}"
    "{BD119C0B-D4E6-4B58-8D13-1CBC67EF00AF}"="{B23A2E1E-9CB1-4CB5-8289-80A84CB862B9}"
    "{01F9C2AF-3A43-4242-BEA6-D089D34ED0F0}"="{7DA9F5EC-C65B-4317-B7CF-A443BCEE17FE}"
    "{70508846-48C4-4121-AA4D-41E3527C6610}"="{CEFF2ED4-DBDF-457D-BDDA-91CB117D123A}"
    "{5545F218-7885-4386-AEEA-0DB152EADED3}"="{13B386AC-5974-49B6-B6C9-AE6983B45BFA}"
    "{C6D5DCD7-2C1D-4305-9283-97D616E60CC0}"="{35E07F92-CAE0-48C6-9613-EE0C680A77C9}"
    "{AC9E8389-5339-4B1D-8BA1-CA6DBAEAA347}"="{546DE21D-6FBC-4B90-938F-CC2077B9D07D}"
    "{3B9A3D4A-BD4A-4322-B650-98A4900CD9FE}"="{54555357-B7B5-4F5E-9EB9-E008054BC986}"
    "{EC941E5F-862F-4387-87EB-184A7AF31165}"="{F3CC764C-F5CF-4E30-9CB7-F1D3A98D96F2}"
    "{1E3FD72D-B7ED-4DC4-B761-4184240B7872}"="{F18D0F5C-E454-42AB-B131-6016D4A70A71}"
    "{D41A5BA2-9935-4533-B5B2-93942E65C6C9}"="{F18D0F5C-E454-42AB-B131-6016D4A70A71}"
    "{B2032ECC-D91E-4B1E-A723-9E6C156FF291}"="{F925B86B-6CB2-43DC-AA08-85EDE71F64F8}"
    "{E02C1D59-6751-4924-996F-7039E82EA3F0}"="{69260CB1-1F12-4AE2-B7FC-716CAECCF45A}"
    "{FD903262-14F0-471C-831C-D6D967E79B7F}"="{342F6ED4-E414-4333-B13C-0B14129AFFC4}"
    "{156165D3-8609-4F21-9FFF-1CCDE99053E0}"="{CD028D63-7165-4CC6-9FCF-D747F25E31B3}"
    "{2A5BDCD0-4D73-4D11-802E-BC83DBC824EB}"="{3DD91ED7-A9AC-48EC-B4E1-6117DC8CF7A3}"
    "{55EB1993-0158-42C0-9458-E53D672CF646}"="{066BCC01-4618-461A-8BAA-D4AA4B541D56}"
    "{CEF4EE53-4363-4067-B639-8BAB3B70EF53}"="{06FF9956-2608-4926-B375-54957FB02A59}"
    "{36CD89B6-53BF-4637-9FE1-33E68DA85D31}"="{B33FEAF5-3273-42DE-A3DD-92A2AC8AC252}"
    "{83D7BEB8-8782-48DC-A72F-3B6C5C4873E7}"="{891FFBBF-B536-44E6-9167-873A6ABE6EF8}"
    "{35C1DC1D-49EB-4586-B060-C3A346F654D5}"="{0EA8F7BD-50CB-45F5-8829-C80FE5489E71}"
    "{DAA1B020-0B6E-4DA4-8735-151C2E308857}"="{883DCCF7-A9D8-441C-9D78-43DB6D9E2D49}"
    "{6FAFB17B-2D44-4FF7-BC3E-E2449BE0FD9D}"="{C5A7560E-40DF-4F8F-9926-D0A51A07B697}"
    "{F938F1F5-7BAE-42AB-B4AF-D37089AB2B65}"="{F264086E-4D5D-433B-A5D6-19AAE4E4522D}"
    "{1E182A2F-E4BE-4D07-99F8-A9ED82A2F7F5}"="{FA59DDE0-AD8F-4C1B-8A73-31EEB1352FBA}"
    "{4F1E3AF4-BED3-4A88-A0FB-C0425E60FCA9}"="{EFD4FD73-0FB3-4F10-A69C-0DB41B2FD9A0}"
    "{B748D518-381A-434B-9CE1-9381F6F05C9C}"="{F41E5989-636C-43C4-8015-FCCD2D8086DB}"
    "{FF890288-B536-4228-B26F-F6519FF25964}"="{AFC00E3C-0C8D-4A7C-86DF-AA2EF449EFD5}"
    "{6A05DF7F-0E28-4F7B-ADB0-4E61D2402E04}"="{FDEB628F-18AB-44C9-AD66-2DFD9D83BF75}"
    "{71B9103E-8A93-4852-A45B-51517080B262}"="{A9A113F4-6D7D-4B08-9227-2E19E84C3B97}"
    "{22E650C5-88B8-4534-A5B6-E8EF9D254936}"="{6396AD19-E9FF-45E9-B3E4-AEF216AA6723}"
    "{9B3C5EBF-C65F-4F3F-B90A-F863CBB2C8D8}"="{4DAE19D4-20E6-4C9A-9627-D68D1B15E5A2}"
    "{2DDAC57F-500E-4417-90E6-612FFA423A81}"="{2C2B451B-E29C-4861-AE94-FB168B42348D}"
    "{10140251-BE11-4D87-A525-E7D9ED9DCC2A}"="{14D904E4-4FC0-45B6-9F46-5B340AB23193}"
    "{72C080BD-2617-4046-8864-2A18F3AE57B1}"="{A764F94F-7E8B-442D-9C59-87D2148316F5}"
    "{C7EB2ABC-4B48-48DF-8F41-6A3669407856}"="{FF9F44C6-8AE8-40E5-B900-F658E6E14D46}"
    "{EB11A15A-7127-4C89-B888-AA2178421DB7}"="{E3BDEA89-B3A5-4EB9-8810-3D0E6DF7346C}"
    "{73561A6F-DA0B-4E4D-B16C-976ACEEC1F9B}"="{43357C7D-CC73-4298-8D12-1AC1C5BB7BFA}"
    "{07990EB0-71DB-4DB1-B2F1-F9A333B7722D}"="{6FCC9807-FAAC-45E7-B11C-40687E831F66}"
    "{A3A58D9B-0003-48A2-99EB-600A8156C3C1}"="{0AB749E9-BD84-4818-9031-C540DEDFEAA4}"
    "{63F60A44-EB78-45B9-8905-407783374150}"="{B8D8D8F3-380A-4A9E-878F-F333D8B8082D}"
    "{B1492404-3A06-4E9D-91BC-37994582FFF1}"="{14AE4ADB-FF46-487B-84B6-61F97C021D41}"
    "{73A759F1-5C55-4CB7-8F4A-0ED929710B83}"="{14481268-E481-419A-B6B6-026747262ADB}"
    "{7A6D0F79-C57F-4434-AACF-13AC1FFB6778}"="{3E9F657E-B291-46B7-8E94-976765CE8AC6}"
    "{1286E336-B847-4684-B828-2F63A5BF3B6F}"="{A68D27C0-27A6-49EE-8D91-992C2F470181}"
    "{EB73DBDA-067D-46FC-97D4-DD3407D8C4A7}"="{16FFD574-4D1F-49F7-97F4-BF65C8DF8A0D}"
    "{91C35ED4-815B-4F8A-A5D8-0D1A15887DEE}"="{556E8417-8333-4F01-B2BA-8B73609695DA}"
    "{352483E6-1758-4526-8B06-1DB8891671B7}"="{5EE6C492-C3BF-4D5F-9245-926CBAAD5D31}"
    "{D8FC4C94-C495-4D9E-92C9-35D4F6BA481E}"="{322EB273-28ED-44F6-9C38-9837A9999DCB}"
    "{F827C767-7FA8-485C-8B2A-4210FDD70532}"="{EF8C7378-DA0C-4C21-B41C-76AA4C90F34E}"
    "{0359BA91-1991-4B8D-8A2C-AE6310ABEA1E}"="{409E2EEB-4C25-4A8D-9545-2F03E380C8B9}"
    "{61E2DA9E-3238-4265-9129-FD3A829DE315}"="{BD31D8FF-822E-4569-8AD7-B0031980BC08}"
    "{F91792F4-1161-4124-9D10-F65E24559884}"="{CEE81D9C-D37B-4469-B451-19E6252F81B3}"
    "{EE6CE658-EF1B-44AC-985B-CC8CF522A7AF}"="{E08FBC69-B53A-4824-8A95-CD0E71F5FEA3}"
    "{18275334-C955-4C77-86C1-8BCA94E8C2A3}"="{D986AA55-149B-4619-8FBD-AAE07C7330D4}"
    "{BA80355D-AF62-404C-B88C-019F6A2B25BC}"="{D986AA55-149B-4619-8FBD-AAE07C7330D4}"
    "{6105F33D-2DE7-4E28-95B3-182F31F36171}"="{04422117-72EC-469B-A05A-075433B5F831}"
    "{CC391C6A-D4C1-4F32-A93E-825F8ABB2FFB}"="{C800762B-92C0-43F4-972B-DD6505FF7962}"
    "{F6B1CD6E-2ACA-4AFE-8930-0CF0DC9061F7}"="{1E5D9F35-BDD5-4165-AF7B-D1A1D8E8B8CF}"
    "{89A67134-E6B0-480C-8726-7327D8CD96CA}"="{73C001FE-92DF-47C9-AB3B-707718923D19}"
    "{8AD78EC1-E6DC-4C78-A433-AD12705EA97B}"="{73C001FE-92DF-47C9-AB3B-707718923D19}"
    "{3C4E8980-AE37-42AA-84FD-19F9FAF3E671}"="{90C1F735-884D-4D84-8257-B9AA7D34F23E}"
    "{DB2A237B-6F0A-4D85-BAA8-DDC7706BF1CC}"="{73C001FE-92DF-47C9-AB3B-707718923D19}"
    "{44A16754-CD28-48D8-AF7B-CCF8BE361E22}"="{53947B26-9F7F-42FC-8B7F-D71C095CE465}"
    "{EEB90C1A-6A99-4865-B175-6379D7AE1A27}"="{3EBF3E94-C507-49EC-8E84-CC529D51FA4F}"
    "{9E39B889-BAB6-4038-ABEC-04F05366E3E7}"="{40D14A28-C2AD-49E0-9875-02219FE9525A}"
    "{45D270DE-8C3A-4EE3-8E5C-E39EA717B9D2}"="{E9D2888F-82FE-445B-8B5B-2B7C435A62C3}"
    "{18C157CE-52C0-4F3C-800B-8CD1A724D6CB}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{9A71E4F5-FAF8-421A-A883-44BBE93C2F2F}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{6466AC3A-DD1B-46A4-BDEB-3DD7F45EDA91}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{93BE01EC-A62F-4157-AC8C-966C26BB991A}"="{E537BC86-8B47-4211-B4BA-DD5D8B26F190}"
    "{A6522524-CE15-40A1-97D4-E502A04CBBF7}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{BA05F62A-75C5-4FAB-9A65-3E7834DD4C4E}"="{0083CD18-B6FB-4DFC-84D1-A49687A7B39A}"
    "{365BF99D-FE98-4FD1-A2C5-10B77592864F}"="{0083CD18-B6FB-4DFC-84D1-A49687A7B39A}"
    "{4102F584-3A7C-453A-8CBF-EADBC147011F}"="{AFA5F971-D8E8-44A2-800C-A60B4CAF60D7}"
    "{119AEA67-4986-473F-9D3B-65720101F6AC}"="{AFA5F971-D8E8-44A2-800C-A60B4CAF60D7}"
    "{4A8A3490-9715-428D-8B92-74DF908D7461}"="{9B24C678-B6FE-4324-9EC2-448435E74279}"
    "{AAA2ACBF-B4ED-4721-862A-22EB8C0F5B1F}"="{09000ADF-5189-4621-9B01-69819260E4B4}"
    "{F5E7DEB3-6DD6-4BB8-BBAC-8783864DBF57}"="{9215F98F-128D-47FB-8934-DF15DA0F362C}"
    "{90218A1B-F953-4B43-8A46-3ACDFA9A5BE2}"="{AAB57086-B3E8-4BFD-B924-8C29454CF0EB}"
    "{2445AD1C-D424-49D9-A22F-27FA33C2089A}"="{89BDCB9E-DE2C-49C6-A5C0-BC5D0A5AB6E8}"
    "{5B99707E-12EA-4A2E-8ECA-303E6D8328BA}"="{AFAA7820-7675-40C1-AEC1-9A2B3F084009}"
    "{165E3D0C-83A1-410F-962D-89C9BA8E32B7}"="{023F8773-D4EB-42C9-A5B0-5E6D2C82D7E7}"
    "{C3481211-7B18-4C2C-B428-E239BF82F2EB}"="{C7849EAA-F445-407F-9662-83D52D7CEF57}"
    "{AEBDF45F-AB15-4469-8931-AB2D744C83ED}"="{C6865399-A3A6-4559-BB4B-26EA1DC67358}"
    "{91FA3F89-DA0E-4F8D-AD8B-AE471634ABBC}"="{8EF77DE4-9B2C-46CE-B37C-502F9F1AF885}"
    "{479C647D-43C2-4E20-9FB6-508C4DA7FE0A}"="{4DAEBA92-5158-425A-A81E-62618896792B}"
    "{FC03F50D-5EBF-4C4C-9D73-4BCE08EC12D4}"="{20A76C9F-3579-4CB4-BCB3-F1F221A36B56}"
    "{DDF7CA8E-DFD3-4096-B3E1-6BFA761BFE47}"="{1D4074F8-C891-486D-9BD4-708378464DA4}"
    "{BB8051FB-E773-4B06-A72E-7D1D3C02B973}"="{4DCA8163-D922-487E-8139-F54ACECAC94C}"
    "{37526470-1658-4617-B89E-E99D141F88E9}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{B929027A-7112-4BC3-AD22-CEF263448C1C}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{61AE1787-99DC-46F7-9530-EF317E663424}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{B404DE5B-82C4-4F38-9C3B-97BA355A5B2C}"="{F5CF492D-A376-4C5B-A2B9-6A4E2CE28018}"
    "{3B54BB11-D678-43C6-8158-BB4B705D33E7}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{105ED42B-CD88-4010-B7C9-DDB16849FF36}"="{4A27FC10-D7CC-4772-8F41-1297ADD8C9D0}"
    "{6B9064FF-C042-4022-9C16-256FD5FF9A6D}"="{D1BEF44F-1F5F-47BC-BAB2-AC9451E0D6FC}"
    "{46D61944-1018-4B99-B971-85BE972D7EC5}"="{003F7AA1-71E9-4CCC-BEA1-17E2160B5ACE}"
    "{EAC43597-7AF9-4B98-9699-3FFF30D32FD1}"="{8B7C89D3-DF81-484B-B6D2-C966D1030176}"
    "{E5EBB1CD-02FA-44C7-9EBE-66ED1D1DC59C}"="{0B29C1E8-525D-49A1-8E60-9F315CB733EB}"
    "{A70E49BA-5850-43CE-B4C1-D8D873B89688}"="{FDB7DE81-B4ED-4465-B166-1B072883C393}"
    "{3FA41397-FAC9-4CCA-A1E4-A85966828540}"="{FDB7DE81-B4ED-4465-B166-1B072883C393}"
    "{DE5DE551-DA6E-4445-8089-56518B5D2675}"="{FDB7DE81-B4ED-4465-B166-1B072883C393}"
    "{697A9B6F-B243-4F5E-A542-F6697A4B66DE}"="{9D3EDAF8-9897-4856-AFC1-D40F5EB32CE3}"
    "{71EB160E-983B-4611-8513-C6513E9CF741}"="{C12A894B-D84F-4699-9AD1-E6DFA7B43929}"
    "{3FFDC0CE-D582-4711-BB8D-DD63DE882C47}"="{29DD8418-BEFF-4158-A5EB-0564EEA40BFF}"
    "{28792288-D3A9-4EC6-B0D1-75D84AAA068E}"="{C72DAEDB-4808-422B-83AC-9E165B6484B6}"
    "{DBB4B15F-88EC-4271-90F1-F71A3C6C7520}"="{6BBC3811-6C5C-4E83-A8A6-5AC74EE10E51}"
    "{A9703B43-A63B-43A9-A911-295972F1B9E8}"="{348E1D3A-1EB8-4D68-9D72-E6EAC63EA99F}"
    "{54C919CC-F108-492C-88AF-1DED792C82FB}"="{94CB84BB-C086-409A-A0AA-2921A9E4AF58}"
    "{7AE10705-BA5F-40F3-975B-5FF210EA45E1}"="{2065D856-DBCF-458E-ADE7-B051CC25FE01}"
    "{34050E07-E35B-4BAE-B24A-FBF933BB558E}"="{36D18285-CB5B-4B73-8386-A90AD8C9FF7B}"
    "{29A31AA1-7C53-493F-8565-E95BDE231463}"="{CDB30B0B-5CD7-4EC6-95DF-393A8A57C094}"
    "{4842FF83-F82D-4CA6-807C-79DB9DA6473F}"="{D7209349-A7E9-4B44-B0E2-93674D87E5DF}"
    "{A4E3DE50-E59A-449C-982F-2D57D72475B3}"="{E76B3912-8808-4014-99E3-C2419BDE76C9}"
    "{20C4B37A-0690-4B86-8105-97426F2E2786}"="{E76B3912-8808-4014-99E3-C2419BDE76C9}"
    "{281ADA02-0D6B-4ED0-B831-1ECE462B6BCE}"="{24D182CF-F4D4-4A5A-8CEA-D0C9273DDB2F}"
    "{79BF7DF1-4D75-468F-8C9C-0291F0B7A50B}"="{DC2230F3-080D-49DA-9C7C-FC0764407D99}"
    "{E03A0A3D-F1B1-4CFF-B1BC-E4C95C7D33DD}"="{06CA29F9-BECC-447D-B2AC-2BDFDFB59487}"
    "{2C513389-1D96-4882-981E-23E90DD2935A}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{6F202DA2-2C4C-439F-B45A-95653745E264}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{403E4248-630B-46F8-A33D-F64BE50F9580}"="{7558ED86-D22A-4E4A-813E-B38B85021C33}"
    "{33F8F782-220E-48DD-90C9-AB794370FE45}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{A463F306-0305-48E2-9100-8B89ADA81AA0}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{08D2DC69-3EB2-4190-9654-6020672DCB3C}"="{F1A9E8CF-DB56-4FF1-A158-D4A1746E7D34}"
    "{CA849CFA-D471-446A-9AE5-40D92BC95EC3}"="{F1A9E8CF-DB56-4FF1-A158-D4A1746E7D34}"
    "{0F037ECB-4525-452A-99A4-C41D89A4E744}"="{268BC664-5397-4C15-8FD9-43C88A0A37E1}"
    "{142A4013-A8B4-470F-AF92-51E0AEA1A970}"="{02ADDBED-2581-4A8D-91D4-E8BF5EC65EC5}"
    "{D1237036-7B40-43D9-93CC-FA3B63777C95}"="{02ADDBED-2581-4A8D-91D4-E8BF5EC65EC5}"
    "{E4DDE903-D122-4FF5-838A-D09F321D7AE4}"="{02ADDBED-2581-4A8D-91D4-E8BF5EC65EC5}"
    "{A3657EA6-4B30-47A9-9A79-2CCA1C41BE8E}"="{92206159-0B4A-407A-A8B0-EE43FDFBE702}"
    "{F4041394-87F4-4044-9C1F-BB4BE521E4A7}"="{28196551-ADB0-4C1D-B78A-EA418934C5DF}"
    "{BE02E720-63B3-4203-A681-A89A7871621D}"="{578FA451-E13A-4DE3-8D02-73B163A82E33}"
    "{441A5D95-5930-4D31-8D71-73677023C433}"="{444A2649-E1A0-4420-9E0A-9D91444598A7}"
    "{1C283851-CDEE-4E93-B5F5-39B04C21CA66}"="{CCEBB478-D330-41FB-BDDC-6AB3E58502D1}"
    "{C28D9B55-B77A-4053-B0CC-264148400AB3}"="{9689B6DC-2DB7-4D35-854D-AE54485A0EB3}"
    "{475B8743-ABE1-4E61-BA1A-D11DED6C2D3C}"="{9689B6DC-2DB7-4D35-854D-AE54485A0EB3}"
    "{8E622C64-7D8A-4F5C-B566-47B4DBB7032E}"="{9689B6DC-2DB7-4D35-854D-AE54485A0EB3}"
    "{E0DC7E93-B71D-4457-8EE4-EADD3C475A90}"="{0C4884C1-1CFE-4C82-8C9C-0DD0F79654DE}"
    "{45F01FD4-7D47-48A2-AB29-2BF7D4F1A40E}"="{F0B42710-6A7E-4111-A5F3-CCCDB7E0A471}"
    "{02C60144-83AF-457C-96C1-680B04253A2F}"="{F0B42710-6A7E-4111-A5F3-CCCDB7E0A471}"
    "{C248CE14-0ED5-4A9F-856D-B59D4B887BC0}"="{2E7FFCDF-FB19-4087-BA79-370C504E0A50}"
    "{67ED307B-E290-437D-AFFC-7A0D94FF47BE}"="{B1B41AED-EF3F-4800-8CDC-294C323B6A33}"
    "{B6D9AE1D-0AE1-4173-8DED-7AB82FB645FD}"="{081B6102-8797-41DA-8514-B81D37562F2D}"
    "{5B40061A-A709-4E7F-9163-4CBBB5C9BB6F}"="{6624FBA5-0A34-46F9-9C1B-5B2F0045F01A}"
    "{172744C8-7F4D-445A-A45C-851320BA995B}"="{1804E815-0AD1-4BF7-951B-AB11B0FB7F02}"
    "{BDBC3930-F475-46CE-8F76-42CD0F2F5BCE}"="{D80BD5C2-CB28-446C-8640-2135038532A7}"
    "{5DB9C2BB-BDAE-42D5-9830-DED591AAF9B0}"="{56E08CAA-7F5B-4DCD-B9C5-45AA68F23616}"
    "{D612BB36-F6E6-40D0-BD4E-8D338F49B1AB}"="{0078B6F6-3242-4F74-A40A-15B086FA423D}"
    "{1D78DDBD-AEBB-4F80-83A5-3F650395ADF5}"="{FDC30C86-C10C-40AB-874A-DACEFE7A797D}"
    "{CBD5FE53-C73B-4B33-A080-4E5527676380}"="{721C81CA-AA97-43CC-AB21-3396AD3A01C7}"
    "{511EC113-12DC-4355-9D43-72064FE564A7}"="{E9287365-391F-45BA-8039-9CDF0DDC3360}"
    "{16D32A33-F763-4C84-876C-665BA07251D0}"="{4D93175A-8204-46E1-938E-E9D79BD896F1}"
    "{74865E66-3DCB-416F-A892-A72A5B613166}"="{E359A298-3A74-46C2-AB31-FDFAA076AC50}"
    "{41ADA380-BF8B-4E1F-8EA3-7C657DF11A58}"="{3E35B6E8-8F65-4F07-B84A-54BA6BA79BCD}"
    "{5DE3F50E-0334-4C32-8D13-B2105262F721}"="{3E35B6E8-8F65-4F07-B84A-54BA6BA79BCD}"
    "{1F801312-40C5-4608-8C78-286B53942FD9}"="{0A722EB2-AE09-4B1A-94E6-DC46993D173A}"
    "{A2620756-9B07-4F0C-8D96-22DDA2742FE3}"="{0A722EB2-AE09-4B1A-94E6-DC46993D173A}"
    "{0FFEEFE1-739C-45F1-9A87-64121DDC69CF}"="{92635360-A2B6-4B7D-98F9-42B504AF60D2}"
    "{993928BB-EFC3-4737-8483-63ED4194FBE0}"="{0A722EB2-AE09-4B1A-94E6-DC46993D173A}"
    "{1C459FA1-DAFA-420E-947C-0EAD4F2C22D8}"="{D8C24E40-1DCF-4D2A-95BB-1E93E90B8BD7}"
    "{F4639266-BB42-43C3-9F45-32131255ADFE}"="{ECEFC494-3A04-42A1-B1E4-AC8FC1B9636B}"
    "{4E2D4A1A-3439-4710-A821-CDEC5096EB64}"="{5B3B256E-E041-43AB-B618-F5F9FB419AB0}"
    "{D71A3480-DD63-4F5F-9F2F-FDEEAA2E7862}"="{6D3C988E-FFB1-4D77-917B-96A2002C5453}"
    "{E9C0C45A-EADD-4FD3-A7DD-5705B93BE890}"="{CEE4F285-F9FA-4D41-890F-9A12C88D8323}"
    "{DE46893D-1D4F-47E9-B664-8BD6369EA0DE}"="{EEC3DB01-421C-48E6-9ED9-835A5E0CD3CE}"
    "{5DA8D48D-9FD1-4626-A234-689EC470B3DB}"="{CE3CFA89-E814-44D6-82A9-DD32C379C4EA}"
    "{32F3EC5D-64C5-43A1-B0B1-8F9AD464960A}"="{33471B58-E5EF-40F6-9F1F-920F9796F4A1}"
    "{FF664EC2-EF74-4C6C-9297-CF03728CAA27}"="{33471B58-E5EF-40F6-9F1F-920F9796F4A1}"
    "{E9AB9EA5-F78C-47C0-AC13-0CAC92C579F1}"="{216D9840-C664-48A2-B820-A638D9AB5955}"
    "{3B980045-D4C4-422C-B9FE-176EC9669257}"="{33471B58-E5EF-40F6-9F1F-920F9796F4A1}"
    "{CA92F5C3-EC37-4F61-B5FB-8FF25B1FA355}"="{7CAE3309-E814-48E8-B8FD-1A468A869132}"
    "{6F551079-AA60-4845-A01B-BE4A4DBB2073}"="{C27983E0-483C-4309-B413-2BC6AF8F6379}"
    "{BD6367CA-5C3D-4E5F-B5CC-24B1146CA983}"="{6523F100-C9DB-4B17-97DD-BBA82AE206E3}"
    "{5A39DF0D-5C61-4C2D-8072-D130B17368F2}"="{E84D0088-58B5-49FB-B796-87B07C65749D}"
    "{0E91A0A3-6E03-461F-81EC-80841E26623E}"="{48CFDFD9-82C4-42A8-8D5B-E1720B4DCD33}"
    "{14151285-55BE-4E71-A61C-B82DE076B174}"="{48CFDFD9-82C4-42A8-8D5B-E1720B4DCD33}"
    "{58AF5939-CBD1-41F4-A443-5209C5582D30}"="{2B378487-7E94-48AA-850A-9A3ACF300F0C}"
    "{F789C7FC-B9F2-4C5D-B9D5-30DAE2F4F21F}"="{7ADC0072-7600-4ADC-8AE6-AAF56E3AD93E}"
    "{D7F8E65B-FAF6-4042-B73B-2938BCA6294F}"="{F4E2E545-E239-4BAC-B668-3A317726114E}"
    "{F10B5F6E-5570-446B-9824-D81BF79E10A1}"="{F418199F-5C7E-49EE-8504-7253B07B87FC}"
    "{74856B6E-9F94-43A8-919A-A608A6ACA1B7}"="{EC506026-74DE-433B-94D5-15BD7BF73E85}"
    "{230D7990-DE9C-4750-8412-C34CBA927F27}"="{06F0C22C-D0E4-4ABC-A6D8-05D8E6582CDC}"
    "{B8030883-6DF9-4AD5-803B-77D04743B7D0}"="{FB4C7B4D-5595-45E4-A3C2-70FBA71DA9F7}"
    "{C03F6C5F-5495-4936-AA2F-284CB101C878}"="{73B419F9-FCB8-4893-B020-F50ED94AF1A3}"
    "{3EEAE1A5-3518-42AC-896E-0E56DA775F49}"="{7DDDA8E2-3FC4-45F8-B50D-9F997CAB3616}"
    "{34243A8A-76B4-4DC6-AE2E-4F2B5D74D2C7}"="{296C8C67-E84F-492A-8D34-658BED42A66F}"
    "{EE20C596-6D28-4E76-BCDF-E016C101EB7C}"="{BD07FBBA-4453-4932-9430-A731FAA383B5}"
    "{41473D3B-EB79-407F-B3FC-F2E578C7E299}"="{59DEDB37-9982-4EDE-A0EE-2D8BA1D7FCE1}"
    "{AED874B2-D192-48B9-A059-8EADE60AB09C}"="{4A24E95F-21CF-4194-9EF0-614558DEFC8A}"
    "{83321308-8ADC-4176-9E3E-2589D1777D7B}"="{A07A4F6C-BD3B-42E2-94C8-D2EDD175AD11}"
    "{ED755E4E-0BDA-4D00-81B0-6742E2E5CD67}"="{A07A4F6C-BD3B-42E2-94C8-D2EDD175AD11}"
    "{B6383EA7-1CF0-4FA1-8640-F9E397F5AFD5}"="{43FB986B-4B37-48CF-A37D-A6215D42FD20}"
    "{3B568445-69F7-4265-B021-CFB8A0D6DC22}"="{A07A4F6C-BD3B-42E2-94C8-D2EDD175AD11}"
    "{A7010DDA-0359-4961-8040-2F2D99D17312}"="{520D417D-A6B8-449F-8FAD-92358B40862F}"
    "{1BAC3C19-A365-4EE2-8F80-6F8F2AE80905}"="{520D417D-A6B8-449F-8FAD-92358B40862F}"
    "{723DDE0D-B154-4915-A592-186AEA85C147}"="{87302C75-9C05-424E-BA4F-759C0A3A3C87}"
    "{4D600E35-A71B-42D8-B4FF-1A77DB085365}"="{520D417D-A6B8-449F-8FAD-92358B40862F}"
    "{74848B28-D0CB-481E-A60A-76676BEA0516}"="{12987FB2-0B65-46E7-A336-09E3DCF17CCB}"
    "{3ED33546-8F65-495D-989A-10B1BAE7A064}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{3A2F3410-37BE-4219-8597-0F5E1348E482}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{65714AC4-D1C2-4D57-99CA-ECD716F398AC}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{EFF842EC-97A4-4464-A625-15F754829242}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{07F2E157-9FC7-44AD-B96F-767DF40A4BB7}"="{80AF2363-16E9-4205-A0E7-9E0DFBBE7AF4}"
    "{8FB3F216-08AE-4913-B3F7-4A19D43EA55F}"="{80AF2363-16E9-4205-A0E7-9E0DFBBE7AF4}"
    "{1A33729C-A8FB-425E-8A78-996093BDBA85}"="{E3F222F8-72B4-4390-8FB9-7BBA650B7ADE}"
    "{AA3B745E-3A8C-4D11-9387-C1DCF657C9DB}"="{FBC851D5-979D-485E-BFF4-6E2EA465E436}"
    "{C3773FC1-0602-4824-97CA-DF33B530AD31}"="{6B6B9B19-61E0-44A4-90B5-2BFDD75FA8AC}"
    "{941078AF-4FBD-483C-8B98-AA8F370866E8}"="{D0684E27-E9FE-4D77-A310-AE27EF304FCE}"
    "{6DA09393-F35D-4D44-B574-5BFEF2B0A958}"="{D0684E27-E9FE-4D77-A310-AE27EF304FCE}"
    "{CC9E1D12-BA31-4B73-B681-B1E92894D2A5}"="{D3E91A4F-2AFA-4D27-8FBA-7094220ADF4E}"
    "{E77BCAE2-AAA5-4E98-8DD7-8A4FFE9766EC}"="{7742A51F-700D-4089-AD31-0D28C7E2CB0B}"
    "{AA7880D9-CEFA-42D1-BC6B-6774BBB264D7}"="{7742A51F-700D-4089-AD31-0D28C7E2CB0B}"
    "{5781D72E-8470-4856-9C52-51610A389DD3}"="{0AD3EE72-66CC-4C2C-A582-7FEFE026E487}"
    "{E3243009-0547-4327-9603-83DD83FAD0CA}"="{DA198AAB-350C-45E2-8CF2-EA038A893D52}"
    "{64188F26-632C-4A58-99F1-22BA0E086BE9}"="{DF6648C0-0FC5-44B0-A749-432975F5825F}"
    "{95E3FB67-D602-469A-AE80-79212757A4D9}"="{B057BD48-7BD5-4F9A-927D-3CFB2FF7AC7D}"
    "{7607B8D7-3674-44B0-90CE-6EDD4DBC37F5}"="{48579923-87B2-43E5-9C13-6EFCBED87CF2}"
    "{C0D1882B-327E-43D0-9C1E-A337D02A636E}"="{48579923-87B2-43E5-9C13-6EFCBED87CF2}"
    "{66557B0B-F597-4598-A5C4-2F2BCD1741A1}"="{48579923-87B2-43E5-9C13-6EFCBED87CF2}"
    "{29E18F62-CA7D-41DD-970B-9E1AF3627B76}"="{39A2D9CB-376E-4C0C-859A-ACC3FDD065B5}"
    "{0F512CBD-131C-4044-980F-2264FD7DCD48}"="{6D088C0B-7906-4676-B573-54579805CC1E}"
    "{A0EBC95A-8241-4C66-A67E-9A7A23BC40C3}"="{B673B704-136C-42AD-B5F5-07703DC0B2CC}"
    "{DF6F7712-058D-4FED-8991-E8604625127C}"="{666B5450-AA1D-45E0-9E11-03DD8F6AB74F}"
    "{E08DE082-110B-4786-8B80-B90CB4605A13}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{9008DDB2-B182-4E42-8367-DFBBA1B92DA9}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{F0B5E951-73D9-4A39-9785-9CEB9154BA7E}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{CF99A759-B08E-4D32-A9C5-9E929B717AF0}"="{13A89FEF-7CDF-400B-853F-B60B86D708AB}"
    "{1EF3A0C7-BBBA-4691-AA05-6E23934DDCAD}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{26F8C040-FF7F-4966-A691-F85C51F7EA94}"="{434AC489-7F81-4DD5-A56C-3A19211FCB37}"
    "{231F3B8D-9B9E-4D8E-8EE3-279F8769335C}"="{434AC489-7F81-4DD5-A56C-3A19211FCB37}"
    "{9E516DD6-DC31-4B8F-84B3-01CB2638D996}"="{434AC489-7F81-4DD5-A56C-3A19211FCB37}"
    "{53A17971-9A1C-4859-8647-E0F8803E802C}"="{CC3D0193-B021-457E-B253-F330C1B26A46}"
    "{5791D4C0-B8AC-4560-86A8-5EE7E6FBE9CE}"="{4416A618-5D94-492B-8760-A2CBEC2312B9}"
    "{708F6D35-5C28-4405-84F5-63ACA19270A5}"="{88D47BDB-5A82-40F5-A36E-C384305D04F7}"
    "{2E248C6D-53ED-4260-A7E9-6C1C377B0436}"="{968FDE74-3192-4E04-96DC-152BF0B1FABC}"
    "{3A7C4AC6-4A28-484E-8BF0-AD49AD07284C}"="{E4524AFC-6024-4928-A60C-71E95FC99DFB}"
    "{84495DD1-02F7-403E-AC80-214F9AB94770}"="{E4524AFC-6024-4928-A60C-71E95FC99DFB}"
    "{314291BD-A497-4773-B612-2A2D108CF25B}"="{E4524AFC-6024-4928-A60C-71E95FC99DFB}"
    "{7C4371BD-6F33-4CE6-A73A-3049B54DE37D}"="{A22C5DC5-6218-46F6-9684-10A56C5D404B}"
    "{DF341508-DD77-4582-8AA5-6E3839E9440A}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{4F4131BA-0DB8-475F-A88F-0DEEB63AC417}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{273DE66B-56BB-4E35-A257-3A10807A1181}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{5E129A3C-27E8-4585-9EF1-A589ED7FFF29}"="{FEA1B72A-40B8-4BD2-B16B-AB7A9D3D5C34}"
    "{316315BF-F637-4863-907A-35B5EFAA34DD}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{D91227A4-DF12-4C7A-A59D-89390DF0DF76}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{6764E13B-172D-40FD-B515-A9D042432DBA}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{872B6916-A8B0-428C-A3E4-7B3F8165B59C}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{A69B05E4-406C-424D-AC5F-217AD59DE4DF}"="{2CE7F37B-BF9F-4386-B631-FEEC3F55854E}"
    "{300C51A0-9394-4FEA-A15B-544E0DD74C80}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{449F30AE-A0E3-41FE-B6F7-6E708C57F018}"="{0D2FD83A-52D3-4E4C-8D82-4160408BE4AB}"
    "{094B4E5E-FBB3-40A5-A3DB-2852E131334F}"="{ED882AAF-2C29-44D5-8192-B7D2D7FE739F}"
    "{D419F3D9-233D-4B7A-BEA2-9B3DBD13BCBE}"="{ED882AAF-2C29-44D5-8192-B7D2D7FE739F}"
    "{C67994C4-A51B-446F-93AD-8FFEFFAE7E7A}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{E8755DF1-F650-4888-937D-E29D41F15A08}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{D3F18525-350C-41E8-9838-6CE7BBE790F2}"="{5443FD6D-6E6A-48E3-9782-43F242100307}"
    "{3E1F8629-1547-446E-AACD-FB28993E8038}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{04308267-23C1-4CCB-B85B-185DCCE6119E}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{0E8B8306-2838-4BF9-8612-F853609061BA}"="{388907A7-3BA7-4563-AC60-4E90AB90D17D}"
    "{80033358-45CA-475B-82B3-5656045BB4C8}"="{B0A86EE4-BC42-4E5E-B76B-AEE22DC8CD13}"
    "{D991A25C-E185-4139-AE2D-0417EA50B3FD}"="{7D6FB3B0-BC6C-4DF0-80D3-047D95A17802}"
    "{B718A73D-21AC-4A04-928B-D6D7B605FD0A}"="{7D6FB3B0-BC6C-4DF0-80D3-047D95A17802}"
    "{E07788CA-4209-4FEA-B6E6-651CC679CD86}"="{616D6AFC-A71A-4927-981C-9F607A5FF6C7}"
    "{A2DFCEDB-46C5-47A5-925B-C4BCD58568DA}"="{9EAFE923-60C5-4FF9-9B2A-A396C98E6C2A}"
    "{84004DED-35D3-40C5-BC71-FA5C1B0342BD}"="{550072E8-9A2A-4E73-B492-149AC095B9B2}"
    "{8418CBD0-1D8B-4862-ADD6-3E3E983D06D6}"="{A885A5CC-425C-4C95-8749-FEA2E0DAAE67}"
    "{3FA2C35D-216B-47E7-A05F-F97BA176F8CA}"="{A885A5CC-425C-4C95-8749-FEA2E0DAAE67}"
    "{5F02DC33-139B-4783-B53D-6C5D90116C96}"="{9D463D1F-EB1C-47CA-ACEA-FFBCE13DD96E}"
    "{4744EA94-2D43-4552-A75E-A6D1DB054F4C}"="{9D463D1F-EB1C-47CA-ACEA-FFBCE13DD96E}"
    "{87460AF4-F818-479A-9AC6-12A208306272}"="{7483350C-4C7E-4E56-AFEE-0E34F288E472}"
    "{C9F9571A-7E3B-4300-B4FC-4E0C5FD6834A}"="{9D463D1F-EB1C-47CA-ACEA-FFBCE13DD96E}"
    "{05AE08BF-DBD1-4383-92B7-6D75CF889CA7}"="{AA5EAD3C-FD40-44E7-A057-9270EE7F2F1E}"
    "{1CB5E043-3916-4C87-9C44-8781C6FA76CD}"="{C2B6D389-8026-4BDD-B859-197AB6093BD4}"
    "{FB34FF0E-933C-4B37-BC59-1DC53DD72E43}"="{5666C98F-8A41-4272-8806-F70BE920059D}"
    "{C00B8A2F-C92C-4851-BA68-27F25FE4C55C}"="{7CD3DFB2-83A1-4CA2-ACEC-12E1ED734351}"
    "{EC889301-F6FB-4C9F-90F4-495CB037E042}"="{EA22AE93-F6AD-404B-B446-5B182B5B90F3}"
    "{997CF82A-6E4E-4DC1-A07C-359EE4FD2FE3}"="{C2922688-9417-45A2-901F-9CCF67E1950B}"
    "{C9C34F1A-66C8-4543-AE0E-F5C046A8E6F0}"="{C2922688-9417-45A2-901F-9CCF67E1950B}"
    "{EAC9AD44-2E46-4DC9-971B-3C840796C960}"="{C2922688-9417-45A2-901F-9CCF67E1950B}"
    "{A082FD71-BFD6-4FEB-83E2-4EA556B88547}"="{581591D7-BAD9-4784-9C57-8EE195A1AD9F}"
    "{1374E453-1B25-480B-B128-71B0A9D63C24}"="{D1F5AB36-74FA-455D-B18B-950626115951}"
    "{F6ACC8D6-8FB4-4989-A85D-AF040E3B5324}"="{67F70D7E-FCF2-4287-A39A-16AC50A8C258}"
    "{F8DE9ABF-F53A-408B-8A00-F873E60DE803}"="{C7100854-0A64-4D83-9947-2678A37161AA}"
    "{CF4017A4-A93C-4432-8A2A-F75C6E678AF0}"="{7945C780-7123-468B-B23D-135E8688E8DF}"
    "{9514F1F8-A46C-4340-A310-066ED382B294}"="{E395020C-784B-486C-9E4A-A6150278AC77}"
    "{5321C693-75BB-4B05-B716-592DDB89D8AF}"="{4131704F-DE58-45D7-B89B-C2988C819647}"
    "{D4263117-7341-40BC-BC10-0A5287102898}"="{D74E57D6-CAD3-4789-984D-9895322F194F}"
    "{4B3ABB55-247E-41B8-93A4-D3419C7C6C69}"="{796C3DEB-B593-4F20-953E-09501B760246}"
    "{C5EB6649-A04B-4FEE-AF9A-2B01A4F523C4}"="{C0D22C4E-A0B8-42B7-9ECC-6164CDCF3BD4}"
    "{E790B7F5-7303-40DA-98A4-5BD51531591E}"="{1C12AF93-ADA0-4C07-B30A-D9E43104F5A6}"
    "{1952D30F-5EBF-4993-8392-9D5ADF6851F3}"="{9B1CE3A4-45CF-4E5E-B91F-1BC27831401F}"
    "{F0BE8EDB-3E9E-47C1-BC52-ADEC3CCD1B97}"="{474497C0-5772-4A3A-B60F-C658F9ABA3E5}"
    "{03B0A651-42FE-458A-B393-2A0BF4399405}"="{AEDA3137-8820-4EE0-BE64-856A7D744065}"
    "{D8FA0E3B-F9B0-45D5-B4D6-0682AA39AA5C}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{554F3586-6138-461A-8667-36BCAF3E1303}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{1B9D3BF3-BD7E-4D6C-B5BB-5976C3AB189C}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{393878FE-FC0C-442A-8216-039515CF67AF}"="{A342BCDA-F4D5-4365-A7B9-F0D175F4A915}"
    "{87B59FAB-6E40-4FF0-B41B-BCAADD67F61A}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{D8C83065-FAB6-4E98-9510-803789B9E7BC}"="{346076AC-EE54-4D11-805B-A303FE60E5AC}"
    "{89144C21-6048-4160-A213-4D2850669E3B}"="{346076AC-EE54-4D11-805B-A303FE60E5AC}"
    "{79F2656E-4EB9-4376-8CF1-663AEAB9727E}"="{346076AC-EE54-4D11-805B-A303FE60E5AC}"
    "{584A3C1F-DA42-4148-870D-664694D0572C}"="{770EB647-AB61-449B-8603-4449571B34A5}"
    "{2920674F-CC55-4362-8D55-07DFE59E7FD8}"="{770EB647-AB61-449B-8603-4449571B34A5}"
    "{1FF06291-2A9D-49E4-A5BF-6D32A4865E83}"="{770EB647-AB61-449B-8603-4449571B34A5}"
    "{F1881F52-21E2-467C-B6A0-0018D37436A1}"="{8BB4A7DE-2481-432A-B4C5-5EA1A1810578}"
    "{096F98B8-BDE5-4AD3-B767-844BBAF1679F}"="{CD187349-BE83-4171-A15E-BB35B95CC385}"
    "{CE214785-AC76-4890-A34C-3FBFA8943027}"="{B066A942-FA4F-44D5-B84A-B55E5ED1F847}"
    "{D3D9A4F4-8A6F-4A97-B2E1-A454345CFC44}"="{B066A942-FA4F-44D5-B84A-B55E5ED1F847}"
    "{6CD85FE7-E6C1-4E83-8EAA-B2DC91FC4803}"="{0285AF34-58F9-44EC-A7D7-C63F91B7AA7C}"
    "{A08D9B64-F9C4-4041-BA65-ABF057794522}"="{70DB6B36-AC39-44E6-927E-2F7DF443EE46}"
    "{F7A5C0A2-7324-4AD7-8002-8D3C9E346EE2}"="{70DB6B36-AC39-44E6-927E-2F7DF443EE46}"
    "{D0AD612D-8C44-4FDE-B374-424E4AA6EF22}"="{70DB6B36-AC39-44E6-927E-2F7DF443EE46}"
    "{5FF11877-87B7-463E-BA20-33A2E1771972}"="{E8EED5F2-A320-4301-AA3C-F87220736727}"
    "{371F044B-C6B1-465B-82D2-9CBA253650EF}"="{B7BCAEAB-06CF-4F70-918D-7E0533096379}"
    "{74F6E9E1-BB2F-4724-AE25-D2E0D1695418}"="{B7BCAEAB-06CF-4F70-918D-7E0533096379}"
    "{1B2E9BB3-A679-47A4-BE86-1676A0C84D0F}"="{04C5FBE0-2C06-498D-ABF1-0B9FD39F276E}"
    "{C7F14EF1-9D39-437A-A4E8-85369E0B7E88}"="{04C5FBE0-2C06-498D-ABF1-0B9FD39F276E}"
    "{BB0EA539-CB05-4B13-A360-7329FAC09A82}"="{451B984D-242D-472A-94BE-1376E108CF56}"
    "{17F75696-B60F-4DFD-8773-C2B1EE8A6FDB}"="{04C5FBE0-2C06-498D-ABF1-0B9FD39F276E}"
    "{9A0EC2FB-E7E7-412E-834D-2D16D04317A0}"="{91D7A2F0-60AC-4DDC-BCB9-11392E8854ED}"
    "{7227B25B-CDDA-45F2-8EC5-90269C48B299}"="{29722373-6D90-40C4-BBBE-29B364CE8F65}"
    "{B081C4F7-542B-43D9-874E-D968E5D37456}"="{52BC9CA5-E5B2-44B8-8370-04D115AB8C0A}"
    "{FF64491D-09E0-4DA9-9D6A-EB1C0365130C}"="{FAD16090-330A-43C4-AEC9-5ACCD6BB877A}"
    "{2B5F8EBF-E787-4A51-B7BD-FA74E105101B}"="{52BC9CA5-E5B2-44B8-8370-04D115AB8C0A}"
    "{73610FEA-50D5-4AFF-977E-FEEE340A1C53}"="{52BC9CA5-E5B2-44B8-8370-04D115AB8C0A}"
    "{E6B3F0CB-9BE5-48E8-9217-B8CE6F67701B}"="{ACCBFAEA-A7A8-46C6-85C3-68B54E0B5473}"
    "{63395A41-434E-4174-B3FA-425980640CB4}"="{B2A41215-5235-400A-92EA-A0D8B51500B8}"
    "{9284360E-55C8-4A62-AE59-E068076D24D1}"="{CF03829C-5247-414D-9A81-115D0DFB0C4C}"
    "{1E567F22-9927-4D42-AB6F-3223689DFA02}"="{3F047584-6996-4F13-9AD6-5AAE1FF6BE5E}"
    "{0290DD0E-7DB1-4164-9741-081373DEBA6A}"="{026EC6D3-32F6-412B-B242-55B2ECA88DFD}"
    "{6874B8BA-8A5C-4C87-AC8E-BF2AE937288F}"="{873D5334-0DDE-404A-B989-C4A705F557FB}"
    "{0C772C90-A29B-4805-880E-4EE5C5721846}"="{873D5334-0DDE-404A-B989-C4A705F557FB}"
    "{87223AEC-498B-477A-925A-8347BD4B0F41}"="{ACC7BFFD-E634-4CF9-B4A6-EE004DB6DBCB}"
    "{664F38EC-9B62-4C0D-9CB2-2431CAAD34D7}"="{19C292A4-4456-4B18-AD44-FE6F2293E498}"
    "{4FA7B935-8A5A-4FE7-A6EB-D7A1DB74BFF8}"="{37C447D5-E097-4F0E-AF97-EA92117B15D3}"
    "{AA4C9136-C3D3-4049-9FC8-ACC2470ED290}"="{ACB15A5F-1E41-48C4-922B-401A6187D40B}"
    "{6DD4F407-C66E-4C02-A1B7-787F75324B0D}"="{F532788E-2912-43F3-88A9-CF3AF8FC0445}"
    "{0E469F01-EE2C-4452-ADCB-2DECDC3E9A7B}"="{D08E30C8-EAAE-425E-98D4-F5925A9D285E}"
    "{6F4F21AF-4AC0-4415-85C8-52589561D719}"="{D08E30C8-EAAE-425E-98D4-F5925A9D285E}"
    "{B58CFFE2-CF93-4F7D-ACB7-2D036E552E81}"="{D94EA85A-38DC-4282-8E3A-58C87AC554F5}"
    "{D569F2D8-616B-433C-8612-AA73D25274E1}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{7ED49A74-9E86-49B7-A24C-103E2D1558A3}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{6F15698E-C3F9-4CCD-ACD4-6C3407E57FA1}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{35B18ED8-1B7B-46F5-8608-0A33248BE0E8}"="{F9DAC03F-ED0F-4508-98FD-81A7F6133D71}"
    "{8813371D-008C-4AEB-BCF4-C98A71FF9282}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{AF1754EF-7797-4D4B-A3B1-C130D82EFC1E}"="{E6074FFD-9710-4DAE-B4E8-120612430F2F}"
    "{1E117229-CB6C-4835-9417-60762C9DC274}"="{E6074FFD-9710-4DAE-B4E8-120612430F2F}"
    "{DACE0BE4-AB03-4BA4-B743-F37FB58C50E1}"="{BB6388B4-9659-4CEC-9F6B-90E8BB250EF9}"
    "{07ECCC5A-7ECE-4FF4-B380-DE7F060E0BF1}"="{E6074FFD-9710-4DAE-B4E8-120612430F2F}"
    "{1AD2F680-E62D-493B-A0BD-EB0657D39A7D}"="{C452197F-8D6A-421F-B600-A1D79E82AAA8}"
    "{0ECBA8E4-562E-402A-853A-0F26B6E6FC08}"="{FD3D5EC8-4CDF-4233-A7B4-ABAD38CDF46A}"
    "{2818204B-2E12-4541-8613-6D87B9E0F41D}"="{FD3D5EC8-4CDF-4233-A7B4-ABAD38CDF46A}"
    "{EFA168FE-803D-45FD-9E07-ED0E2441832B}"="{7910235C-36F1-4982-9623-C90BF9D035D8}"
    "{5F566FD0-E363-427C-814C-4634FBC03356}"="{DDF15074-9F1D-42BE-ADD1-9F22BD3043CB}"
    "{49A46CEA-8B49-41CB-9E5A-2FB0F3429FCB}"="{014A8CF6-BDD8-4E63-966F-573A2CEEC895}"
    "{47652250-DFB6-491B-B9AF-28A991B7AFDA}"="{764B665C-F7A0-4118-8A1E-DF42A8A50EE3}"
    "{E7423E1F-281B-42CA-8263-77EC7D429E12}"="{75CE0250-347B-4B36-B220-68A973B70E7B}"
    "{CE71C4EF-C9A3-4DE8-93CC-ED5B6270A86A}"="{515AC2DA-B2FA-42B3-8A64-84FDC317AF51}"
    "{569C088D-10D6-42AF-B105-71CC19174231}"="{515AC2DA-B2FA-42B3-8A64-84FDC317AF51}"
    "{862BF050-4A0B-4D62-9121-3E5ED33963D7}"="{208EB7C8-C891-4513-9891-099E9EF137A5}"
    "{816C5AD1-FC73-4D7C-8CE9-315FBCAA48F1}"="{9B296255-B1F8-4565-BEAD-555506F11514}"
    "{516D4F3C-A25D-4CF1-8F1F-8ECB2D66427D}"="{0249C789-27BC-4DBA-9B27-ED4D3C133BE9}"
    "{F6A6FED3-256A-42B0-9F4A-E3379AD69EF4}"="{7F0F1385-2D83-430B-8034-AD08951A7FD3}"
    "{95800924-1DFB-4EA8-961B-03E1A682E7FB}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{973F3D63-29FE-4FD7-AD12-3BC3BB4C8DEE}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{C2C894C0-2726-451F-BFC2-1BDB9CA43919}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{D151B6EF-3852-4BBF-A7BD-6469952DF5EF}"="{BC2CA3A8-9C59-4234-849C-63CAF7EC8145}"
    "{16690457-21FB-4CBA-9EA1-589EC8DB5B1E}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{09F51BD9-F4A6-4E93-A178-639A2C3BF7AB}"="{8E0A42F2-4897-42E2-89F5-3F1C66F778F2}"
    "{48F6500D-8448-4FF5-A95C-1E2654915CEA}"="{B5C4DE09-5069-4914-B2C5-63A1529244C8}"
    "{E29A47DC-47A8-4473-AB5C-27BF475E6ED1}"="{B5C4DE09-5069-4914-B2C5-63A1529244C8}"
    "{8ACA4309-C176-44DD-8EDC-787E62FEF7A6}"="{84EA1173-A26C-49FB-9DF8-A394E427272E}"
    "{67B4B017-06EE-4E31-BD69-ED3C0728F61B}"="{47571D71-F782-45A8-97E6-EA6C5A371FDC}"
    "{705438D3-B38F-4E7E-BA98-B16F697E4648}"="{47571D71-F782-45A8-97E6-EA6C5A371FDC}"
    "{303FC08E-BAF3-4948-9290-0885AA3253B9}"="{47571D71-F782-45A8-97E6-EA6C5A371FDC}"
    "{34F3E5CB-B72B-4168-8019-5A2F0A72B027}"="{100AF524-6CC1-4E0E-ACF7-AFDD85555194}"
    "{99A072C5-DC2A-4CE4-AAA6-1A9A72A9E0BE}"="{300C1B24-720D-472B-B4AC-5BA74C22B08D}"
    "{95A758D4-3A11-4637-B0E8-27D109E6C737}"="{300C1B24-720D-472B-B4AC-5BA74C22B08D}"
    "{7E86C0AC-2E5A-4C27-89AB-535F9F353454}"="{C1E5FB1E-F853-4FF8-987E-EC665C8F5A7A}"
    "{1ED2E58D-BDE5-4407-B38A-0574F768EB85}"="{85920806-1219-4C94-8C93-F45B4065BA72}"
    "{4FD625C8-88B8-4483-BDA8-421561145CE1}"="{85920806-1219-4C94-8C93-F45B4065BA72}"
    "{5ECF847B-CB36-430B-8501-1EDF8776FBE0}"="{85920806-1219-4C94-8C93-F45B4065BA72}"
    "{0433A4CF-1B49-471F-BA80-B68E1B57C221}"="{A1C6BAFA-0BD5-4143-845D-542BB1D58C90}"
    "{61F4D968-835C-4D00-8CE0-D6A5252E8AD8}"="{A1C6BAFA-0BD5-4143-845D-542BB1D58C90}"
    "{E0276077-5F15-4CEA-8509-04A459366A1E}"="{A1C6BAFA-0BD5-4143-845D-542BB1D58C90}"
    "{53360D30-378C-49EF-AD3B-64204DA30461}"="{42D6A3DD-EBF4-47D3-98E3-CAC573A13A4D}"
    "{4C3D34A0-C3CB-4445-B40C-71A9CCDC4422}"="{91B80879-75E0-433A-B0D7-D8F1773FF36E}"
    "{6F60A044-D3D3-46C6-9EFD-4AFCE52616E1}"="{22375BFC-8163-4850-A669-99DD6C321E24}"
    "{1318585E-BD10-42C2-BB4C-5AD4FF818831}"="{2FA07DCE-C7BB-438D-A137-147FB07FFCFE}"
    "{403FBA84-69EB-4D2D-B253-C73010205F21}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{28F7203B-3BF4-4663-8D9A-495CF74A47C1}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{6DD73F9A-D4D5-4A10-B38A-9B78AD7F48BF}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{DBF5AC4A-70DA-453D-ACA2-20A7A3F371B6}"="{63AE48F3-62E4-4EA5-8CD6-6CC41D725136}"
    "{5B2F2053-722B-40EE-B428-682AEEC1AC02}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{D7F4EDBB-5FAA-4E02-9DBB-0037F8991E6A}"="{8162A998-5067-47E1-8E2C-2E8B44E2C006}"
    "{AA605C2C-2CD5-4D1E-8174-16037DDF5F74}"="{DB9DD519-E070-4118-922C-541716CECD9A}"
    "{E221B3BC-B2AF-4615-AA4C-79C8624398F2}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{9AB96ED3-52A4-41D0-8D3B-539A25A9E35A}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{DFF5CA7B-B54C-49C2-927E-3EBB6A6C8AA9}"="{A47C9F14-72C3-4F3A-9460-19DD1759A886}"
    "{057B62F9-7E32-4F97-A182-03670F473F2C}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{AFBDEFBC-68B5-4703-8E91-E4BA77BD1EC6}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{04D1F9F8-EC86-45CA-B02F-9D7066E9FF8E}"="{2AF4F9E2-A7F7-48D7-8F40-159126C1F061}"
    "{2F1C9068-D5DD-454F-8F54-D6100B5AB8E5}"="{2AF4F9E2-A7F7-48D7-8F40-159126C1F061}"
    "{6ED27B6C-F1DC-4F18-B72F-26E397254BCE}"="{2AF4F9E2-A7F7-48D7-8F40-159126C1F061}"
    "{A18093AA-0C38-4F9F-A13B-6412EFA9A361}"="{AF49674D-79AF-4B25-A10F-27E1CDBB5A0F}"
    "{FC0C6D29-7E7F-4AC1-8C06-BDBD5D869F9C}"="{E842B353-28D4-4F96-A269-7C2D640DB96B}"
    "{5DE6A515-1C16-4472-B028-5A5EEBC55769}"="{E9863C67-C1A7-4144-B423-744E80D26263}"
    "{F035303E-AAC4-4FA5-B27E-EA5ECCFC83B7}"="{0EE2264D-2ADD-48A8-9C1C-5CA457FE28C0}"
    "{0FF5D8FB-9C87-4D13-9A90-AB5F76941D95}"="{9CC6E81B-F57D-4C0D-A755-77A45C15C30C}"
    "{FDFA655E-A3CC-45BC-BB33-E076EF148D9B}"="{4D231E24-A8BF-4986-A73A-20B8911BC5F3}"
    "{F34B3116-BA7F-4E28-B209-2B682D4FDBEB}"="{4D231E24-A8BF-4986-A73A-20B8911BC5F3}"
    "{094DFAB2-6273-4AC1-9F39-18755A880B50}"="{4D231E24-A8BF-4986-A73A-20B8911BC5F3}"
    "{0E7D3594-7EDB-4ADB-8731-FE9413A44411}"="{CF93F1DC-7BCA-490B-8FDE-F6B025E1AFB3}"
    "{D31D328B-C1BA-4178-A0D9-33D3F364C4E1}"="{C6C58D2A-3B4B-41C1-85AA-157BE1E592F0}"
    "{3B3CA74A-6845-485B-86F2-3CFD366143FF}"="{6B9E56EE-7669-496C-A28A-5D3269D6EFD5}"
    "{BEA9E2E3-E845-428F-BC00-6E2F94763BD7}"="{6B9E56EE-7669-496C-A28A-5D3269D6EFD5}"
    "{D59ED862-4DB3-41C2-BF8A-0CB8CC93B32D}"="{553D4092-93F4-4890-822D-EA298510586B}"
    "{2CADFB35-9469-4EAF-A96F-E067A2BC562D}"="{34986AD0-A533-44D1-9A80-8EE57950BC1C}"
    "{944A7FE5-2F20-47B6-BCE6-5E8C7B13B8E3}"="{E5C6F0AA-744E-4384-9F45-B3CDFFDE57AA}"
    "{1025151C-6964-427D-9EED-92DAED4443D5}"="{916213F8-52E6-42E9-994D-EE07515F4708}"
    "{9F7B450C-25B0-4021-9DB1-4CA79F07502A}"="{7940986C-54C1-4557-B2EE-A54915DF2445}"
    "{4DE01C82-5110-4BEC-A0EF-8CA3F6F8777A}"="{0C78C008-DF3A-4548-944E-B9AB95E45556}"
    "{A498803E-10E9-48D7-A74B-8201DCB12D58}"="{703BCEFA-03D3-4F05-AD0D-A085B32A8E46}"
    "{5FE7100A-B151-4DC1-A14E-6C336A6691BE}"="{703BCEFA-03D3-4F05-AD0D-A085B32A8E46}"
    "{521AD5FA-CC8C-4200-9642-1B2BF9F9A0C0}"="{4F489F2B-082B-49CA-A383-F06804F45341}"
    "{7E84F757-77F9-4916-934D-3DE055FE8A34}"="{AF64102E-5741-4140-BDA2-478D7EF557C0}"
    "{B50703C4-AD0F-4AFF-94CE-6410B937B853}"="{9E4BEC28-D439-4959-BFAE-118E5A9E0BC6}"
    "{0FA70AA2-2369-4811-80B1-3B2632B59A8F}"="{68A2B84A-7958-4ABE-B753-C75C712A0056}"
    "{FA14FC8E-FE26-47A0-A1D8-79FE2AECB10D}"="{68A2B84A-7958-4ABE-B753-C75C712A0056}"
    "{63F0BF2D-3665-49DA-9CC2-6AFBBC41D701}"="{268CF69F-B226-4CE4-BD2D-33C246A865E7}"
    "{C438E54E-CF52-4281-9346-24AB6B84353A}"="{8FA55FE8-0943-455F-A46A-C3DE249DF245}"
    "{AF4E21C0-45D8-4551-9E7C-AEB54D9607E4}"="{548D927B-F11D-4361-9E55-05AC973CD46B}"
    "{6B5FAE0D-5BB2-4C95-B375-025EBE2E9188}"="{A70CC300-89AD-46F7-8806-8FC77D49E747}"
    "{317E2C8F-B410-4B31-A763-6E85CE856343}"="{D9D56750-3BAF-48C6-92CD-9B41546CD499}"
    "{058C4030-3172-453C-BFC2-1E62164DA516}"="{8C9C7209-1457-4FBE-8BD6-1714921693ED}"
    "{B0ADDBFE-6DC6-45C3-B715-AD29A8C03583}"="{0B117C49-1F27-4278-BCFE-E0040F41C615}"
    "{4D487BBB-AAA7-461B-902F-458A246E529A}"="{002FC93D-5477-44C3-821D-04DB124348DB}"
    "{2A2E3625-B4C0-490B-9F5C-14EA8FF6FD1D}"="{002FC93D-5477-44C3-821D-04DB124348DB}"
    "{17252EC9-6536-4D43-B1D8-ABEA2E4E0B6C}"="{44C8B941-5D1D-4773-A49D-CDD910895139}"
    "ccSvcHst_ccSetMgr"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "ccSettingsService"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "SAVSubmissionEngineIPC"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "SAVSubmissionEngineCallbackIPC"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "ccSvcHst_ccEvtMgr"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "ccEvtCli"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "{1E7D2FF1-D616-4926-8179-6655D430F699}"="{4A0E37EE-8135-4310-97B6-217E3CF80E3C}"
    "{BFADC982-75E5-497A-A114-95856CCE9A33}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{3898DFB3-ACD1-409C-BC6A-4E688DC3D1B5}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{E4AED5F0-C98F-45AD-9ABE-51FE082EB40F}"="{10CE03F8-F3E7-407D-BBE7-123429B4759E}"
    "{A83D99E0-F87D-488F-9676-B26F91949FE5}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{E28FA5D2-2B6F-4BB7-AEE1-03329FADC558}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{E6C7DEC8-8572-4E2E-A897-544E06C2E552}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{CD258FF9-2915-4831-88C4-A143C67885FD}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{596FA579-6EBD-4F1B-BE22-46F184A4BAD0}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{5BE7790D-D9B9-44A6-A94A-428D2713B4BE}"="{A321C456-9C6E-4EFA-BFAB-BC2286100A59}"
    "{5A718E5B-9017-4AD3-B421-66F380495411}"="{A321C456-9C6E-4EFA-BFAB-BC2286100A59}"
    "{5649410D-5C7A-4FE5-937B-88809555AA1E}"="{A321C456-9C6E-4EFA-BFAB-BC2286100A59}"
    "{CA0E7469-46FD-4F0F-B4E9-36C384DF8705}"="{EC0734F8-2AEF-4960-9800-E6FA4FC61ED0}"
    "{26E558F0-63DE-4EDD-9414-C102609B1AC1}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{7BF0EEC7-D4F4-4409-AB3C-7E809FC3D44D}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{9908A8DB-07C5-4A72-90F2-633EB96A2573}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{8D3D0913-0372-4F62-83EC-08DED03BCC71}"="{6E207B0D-A356-4A30-A3E2-E86D7500BB80}"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2011-06-24 23:23:16
    ComboFix-quarantined-files.txt 2011-06-25 03:23
    .
    Pre-Run: 323,476,406,272 bytes free
    Post-Run: 323,524,980,736 bytes free
    .
    - - End Of File - - D4C2AC4BEBE90B3784803C14FB5DD4E7
  15. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    I just noticed, that you posted DDS.txt log twice.
    I still need Attach.txt log.

    ========================================================================

    Uninstall Uniblue Registry Booster.
    Registry cleaners/optimizers are not recommended for several reasons:

    • Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

      The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.
    • Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a program to work.
    • Not all registry cleaners create a backup of the registry before making changes. If the changes prevent the system from booting up, then there is no backup available to restore it in order to regain functionality. A backup of the registry is essential BEFORE making any changes to the registry.
    • Improperly removing registry entries can hamper malware disinfection and make the removal process more difficult if your computer becomes infected. For example, removing malware related registry entries before the infection is properly identified can contribute to system instability and even make the malware undetectable to removal tools.
    • The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results".
    Unless you have a particular problem that requires a registry edit to correct it, I would suggest you leave the registry alone. Using registry cleaning tools unnecessarily or incorrectly could lead to disastrous effects on your operating system such as preventing it from ever starting again. For routine use, the benefits to your computer are negligible while the potential risks are great.


    ========================================================================

    1. Please open Notepad
    • Click Start , then Run
    • Type notepad .exe in the Run Box
    • Click OK
    Windows Vista/7 users: click Start, in "Start search" type notepad and press Enter.

    2. Now copy/paste the entire content of the codebox below into the Notepad window:

    Code:
    File::
    c:\windows\SysWow64\onexuit.dll
    c:\windows\Fbotaa.exe
    
    
    Registry::
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000000
    
    

    3. Save the above as CFScript.txt

    4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

    5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

    [​IMG]


    6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    • Combofix.txt
  16. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Fixed Attach Log

    Edited the Attach log post w/ the correct text log, sorry for pasting the wrong log.

    I will edit this post with the ComboFix Log as soon as it is done.



    //////////////////
    ComboFix2 log part 1
    //////////////////



    ComboFix 11-06-24.02 - Administrator 06/25/2011 0:46.2.4 - x64
    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4095.2382 [GMT -4:00]
    Running from: c:\users\Administrator\Desktop\ComboFix.exe
    Command switches used :: c:\users\Administrator\Desktop\CFScript.txt
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    FILE ::
    "c:\windows\Fbotaa.exe"
    "c:\windows\SysWow64\onexuit.dll"
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\windows\Fbotaa.exe
    c:\windows\SysWow64\onexuit.dll
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-05-25 to 2011-06-25 )))))))))))))))))))))))))))))))
    .
    .
    2011-06-25 04:49 . 2011-06-25 04:49 -------- d-----w- c:\users\Nel\AppData\Local\temp
    2011-06-25 04:49 . 2011-06-25 04:49 -------- d-----w- c:\users\Default\AppData\Local\temp
    2011-06-25 04:49 . 2011-06-25 04:49 -------- d-----w- c:\users\AznAvatar\AppData\Local\temp
    2011-06-25 04:39 . 2011-06-25 04:39 -------- d-----w- c:\programdata\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}
    2011-06-25 01:09 . 2011-06-25 01:06 4770816 ----a-w- C:\unetbtin.exe
    2011-06-25 00:56 . 2011-06-25 00:56 -------- d-----w- c:\program files (x86)\PowerISO
    2011-06-25 00:56 . 2011-06-15 08:30 93240 ----a-w- c:\windows\system32\drivers\scdemu.sys
    2011-06-24 22:13 . 2011-06-25 04:39 -------- dc-h--w- c:\programdata\~0
    2011-06-24 22:13 . 2011-06-24 22:13 -------- d-----w- c:\users\Administrator\AppData\Local\PackageAware
    2011-06-24 19:37 . 2011-06-24 19:37 -------- d-----w- c:\users\Administrator\AppData\Roaming\Malwarebytes
    2011-06-24 19:37 . 2011-06-24 19:37 -------- d-----w- c:\programdata\Malwarebytes
    2011-06-24 19:37 . 2011-05-29 13:11 39984 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
    2011-06-24 19:37 . 2011-06-24 19:37 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
    2011-06-24 19:37 . 2011-05-29 13:11 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-06-24 19:21 . 2011-06-24 19:21 388096 ----a-r- c:\users\Administrator\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2011-06-24 19:21 . 2011-06-24 19:21 -------- d-----w- c:\program files (x86)\Trend Micro
    2011-06-24 18:51 . 2011-06-24 18:51 -------- d-----w- c:\program files (x86)\Magical Jelly Bean
    2011-06-24 06:20 . 2011-06-25 02:51 -------- d-----w- c:\users\Administrator\AppData\Local\ElevatedDiagnostics
    2011-06-24 05:02 . 2011-06-24 05:02 -------- d-----w- c:\program files (x86)\ESET
    2011-06-24 02:05 . 2011-06-25 03:14 -------- d-----w- c:\users\Administrator\AppData\Local\CrashDumps
    2011-06-24 02:04 . 2011-06-24 02:04 -------- d-----w- c:\users\Administrator\AppData\Local\Google
    2011-06-24 00:08 . 2011-06-24 05:32 -------- d-----w- c:\programdata\PC Tools
    2011-06-23 20:16 . 2011-06-23 20:16 -------- d-----w- c:\users\Administrator\AppData\Local\AMD
    2011-06-23 20:15 . 2011-06-23 20:15 -------- d-----w- c:\users\Administrator\AppData\Local\ATI
    2011-06-23 19:44 . 2011-06-23 19:44 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2011-06-23 19:29 . 2011-06-23 19:29 -------- d-----w- c:\programdata\AIM
    2011-06-23 19:29 . 2011-06-23 19:29 -------- d-----w- c:\program files (x86)\AIM
    2011-06-23 19:29 . 2011-06-23 19:29 -------- d-----w- c:\program files (x86)\Common Files\Software Update Utility
    2011-06-23 19:08 . 2011-06-24 05:01 -------- d-----w- c:\users\Administrator\AppData\Local\NPE
    2011-06-23 19:08 . 2011-06-23 19:08 -------- d-----w- c:\programdata\Norton
    2011-06-23 18:54 . 2011-06-23 18:54 -------- d-----w- c:\users\Administrator\AppData\Local\Adobe
    2011-06-23 18:41 . 2011-06-25 03:23 -------- d-----r- c:\users\Public
    2011-06-23 18:40 . 2011-06-23 18:40 -------- d-----w- c:\users\Administrator\AppData\Local\Symantec
    2011-06-23 18:40 . 2011-06-23 19:29 -------- d-----w- c:\users\Administrator\AppData\Local\AIM
    2011-06-23 18:39 . 2011-06-25 04:48 -------- d-----w- c:\users\Administrator\AppData\Local\Temp
    2011-06-23 18:21 . 2011-06-23 18:21 -------- d-----w- c:\users\Administrator\AppData\Local\AOL
    2011-06-23 18:20 . 2011-06-23 18:20 -------- d-----w- c:\users\Administrator\AppData\Local\Mozilla
    2011-06-23 18:20 . 2011-06-23 18:20 -------- d-----w- c:\users\Administrator\AppData\Local\Apps
    2011-06-21 23:44 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A731392F-13A2-4EAD-A657-C7B0DD6912C3}\mpengine.dll
    2011-06-16 04:09 . 2011-04-27 02:57 102400 ----a-w- c:\windows\system32\drivers\dfsc.sys
    2011-06-16 04:09 . 2011-04-25 05:32 1896832 ----a-w- c:\windows\system32\drivers\tcpip.sys
    2011-06-16 04:09 . 2011-04-25 02:44 499712 ----a-w- c:\windows\system32\drivers\afd.sys
    2011-06-16 04:09 . 2011-04-29 05:47 1110528 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
    2011-06-16 04:09 . 2011-04-29 05:08 759296 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
    2011-06-16 04:09 . 2011-05-04 02:51 287744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
    2011-06-16 04:09 . 2011-05-04 02:51 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
    2011-06-16 04:09 . 2011-05-04 02:51 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
    2011-06-16 04:09 . 2011-05-28 03:07 3133952 ----a-w- c:\windows\system32\win32k.sys
    2011-06-16 04:07 . 2011-04-29 03:13 461312 ----a-w- c:\windows\system32\drivers\srv.sys
    2011-06-16 04:07 . 2011-04-29 03:12 399872 ----a-w- c:\windows\system32\drivers\srv2.sys
    2011-06-16 04:07 . 2011-04-29 03:12 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys
    2011-06-16 04:07 . 2010-12-18 06:13 861184 ----a-w- c:\windows\system32\oleaut32.dll
    2011-06-16 04:07 . 2010-12-18 05:31 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
    2011-06-16 04:07 . 2011-05-03 05:21 976896 ----a-w- c:\windows\system32\inetcomm.dll
    2011-06-16 04:07 . 2011-05-03 04:50 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll
    2011-06-13 00:01 . 2011-06-22 04:04 -------- d-----w- c:\users\Administrator\AppData\Roaming\skypePM
    2011-06-13 00:01 . 2011-06-20 06:50 -------- d-----w- c:\programdata\Skype Extras
    2011-06-12 23:57 . 2011-06-22 06:01 -------- d-----w- c:\users\Administrator\AppData\Roaming\Skype
    2011-06-12 23:56 . 2011-06-12 23:56 -------- d-----w- c:\program files (x86)\Common Files\Skype
    2011-06-12 23:56 . 2011-06-23 18:52 -------- d-----r- c:\program files (x86)\Skype
    2011-06-12 23:56 . 2011-06-12 23:56 -------- d-----w- c:\programdata\Skype
    2011-06-10 20:42 . 2011-06-10 20:42 -------- d-----w- c:\users\Administrator\AppData\Roaming\Notepad++
    2011-06-10 20:42 . 2011-06-10 20:42 -------- d-----w- c:\program files (x86)\Notepad++
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-05-24 23:14 . 2009-10-02 21:00 270720 ------w- c:\windows\system32\MpSigStub.exe
    2011-04-22 20:18 . 2011-05-25 14:34 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
    2011-04-20 06:44 . 2011-04-20 06:44 9319936 ----a-w- c:\windows\system32\drivers\atikmdag.sys
    2011-04-20 06:30 . 2011-04-20 06:30 22900736 ----a-w- c:\windows\system32\atio6axx.dll
    2011-04-20 06:09 . 2011-04-20 06:09 151552 ----a-w- c:\windows\system32\atiapfxx.exe
    2011-04-20 06:09 . 2011-01-05 03:02 676864 ----a-w- c:\windows\SysWow64\aticfx32.dll
    2011-04-20 06:07 . 2011-01-05 03:01 795648 ----a-w- c:\windows\system32\aticfx64.dll
    2011-04-20 06:07 . 2011-04-20 06:07 17693184 ----a-w- c:\windows\SysWow64\atioglxx.dll
    2011-04-20 06:05 . 2011-01-05 02:58 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
    2011-04-20 06:04 . 2011-01-05 02:58 480256 ----a-w- c:\windows\system32\atieclxx.exe
    2011-04-20 06:04 . 2011-01-05 02:57 203776 ----a-w- c:\windows\system32\atiesrxx.exe
    2011-04-20 06:03 . 2011-04-20 06:03 120320 ----a-w- c:\windows\system32\atitmm64.dll
    2011-04-20 06:02 . 2011-01-05 02:56 423424 ----a-w- c:\windows\system32\atipdl64.dll
    2011-04-20 06:02 . 2011-04-20 06:02 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
    2011-04-20 06:02 . 2011-04-20 06:02 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
    2011-04-20 06:02 . 2011-04-20 06:02 16384 ----a-w- c:\windows\system32\atimuixx.dll
    2011-04-20 06:02 . 2011-04-20 06:02 59392 ----a-w- c:\windows\system32\atiedu64.dll
    2011-04-20 06:02 . 2011-04-20 06:02 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
    2011-04-20 05:59 . 2011-04-20 05:59 4161536 ----a-w- c:\windows\SysWow64\atidxx32.dll
    2011-04-20 05:49 . 2011-01-05 02:43 4951552 ----a-w- c:\windows\system32\atidxx64.dll
    2011-04-20 05:46 . 2011-04-20 05:46 51200 ----a-w- c:\windows\system32\aticalrt64.dll
    2011-04-20 05:46 . 2011-04-20 05:46 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
    2011-04-20 05:46 . 2011-04-20 05:46 44544 ----a-w- c:\windows\system32\aticalcl64.dll
    2011-04-20 05:46 . 2011-04-20 05:46 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
    2011-04-20 05:45 . 2011-04-20 05:45 7768064 ----a-w- c:\windows\system32\aticaldd64.dll
    2011-04-20 05:42 . 2011-04-20 05:42 6389760 ----a-w- c:\windows\SysWow64\aticaldd.dll
    2011-04-20 05:40 . 2011-04-20 05:40 1222656 ----a-w- c:\windows\system32\atiumd6v.dll
    2011-04-20 05:40 . 2011-04-20 05:40 1923584 ----a-w- c:\windows\SysWow64\atiumdmv.dll
    2011-04-20 05:40 . 2011-01-05 02:32 3868672 ----a-w- c:\windows\system32\atiumd6a.dll
    2011-04-20 05:38 . 2011-01-05 02:33 4286464 ----a-w- c:\windows\SysWow64\atiumdag.dll
    2011-04-20 05:31 . 2011-01-05 02:27 5440000 ----a-w- c:\windows\system32\atiumd64.dll
    2011-04-20 05:30 . 2011-01-05 02:25 4056576 ----a-w- c:\windows\SysWow64\atiumdva.dll
    2011-04-20 05:27 . 2011-01-05 02:28 58880 ----a-w- c:\windows\system32\coinst.dll
    2011-04-20 05:23 . 2011-01-05 02:20 366080 ----a-w- c:\windows\system32\atiadlxx.dll
    2011-04-20 05:23 . 2011-04-20 05:23 262144 ----a-w- c:\windows\SysWow64\atiadlxy.dll
    2011-04-20 05:22 . 2011-04-20 05:22 14848 ----a-w- c:\windows\system32\atig6pxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 12800 ----a-w- c:\windows\SysWow64\atiglpxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 12800 ----a-w- c:\windows\system32\atiglpxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 39936 ----a-w- c:\windows\system32\atig6txx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
    2011-04-20 05:22 . 2011-04-20 05:22 306176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
    2011-04-20 05:21 . 2011-01-05 02:18 40960 ----a-w- c:\windows\system32\atiuxp64.dll
    2011-04-20 05:21 . 2011-01-05 02:18 31232 ----a-w- c:\windows\SysWow64\atiuxpag.dll
    2011-04-20 05:21 . 2011-01-05 02:18 38912 ----a-w- c:\windows\system32\atiu9p64.dll
    2011-04-20 05:21 . 2011-01-05 02:18 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
    2011-04-20 05:20 . 2011-04-20 05:20 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
    2011-04-20 05:13 . 2011-04-20 05:13 53760 ----a-w- c:\windows\system32\atimpc64.dll
    2011-04-20 05:13 . 2011-04-20 05:13 53760 ----a-w- c:\windows\system32\amdpcom64.dll
    2011-04-20 05:13 . 2011-04-20 05:13 52736 ----a-w- c:\windows\SysWow64\atimpc32.dll
    2011-04-20 05:13 . 2011-04-20 05:13 52736 ----a-w- c:\windows\SysWow64\amdpcom32.dll
    2011-04-12 23:23 . 2011-04-12 23:23 258352 ----a-w- c:\windows\SysWow64\unicows.dll
    2011-04-09 06:58 . 2011-05-24 15:14 142336 ----a-w- c:\windows\system32\poqexec.exe
    2011-04-09 06:45 . 2011-05-11 18:07 5509504 ----a-w- c:\windows\system32\ntoskrnl.exe
    2011-04-09 06:13 . 2011-05-11 18:07 3957632 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
    2011-04-09 06:13 . 2011-05-11 18:07 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
    2011-04-09 05:56 . 2011-05-24 15:14 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
    .
    .
    ((((((((((((((((((((((((((((( SnapShot@2011-06-25_03.21.54 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2010-02-03 09:01 . 2011-06-25 03:01 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2010-02-03 09:01 . 2011-06-25 04:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2010-02-03 09:01 . 2011-06-25 03:01 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2010-02-03 09:01 . 2011-06-25 04:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-07-14 02:36 . 2011-06-25 04:47 626844 c:\windows\system32\perfh009.dat
    - 2009-07-14 02:36 . 2011-06-25 03:15 626844 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2011-06-25 04:47 107160 c:\windows\system32\perfc009.dat
    - 2009-07-14 02:36 . 2011-06-25 03:15 107160 c:\windows\system32\perfc009.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Aim"="c:\program files (x86)\AIM\aim.exe" [2011-05-03 4321112]
    "Steam"="c:\program files (x86)\Steam\Steam.exe" [2010-11-19 1242448]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "ccApp"="c:\program files (x86)\Common Files\Symantec Shared\ccApp.exe" [2009-06-24 115560]
    "HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2009-02-17 17798144]
    "WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2010-07-12 74752]
    "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-05 336384]
    "ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
    "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
    "PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2011-06-15 307200]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
    R3 BATTLEP;BATTLEP;c:\program files (x86)\BattlePing\BattleP.exe [2009-12-25 1568768]
    R3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service;c:\program files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
    R3 COH_Mon;COH_Mon;c:\windows\system32\Drivers\COH_Mon.sys [x]
    R3 DisplayLinkUsbPort;DisplayLink USB Device;c:\windows\system32\DRIVERS\DisplayLinkUsbPort_5.2.21746.0.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
    S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-01-05 354304]
    S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-08-17 239648]
    S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
    S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
    S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
    S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
    S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-09 136824]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
    S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [x]
    .
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500Core.job
    - c:\users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-24 02:04]
    .
    2011-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500UA.job
    - c:\users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-24 02:04]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "DLCCCATS"="c:\windows\system32\spool\DRIVERS\x64\3\DLCCtime.dll" [2006-02-24 28672]
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = hxxp://www.startsearcher.com
    mStart Page = hxxp://www.startsearcher.com
    mLocal Page = c:\windows\SysWOW64\blank.htm
    IE: &D&ownload &with BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddLink.htm
    IE: &D&ownload all with BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddAllLink.htm
    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
    LSP: c:\windows\system32\BattleP.dll
    TCP: DhcpNameServer = 192.168.11.1
    FF - ProfilePath - c:\users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\ietlzerp.default\
    FF - prefs.js: browser.startup.homepage - www.yahoo.com
    FF - prefs.js: network.proxy.type - 0
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false
    .
    - - - - ORPHANS REMOVED - - - -
    .
    AddRemove-Xuse ????? - c:\program files\Xuse\?????\Xuse_Inst.exe
    AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}\bm_installer.exe
    AddRemove-????????? - c:\program files (x86)\Guilty\?????????\UNINST.EXE
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Internet Explorer\User Preferences]
    @Denied: (2) (Administrator)
    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,bc,d6,4d,72,5c,90,46,9a,c1,f3,\
    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,bc,d6,4d,72,5c,90,46,9a,c1,f3,\
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3G2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3GP"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3G2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.3GP"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.669\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.669"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.AAC"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADT\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ADTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADTS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ADTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.AIFF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.AIFF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.aiff"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.amf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.ASF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.au"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.AVI"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avr\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.avr"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.B4S\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.caf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.caf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.CDA"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.far\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.far"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FLAC\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.FLAC"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FLV\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.FLV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htk\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.htk"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.iff"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.it\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.it"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.itz"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.KAR\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.KAR"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2T\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.M2TS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2TS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.M2TS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2V\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.M2V"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M3U8\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M4A\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.M4A"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MP4"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mat\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mat"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mdz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mdz"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MID"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MIDI"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MIZ\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MIZ"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MKV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MOD\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mod"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MOV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MP1\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP1"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP3"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MP4\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MP4"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4v\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MP4"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.MPG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.MPEG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mtm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.mtm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MTS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.M2TS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.NSA\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.NSA"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nst\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.nst"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.NSV\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.NSV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.OGG\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.OGG"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.okt\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.okt"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.paf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.paf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PLS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ptm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.ptm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pvf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.pvf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.raw"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rf64\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.rf64"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.RMI"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.s3m\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.s3m"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.s3z\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.s3z"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sd2\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.sd2"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sds\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.sds"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.sf"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.AU"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.stm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.stm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.stz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.stz"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swf\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.SWF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.TTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTS\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.TTS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Applications\\NOTEPAD.EXE"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ult\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.ult"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbs\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Applications\\wscript.exe"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.VLB\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.VLB"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.voc\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.voc"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.w64\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.w64"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wal\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.SkinZip"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.wav"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WAX"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.webm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wlz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.LangZip"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ASF"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.WMA"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WMD"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WMS"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.WMV"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.ASX"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WMZ"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpl\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.PlayList"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wsz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.SkinZip"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wve\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.wve"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="WMP11.AssocFile.WVX"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="ChromeHTML"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xi\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.xi"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xm\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.xm"
    .
    [HKEY_USERS\S-1-5-21-3213172611-107097552-3265808761-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmz\UserChoice]
    @Denied: (2) (Administrator)
    "Progid"="Winamp.File.xmz"
    .
  17. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    No edit.
    Just reply with Combofix results.
    Still no internet?
  18. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    ComboFix LOG 2 Part 2

    //////////////////////
    ComboFix2 Log Part 2
    //////////////////////


    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Common Client\ccService\Channels]
    @Denied: (C D) (Everyone)
    "{5EB21974-BD31-4299-B220-04956AFCADD5}"="{55ABBDCA-CF4D-43FC-86E3-B4938CDF9D4A}"
    "{744C51EC-F222-4B73-9753-94C4FC67AB13}"="{D1D24E8E-B9E8-4F3F-9866-9CA7F87AC112}"
    "{A9C9DC0E-6C77-44F5-8162-140C348650D4}"="{55ABBDCA-CF4D-43FC-86E3-B4938CDF9D4A}"
    "{08297EE5-5E94-4249-8F88-BDBFAADFB82D}"="{0C3D2B91-D8C1-4A92-A205-90017BF83E48}"
    "{D9F3D96B-7AC1-474D-B8D8-FC2967D34D41}"="{0C3D2B91-D8C1-4A92-A205-90017BF83E48}"
    "{4508171B-91D2-4E75-838B-F1A206EB0813}"="{0C3D2B91-D8C1-4A92-A205-90017BF83E48}"
    "{33F59D45-DA80-42A0-9F0D-EA3744FB74BC}"="{05A90C04-3F34-4F8B-93D9-C16FA93A2572}"
    "{7B02DB8B-71DA-4A01-A5B2-6ECF0ECD9893}"="{8653E247-87E7-4659-909C-BD4F70E4D370}"
    "{2211F091-1486-4550-8B9A-A54C2F32841A}"="{FF8F40C7-561B-4935-9C42-2FB333623D69}"
    "{E2907489-525F-4213-AC00-D8440EBE4855}"="{8B7EC4B5-1932-4BC4-9019-9A460230CCEB}"
    "{545C1C63-9E7B-4593-9D5F-F4610A5ECE02}"="{0C1E0FB7-72B8-4DE7-8D54-AB4552143D1D}"
    "{A9F1A853-A6E9-467D-9964-617386D224E9}"="{BA2A5A3A-2F34-4DA1-91AA-7FB3EFD4AD42}"
    "{3FFE1801-375F-4891-8A97-54434021ACF4}"="{161B1D17-B1BF-4DAB-87C4-BDA8B38960BB}"
    "{43DC7920-9FA3-4F18-8255-993BC9D023FE}"="{CB10E746-3C8C-4887-A196-96077CF8C4D4}"
    "{AFE7DB34-5F60-41F8-B79B-FFB9685C71A9}"="{54F04AED-FE15-444C-BC73-D259406A95FC}"
    "{E7DCA3DF-3B47-461C-AF2B-6CA1B39BA52A}"="{D140232A-9986-4856-8C3F-A1EA9333233C}"
    "{9C0B9353-C996-4C0F-A4D8-73E51F9E469F}"="{D4AF0217-E63B-418B-89F6-8047BEC20664}"
    "{0F4CDD1C-E86E-4E4F-BA39-5139995D5345}"="{D4AF0217-E63B-418B-89F6-8047BEC20664}"
    "{A341F4F6-CB55-4821-BFF0-706AF6F61A85}"="{D4AF0217-E63B-418B-89F6-8047BEC20664}"
    "{D7960AF4-168C-497F-823A-C81469FB004B}"="{5A0B0EE9-1739-41B3-A2C4-F6D93F2EAD6B}"
    "{02BD0716-400F-407D-91EF-72B9EF443C33}"="{77203AEB-6992-45FB-B465-CD103B665139}"
    "{153D9D73-6170-4FD2-AFBC-F01C62F6C9FA}"="{DEDAD06E-424C-4BA1-BE24-B39DA447CE85}"
    "{5F6C77DA-983D-4A94-8256-A4D80943BC05}"="{09172FA5-3299-41DA-B303-C924DA938C58}"
    "{06A915AA-6B09-4E30-8844-F40F887C18C8}"="{7F1846FB-EF7F-4573-A236-8B16FE664DB9}"
    "{FD2BEFEC-1B4B-4517-987B-34F228E11E5D}"="{3DCC36C1-7F7B-4B62-AFCA-3FCB0A222097}"
    "{EE27E572-FE6E-48B7-B3A7-B90E1E8591BF}"="{650B25FD-35B3-451D-B918-936996316E1C}"
    "{21F1E8F3-26E1-4181-9A3C-6AC0740216DC}"="{DE822FE7-DFDB-4CFA-BFC2-3E9D8EE126C8}"
    "{6B55074D-618C-4E41-9D42-2444238340C6}"="{BD37A3E2-3778-4B8E-9BB9-B329E0C31E0E}"
    "{A15C6EEC-C9BC-4C44-85BD-F110EF32433B}"="{12E55219-B21F-47FF-9204-F6312266837E}"
    "{382D816C-88BC-4E65-A331-94166E0C04FE}"="{527383E2-9F60-44A1-89AA-AD4E98805FEB}"
    "{A414D8EA-A2C2-4695-BEFB-12734638A1E2}"="{19301E58-CBC7-4A6D-A45D-C9BC8CD8328D}"
    "{3CF61695-C76A-458D-80D9-F79D44C8F70F}"="{7627FA60-C3D8-497D-8851-99B8A76CCF40}"
    "{A14DBF65-421F-4697-B4E2-B30C5C1CFC0C}"="{29D357CC-46B3-4567-9E0E-52A89D914189}"
    "{840D8F94-5953-46C8-9334-86A3F11FDB2E}"="{0D558BC2-AF4B-4F40-AE7B-B54C0485BCA6}"
    "{D1878F09-0B35-480C-88F2-0FE134F5AD7C}"="{BAD569E0-76AA-46E6-94BF-323FC5EA13CB}"
    "{99ABD933-E152-4F1E-942C-0560328677BF}"="{F8B5BC95-18AE-4DA6-B86D-D04A5AF1A066}"
    "{C2548626-A39A-4C5C-A5C7-7C205E97DC5B}"="{7F686B9B-A4D6-429D-BB04-AA2756E7D3D5}"
    "{70C7DC6B-46B5-4F3C-AEF8-1686F2495BD3}"="{7F686B9B-A4D6-429D-BB04-AA2756E7D3D5}"
    "{B0860B49-00FB-4E5C-B55F-8FEF9A9FA580}"="{904E7568-44C7-47C6-A373-891717E6B869}"
    "{D8BD9F19-9530-4A4E-9B9E-1ED1D452F690}"="{1AA011FD-C33B-41AC-9D48-45A9F55E8522}"
    "{2BA2DB24-43AB-4640-A6B8-359EE538D297}"="{1AA011FD-C33B-41AC-9D48-45A9F55E8522}"
    "{904812B9-892F-48D1-B854-D01FFBF7EDDB}"="{1AA011FD-C33B-41AC-9D48-45A9F55E8522}"
    "{2687CE02-24D8-4BA4-AE27-79BAA69EF701}"="{7ED2DB77-EA04-4B6D-A99F-15D87EFDF921}"
    "{3667FFD0-EE3D-4304-8AB9-489A631CC92C}"="{3A8033BB-D784-4BC7-934A-E9F85169ECF2}"
    "{245B7828-94EC-4657-B400-3E9E5928090B}"="{9394D44F-BA2B-4593-BC2A-6C222F9D6CF5}"
    "{CDD4A1A6-A9DA-4243-B3B7-A083191A60D2}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{868AEA16-4248-44E3-BE87-D8CF66B3E582}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{96045BC1-7FFF-4867-85D9-3D08C41404B2}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{36BDDBFC-5871-40E2-B05F-B0B800FA53AA}"="{E382B0F8-398C-42CE-A690-AB4634AB0081}"
    "{45C9CB16-BEE9-43CF-930A-F86F2FF06DEE}"="{0D2519C3-45DE-4542-87BA-CAD9BA8848AD}"
    "{4F08FF78-BB4B-45F1-8124-B4654463E584}"="{B020489D-0F9A-4CFF-AD28-3EBEF67055AF}"
    "{671737B7-AFC3-41DB-866F-FDF4F751183C}"="{A6A9C0C8-26BB-48E6-9912-6FA61A7215DE}"
    "{1522A513-79F7-40FE-913A-106CE792A362}"="{B7339BD5-DF4F-4A94-BC98-3CFC938C188F}"
    "{C2E3FC2B-56A1-4BE7-904C-8953AAD693A3}"="{4F676E7F-4912-457E-B838-66BEFD91870A}"
    "{E5916F2A-CA05-4B87-BA97-1496BAC3B2C0}"="{4F676E7F-4912-457E-B838-66BEFD91870A}"
    "{A103C6EC-2A67-4108-A8D3-2B6557BF6696}"="{4F676E7F-4912-457E-B838-66BEFD91870A}"
    "{CFB21088-FD99-4AF8-8089-5AEF4CDC63A3}"="{864B9C27-010C-407E-8D55-0084B5876665}"
    "{95748C40-C750-4203-8524-9994563437F3}"="{2010F731-853A-496A-8C42-5DDF7DF85D1B}"
    "{CF8B7F0A-DB70-4571-9E02-5FF255870531}"="{0E31941B-A348-4773-874E-DB2B5A1D100D}"
    "{7FEEFCB0-0CC8-4695-A8B7-BB1AB3233393}"="{08FC0A19-C99F-46E3-B640-8C7B48A71184}"
    "{9CC2C117-811D-4244-818B-F2E9CAE43B59}"="{4795AC6C-8380-4489-B848-EA4E60353D03}"
    "{0C273A0D-765F-4401-B4C0-1757C97BE768}"="{A0B51A48-82EA-418C-854D-20EFB72B9B8A}"
    "{5170D007-A9EA-4721-B3FB-FC8CC760CE49}"="{712D7692-CC94-46D8-B488-B2C9EDFFBF00}"
    "{3B3E1A96-76BA-4F73-8EC5-DCE5B766B614}"="{712D7692-CC94-46D8-B488-B2C9EDFFBF00}"
    "{CDC4615E-6C96-4259-8FB9-B9026897265B}"="{712D7692-CC94-46D8-B488-B2C9EDFFBF00}"
    "{8B938AD5-20F0-41B2-A51E-1474B3647E08}"="{D24DF994-908C-493F-8A2D-7E186A204DA4}"
    "{8E895CE5-40BB-4A56-8560-96CFD067DCD6}"="{8715563A-DA1F-4C22-956E-693EAEECD623}"
    "{A2DDFAA2-37A2-4782-ABAA-C9246A83A35D}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{42E904BD-F548-4C37-A790-8F58D8E7EC37}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{4B455F26-CD85-49A9-80F8-D8901E11221C}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{F263689C-7A1D-4E64-A9A3-2E322B84E63C}"="{82DEF56B-1D69-4576-8D85-022C04D4CC57}"
    "{6B507C66-A24D-4992-B6C2-DF348012C4FE}"="{137C854E-B013-4E37-B2A1-AB9BFACF979C}"
    "{CC7B9F22-701A-4B79-9068-644E1AE01CAC}"="{82E90A03-A52E-442B-8AC7-9A79701CD77B}"
    "{98E90EEE-2D6E-4198-A1DE-CF7FF0C9AF8B}"="{7519AC85-74B4-49AA-9E7C-935FD00098B7}"
    "{1F497241-6728-4B94-BBF7-3A27A764FB36}"="{6C3EAEBB-83C1-4690-8469-A94540A2DDEA}"
    "{344196DD-44D5-4EDF-9E5E-26DC33A651C2}"="{6C3EAEBB-83C1-4690-8469-A94540A2DDEA}"
    "{C9388C68-E31F-4C78-82A6-3AEFA375769D}"="{40AEA6F8-8363-4D22-86E1-1515DDB1E637}"
    "{6CEFA565-52AC-4607-A367-B63899708C12}"="{1A44D81D-8C5E-4ACA-B085-05964B81130A}"
    "{2008173F-7A13-4B7F-9020-24E800108084}"="{47BBB87D-D2B0-4A4C-B508-10D7C3728595}"
    "{92BA8873-83B5-49D5-89D2-626F7FD25679}"="{8ADAA8AD-6FCF-4449-B3A0-3ABBD6761819}"
    "{5BF9DA0A-0608-4847-9CB2-2C0AB5B0D274}"="{122AC196-C53A-4A29-A891-7C4889E55553}"
    "{BEF7A9E5-7C7D-4382-B3A6-7C3A8B6E8435}"="{689B3F52-AB4C-4ADF-9035-68CAD60E9D4D}"
    "{A7FBD34E-1AF1-4D57-A8C5-5FB0B197CC61}"="{CE15B1B7-5921-4B44-811A-96B5569DDAA5}"
    "{7611B934-258D-4B52-93D5-A857036A8E7E}"="{14954578-A240-4DD0-8CAA-5C3895C10606}"
    "{B4D10713-FF4A-4A91-85C5-E32EFEB3322E}"="{C614F33B-E95C-4645-97A4-F98F6F3BCF44}"
    "{4D09156B-82D4-4AAF-9F84-B1D7CC54319C}"="{38F16B94-300B-4D45-9061-BDCB80F2244C}"
    "{8DB85689-FDDC-4E95-8FCE-4B99ABB0816E}"="{8A67F5D7-FD61-4647-937F-984801F41A13}"
    "{748AFCF4-56BF-4303-A3C5-9697C488A9B1}"="{E3DF0339-BA2A-4901-9704-C294B07FD316}"
    "{CDA01207-AFF2-4224-AE58-52E000CE7B6A}"="{E3DF0339-BA2A-4901-9704-C294B07FD316}"
    "{DF70F7A7-4FE4-4E1A-A512-7FC888EF3EDA}"="{41CFC676-2264-4104-8217-8D2BDC67B778}"
    "{B84CEA78-15BF-48A3-BFD1-A97EC0C3E0E0}"="{7D89411E-33E9-4EBA-A12A-E0FC701F3CA3}"
    "{0B894F55-89EE-4773-BC8A-7694382B1B33}"="{7D89411E-33E9-4EBA-A12A-E0FC701F3CA3}"
    "{2BCFC112-57D3-4A3C-B036-7023F002AE77}"="{7D89411E-33E9-4EBA-A12A-E0FC701F3CA3}"
    "{FD7E28A2-86E0-4F8A-839B-465C5069A8D4}"="{E77BF470-12F9-4515-A210-961A9020BBA8}"
    "{D7F05C10-7114-4EB8-AE7D-C929210F2529}"="{EDFFD2AE-166A-4C4E-83FB-F377D3E3690F}"
    "{3A5657C3-8D90-43EF-8B3D-8CF8D601F587}"="{CE72A70F-78EC-4E1E-A620-5CD0CE66E4EB}"
    "{00869AAB-1955-4B19-A426-6FF54DA4AA08}"="{52162211-1E7C-448E-B2DA-A7E100083192}"
    "{DAA17E6A-D8C0-4A9D-AAD0-A25EEE740451}"="{078C9A92-FEA2-4115-BC1D-72C9BF985C3C}"
    "{683CEBE9-5B6D-435D-8CCB-2FA6E5473D50}"="{E1C58FB8-F5D4-4D74-9CF4-5507C9251AB2}"
    "{6970DB92-B2B8-4A9D-B943-DF0F05B5738F}"="{E1C58FB8-F5D4-4D74-9CF4-5507C9251AB2}"
    "{6C4C26CF-087D-4713-90B4-CE29A57EF9B9}"="{CA7EFB3D-430F-4E5E-BAB8-AD8F0FEE930F}"
    "{3A9B95C7-15B7-4ACA-BECC-500832B4410D}"="{79168EC4-DCB7-4021-B8C6-8F85B811791B}"
    "{2D7063E5-BD11-4B0A-93B7-76FABCA9959C}"="{33638A0F-F191-41D6-B867-0D0A141A6260}"
    "{9A874D7C-335D-430D-834E-9798A0827A9B}"="{2D14D758-2987-4793-A7BB-D106696EF785}"
    "{370EF4F3-8176-4821-B21D-4A712E1E96B9}"="{2D14D758-2987-4793-A7BB-D106696EF785}"
    "{ACEC9C81-BD2E-444E-8528-29B8CAD78B98}"="{C75AF5DE-5398-4C56-A10A-8056A380EF17}"
    "{BC120D0C-C7D9-4B7C-A59D-2661E9C1CBCC}"="{2D14D758-2987-4793-A7BB-D106696EF785}"
    "{853A21A1-17F1-4A16-9861-3CFEB4B6AA4E}"="{CA6E58FF-823C-4629-89DA-00904839A2B5}"
    "{048EDB22-70F4-4831-97B1-1DDC6240D3FA}"="{C1F64D01-10D0-4CC3-A5E1-2DE973D51088}"
    "{EEF8BC5E-98C7-41C4-93EE-4E8D289FCF9C}"="{C1F64D01-10D0-4CC3-A5E1-2DE973D51088}"
    "{F6DE35FC-3B09-4419-9316-1026D45D184D}"="{169DDA8F-61C3-4A21-8746-20EBED4367ED}"
    "{7005D8C8-0742-4B50-A312-4C7AFD709FC5}"="{C1F64D01-10D0-4CC3-A5E1-2DE973D51088}"
    "{BE2C8AD6-F70C-4758-A3BB-AD336435A098}"="{49242E76-E2E6-4206-AA9D-0A1DDB10A53C}"
    "{2BDEAF99-C0CA-41EA-AE18-5C88FB5E41D9}"="{FF859B7E-EBD9-4E4B-8339-1E807B1F531B}"
    "{104DA529-85D1-41E7-B24D-5011A949F173}"="{FF859B7E-EBD9-4E4B-8339-1E807B1F531B}"
    "{7AD0E556-1E10-4993-9284-9B25387A4E0A}"="{D905EE11-E9B2-4537-872B-0F02831FE1E0}"
    "{AF158CD2-41CA-4519-8C9D-379461A20F1F}"="{847ADEE7-DA81-474F-8DC4-41F430BC302E}"
    "{F40D3D1E-1D78-4764-8758-A4D0D776CA33}"="{847ADEE7-DA81-474F-8DC4-41F430BC302E}"
    "{01213862-EBE9-4535-8135-646E438BA357}"="{847ADEE7-DA81-474F-8DC4-41F430BC302E}"
    "{C685DA2A-396F-4A06-8DF1-6D0753E7815B}"="{B2BEB123-FC40-46FD-BEB8-992F566315E4}"
    "{77E13497-8D00-4ABA-AA4E-C7684F3C217C}"="{86154E3C-96F5-4BD6-9A5A-88E7C3AE29D1}"
    "{EA7625FF-8681-412E-A38D-5114EA27FA14}"="{B9857E54-F7D5-465B-B4B3-066747ACE29F}"
    "{537CB0C8-14B0-42B8-B3AF-D5237BC3A4CF}"="{3E14BABD-6D12-4B49-8537-38B3EF914B47}"
    "{E30DFF7C-9CF8-4CAE-9D1F-998BEFA2604F}"="{0AB21E22-D214-40D5-B13B-1B1AC2B7BCAA}"
    "{994E54C2-1637-4A4A-AB0C-791198D2347B}"="{EB4E99C2-0DF8-46D8-AA4E-13024F0F7CFF}"
    "{3AC57293-3A20-496F-8122-D90FEE7836F5}"="{E8C6F264-CD77-4967-859C-BC717F9F2682}"
    "{65120356-2D54-4276-8BD0-2CEF08668F1C}"="{E8C6F264-CD77-4967-859C-BC717F9F2682}"
    "{C8CFFD0D-0851-47A0-8387-99E908E7D1EA}"="{4C1D9910-801F-4B3A-80BB-58A5F776955C}"
    "{8136F5EE-B4D3-4A2A-92AA-8777A5EBD28F}"="{32B17DA5-0E75-4D53-AC4C-4D2D73DADA9E}"
    "{5CF7DA36-BB34-4827-8E54-28CCA8FF66F7}"="{CC0A2113-51CA-4BD5-8DFC-38A0BA282EBE}"
    "{186F3B53-9254-4156-8D03-6A7A7C6EBAD3}"="{001AA5DA-A4F3-4787-8EE3-59B19DFF5687}"
    "{0E128F65-65F7-41AA-94DE-BED4F85EBE09}"="{102ED26D-527C-40CA-9B24-574F105165B2}"
    "{5D55648A-D73C-4600-86FA-ACCABAC74DD2}"="{FD8E8D69-A21A-4AC1-BBDD-EEC7586808EF}"
    "{1B8BDA77-08FA-4164-B459-5AC6370C6390}"="{BE83CB62-4C1E-4DA1-9B77-9C3675B275B9}"
    "{424F37F5-6A75-4621-AAF4-EB3798F0CC67}"="{9B2FDC9A-9146-452C-95F3-9E67F756FBD9}"
    "{636A02DB-85B7-492F-AB10-6BA9D29942BC}"="{B60C3078-2389-491A-8BA9-AB89E09A352F}"
    "{5D82EF13-628A-42F1-885C-FF0DEB4D40E6}"="{D335743B-2E4F-45DC-B325-980ECAD68F5A}"
    "{9B7D11B9-0DC3-40CF-B989-B1D9D48F5F44}"="{898BBC7D-5452-4D7F-865A-86A875D65C3C}"
    "{722272AC-D1FD-48CA-812B-67060E719F56}"="{170DA129-1AE9-462D-8E2B-01318C2C4F15}"
    "{5A542AF7-C310-4A37-AC88-F1B101D85C34}"="{0C63418C-4D6D-4A2E-878F-291556E92BFB}"
    "{A9D87CE2-BE10-4900-8127-97595E2FF96F}"="{CF682105-7229-4056-8917-8546EC1CC247}"
    "{92D0F44E-7F76-4393-A0C7-B853CCB477B9}"="{D0169151-B61E-4820-97B4-6507BE79E8F6}"
    "{CAD09480-8116-4A48-A9D1-4CB9EDDF4A13}"="{069120A6-5BD5-485C-9A4F-25AC504829CD}"
    "{D24D0731-74D9-4AAE-BFAB-BE573587BDB6}"="{55B219F5-3B72-4975-86BF-6FEFD8A7D4F8}"
    "{896F2790-E8F6-4438-AA69-1BF2AC38F65F}"="{D85F5E16-E359-4A86-8925-D751AA662B10}"
    "{C2EF9078-B158-47DE-9623-3DC20E3FFB6D}"="{767C864B-E1D0-43C3-9A07-D453F9C823B6}"
    "{FEC5F57E-13AB-4F27-9002-EAADAF65CD6F}"="{4768C96A-BFE5-4E66-A44F-7AF05B2CDC6E}"
    "{8EFA208B-AD13-4D7A-81CE-0405D7DFB200}"="{B7EDCFC1-303E-4398-BC08-01B9154BBE3F}"
    "{D5D893DE-C68F-446A-93FD-3CEBBDC5E336}"="{3B63D2CF-5FE6-4767-BB15-0728A7416270}"
    "{D564E4CA-BC7E-412B-8664-E2AC5025276F}"="{91BCF486-0100-41EC-BEA2-31BFBECA5169}"
    "{5C2950EF-6B17-4AC5-84DB-E4470039FE12}"="{3C7BD662-FF34-4B3F-99C0-6B323CDD136F}"
    "{DCEAF446-0304-47C7-B38E-0E26D2A1D9DA}"="{2334F828-53D2-4086-AB95-DBA610399FF2}"
    "{BB26C9B5-9CC8-4BD3-8508-DD340C9B5885}"="{778AC5DD-B80E-43BE-8F22-D16830E6D306}"
    "{8387DA6D-ED58-44A2-8A4E-00FCEBECE225}"="{E15EB805-CA75-4088-B963-527C58FD6EA6}"
    "{D5C196C9-370D-470C-AA86-F8C6A2A859DB}"="{D138C831-B8A2-451B-AA8C-34219F98379F}"
    "{44C8A260-EAC0-4354-B1EF-69F10BDCB2DF}"="{CC2D453C-FA70-4C7A-B42D-2899FA12F525}"
    "{6EA27CBA-949C-4D19-A70E-4B77C1809629}"="{75F816E5-0B12-49CF-A456-1F2E5D04DFAD}"
    "{F84704C2-2448-45D1-B7F1-3A6032DFC9DC}"="{3F37ECBF-3685-4772-BB35-98BB81B33BEE}"
    "{7FE4FCD8-CC75-4E7D-A9B3-4780654FFAAE}"="{2E81969C-3F36-47E4-91B0-18FA28C5D72A}"
    "{DC090BFC-C8F8-47CE-B540-609030B46CE1}"="{9BBAFD60-28CA-45B4-AEF7-27DEF8F8E495}"
    "{9AA3DBA4-6BB3-4E75-90A5-DA2FA04C10C6}"="{39C6882A-E40C-4BB9-BE2A-6C74702E8EFD}"
    "{E1E12608-883A-483B-B93F-B5C05BABD795}"="{523D5577-3378-4AC8-8DE2-B8BA2F5630D8}"
    "{8B9140CF-EF79-4ED7-9229-3DCEEE1206AC}"="{0140621F-3F0E-4808-AFCD-E30671C47CBC}"
    "{099088D9-79EA-4AE5-96B0-F560D1C74713}"="{7709CE7B-CEC0-4246-8E84-FF31CF58EB67}"
    "{12F9E83B-6830-49F3-ADEA-BF61815938BA}"="{07B9DE1A-8565-4DE8-9B04-613173740A2D}"
    "{9B8E90AB-FDE1-4D6C-8F7D-310B1440F47E}"="{9A9B4718-ED11-44E6-8B90-6A0BD460D1CF}"
    "{A9D94B89-5F8B-46A4-BEBF-7FD00B283A6A}"="{9A9B4718-ED11-44E6-8B90-6A0BD460D1CF}"
    "{3A70290D-3518-4014-8237-C835A44A64C6}"="{E236ABDB-0E40-4CAC-8016-3744DA2C0CE2}"
    "{77909F7B-A56A-4319-ABD9-70064FE937B7}"="{9A9B4718-ED11-44E6-8B90-6A0BD460D1CF}"
    "{62FD0EF1-000E-4AA8-91F7-7540C4C614C2}"="{58DABEE6-B81A-4F72-81EA-AE6F82C53F07}"
    "{B7DD6E51-B2A7-436B-A5F2-1908B0CE8006}"="{084E7665-4773-4B5D-89BA-54361483E048}"
    "{D11019D5-96E8-4268-A685-51A5671698A7}"="{F7BFE683-70EE-431C-B7D9-851F069FCA97}"
    "{6038A140-D60F-4613-B8E4-7EC0FA770207}"="{F7BFE683-70EE-431C-B7D9-851F069FCA97}"
    "{1418789B-5E4A-4326-A7C1-40DE89E4BE92}"="{F7BFE683-70EE-431C-B7D9-851F069FCA97}"
    "{D2229581-083B-4244-AC53-8EDE65E7265A}"="{9155889F-C162-4DBE-85C7-38D54A837F69}"
    "{804210B2-1C6C-4738-9302-C129222CF622}"="{10F9CA7D-3432-41A1-AAF2-38B2B41F5D4C}"
    "{9A6A4AC7-BF69-497E-85D4-B70BF51BC5D9}"="{72C21623-4B37-403C-9A4E-54DC715B281A}"
    "{89B1A352-7A90-4537-B1D3-6A5D038FE672}"="{4D0B4E62-7290-4686-9CB5-75564A6B3267}"
    "{EF15DED2-BE32-45B3-889D-E5C5B8FAF92B}"="{2140CC40-3C35-4988-AACF-B71D1B1EA631}"
    "{5D50C6CB-E31B-4105-A7BF-427F6ED0298E}"="{BA1A6129-D687-405D-A630-AE64D4B1C64A}"
    "{3174F7F9-BF17-465C-8819-B97E73F60525}"="{D7497F7A-317A-435E-8847-702CED81FF55}"
    "{5C2B96E8-E56E-4A1C-9A44-350BBC65A522}"="{35664E10-191B-4EBC-8F6E-584FB2D4E901}"
    "{AC385FF2-BCCB-4E6C-AF86-ECD53F64D9F3}"="{95DB291F-6091-4A10-8443-49AC10A58392}"
    "{731A2C6E-6747-4369-B029-D9F4FEB9021D}"="{EB736682-5B02-479D-A753-E68AABB73807}"
    "{A1015EFC-1E8F-4C10-B395-7B3840DB4BCA}"="{3B123272-8BF5-45B3-B8FE-0A07D5BADCB3}"
    "{28279B68-855D-4A25-BCAA-2FEC01115089}"="{F676CD72-227A-4C6D-ACA7-68BEC0A6F743}"
    "{CA0A61F8-2C52-40B7-AF0C-DAB19F10C6C7}"="{181D3CEB-D217-4ED1-BA03-AC0B6232D859}"
    "{A8EDA804-EF37-472E-AA91-69544CF3A065}"="{2734497F-5662-4C1F-A0C3-500371C2266C}"
    "{68920BDE-B203-4AA7-AE65-876614AEB826}"="{2734497F-5662-4C1F-A0C3-500371C2266C}"
    "{6C9F0A73-5FA3-4975-A8A2-AA31F572249C}"="{0C93F6D6-A2EE-4B80-8BAF-DB92B7C02544}"
    "{D40619D1-669F-44ED-8A87-9B2A7C7B9526}"="{2734497F-5662-4C1F-A0C3-500371C2266C}"
    "{AF9D97A9-79D7-4D3A-B201-B14A551A4BD1}"="{BB6F3534-3F71-49EF-94A8-31CCC56E457A}"
    "{EA9A9FAF-3A1F-4A94-9669-04B09E20DBDD}"="{BB6F3534-3F71-49EF-94A8-31CCC56E457A}"
    "{B47DB645-889F-43F5-B10C-BE6ADA2FFAB6}"="{BB6F3534-3F71-49EF-94A8-31CCC56E457A}"
    "{48B310AC-BCCF-4566-B4D7-328BAF173EC1}"="{28265AD9-B5CB-4A26-B86A-97CB1277CBDE}"
    "{B1FD8A1C-6D2B-4BE4-A284-B5710C80A443}"="{0AE54CAA-0DE4-42C7-94C7-053E924C4220}"
    "{49C6448D-456A-4326-BA90-8722E2680C13}"="{30AC2B64-5BDD-4672-B331-69C911380E58}"
    "{82A61CCC-6EAF-4B7E-B2DA-F0680774D269}"="{30AC2B64-5BDD-4672-B331-69C911380E58}"
    "{4F8DDDCE-61ED-4E11-9FB7-EB03F1912517}"="{5F859511-4682-428E-AE3C-055D3CD7D946}"
    "{164E460E-4A5D-477F-9849-DD145CCC4973}"="{3C98CD04-DA16-46B9-A77D-CF09D4507C73}"
    "{64BB072C-0AB2-4ED1-8C10-38BFFEA28738}"="{20DF0616-AECE-4FE5-8B78-07AB663D5E5D}"
    "{3DBA6B9F-B906-4162-83B9-7C2245424EE6}"="{E987930B-D332-40A4-AC73-63F3F21EE264}"
    "{DADE9EC6-DC69-4A56-88A0-F2F5552FE606}"="{351CEDB2-3444-4D97-9E68-8EAB0A8ED3CD}"
    "{CCDC1DAB-07D2-4880-B4FE-C144C765CE77}"="{53469DDC-F611-47B9-BF58-561986DFD95E}"
    "{2EEB4BDA-16F4-4F34-926B-144A8F7B731C}"="{590F06AF-CC53-4FDE-B493-18B109444DA1}"
    "{0DB6E09C-7868-4E42-AB66-089B41DA8209}"="{F9F92E2D-58B4-4472-8324-137DAF00EDC1}"
    "{18FFC85E-5063-4CD0-A768-A64A27B2C9DD}"="{E7EE9149-7D8C-4160-94F9-F8E0E4AFA4FF}"
    "{97C724F5-0D83-4382-A6C0-CB5F00A3BF38}"="{40593A46-FE8F-4721-92B8-BD071F4626AC}"
    "{9D3E2D24-ED9C-45F0-B854-3A92AA518353}"="{557D6677-DF6D-40D3-9479-CF0C5F15B98C}"
    "{B8CB5450-104A-48D7-944A-D1AEB550395C}"="{8DB5951C-80FA-4DC8-9984-971FD935A990}"
    "{CA3EF8DE-92BE-4FB6-833A-5AF520173B67}"="{448FAEE3-2A1F-45FA-8967-EA6179FBC39D}"
    "{651E0D43-6133-4F5F-8B1F-9BEE0E5DACB0}"="{602D0C5F-9E0C-486F-89FD-0AD1CFA4B29A}"
    "{E2529FE3-D0C3-4FBD-B881-73DC69DB5E5C}"="{08DD8F6B-9380-4B2F-8CA3-1FA5525E992C}"
    "{155BA0D6-EFAD-4FEE-8B62-28EA8600EA6F}"="{EBE0870F-39EF-459D-B7B8-0FFFFC329CF3}"
    "{188DACA8-E075-4C96-9C1F-52D03CB71BCB}"="{20024AF0-50B7-46E6-AF4D-24E838ED635D}"
    "{4BC94A9B-3DA5-4AE3-9937-A458CF648D16}"="{E50E3203-32DB-4B2A-A1B5-AD8FA0EFC34C}"
    "{55065624-9EB0-40FF-8DD6-44E760BE5B13}"="{6F11B743-B4EA-47F8-AD62-2F19A00A49D7}"
    "{34D87102-7C00-4C76-B032-316BE56D2EFB}"="{D5461C0E-1BC5-4655-8F4C-4D6D50B641D0}"
    "{A86B83EB-89C4-4195-B79A-3755F41EBB7A}"="{6740A2E1-EC54-4052-9606-4D967DFFFDF1}"
    "{B4DCBDAD-FC73-4FCF-9779-2CE0160A4765}"="{DE11E07F-3D73-4969-9178-A2FBD47445F7}"
    "{93306EAC-5BE7-43B8-B81A-2A7A252A503F}"="{99CE4A2A-501B-4483-8084-6FBC548F3153}"
    "{31B3131F-8AD9-4479-85AF-B9903A185AD6}"="{42D3BBA7-800F-471F-9E6F-965DCFBC6EB4}"
    "{5781564B-0509-4D12-8E58-8063ED66D319}"="{BCF27F2B-7577-4D13-A214-BB3D4AA6975D}"
    "{232FBE10-7FF2-475C-8AE3-81DB60512303}"="{9C7FA736-74BA-4B5E-BA10-1011E8CE6476}"
    "{5956BD62-DE46-41E1-A76E-9C2A58B3EB19}"="{BC1ECAD8-B9A1-4299-8A03-135D2410B905}"
    "{9ACC6923-F205-443D-85DD-5D1F6F78D20D}"="{253B6E6B-F5EF-4AC7-A829-1BADF7FEA9E6}"
    "{3AC9E752-E59A-43B4-9E12-D0023D1698F4}"="{7BB374A0-9BA9-44B3-ABF5-76A30221657D}"
    "{8D221939-0409-4FF5-AECA-9E0FEFDA5959}"="{CA5F187E-E335-473C-B850-BCE0B84FA58B}"
    "{B6EF5BBE-BA3E-40F3-A271-5E2514EC4FA6}"="{CDCD750B-4310-42FF-9488-279674F15CEF}"
    "{693C225E-9CDD-4E1F-8A83-A34F7798A245}"="{E1C9A1A8-ABBD-44A2-8EC1-ABA9A1A8E89E}"
    "{9EC9CC61-8B32-4119-B438-A8136EAC863C}"="{F271BB6A-F513-4C4B-A47C-A5BAFF18845B}"
    "{5D984350-8A20-4D06-8EEE-89F57F63F4B8}"="{4DB30515-FE91-484E-B62D-5CFC870425FF}"
    "{BDEB475F-1873-4188-AEF6-3071AF6C2D3E}"="{A7F5CDF3-9771-47EB-9158-4D161C53F62F}"
    "{74D148D9-B817-4556-ABCF-812F9541F75D}"="{20886920-6D41-4150-8B87-B8D3BFDFF0B8}"
    "{4378B02D-873C-4894-A58C-1CE9FE053C31}"="{7CAE42ED-1B3E-479D-9615-32887254B40D}"
    "{884569B1-C084-423E-BA80-0BA4A2D338CD}"="{F8B4FC92-7A38-41A3-A058-8EFB87EA9C49}"
    "{678726B8-2C31-4C24-9378-25336E05FD66}"="{0E5C9636-E3F5-4B90-8A06-F8B47C6FAC08}"
    "{CE498363-3E39-4F34-94F9-7543A3C84A33}"="{0E5C9636-E3F5-4B90-8A06-F8B47C6FAC08}"
    "{8D29606A-8B30-4465-822E-70D88D58ACDE}"="{F768AEF3-3F02-40D8-9BE7-951B34AC8B02}"
    "{6D75E441-174D-42D6-A81F-D0C4317A350E}"="{DAEC5F13-668E-42BD-8956-F952771D7147}"
    "{9C444249-59D4-4F34-96A7-333886EE13E2}"="{56B285EC-65BF-47CD-844E-176002BDAA2C}"
    "{C7528843-A016-475D-BF59-3941CDC8C8BD}"="{0547D627-156D-49C1-85BD-501CDB28B0EB}"
    "{64AE4804-C521-4D9D-A1F8-1D9B0196ADB1}"="{E391F307-6DB5-4066-8955-4BB6413D8BBB}"
    "{B1A0E6A7-247F-4EE8-89BD-95CDE8C77F3F}"="{C554604F-A57F-45B8-8EA0-EC84F601DE01}"
    "{AD93D01D-B257-4839-ADBE-F77A81056F16}"="{FB9FB6B5-4ED2-4D03-BC6C-AD9129900E2D}"
    "{85254D52-36E7-40DE-A78B-276F6482662C}"="{15242B1D-F358-46B1-B2CC-46914622C59F}"
    "{29F2946D-C709-4B49-8706-FA9CCD3A9A27}"="{C757C079-7F97-4EAF-868B-C577E3234E2C}"
    "{F0FEC015-5EB4-4F73-8D8F-E6E17EF9D9A7}"="{B8FD5262-5152-497D-8C45-9C7C8364293A}"
    "{D4328E9B-B826-4A94-A498-791C7AF90F6D}"="{206A890F-77BB-4C12-880C-1C3D30E1FC55}"
    "{AFF0925A-BFEA-4F8F-B40F-DC62E1D16F12}"="{308920C5-AE8D-4CDF-B12A-251E6653EF23}"
    "{77B61FB6-4CF7-49E5-BE0F-F9AC78BBAFF5}"="{0D8F30DE-7516-4841-9B1B-748EE8E5A02E}"
    "{ACDEEF18-BE57-4F39-BB1B-FA9EBAD92621}"="{8943D534-431E-44A3-A799-C95341EFBE86}"
    "{09F09EE0-C444-4201-9244-18080D48B477}"="{8943D534-431E-44A3-A799-C95341EFBE86}"
    "{9EB77BB6-4AEF-4ED6-946B-05766C0EA434}"="{1981CFFF-A597-4EB5-A273-73F713FC8213}"
    "{35697A43-27D3-4C03-B148-910A74C860C7}"="{D3ACE51F-B549-4DAA-B957-3D55BA4DA532}"
    "{23F741D4-31C5-4FEE-BBB3-CBE96B4B0A90}"="{A15C9600-CBD4-4875-92B7-1623548F4FC6}"
    "{06140025-A07C-4EEA-806E-D9140D1F4067}"="{13B0D3EA-F841-4178-B819-AB53E9BE1DD1}"
    "{484752F8-9E09-42EE-8433-B1330D5F67CE}"="{54EAEF88-ABF7-499D-B657-4EC4E5188268}"
    "{9F1780B8-B6C9-4A50-8EB9-5D6D8B2009C0}"="{4BB792F5-D44E-4FFA-AFA6-DEB5C14367C1}"
    "{3659F068-D6F9-4AFE-87D7-C60B37D8CCA1}"="{CBD237F7-9B0D-423C-A521-F2305D08C343}"
    "{F72AC446-D42D-406B-BEB2-9EA29BD3E6BA}"="{FDF23654-6850-4177-A79F-29F3383D5B5B}"
    "{9C44D4C2-69BE-45E9-84AD-27B0094B8A41}"="{FDF23654-6850-4177-A79F-29F3383D5B5B}"
    "{9F07C024-5D82-4E8C-B20B-876396FA48CF}"="{25456777-EFF3-44B4-B341-65192B81C2CE}"
    "{9C8F829C-D834-4DF3-9CA0-FE5A98EA12DD}"="{FDF23654-6850-4177-A79F-29F3383D5B5B}"
    "{9158313F-4D87-4014-AB6D-4C60BCAA1A55}"="{63E73359-A019-4B99-AA4C-90763749D018}"
    "{96CB8A05-8748-4AAA-8B38-A855BF710567}"="{BA9CA23F-208A-49A5-820A-004688FF534E}"
    "{BE11415B-B34B-4616-8382-73E01D3817A1}"="{82562CAA-C065-43FB-93AC-99DE2F5F936D}"
    "{DC6E89AB-3424-4EFE-A7A9-EBE837D7F742}"="{9B037015-D500-48D7-ADBC-8E60F1FBC699}"
    "{77CF70CD-769F-413C-A9DC-EB128B5828E8}"="{69A6F8D0-6FA3-4561-AFC5-D4933900E712}"
    "{32778D17-759D-4143-9B62-7B5001FCD382}"="{A4E7F2A2-50ED-42AD-9C19-74B0835178BF}"
    "{19066123-B4E5-412C-8438-04230715A0D9}"="{4E88F45B-B868-401B-88FE-66F7163C8D71}"
    "{26D1A2A0-59DC-44ED-BB21-0B3EFD9BBF4F}"="{4E88F45B-B868-401B-88FE-66F7163C8D71}"
    "{B5E399B5-1E20-4C9F-807F-E38EFC975B7D}"="{0E69406E-93D5-4BB7-8134-D3A9432311CC}"
    "{C51557F3-A62B-4B33-807B-0DC463573A81}"="{4E88F45B-B868-401B-88FE-66F7163C8D71}"
    "{23A930A6-34E4-423F-BA18-A56767047AF5}"="{C32227C6-8582-4945-98F4-AF40B81FCEBF}"
    "{9111A05F-1F3E-4F09-ACF1-2956C9E9D03F}"="{F8AB80E0-E786-46E9-8729-D48E542AC48E}"
    "{F9FC85C2-A92F-4BB3-9D4F-C41DE16CEEF8}"="{F8AB80E0-E786-46E9-8729-D48E542AC48E}"
    "{6E6E118E-92F4-4EC5-B782-72B488008535}"="{529B01D8-DE7F-422D-A7E7-B87A2B6E2431}"
    "{3A65ACA5-1364-41DB-9E41-D115E8FC1DC5}"="{60D9602F-2D8D-450D-B998-EAC80D249A8B}"
    "{E897283B-79FE-4CCC-B8ED-2B5A6B29FFE9}"="{4D5E1C6E-3ACB-4626-A187-3DF44C6E900A}"
    "{AE1DFD77-1861-47BC-A8B1-8E4BC14499B8}"="{5971BA33-EC43-4C96-836B-7C8DCEDDA420}"
    "{7B9F7043-FC52-44C7-A88E-5C2782E903A6}"="{F6E6AB45-5739-4267-A045-5E23268E5C37}"
    "{BB056109-3608-4432-B027-4660784B9DBC}"="{1612DA11-C7D6-48B3-A2ED-8AD95D55BE47}"
    "{FA36DEB7-EFD0-4A24-8509-EA47DE03DDAB}"="{9679C448-9697-4B96-9559-986E5625FB92}"
    "{2952E472-ADB7-4881-A323-CFABF941BDEE}"="{EB20ECAD-3D1C-4B51-A3CA-CFBF70583D9F}"
    "{55BC185C-DC3E-4B46-A266-68E260EB29EB}"="{87C431C4-31B2-4B74-B35E-27411E1DAEE1}"
    "{07350A37-A26F-4D79-AB14-795B85B1DE9A}"="{1E0D62AD-28F3-4492-8A50-C4A4AF3EB5C7}"
    "{6513D67B-2324-4336-B509-3EB37F21EF0E}"="{A7F54069-7764-47AE-B555-DED34CB152FC}"
    "{4B6E5A2C-75BF-4FDE-8A70-57FDD725C1A6}"="{FB1AC353-3D0C-4134-A0B7-DCF468AD69B9}"
    "{B3BB5C70-1FE1-44F8-9A37-FC99D43976BB}"="{C44FAB20-5091-4FB8-A043-4F67CAE3DE31}"
    "{B6B2FF8D-6659-46D4-895B-FAA06B209B90}"="{1DACB073-5775-45C6-88BE-E709A52C0489}"
    "{13C5C943-2C26-4DD8-A002-EEC486CF5026}"="{8D373B8F-E90E-4197-A7E6-2B5F9B0B385A}"
    "{50A571B7-812D-4FB4-93B1-C1D7AC028CF2}"="{8AE0832D-7485-4FBA-9394-DD51B0369947}"
    "{F5B4BED0-1D15-4447-BFFA-BED29AB00004}"="{49E8947A-3E05-4B8E-B7A4-72F3C45808C0}"
    "{E3A4F0BF-D627-4E6D-8150-E6FD1C128675}"="{8B645985-180F-4340-9153-566BCCA3F2E6}"
    "{27179A6E-EBC1-4CCF-BFCB-5F903F7FB659}"="{D5DF9D76-3E2B-425B-AD10-71D88AAB548A}"
    "{3D7C8D1B-A77A-4637-949B-66754007A030}"="{6EDB13D8-8212-4B52-8D34-E915286C9357}"
    "{73028612-6101-468F-93D9-77BC22864286}"="{48B64F4A-A3AE-4D7E-A58E-E6405253DCBC}"
    "{27481C50-7D3C-49A8-AD5B-F369711F364D}"="{5D52119F-E96F-4ACB-BA22-806C64545254}"
    "{2C582D72-43FA-4275-8F61-F64152C8D08E}"="{CE1A6970-2392-429C-9ACE-7FEFA232991B}"
    "{726B7C5A-0CD7-487F-B102-99DB6DB9F900}"="{14EB63A5-D520-4961-892D-893F4FBB608B}"
    "{2FDAED0D-380D-4A22-BC66-A6774AA02E5F}"="{B1E29E94-AF85-49BE-AD75-549D4BCE6BF4}"
    "{0506ACAD-07CC-425C-AAE2-D97C302A4D8E}"="{CA138CE3-0D1B-412B-889D-0AD8F8E763B8}"
    "{76401902-FA9C-4CB4-926B-D456A3D61A5F}"="{60731F19-3A5C-478B-8CFA-1926B6115574}"
    "{B71C1FD6-7BA3-49FA-847D-82FC1464E88F}"="{2D93455F-96B9-4978-8B11-E02421037A80}"
    "{CB86D8C2-B1D1-4B73-B7C8-C73FDFAB4187}"="{5A27648A-FE58-4A88-B564-3076028EF88E}"
    "{445E621D-5589-4DA1-BF9A-8E006F7C00B3}"="{590EE354-92C2-462E-9AC8-9F637D09B5B5}"
    "{45A12B02-A96A-4A64-80C2-423A50F4B0F4}"="{38128674-58DF-49E4-A9A4-54C5554B5990}"
    "{5BFEE50F-4515-4AF2-B38E-D73F36E56733}"="{E0FB1CFD-39EE-4643-85E9-834FCFA5B778}"
    "{39846504-8FF3-4673-8D61-7BE16CA792B3}"="{48668CEE-AB81-45C2-8390-7056E304EACD}"
    "{227CFA2E-EB06-46B3-A78C-FF8CBFC4811B}"="{46E2BA37-4B51-4B14-9449-34E40C1CA6EE}"
    "{9FA1BD8A-70D4-4A82-9793-B7154197D87A}"="{DCF24111-CCF1-4058-9DF8-67CEBAF5A30C}"
    "{EE739D2E-80C2-4D8D-82A8-0B4FC7B32DB1}"="{FB0CBCA7-9F97-42A3-8254-732DC97FA8B2}"
    "{3C7EF6CB-2844-45D6-BD59-5AC185F2A314}"="{5B2ED4A7-C5F1-47D5-A513-89604FE84CB7}"
    "{EF04C39E-B5DA-4364-B88F-2397C927F3B1}"="{D5ADDB95-77D1-4714-8431-3FDBE3571751}"
    "{BFC72B83-2963-48CF-B795-823973684B3F}"="{DC2CB297-5168-489C-9A9F-2C60D2AEEA78}"
    "{9A03FA77-1E05-4029-ADA4-32F33B712AEE}"="{FBD07062-5B3C-4572-90B4-18341E879D0B}"
    "{B44B1686-1CC8-48EE-B932-CB78153896CF}"="{E2C96D2A-2FB0-4462-B49C-C4A68BD5336F}"
    "{7A99BE94-8116-42EF-9A59-0E2ACAA35B3B}"="{7EBA2874-9DA4-4BB2-B5EF-7E72F2CB0934}"
    "{B76F39CD-5547-4243-9CA6-A2691BADFCF2}"="{8EA87287-9E3F-4EF3-8C95-E7A439F9FB52}"
    "{706FCE5C-D7A6-41D3-8730-8B38B1CDB90E}"="{AEF75197-3F91-4961-9EAF-51899FE00D3A}"
    "{23AC3CD3-A03C-4B2A-93E7-A8D38E842A59}"="{013C060C-6454-446B-8A64-87C9094399DA}"
    "{C393D5E9-722E-4A15-995B-E2FAF019C220}"="{10FBB9C4-80EE-445F-A147-F6C1BCFE943B}"
    "{97CC8964-B5C7-4984-B482-9867BD567D1C}"="{B84903BC-0F47-41AF-9F64-1C106CD81850}"
    "{BCEB68FE-AAD8-4349-BD27-8E40D0D1E8CE}"="{1889CBC5-EBDE-4959-9F9E-E0B044C1B505}"
    "{CD36B2F2-A849-46B8-BE5F-8CC34E351051}"="{D41E204E-8E47-4FCB-B6BD-BAE9E3129108}"
    "{4708D711-F6ED-4237-B3A2-7FFB5F0079B2}"="{70ABA596-E427-4411-A664-4F24A3CCC6BA}"
    "{48AFE84C-01B8-4AF3-83C4-68C3A90B11CA}"="{EACB46C7-9672-4108-9A99-CA1B643AC384}"
    "{2F410EBC-01C2-4AD6-8F61-989A677B16F9}"="{6A7AE41C-B013-41E5-AB15-D0C2958F897A}"
    "{1FA02835-6620-42FA-B7FE-F5B04FA5EB74}"="{ED2A8653-336D-48C5-8D70-9E965B550EB1}"
    "{2719429F-CDF0-489B-A0FD-479B418811B4}"="{85360AE9-E3DD-41D6-A832-B5B03607D343}"
    "{E767EE55-7222-4AFB-8475-1B704844F3D1}"="{35363C09-5810-4853-A8F5-6517F421F1D5}"
    "{EFCC5399-7714-41DC-B90D-A2106C361AAB}"="{2A96FA3C-7995-4A07-82B5-328230AC5A02}"
    "{086947FD-3779-405E-8DA0-F138D859DEED}"="{D8B43105-EB4A-4F3D-9327-B9434D7D0C02}"
    "{B5D6A9A9-FB89-4EB4-90AC-34CB3B047CA5}"="{15AB51B4-D005-4131-A123-51ECF25F258A}"
    "{A8D0E0EE-EA23-4DEC-B7C4-F7177648312B}"="{128A496E-0513-45BA-980F-37EC23C8863D}"
    "{526EFB97-1AF4-4A3A-892E-24878F8F897C}"="{125DF721-D753-4F80-B6B7-FFF8BA47C7FB}"
    "{21976417-217D-4398-9116-04D029542372}"="{125DF721-D753-4F80-B6B7-FFF8BA47C7FB}"
    "{4323C012-CDEF-4F68-A36E-D358061AF5EB}"="{62B41462-7163-42FF-A576-954B792560F4}"
    "{DE62F9A8-578A-491A-9946-946A99F73048}"="{9722FA82-799E-47E2-AFEF-C2DACCDC54B2}"
    "{E83A7166-3791-4274-BADE-A179517258C8}"="{7E5D47BE-23F2-40C6-A0E8-FF90D07677EC}"
    "{6CC82FC3-B547-432E-A779-75FC03A7A7F8}"="{6B03F6CF-F7D4-4B7E-816E-6A47D0E481BA}"
    "{25735689-4705-402B-8345-6F3843DAB7A7}"="{2C897CCD-E4D4-44C9-9375-8E83271CB13A}"
    "{A4CA478A-06E5-43A2-B053-99FCB8642FD7}"="{F20DBF27-C9E0-4B7C-B96E-549A5D4F8AAB}"
    "{E722A905-C6DE-4F22-AD56-5A29AF29D3D5}"="{11C937A2-B21B-4E36-AE27-73AC81CECE47}"
    "{327A4CFB-2D6F-4379-BB47-A1EC9D2A3EA8}"="{0ABF045B-C9AE-4363-8453-D10D16084141}"
    "{6737B9B1-0B7C-4E76-9636-FC926C14ED54}"="{5F6B8C82-98C4-4952-9CA9-44F0BA1A09E3}"
    "{A38C2F57-FB4E-44C6-AD74-F502E54B7958}"="{25049CC5-C3C7-4203-8CDE-CAC0FE7E0ADD}"
    "{C455592D-421A-44E5-936F-91AC5DA66BF0}"="{6D79A906-1165-410D-920D-0164513EADD9}"
    "{C9AFF3D4-DDE0-4C57-A3B4-7C0F82310164}"="{A9694919-2C66-4FC6-9B29-C5ECF6EB36CA}"
    "{6AA8E343-AEF7-4043-9B32-D7791A120362}"="{7DB25B2C-AD16-4608-902E-9DA999FDCB25}"
    "{E015DD0F-03CB-4049-A840-0E9E9EC7746B}"="{CDAE2F8F-80D2-4256-8C40-54D98A4CBFEE}"
    "{CA6700EB-1A67-4D49-824E-995C24124007}"="{321A9EE7-2C67-442A-AB26-2A4E06BDA304}"
    "{A145F645-99C9-46B0-A8D8-C1D70BEF657C}"="{F8254F22-2307-403F-9416-40C406D3912A}"
    "{629FFC04-0D04-4250-8AAC-05B92A9EE10D}"="{6A9B5624-551F-4013-BE55-F9FA0775C2A7}"
    "{8999ABD8-4547-4AE6-9487-B6C76E8FD279}"="{DA098127-2265-41AA-A0C4-05CB9DB21570}"
    "{97D06EA5-FC76-45FB-BDA1-82825E966AE3}"="{A314474C-7F69-4A53-8DB8-7FD3DC362228}"
    "{E449BD7E-9FAF-422C-80CD-1A0832C7932F}"="{6B2E9CB8-BFFE-4D0B-ADD6-F63BC047D0F8}"
    "{0CBB2EBC-D3CB-4C78-83C3-236121E58CC1}"="{F09E1272-E2F4-4AA8-A782-8E36C14533A6}"
    "{0577CFBD-A79A-4F65-8249-A752EA298770}"="{42AFDBC8-EFF2-4463-A95B-1A0299E2E158}"
    "{4447F9A1-F5E6-437F-AC47-65698776310E}"="{3642E738-6D9B-4E4A-B0B8-7077DFCA91CA}"
    "{EF045355-77BF-4EE8-9819-AA6D3FFB6903}"="{D65D0D54-E9F5-4CA7-BA59-60D720871699}"
    "{3C53D6BB-F851-4818-8276-653D2833717C}"="{45D3917F-A89A-4D00-8758-B83DB4E62836}"
    "{0C7C3C12-58DB-4B49-80A0-47D7D3051804}"="{87B5DDE6-8D18-4CEB-BDE7-6548DDB3FE98}"
    "{E7029CD6-E9D4-47D8-8EE7-0EABC6256798}"="{848031CB-C719-4871-9DDC-5D2A918C53D1}"
    "{899BEF20-B7B0-4F0A-92C2-97548D24E978}"="{3C940A0B-9C27-4425-8A67-3A094EC099DA}"
    "{CEBBD978-5AB8-417F-B5E2-40FDBDCB6132}"="{87D8D154-7EC0-4A4C-8FA0-979A19BA8390}"
    "{5EC04BD1-7E5E-4B6B-97CE-C3F3B5C4F3F6}"="{DD84E3B1-2727-4406-81FD-EE7E8D3A8792}"
    "{AF9E20E4-75DE-4B9C-BAAA-DA8AD6A97D81}"="{A820DA40-0E7D-49D2-8233-CB1A57F0F9A6}"
    "{496E3308-8EF9-4B19-A545-D9C902621C83}"="{958AA414-788C-49CB-8237-87182D000329}"
    "{3B7D7446-7CED-4C6D-8648-DA7729041E3B}"="{3A5AAEB0-D211-4087-AF5A-C7419A5DB519}"
    "{2F0A5A8E-48ED-4F41-A1AE-CBDF97F67E48}"="{42689088-1654-409F-8A69-7FC1636A45A3}"
    "{DB2876E2-0E52-4817-A0D0-FFCD2A534558}"="{42689088-1654-409F-8A69-7FC1636A45A3}"
    "{83F1CC07-4992-4D12-AD12-C11D119F6ECA}"="{42689088-1654-409F-8A69-7FC1636A45A3}"
    "{F59F4D5F-F8E7-4F29-8AFF-03F2C0DF60BF}"="{7342BC26-F029-48BA-A0A6-A120A8DA0723}"
    "{915631EC-A269-4784-9E84-C5F8E9241655}"="{1BE40C44-8108-4C06-829B-24E82B2EB4B9}"
    "{459D0723-DE40-42B6-BFE9-21074999035B}"="{5AF58F8D-74C4-4BDD-988A-7AE3E1780C3D}"
    "{D8766444-17CA-4FF6-9E80-3B6BB88B3854}"="{890AEDC8-5F80-47C1-A828-59BD3FEDCFAF}"
    "{B439151F-6FAD-4790-8096-A2B927C4DC50}"="{2D741BD4-6FD7-42C4-835C-45588245A42D}"
    "{D2F419E5-4772-4DF8-90BD-B4116A059AED}"="{D73CB427-1005-4AF0-AB56-03A621018ADA}"
    "{61E30BC5-2854-466F-B128-994123D533ED}"="{6054F0D9-2B09-4C0A-9D1E-DD6CF43573CA}"
    "{E93A335E-33DA-43A2-B799-9B1E514A7238}"="{EC060F54-1427-4A73-AEE2-81D89E712119}"
    "{9C6F62E2-6FED-4C6E-9DFD-AF63EE6A6706}"="{AF314485-5267-4093-A9CE-1C3EE253154D}"
    "{31FAC956-439E-4D50-AEA1-3304E194C4FB}"="{AE033DD4-5503-489F-AA9D-CAFE4655D390}"
    "{2A702882-AEA6-485C-AE15-9DAF1EDF504A}"="{62C7DC91-C6F5-4FF2-8DC7-DF9EEC41802D}"
    "{0EDF0B71-C986-4475-ACD3-D21C20523DDD}"="{E939B180-A257-4965-8058-260448823863}"
    "{04D5D572-3E3B-4B77-A3DD-5BCDA7BB207D}"="{C499DA1C-7E7B-413B-98D0-5015CDD32AA3}"
    "{7B1E5E55-8943-48C7-8424-60D338ADC347}"="{9D32E893-F15C-45E6-8ED0-A374B772F6E2}"
    "{2BFF25A9-28CD-4F47-8253-02B63E5C2229}"="{429A8BFE-8961-4DB5-ABF1-FB04EC02F1E9}"
    "{2153AFBA-E1A0-4FE6-BB50-F8E80794D4F9}"="{8186CE4C-D37A-4954-B49E-894CE3A7BD7B}"
    "{D63B182C-9858-4832-8EE1-550EB25984FE}"="{4CF61F95-6412-43AB-8E5A-590C33D31CBA}"
    "{E937C363-FA50-478D-963D-1DABA399C460}"="{1B73F669-EEB5-4669-8D8C-8F6FF29ACA8D}"
    "{4B439E55-444B-418E-814B-A50A0D2EF88B}"="{564BC0F3-ACCB-460E-ABC6-0972497E3B3F}"
    "{E019E871-A8D0-4247-B6E1-C57279A21E60}"="{8DBD4D96-8AD9-4138-8684-9D1F31FC6496}"
    "{FE5F06C1-0B05-4AA7-A9FA-D87983F26CDD}"="{20482F83-49D4-4D5D-92D7-AD9501F91D3E}"
    "{2E9E5988-922D-4A6A-BE1D-607CA0DD754F}"="{22659278-0A0F-4CA4-BD0C-95B6079B27E2}"
    "{1AAFA515-7A25-4679-B8F4-209240F1B1B4}"="{6B3024B5-674E-46C2-BE34-D854985DBEC6}"
    "{0333BC3D-73F6-477E-BD23-BEEC6862CCA0}"="{F2B42CE0-7E8A-49EC-8AE0-0FCD368D7091}"
    "{E994F6E4-CA66-4D21-B4B6-F2BFC76EAF2A}"="{8DB61C13-588B-4E8A-9929-3A10F4EA06FC}"
    "{2F2E8294-1403-4461-9C65-103213026707}"="{0285ADC4-E7CF-4527-A2C8-FC1FD6864262}"
    "{395C265F-DFF6-403D-A5BC-B6556362092F}"="{0285ADC4-E7CF-4527-A2C8-FC1FD6864262}"
    "{2C3AC05F-8632-4D8E-ADCF-6B7AA0952637}"="{DEFC2393-2A6A-4B7F-87E8-FCA112435E1A}"
    "{DC95CD5B-EBB1-4C72-A311-895B24F523F1}"="{61CB57C2-7C7C-4988-94D2-FFC597E7F0D2}"
    "{8E27C78B-BF68-4EDD-9BAB-2FCF32B91EB4}"="{E851E8D2-F22A-4A8C-83A5-D181FAF56D55}"
    "{CC1F67A4-8671-4330-8066-486B7E518D59}"="{6E63E133-4994-4191-A395-6FD6BEF81A16}"
    "{64996DE4-C0DF-4715-8781-F1ABE95FFA12}"="{1C16F331-766D-42BF-8C90-DBB007094E9C}"
    "{88793BE8-11AC-48D9-856E-D4A933BA33CA}"="{548F8EE8-890E-4953-BB8E-D99F70C7545C}"
    "{BE643699-4A30-4700-8BE7-FA8FC87AFF9D}"="{9369FEF3-EAC4-42C9-A138-58E27176954D}"
    "{CBC10796-7A01-4601-9F8A-F2358BDDF26B}"="{9369FEF3-EAC4-42C9-A138-58E27176954D}"
    "{DD9192E2-8265-43FF-B378-D4F5878472B6}"="{FD7F5BBD-ED07-4446-852C-202AFDE626C2}"
    "{3168E200-F49C-4AA8-A3B1-7BCD1AC93301}"="{F50FEE47-BA7C-4724-B5AE-54E90EA93EBF}"
    "{7A80D02E-B89F-4C9F-90C5-58A6DD685D39}"="{6C72BE91-AEDA-431C-869F-7C2B682126EB}"
    "{E3EDB57A-5CAD-4AC2-B4CF-9BF617AFC283}"="{F65F5387-B55A-4225-BB3A-1048F11CE053}"
    "{A8F60B23-A9A6-4F77-889B-1269D98D07AE}"="{7BBD48B8-AFEE-4DDD-A8F3-468CD2577BAA}"
    "{E5173343-983B-4960-A711-002D6F0AFB04}"="{58F20403-F2C0-4988-9337-54AFCF3A4D0C}"
    "{6EB55896-3D10-4D3E-9303-1226A691BE30}"="{0D1207AB-1A34-44FB-8EC4-53E9ED341EA2}"
    "{4EFCE673-7B6D-4C78-8B1C-B8645181591D}"="{515D9DDA-D95A-4652-99DC-6574F4CBA4E8}"
    "{AD9BC1A4-1C71-4289-8A44-00F5FCFE7F77}"="{515D9DDA-D95A-4652-99DC-6574F4CBA4E8}"
    "{63D7A98D-3CCC-4112-9A41-B9D4B9351D32}"="{1D7CEB31-EE0F-44F8-9827-8C9F3B3E2131}"
    "{76CB08FB-A9EA-4F92-A6BC-F6961E3AD9A6}"="{095BABE9-DD1C-4FBE-BA71-9FBFE3EF2887}"
    "{035B180A-4F77-4AD8-BB18-FC4FB2FE8D73}"="{F6AB8C76-B534-4692-A3AD-4311CDB2E2D5}"
    "{A782BAFA-C9C4-4B2E-8ABC-324F80B90DD6}"="{ABA56AFB-695F-4307-BCE7-2DDC07FB2B9A}"
    "{77D5CD3E-B7B5-4232-B626-CB9D8A3442B8}"="{564E04D4-505A-4CE5-86D3-85ED447944E1}"
    "{BD0783F4-D3B2-481B-925F-45591F32D6D9}"="{9DC28FCC-F86C-46AF-941C-971779C2CF10}"
    "{EFA127AF-ECFD-446C-8EC9-01B6A8A44C6A}"="{0765443A-4B67-4348-8DAC-E68CC67CFCE8}"
    "{FF4D9ED2-A2DC-4B76-851E-9CA12B4D1455}"="{D95E9036-1C39-4AB9-86D1-C8DD59AF4D4B}"
    "{0CA3AD5C-93F0-4C32-9FA3-E03655AED897}"="{E8585AB9-00DC-42FF-9DDF-A27F382B25A0}"
    "{F05724F6-2B6F-45FA-9B44-0FFFD102214A}"="{079C86F0-BBBD-4F80-BD49-356446468161}"
    "{FF8EB5DE-2B50-443B-8083-507DA9584BE9}"="{3A64FA19-C532-487B-869B-DB4F50BD07EE}"
    "{ADE5DE8F-4C83-4F66-A2E6-DF80B1041B9A}"="{E3475A61-615E-49CF-A0A6-648B23BA91D6}"
    "{DE3AEF8B-C47E-4181-9C33-D9ED909AE137}"="{E3475A61-615E-49CF-A0A6-648B23BA91D6}"
    "{0B89ABF6-D6FD-4E97-9AFB-2F562FCA07AC}"="{618733AB-4A41-4412-946C-4216C6A7CBF2}"
    "{891DC037-347E-43B9-81B0-ADD635AEEEF5}"="{5283C44D-7D2D-47EF-8590-2D1D807459CF}"
    "{BC91B7F9-BD86-4D93-82B9-09AB80E3F087}"="{24FD0581-562E-4C1C-9F85-9D9650B0620A}"
    "{8176D63B-6BB5-438A-B723-309387FB60E0}"="{62A70B47-04BA-4881-8E1E-8BF6F13A2A46}"
    "{A0268BF7-0458-4D9F-AE72-5A7498B25CF9}"="{8973B8E7-483B-4388-8C6F-B206712747B1}"
    "{300068D6-CEC1-46C8-B83F-8E275E18684F}"="{8DF5F9C5-F8C4-4F02-8E3F-ED9BF8A8BA96}"
    "{B3D092F8-AFF6-4CD1-BC77-B819301F880E}"="{84DC630A-E5A8-433C-9A00-DBF9B4E8593C}"
    "{B0252B97-5B46-4BF8-B636-5B76288D3285}"="{EFDA749F-C5A8-449F-AF49-F7024A90273C}"
    "{B76CF205-DA27-4142-9B79-25F3BB021AA0}"="{72DC2F48-3BC9-4A2F-98ED-E7C2BEB13432}"
    "{7CDE58B9-7536-43B2-8083-AABE19078CBC}"="{984FF61B-4EE7-4FF0-AE1C-9AD08C59EB85}"
    "{F5769BB4-CD79-42D5-B6AD-7E897920FFA2}"="{78AF5883-4970-40D5-BE3A-69D6B3CCFA14}"
    "{C3EF244A-3C95-44DA-B6F1-FE691910301A}"="{C5481189-8CC0-4A3E-8DB0-8C942D47BB3C}"
    "{4E4B0061-ED90-4BBC-BAE5-E34F38CDFC47}"="{43176B90-3B58-49C0-AE3F-8DCFBDD10324}"
    "{E75B4FC7-1277-4239-8406-3E8337AE136D}"="{FA156B6D-F25F-4DAC-892D-EB803F8A0F67}"
    "{F4AE22BF-DFF9-4D01-AEF2-AFB0C6A3EA39}"="{8B619DCA-41E0-4574-8A81-AD642DA836DC}"
    "{FC726EA8-B93C-4398-9E7D-F2B744D418C5}"="{336EF896-CA00-411E-8BE1-E32CDD1A2120}"
    "{82AB97C3-848A-4236-B2FE-DB146552D307}"="{4B07B23B-C3A7-4B1C-849A-A77AC036DE58}"
    "{D460B10B-8022-4035-93D1-BB87C416B4AF}"="{AD540013-B3DA-4FBB-BBAC-E802ACF345E1}"
    "{70D4A337-81D9-40F7-9FF4-49ADBE3166FD}"="{717144E3-E95B-435E-BDCE-9AFE2D2387E6}"
    "{E6531A30-10A2-47FD-BB05-D5C8630DDFAF}"="{7E0A6FBB-9F96-4C92-BB41-C96C2B687E85}"
  19. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    ComboFix LOG 2 Part 3

    ////////////////////
    ComboFix2 Part 3
    ////////////////////


    "{DE43CB6B-AFDD-4B25-8D58-0F402B212994}"="{06B33CA7-C474-4518-959F-58635AD387C1}"
    "{4A5B8C08-B823-4B22-B099-22C09924945E}"="{6C7BBD73-5523-4560-9C76-DDBF2762682A}"
    "{9A1CFB0F-25F8-4C0C-B035-71131E0A2EF5}"="{07A1A508-4D93-4CDD-A180-00A7DE000F0B}"
    "{B39D59D4-0EA6-4385-8E65-6C065052E667}"="{DE09AB61-7661-4381-AB51-F4A6256C70C7}"
    "{A5B5199C-3C2B-4F2F-9FE2-324A1EE5E6FF}"="{D9538975-132C-464A-AB76-B58C8B83281D}"
    "{391E9AAF-DE9D-41DF-AD11-3945B3F52A93}"="{8931D302-CF5B-41C0-9BB4-55C196FA7E48}"
    "{EC80610F-89B8-4981-8497-F26CCC22A5EA}"="{547DBAFA-887D-4A6B-851D-C51D59E1FDFF}"
    "{58C384AA-59FF-4513-93FD-E99CFDA58810}"="{4658CA8D-7791-444E-9A0C-94CB89A874B8}"
    "{91DD19F6-326B-4ECB-8379-2C3A9C6274D4}"="{27BE7D0D-C360-4B4D-BE61-6CA1CE5D347D}"
    "{0C3020C7-02BE-4CF2-87D7-5978E7114CCA}"="{5E4BD155-0A5A-472F-BC7D-CC11D703AFE5}"
    "{33AB929F-147D-418F-8C34-E2851A3A064D}"="{7B5B71BC-A441-460F-98EF-1A8D6B8AA6AB}"
    "{5D40333C-7156-4CA4-B393-964E364287A7}"="{7B5B71BC-A441-460F-98EF-1A8D6B8AA6AB}"
    "{7A583928-C5C6-400C-9141-341CE589A6EC}"="{B0227548-0A0D-435D-BF88-21C98C62BDD6}"
    "{26CB93F2-3886-4F46-9457-C53180CF278D}"="{B0227548-0A0D-435D-BF88-21C98C62BDD6}"
    "{B403372E-472A-4BCC-B51B-A0575A1E0251}"="{B0227548-0A0D-435D-BF88-21C98C62BDD6}"
    "{E09A5343-D303-406A-9B6F-2205AFA63ED8}"="{CABE078E-EC1E-4679-A62C-70794EB79604}"
    "{49B66DDE-A7C2-454C-A060-03F250B526EF}"="{76C08328-CE91-4CC5-A6F6-0AE5BC0A4C2B}"
    "{F3404CBC-E834-4EAE-9F64-4D1E0EE5F6D7}"="{76C08328-CE91-4CC5-A6F6-0AE5BC0A4C2B}"
    "{5C85A92E-DAA2-4F39-B6B0-662CDF0E78FF}"="{829A5C1A-E072-4CE6-8F89-D6E966C8EB42}"
    "{93DA82F1-2FD3-4942-B9B5-3CFE2469B4EC}"="{8C845982-9B36-461C-8617-0B3B85086CD3}"
    "{73A261F9-41BF-4929-9095-90FB07D147D2}"="{2222845B-30EF-4A22-95F8-46254833930E}"
    "{238F3318-7B01-4594-9183-DD928B7009FC}"="{87ECE80F-0E4B-4AFE-B24F-C18A4BFCEC14}"
    "{BCA22667-6B50-4B28-88B5-58D817C797A6}"="{AA09A07C-364A-460F-92B2-682664BD21F8}"
    "{30DA508F-2CFD-47DB-953E-FBBFC7DFDE47}"="{AEB38B5C-DBAF-432A-BA9A-7E766168ED27}"
    "{92958433-E496-4833-AFF7-EE6C1ED36BB1}"="{348D5D65-CF5A-4B97-96BE-5CCB6FC54DA4}"
    "{3ED3639D-446E-427B-A53B-E6128C6BCB9D}"="{194FFB4A-08A8-42DC-BFFF-3D783FCFD124}"
    "{F5943434-CF62-45DC-90C6-2795CA696B87}"="{D753D332-2E6E-493F-9B3B-7A14A6F1C0EB}"
    "{D8DBC07D-96D3-423B-B91F-F4A358CB478B}"="{EA3054C3-BAA0-4859-8698-8323AB15069E}"
    "{76CE9982-5ADE-49E0-B66E-4C3A71E2BB86}"="{ABF0EA46-0015-46A9-AC57-9761B22AA508}"
    "{DF740035-6AB1-49B1-8AC4-E1AD0461C6C3}"="{0BCB607A-70D5-4525-BD46-FDA7653F0A43}"
    "{CD0722F6-95E2-4614-8743-C595E69959ED}"="{9F2EB56A-701A-4059-9753-75F84A82410B}"
    "{4A2A8E87-FF31-4DBF-AAB6-2CADA677584F}"="{9F2EB56A-701A-4059-9753-75F84A82410B}"
    "{2A4EB56C-DF81-471F-83B6-5AFF827398BC}"="{9F2EB56A-701A-4059-9753-75F84A82410B}"
    "{3C0C0E76-D80C-4225-AD91-CDA1E8D4188C}"="{9212D7CC-6477-4186-A6B5-99E086DFD16F}"
    "{00DB49AB-FE58-49CF-9A0F-6A2112B6CEF4}"="{5E256954-1A5E-463C-BB77-A66C63713DA8}"
    "{22A532EA-0027-41E3-9923-C06ADB0A338F}"="{01ED3770-7EF5-4E57-A073-85CDBB73C734}"
    "{206B6CAD-9946-4931-8288-502134196348}"="{75230356-575B-4013-806C-6E49B1C4B98F}"
    "{FE64E025-6F74-4CAD-BE6C-C590A0E32952}"="{736E5959-A9B6-4A64-BE1D-904FF4DC668B}"
    "{E354268D-7D8B-48AA-B53F-19D336050C9D}"="{6708A30F-9D65-4C8A-B104-EB1410E55E93}"
    "{3F11A112-D64E-4A75-BC9D-D6991377D864}"="{935EFB3C-51D5-4CC3-B0F7-F4D9EBF32CF7}"
    "{E24BD992-2587-4D79-A51B-E395A5EF8CE3}"="{C4E7AE05-79D0-41FE-9AC0-7FA8259C16FA}"
    "{980EA278-30B1-4954-B471-877FC0A47D1A}"="{9F017785-9FA1-4088-BC12-33754FC45EB6}"
    "{BD119C0B-D4E6-4B58-8D13-1CBC67EF00AF}"="{B23A2E1E-9CB1-4CB5-8289-80A84CB862B9}"
    "{01F9C2AF-3A43-4242-BEA6-D089D34ED0F0}"="{7DA9F5EC-C65B-4317-B7CF-A443BCEE17FE}"
    "{70508846-48C4-4121-AA4D-41E3527C6610}"="{CEFF2ED4-DBDF-457D-BDDA-91CB117D123A}"
    "{5545F218-7885-4386-AEEA-0DB152EADED3}"="{13B386AC-5974-49B6-B6C9-AE6983B45BFA}"
    "{C6D5DCD7-2C1D-4305-9283-97D616E60CC0}"="{35E07F92-CAE0-48C6-9613-EE0C680A77C9}"
    "{AC9E8389-5339-4B1D-8BA1-CA6DBAEAA347}"="{546DE21D-6FBC-4B90-938F-CC2077B9D07D}"
    "{3B9A3D4A-BD4A-4322-B650-98A4900CD9FE}"="{54555357-B7B5-4F5E-9EB9-E008054BC986}"
    "{EC941E5F-862F-4387-87EB-184A7AF31165}"="{F3CC764C-F5CF-4E30-9CB7-F1D3A98D96F2}"
    "{1E3FD72D-B7ED-4DC4-B761-4184240B7872}"="{F18D0F5C-E454-42AB-B131-6016D4A70A71}"
    "{D41A5BA2-9935-4533-B5B2-93942E65C6C9}"="{F18D0F5C-E454-42AB-B131-6016D4A70A71}"
    "{B2032ECC-D91E-4B1E-A723-9E6C156FF291}"="{F925B86B-6CB2-43DC-AA08-85EDE71F64F8}"
    "{E02C1D59-6751-4924-996F-7039E82EA3F0}"="{69260CB1-1F12-4AE2-B7FC-716CAECCF45A}"
    "{FD903262-14F0-471C-831C-D6D967E79B7F}"="{342F6ED4-E414-4333-B13C-0B14129AFFC4}"
    "{156165D3-8609-4F21-9FFF-1CCDE99053E0}"="{CD028D63-7165-4CC6-9FCF-D747F25E31B3}"
    "{2A5BDCD0-4D73-4D11-802E-BC83DBC824EB}"="{3DD91ED7-A9AC-48EC-B4E1-6117DC8CF7A3}"
    "{55EB1993-0158-42C0-9458-E53D672CF646}"="{066BCC01-4618-461A-8BAA-D4AA4B541D56}"
    "{CEF4EE53-4363-4067-B639-8BAB3B70EF53}"="{06FF9956-2608-4926-B375-54957FB02A59}"
    "{36CD89B6-53BF-4637-9FE1-33E68DA85D31}"="{B33FEAF5-3273-42DE-A3DD-92A2AC8AC252}"
    "{83D7BEB8-8782-48DC-A72F-3B6C5C4873E7}"="{891FFBBF-B536-44E6-9167-873A6ABE6EF8}"
    "{35C1DC1D-49EB-4586-B060-C3A346F654D5}"="{0EA8F7BD-50CB-45F5-8829-C80FE5489E71}"
    "{DAA1B020-0B6E-4DA4-8735-151C2E308857}"="{883DCCF7-A9D8-441C-9D78-43DB6D9E2D49}"
    "{6FAFB17B-2D44-4FF7-BC3E-E2449BE0FD9D}"="{C5A7560E-40DF-4F8F-9926-D0A51A07B697}"
    "{F938F1F5-7BAE-42AB-B4AF-D37089AB2B65}"="{F264086E-4D5D-433B-A5D6-19AAE4E4522D}"
    "{1E182A2F-E4BE-4D07-99F8-A9ED82A2F7F5}"="{FA59DDE0-AD8F-4C1B-8A73-31EEB1352FBA}"
    "{4F1E3AF4-BED3-4A88-A0FB-C0425E60FCA9}"="{EFD4FD73-0FB3-4F10-A69C-0DB41B2FD9A0}"
    "{B748D518-381A-434B-9CE1-9381F6F05C9C}"="{F41E5989-636C-43C4-8015-FCCD2D8086DB}"
    "{FF890288-B536-4228-B26F-F6519FF25964}"="{AFC00E3C-0C8D-4A7C-86DF-AA2EF449EFD5}"
    "{6A05DF7F-0E28-4F7B-ADB0-4E61D2402E04}"="{FDEB628F-18AB-44C9-AD66-2DFD9D83BF75}"
    "{71B9103E-8A93-4852-A45B-51517080B262}"="{A9A113F4-6D7D-4B08-9227-2E19E84C3B97}"
    "{22E650C5-88B8-4534-A5B6-E8EF9D254936}"="{6396AD19-E9FF-45E9-B3E4-AEF216AA6723}"
    "{9B3C5EBF-C65F-4F3F-B90A-F863CBB2C8D8}"="{4DAE19D4-20E6-4C9A-9627-D68D1B15E5A2}"
    "{2DDAC57F-500E-4417-90E6-612FFA423A81}"="{2C2B451B-E29C-4861-AE94-FB168B42348D}"
    "{10140251-BE11-4D87-A525-E7D9ED9DCC2A}"="{14D904E4-4FC0-45B6-9F46-5B340AB23193}"
    "{72C080BD-2617-4046-8864-2A18F3AE57B1}"="{A764F94F-7E8B-442D-9C59-87D2148316F5}"
    "{C7EB2ABC-4B48-48DF-8F41-6A3669407856}"="{FF9F44C6-8AE8-40E5-B900-F658E6E14D46}"
    "{EB11A15A-7127-4C89-B888-AA2178421DB7}"="{E3BDEA89-B3A5-4EB9-8810-3D0E6DF7346C}"
    "{73561A6F-DA0B-4E4D-B16C-976ACEEC1F9B}"="{43357C7D-CC73-4298-8D12-1AC1C5BB7BFA}"
    "{07990EB0-71DB-4DB1-B2F1-F9A333B7722D}"="{6FCC9807-FAAC-45E7-B11C-40687E831F66}"
    "{A3A58D9B-0003-48A2-99EB-600A8156C3C1}"="{0AB749E9-BD84-4818-9031-C540DEDFEAA4}"
    "{63F60A44-EB78-45B9-8905-407783374150}"="{B8D8D8F3-380A-4A9E-878F-F333D8B8082D}"
    "{B1492404-3A06-4E9D-91BC-37994582FFF1}"="{14AE4ADB-FF46-487B-84B6-61F97C021D41}"
    "{73A759F1-5C55-4CB7-8F4A-0ED929710B83}"="{14481268-E481-419A-B6B6-026747262ADB}"
    "{7A6D0F79-C57F-4434-AACF-13AC1FFB6778}"="{3E9F657E-B291-46B7-8E94-976765CE8AC6}"
    "{1286E336-B847-4684-B828-2F63A5BF3B6F}"="{A68D27C0-27A6-49EE-8D91-992C2F470181}"
    "{EB73DBDA-067D-46FC-97D4-DD3407D8C4A7}"="{16FFD574-4D1F-49F7-97F4-BF65C8DF8A0D}"
    "{91C35ED4-815B-4F8A-A5D8-0D1A15887DEE}"="{556E8417-8333-4F01-B2BA-8B73609695DA}"
    "{352483E6-1758-4526-8B06-1DB8891671B7}"="{5EE6C492-C3BF-4D5F-9245-926CBAAD5D31}"
    "{D8FC4C94-C495-4D9E-92C9-35D4F6BA481E}"="{322EB273-28ED-44F6-9C38-9837A9999DCB}"
    "{F827C767-7FA8-485C-8B2A-4210FDD70532}"="{EF8C7378-DA0C-4C21-B41C-76AA4C90F34E}"
    "{0359BA91-1991-4B8D-8A2C-AE6310ABEA1E}"="{409E2EEB-4C25-4A8D-9545-2F03E380C8B9}"
    "{61E2DA9E-3238-4265-9129-FD3A829DE315}"="{BD31D8FF-822E-4569-8AD7-B0031980BC08}"
    "{F91792F4-1161-4124-9D10-F65E24559884}"="{CEE81D9C-D37B-4469-B451-19E6252F81B3}"
    "{EE6CE658-EF1B-44AC-985B-CC8CF522A7AF}"="{E08FBC69-B53A-4824-8A95-CD0E71F5FEA3}"
    "{18275334-C955-4C77-86C1-8BCA94E8C2A3}"="{D986AA55-149B-4619-8FBD-AAE07C7330D4}"
    "{BA80355D-AF62-404C-B88C-019F6A2B25BC}"="{D986AA55-149B-4619-8FBD-AAE07C7330D4}"
    "{6105F33D-2DE7-4E28-95B3-182F31F36171}"="{04422117-72EC-469B-A05A-075433B5F831}"
    "{CC391C6A-D4C1-4F32-A93E-825F8ABB2FFB}"="{C800762B-92C0-43F4-972B-DD6505FF7962}"
    "{F6B1CD6E-2ACA-4AFE-8930-0CF0DC9061F7}"="{1E5D9F35-BDD5-4165-AF7B-D1A1D8E8B8CF}"
    "{89A67134-E6B0-480C-8726-7327D8CD96CA}"="{73C001FE-92DF-47C9-AB3B-707718923D19}"
    "{8AD78EC1-E6DC-4C78-A433-AD12705EA97B}"="{73C001FE-92DF-47C9-AB3B-707718923D19}"
    "{3C4E8980-AE37-42AA-84FD-19F9FAF3E671}"="{90C1F735-884D-4D84-8257-B9AA7D34F23E}"
    "{DB2A237B-6F0A-4D85-BAA8-DDC7706BF1CC}"="{73C001FE-92DF-47C9-AB3B-707718923D19}"
    "{44A16754-CD28-48D8-AF7B-CCF8BE361E22}"="{53947B26-9F7F-42FC-8B7F-D71C095CE465}"
    "{EEB90C1A-6A99-4865-B175-6379D7AE1A27}"="{3EBF3E94-C507-49EC-8E84-CC529D51FA4F}"
    "{9E39B889-BAB6-4038-ABEC-04F05366E3E7}"="{40D14A28-C2AD-49E0-9875-02219FE9525A}"
    "{45D270DE-8C3A-4EE3-8E5C-E39EA717B9D2}"="{E9D2888F-82FE-445B-8B5B-2B7C435A62C3}"
    "{18C157CE-52C0-4F3C-800B-8CD1A724D6CB}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{9A71E4F5-FAF8-421A-A883-44BBE93C2F2F}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{6466AC3A-DD1B-46A4-BDEB-3DD7F45EDA91}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{93BE01EC-A62F-4157-AC8C-966C26BB991A}"="{E537BC86-8B47-4211-B4BA-DD5D8B26F190}"
    "{A6522524-CE15-40A1-97D4-E502A04CBBF7}"="{75C35EB1-9BCE-401A-BB27-8AF0C4F5EC86}"
    "{BA05F62A-75C5-4FAB-9A65-3E7834DD4C4E}"="{0083CD18-B6FB-4DFC-84D1-A49687A7B39A}"
    "{365BF99D-FE98-4FD1-A2C5-10B77592864F}"="{0083CD18-B6FB-4DFC-84D1-A49687A7B39A}"
    "{4102F584-3A7C-453A-8CBF-EADBC147011F}"="{AFA5F971-D8E8-44A2-800C-A60B4CAF60D7}"
    "{119AEA67-4986-473F-9D3B-65720101F6AC}"="{AFA5F971-D8E8-44A2-800C-A60B4CAF60D7}"
    "{4A8A3490-9715-428D-8B92-74DF908D7461}"="{9B24C678-B6FE-4324-9EC2-448435E74279}"
    "{AAA2ACBF-B4ED-4721-862A-22EB8C0F5B1F}"="{09000ADF-5189-4621-9B01-69819260E4B4}"
    "{F5E7DEB3-6DD6-4BB8-BBAC-8783864DBF57}"="{9215F98F-128D-47FB-8934-DF15DA0F362C}"
    "{90218A1B-F953-4B43-8A46-3ACDFA9A5BE2}"="{AAB57086-B3E8-4BFD-B924-8C29454CF0EB}"
    "{2445AD1C-D424-49D9-A22F-27FA33C2089A}"="{89BDCB9E-DE2C-49C6-A5C0-BC5D0A5AB6E8}"
    "{5B99707E-12EA-4A2E-8ECA-303E6D8328BA}"="{AFAA7820-7675-40C1-AEC1-9A2B3F084009}"
    "{165E3D0C-83A1-410F-962D-89C9BA8E32B7}"="{023F8773-D4EB-42C9-A5B0-5E6D2C82D7E7}"
    "{C3481211-7B18-4C2C-B428-E239BF82F2EB}"="{C7849EAA-F445-407F-9662-83D52D7CEF57}"
    "{AEBDF45F-AB15-4469-8931-AB2D744C83ED}"="{C6865399-A3A6-4559-BB4B-26EA1DC67358}"
    "{91FA3F89-DA0E-4F8D-AD8B-AE471634ABBC}"="{8EF77DE4-9B2C-46CE-B37C-502F9F1AF885}"
    "{479C647D-43C2-4E20-9FB6-508C4DA7FE0A}"="{4DAEBA92-5158-425A-A81E-62618896792B}"
    "{FC03F50D-5EBF-4C4C-9D73-4BCE08EC12D4}"="{20A76C9F-3579-4CB4-BCB3-F1F221A36B56}"
    "{DDF7CA8E-DFD3-4096-B3E1-6BFA761BFE47}"="{1D4074F8-C891-486D-9BD4-708378464DA4}"
    "{BB8051FB-E773-4B06-A72E-7D1D3C02B973}"="{4DCA8163-D922-487E-8139-F54ACECAC94C}"
    "{37526470-1658-4617-B89E-E99D141F88E9}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{B929027A-7112-4BC3-AD22-CEF263448C1C}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{61AE1787-99DC-46F7-9530-EF317E663424}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{B404DE5B-82C4-4F38-9C3B-97BA355A5B2C}"="{F5CF492D-A376-4C5B-A2B9-6A4E2CE28018}"
    "{3B54BB11-D678-43C6-8158-BB4B705D33E7}"="{25CB58F1-C803-4BF1-BB77-A6ECBD9203F4}"
    "{105ED42B-CD88-4010-B7C9-DDB16849FF36}"="{4A27FC10-D7CC-4772-8F41-1297ADD8C9D0}"
    "{6B9064FF-C042-4022-9C16-256FD5FF9A6D}"="{D1BEF44F-1F5F-47BC-BAB2-AC9451E0D6FC}"
    "{46D61944-1018-4B99-B971-85BE972D7EC5}"="{003F7AA1-71E9-4CCC-BEA1-17E2160B5ACE}"
    "{EAC43597-7AF9-4B98-9699-3FFF30D32FD1}"="{8B7C89D3-DF81-484B-B6D2-C966D1030176}"
    "{E5EBB1CD-02FA-44C7-9EBE-66ED1D1DC59C}"="{0B29C1E8-525D-49A1-8E60-9F315CB733EB}"
    "{A70E49BA-5850-43CE-B4C1-D8D873B89688}"="{FDB7DE81-B4ED-4465-B166-1B072883C393}"
    "{3FA41397-FAC9-4CCA-A1E4-A85966828540}"="{FDB7DE81-B4ED-4465-B166-1B072883C393}"
    "{DE5DE551-DA6E-4445-8089-56518B5D2675}"="{FDB7DE81-B4ED-4465-B166-1B072883C393}"
    "{697A9B6F-B243-4F5E-A542-F6697A4B66DE}"="{9D3EDAF8-9897-4856-AFC1-D40F5EB32CE3}"
    "{71EB160E-983B-4611-8513-C6513E9CF741}"="{C12A894B-D84F-4699-9AD1-E6DFA7B43929}"
    "{3FFDC0CE-D582-4711-BB8D-DD63DE882C47}"="{29DD8418-BEFF-4158-A5EB-0564EEA40BFF}"
    "{28792288-D3A9-4EC6-B0D1-75D84AAA068E}"="{C72DAEDB-4808-422B-83AC-9E165B6484B6}"
    "{DBB4B15F-88EC-4271-90F1-F71A3C6C7520}"="{6BBC3811-6C5C-4E83-A8A6-5AC74EE10E51}"
    "{A9703B43-A63B-43A9-A911-295972F1B9E8}"="{348E1D3A-1EB8-4D68-9D72-E6EAC63EA99F}"
    "{54C919CC-F108-492C-88AF-1DED792C82FB}"="{94CB84BB-C086-409A-A0AA-2921A9E4AF58}"
    "{7AE10705-BA5F-40F3-975B-5FF210EA45E1}"="{2065D856-DBCF-458E-ADE7-B051CC25FE01}"
    "{34050E07-E35B-4BAE-B24A-FBF933BB558E}"="{36D18285-CB5B-4B73-8386-A90AD8C9FF7B}"
    "{29A31AA1-7C53-493F-8565-E95BDE231463}"="{CDB30B0B-5CD7-4EC6-95DF-393A8A57C094}"
    "{4842FF83-F82D-4CA6-807C-79DB9DA6473F}"="{D7209349-A7E9-4B44-B0E2-93674D87E5DF}"
    "{A4E3DE50-E59A-449C-982F-2D57D72475B3}"="{E76B3912-8808-4014-99E3-C2419BDE76C9}"
    "{20C4B37A-0690-4B86-8105-97426F2E2786}"="{E76B3912-8808-4014-99E3-C2419BDE76C9}"
    "{281ADA02-0D6B-4ED0-B831-1ECE462B6BCE}"="{24D182CF-F4D4-4A5A-8CEA-D0C9273DDB2F}"
    "{79BF7DF1-4D75-468F-8C9C-0291F0B7A50B}"="{DC2230F3-080D-49DA-9C7C-FC0764407D99}"
    "{E03A0A3D-F1B1-4CFF-B1BC-E4C95C7D33DD}"="{06CA29F9-BECC-447D-B2AC-2BDFDFB59487}"
    "{2C513389-1D96-4882-981E-23E90DD2935A}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{6F202DA2-2C4C-439F-B45A-95653745E264}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{403E4248-630B-46F8-A33D-F64BE50F9580}"="{7558ED86-D22A-4E4A-813E-B38B85021C33}"
    "{33F8F782-220E-48DD-90C9-AB794370FE45}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{A463F306-0305-48E2-9100-8B89ADA81AA0}"="{471EE312-ACDA-410E-BD93-A0952656ED4E}"
    "{08D2DC69-3EB2-4190-9654-6020672DCB3C}"="{F1A9E8CF-DB56-4FF1-A158-D4A1746E7D34}"
    "{CA849CFA-D471-446A-9AE5-40D92BC95EC3}"="{F1A9E8CF-DB56-4FF1-A158-D4A1746E7D34}"
    "{0F037ECB-4525-452A-99A4-C41D89A4E744}"="{268BC664-5397-4C15-8FD9-43C88A0A37E1}"
    "{142A4013-A8B4-470F-AF92-51E0AEA1A970}"="{02ADDBED-2581-4A8D-91D4-E8BF5EC65EC5}"
    "{D1237036-7B40-43D9-93CC-FA3B63777C95}"="{02ADDBED-2581-4A8D-91D4-E8BF5EC65EC5}"
    "{E4DDE903-D122-4FF5-838A-D09F321D7AE4}"="{02ADDBED-2581-4A8D-91D4-E8BF5EC65EC5}"
    "{A3657EA6-4B30-47A9-9A79-2CCA1C41BE8E}"="{92206159-0B4A-407A-A8B0-EE43FDFBE702}"
    "{F4041394-87F4-4044-9C1F-BB4BE521E4A7}"="{28196551-ADB0-4C1D-B78A-EA418934C5DF}"
    "{BE02E720-63B3-4203-A681-A89A7871621D}"="{578FA451-E13A-4DE3-8D02-73B163A82E33}"
    "{441A5D95-5930-4D31-8D71-73677023C433}"="{444A2649-E1A0-4420-9E0A-9D91444598A7}"
    "{1C283851-CDEE-4E93-B5F5-39B04C21CA66}"="{CCEBB478-D330-41FB-BDDC-6AB3E58502D1}"
    "{C28D9B55-B77A-4053-B0CC-264148400AB3}"="{9689B6DC-2DB7-4D35-854D-AE54485A0EB3}"
    "{475B8743-ABE1-4E61-BA1A-D11DED6C2D3C}"="{9689B6DC-2DB7-4D35-854D-AE54485A0EB3}"
    "{8E622C64-7D8A-4F5C-B566-47B4DBB7032E}"="{9689B6DC-2DB7-4D35-854D-AE54485A0EB3}"
    "{E0DC7E93-B71D-4457-8EE4-EADD3C475A90}"="{0C4884C1-1CFE-4C82-8C9C-0DD0F79654DE}"
    "{45F01FD4-7D47-48A2-AB29-2BF7D4F1A40E}"="{F0B42710-6A7E-4111-A5F3-CCCDB7E0A471}"
    "{02C60144-83AF-457C-96C1-680B04253A2F}"="{F0B42710-6A7E-4111-A5F3-CCCDB7E0A471}"
    "{C248CE14-0ED5-4A9F-856D-B59D4B887BC0}"="{2E7FFCDF-FB19-4087-BA79-370C504E0A50}"
    "{67ED307B-E290-437D-AFFC-7A0D94FF47BE}"="{B1B41AED-EF3F-4800-8CDC-294C323B6A33}"
    "{B6D9AE1D-0AE1-4173-8DED-7AB82FB645FD}"="{081B6102-8797-41DA-8514-B81D37562F2D}"
    "{5B40061A-A709-4E7F-9163-4CBBB5C9BB6F}"="{6624FBA5-0A34-46F9-9C1B-5B2F0045F01A}"
    "{172744C8-7F4D-445A-A45C-851320BA995B}"="{1804E815-0AD1-4BF7-951B-AB11B0FB7F02}"
    "{BDBC3930-F475-46CE-8F76-42CD0F2F5BCE}"="{D80BD5C2-CB28-446C-8640-2135038532A7}"
    "{5DB9C2BB-BDAE-42D5-9830-DED591AAF9B0}"="{56E08CAA-7F5B-4DCD-B9C5-45AA68F23616}"
    "{D612BB36-F6E6-40D0-BD4E-8D338F49B1AB}"="{0078B6F6-3242-4F74-A40A-15B086FA423D}"
    "{1D78DDBD-AEBB-4F80-83A5-3F650395ADF5}"="{FDC30C86-C10C-40AB-874A-DACEFE7A797D}"
    "{CBD5FE53-C73B-4B33-A080-4E5527676380}"="{721C81CA-AA97-43CC-AB21-3396AD3A01C7}"
    "{511EC113-12DC-4355-9D43-72064FE564A7}"="{E9287365-391F-45BA-8039-9CDF0DDC3360}"
    "{16D32A33-F763-4C84-876C-665BA07251D0}"="{4D93175A-8204-46E1-938E-E9D79BD896F1}"
    "{74865E66-3DCB-416F-A892-A72A5B613166}"="{E359A298-3A74-46C2-AB31-FDFAA076AC50}"
    "{41ADA380-BF8B-4E1F-8EA3-7C657DF11A58}"="{3E35B6E8-8F65-4F07-B84A-54BA6BA79BCD}"
    "{5DE3F50E-0334-4C32-8D13-B2105262F721}"="{3E35B6E8-8F65-4F07-B84A-54BA6BA79BCD}"
    "{1F801312-40C5-4608-8C78-286B53942FD9}"="{0A722EB2-AE09-4B1A-94E6-DC46993D173A}"
    "{A2620756-9B07-4F0C-8D96-22DDA2742FE3}"="{0A722EB2-AE09-4B1A-94E6-DC46993D173A}"
    "{0FFEEFE1-739C-45F1-9A87-64121DDC69CF}"="{92635360-A2B6-4B7D-98F9-42B504AF60D2}"
    "{993928BB-EFC3-4737-8483-63ED4194FBE0}"="{0A722EB2-AE09-4B1A-94E6-DC46993D173A}"
    "{1C459FA1-DAFA-420E-947C-0EAD4F2C22D8}"="{D8C24E40-1DCF-4D2A-95BB-1E93E90B8BD7}"
    "{F4639266-BB42-43C3-9F45-32131255ADFE}"="{ECEFC494-3A04-42A1-B1E4-AC8FC1B9636B}"
    "{4E2D4A1A-3439-4710-A821-CDEC5096EB64}"="{5B3B256E-E041-43AB-B618-F5F9FB419AB0}"
    "{D71A3480-DD63-4F5F-9F2F-FDEEAA2E7862}"="{6D3C988E-FFB1-4D77-917B-96A2002C5453}"
    "{E9C0C45A-EADD-4FD3-A7DD-5705B93BE890}"="{CEE4F285-F9FA-4D41-890F-9A12C88D8323}"
    "{DE46893D-1D4F-47E9-B664-8BD6369EA0DE}"="{EEC3DB01-421C-48E6-9ED9-835A5E0CD3CE}"
    "{5DA8D48D-9FD1-4626-A234-689EC470B3DB}"="{CE3CFA89-E814-44D6-82A9-DD32C379C4EA}"
    "{32F3EC5D-64C5-43A1-B0B1-8F9AD464960A}"="{33471B58-E5EF-40F6-9F1F-920F9796F4A1}"
    "{FF664EC2-EF74-4C6C-9297-CF03728CAA27}"="{33471B58-E5EF-40F6-9F1F-920F9796F4A1}"
    "{E9AB9EA5-F78C-47C0-AC13-0CAC92C579F1}"="{216D9840-C664-48A2-B820-A638D9AB5955}"
    "{3B980045-D4C4-422C-B9FE-176EC9669257}"="{33471B58-E5EF-40F6-9F1F-920F9796F4A1}"
    "{CA92F5C3-EC37-4F61-B5FB-8FF25B1FA355}"="{7CAE3309-E814-48E8-B8FD-1A468A869132}"
    "{6F551079-AA60-4845-A01B-BE4A4DBB2073}"="{C27983E0-483C-4309-B413-2BC6AF8F6379}"
    "{BD6367CA-5C3D-4E5F-B5CC-24B1146CA983}"="{6523F100-C9DB-4B17-97DD-BBA82AE206E3}"
    "{5A39DF0D-5C61-4C2D-8072-D130B17368F2}"="{E84D0088-58B5-49FB-B796-87B07C65749D}"
    "{0E91A0A3-6E03-461F-81EC-80841E26623E}"="{48CFDFD9-82C4-42A8-8D5B-E1720B4DCD33}"
    "{14151285-55BE-4E71-A61C-B82DE076B174}"="{48CFDFD9-82C4-42A8-8D5B-E1720B4DCD33}"
    "{58AF5939-CBD1-41F4-A443-5209C5582D30}"="{2B378487-7E94-48AA-850A-9A3ACF300F0C}"
    "{F789C7FC-B9F2-4C5D-B9D5-30DAE2F4F21F}"="{7ADC0072-7600-4ADC-8AE6-AAF56E3AD93E}"
    "{D7F8E65B-FAF6-4042-B73B-2938BCA6294F}"="{F4E2E545-E239-4BAC-B668-3A317726114E}"
    "{F10B5F6E-5570-446B-9824-D81BF79E10A1}"="{F418199F-5C7E-49EE-8504-7253B07B87FC}"
    "{74856B6E-9F94-43A8-919A-A608A6ACA1B7}"="{EC506026-74DE-433B-94D5-15BD7BF73E85}"
    "{230D7990-DE9C-4750-8412-C34CBA927F27}"="{06F0C22C-D0E4-4ABC-A6D8-05D8E6582CDC}"
    "{B8030883-6DF9-4AD5-803B-77D04743B7D0}"="{FB4C7B4D-5595-45E4-A3C2-70FBA71DA9F7}"
    "{C03F6C5F-5495-4936-AA2F-284CB101C878}"="{73B419F9-FCB8-4893-B020-F50ED94AF1A3}"
    "{3EEAE1A5-3518-42AC-896E-0E56DA775F49}"="{7DDDA8E2-3FC4-45F8-B50D-9F997CAB3616}"
    "{34243A8A-76B4-4DC6-AE2E-4F2B5D74D2C7}"="{296C8C67-E84F-492A-8D34-658BED42A66F}"
    "{EE20C596-6D28-4E76-BCDF-E016C101EB7C}"="{BD07FBBA-4453-4932-9430-A731FAA383B5}"
    "{41473D3B-EB79-407F-B3FC-F2E578C7E299}"="{59DEDB37-9982-4EDE-A0EE-2D8BA1D7FCE1}"
    "{AED874B2-D192-48B9-A059-8EADE60AB09C}"="{4A24E95F-21CF-4194-9EF0-614558DEFC8A}"
    "{83321308-8ADC-4176-9E3E-2589D1777D7B}"="{A07A4F6C-BD3B-42E2-94C8-D2EDD175AD11}"
    "{ED755E4E-0BDA-4D00-81B0-6742E2E5CD67}"="{A07A4F6C-BD3B-42E2-94C8-D2EDD175AD11}"
    "{B6383EA7-1CF0-4FA1-8640-F9E397F5AFD5}"="{43FB986B-4B37-48CF-A37D-A6215D42FD20}"
    "{3B568445-69F7-4265-B021-CFB8A0D6DC22}"="{A07A4F6C-BD3B-42E2-94C8-D2EDD175AD11}"
    "{A7010DDA-0359-4961-8040-2F2D99D17312}"="{520D417D-A6B8-449F-8FAD-92358B40862F}"
    "{1BAC3C19-A365-4EE2-8F80-6F8F2AE80905}"="{520D417D-A6B8-449F-8FAD-92358B40862F}"
    "{723DDE0D-B154-4915-A592-186AEA85C147}"="{87302C75-9C05-424E-BA4F-759C0A3A3C87}"
    "{4D600E35-A71B-42D8-B4FF-1A77DB085365}"="{520D417D-A6B8-449F-8FAD-92358B40862F}"
    "{74848B28-D0CB-481E-A60A-76676BEA0516}"="{12987FB2-0B65-46E7-A336-09E3DCF17CCB}"
    "{3ED33546-8F65-495D-989A-10B1BAE7A064}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{3A2F3410-37BE-4219-8597-0F5E1348E482}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{65714AC4-D1C2-4D57-99CA-ECD716F398AC}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{EFF842EC-97A4-4464-A625-15F754829242}"="{A2BC663D-A835-4B70-8185-2E90A636751C}"
    "{07F2E157-9FC7-44AD-B96F-767DF40A4BB7}"="{80AF2363-16E9-4205-A0E7-9E0DFBBE7AF4}"
    "{8FB3F216-08AE-4913-B3F7-4A19D43EA55F}"="{80AF2363-16E9-4205-A0E7-9E0DFBBE7AF4}"
    "{1A33729C-A8FB-425E-8A78-996093BDBA85}"="{E3F222F8-72B4-4390-8FB9-7BBA650B7ADE}"
    "{AA3B745E-3A8C-4D11-9387-C1DCF657C9DB}"="{FBC851D5-979D-485E-BFF4-6E2EA465E436}"
    "{C3773FC1-0602-4824-97CA-DF33B530AD31}"="{6B6B9B19-61E0-44A4-90B5-2BFDD75FA8AC}"
    "{941078AF-4FBD-483C-8B98-AA8F370866E8}"="{D0684E27-E9FE-4D77-A310-AE27EF304FCE}"
    "{6DA09393-F35D-4D44-B574-5BFEF2B0A958}"="{D0684E27-E9FE-4D77-A310-AE27EF304FCE}"
    "{CC9E1D12-BA31-4B73-B681-B1E92894D2A5}"="{D3E91A4F-2AFA-4D27-8FBA-7094220ADF4E}"
    "{E77BCAE2-AAA5-4E98-8DD7-8A4FFE9766EC}"="{7742A51F-700D-4089-AD31-0D28C7E2CB0B}"
    "{AA7880D9-CEFA-42D1-BC6B-6774BBB264D7}"="{7742A51F-700D-4089-AD31-0D28C7E2CB0B}"
    "{5781D72E-8470-4856-9C52-51610A389DD3}"="{0AD3EE72-66CC-4C2C-A582-7FEFE026E487}"
    "{E3243009-0547-4327-9603-83DD83FAD0CA}"="{DA198AAB-350C-45E2-8CF2-EA038A893D52}"
    "{64188F26-632C-4A58-99F1-22BA0E086BE9}"="{DF6648C0-0FC5-44B0-A749-432975F5825F}"
    "{95E3FB67-D602-469A-AE80-79212757A4D9}"="{B057BD48-7BD5-4F9A-927D-3CFB2FF7AC7D}"
    "{7607B8D7-3674-44B0-90CE-6EDD4DBC37F5}"="{48579923-87B2-43E5-9C13-6EFCBED87CF2}"
    "{C0D1882B-327E-43D0-9C1E-A337D02A636E}"="{48579923-87B2-43E5-9C13-6EFCBED87CF2}"
    "{66557B0B-F597-4598-A5C4-2F2BCD1741A1}"="{48579923-87B2-43E5-9C13-6EFCBED87CF2}"
    "{29E18F62-CA7D-41DD-970B-9E1AF3627B76}"="{39A2D9CB-376E-4C0C-859A-ACC3FDD065B5}"
    "{0F512CBD-131C-4044-980F-2264FD7DCD48}"="{6D088C0B-7906-4676-B573-54579805CC1E}"
    "{A0EBC95A-8241-4C66-A67E-9A7A23BC40C3}"="{B673B704-136C-42AD-B5F5-07703DC0B2CC}"
    "{DF6F7712-058D-4FED-8991-E8604625127C}"="{666B5450-AA1D-45E0-9E11-03DD8F6AB74F}"
    "{E08DE082-110B-4786-8B80-B90CB4605A13}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{9008DDB2-B182-4E42-8367-DFBBA1B92DA9}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{F0B5E951-73D9-4A39-9785-9CEB9154BA7E}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{CF99A759-B08E-4D32-A9C5-9E929B717AF0}"="{13A89FEF-7CDF-400B-853F-B60B86D708AB}"
    "{1EF3A0C7-BBBA-4691-AA05-6E23934DDCAD}"="{25F33AE0-7E33-45DE-9D1F-24FA7879BA97}"
    "{26F8C040-FF7F-4966-A691-F85C51F7EA94}"="{434AC489-7F81-4DD5-A56C-3A19211FCB37}"
    "{231F3B8D-9B9E-4D8E-8EE3-279F8769335C}"="{434AC489-7F81-4DD5-A56C-3A19211FCB37}"
    "{9E516DD6-DC31-4B8F-84B3-01CB2638D996}"="{434AC489-7F81-4DD5-A56C-3A19211FCB37}"
    "{53A17971-9A1C-4859-8647-E0F8803E802C}"="{CC3D0193-B021-457E-B253-F330C1B26A46}"
    "{5791D4C0-B8AC-4560-86A8-5EE7E6FBE9CE}"="{4416A618-5D94-492B-8760-A2CBEC2312B9}"
    "{708F6D35-5C28-4405-84F5-63ACA19270A5}"="{88D47BDB-5A82-40F5-A36E-C384305D04F7}"
    "{2E248C6D-53ED-4260-A7E9-6C1C377B0436}"="{968FDE74-3192-4E04-96DC-152BF0B1FABC}"
    "{3A7C4AC6-4A28-484E-8BF0-AD49AD07284C}"="{E4524AFC-6024-4928-A60C-71E95FC99DFB}"
    "{84495DD1-02F7-403E-AC80-214F9AB94770}"="{E4524AFC-6024-4928-A60C-71E95FC99DFB}"
    "{314291BD-A497-4773-B612-2A2D108CF25B}"="{E4524AFC-6024-4928-A60C-71E95FC99DFB}"
    "{7C4371BD-6F33-4CE6-A73A-3049B54DE37D}"="{A22C5DC5-6218-46F6-9684-10A56C5D404B}"
    "{DF341508-DD77-4582-8AA5-6E3839E9440A}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{4F4131BA-0DB8-475F-A88F-0DEEB63AC417}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{273DE66B-56BB-4E35-A257-3A10807A1181}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{5E129A3C-27E8-4585-9EF1-A589ED7FFF29}"="{FEA1B72A-40B8-4BD2-B16B-AB7A9D3D5C34}"
    "{316315BF-F637-4863-907A-35B5EFAA34DD}"="{EF924F0F-CD5F-4747-9F54-8300D00D4A37}"
    "{D91227A4-DF12-4C7A-A59D-89390DF0DF76}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{6764E13B-172D-40FD-B515-A9D042432DBA}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{872B6916-A8B0-428C-A3E4-7B3F8165B59C}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{A69B05E4-406C-424D-AC5F-217AD59DE4DF}"="{2CE7F37B-BF9F-4386-B631-FEEC3F55854E}"
    "{300C51A0-9394-4FEA-A15B-544E0DD74C80}"="{44185B40-0B51-413C-8830-E1CFB9D95192}"
    "{449F30AE-A0E3-41FE-B6F7-6E708C57F018}"="{0D2FD83A-52D3-4E4C-8D82-4160408BE4AB}"
    "{094B4E5E-FBB3-40A5-A3DB-2852E131334F}"="{ED882AAF-2C29-44D5-8192-B7D2D7FE739F}"
    "{D419F3D9-233D-4B7A-BEA2-9B3DBD13BCBE}"="{ED882AAF-2C29-44D5-8192-B7D2D7FE739F}"
    "{C67994C4-A51B-446F-93AD-8FFEFFAE7E7A}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{E8755DF1-F650-4888-937D-E29D41F15A08}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{D3F18525-350C-41E8-9838-6CE7BBE790F2}"="{5443FD6D-6E6A-48E3-9782-43F242100307}"
    "{3E1F8629-1547-446E-AACD-FB28993E8038}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{04308267-23C1-4CCB-B85B-185DCCE6119E}"="{78125EFB-7A97-4CDF-95E2-98BC3CB1C92C}"
    "{0E8B8306-2838-4BF9-8612-F853609061BA}"="{388907A7-3BA7-4563-AC60-4E90AB90D17D}"
    "{80033358-45CA-475B-82B3-5656045BB4C8}"="{B0A86EE4-BC42-4E5E-B76B-AEE22DC8CD13}"
    "{D991A25C-E185-4139-AE2D-0417EA50B3FD}"="{7D6FB3B0-BC6C-4DF0-80D3-047D95A17802}"
    "{B718A73D-21AC-4A04-928B-D6D7B605FD0A}"="{7D6FB3B0-BC6C-4DF0-80D3-047D95A17802}"
    "{E07788CA-4209-4FEA-B6E6-651CC679CD86}"="{616D6AFC-A71A-4927-981C-9F607A5FF6C7}"
    "{A2DFCEDB-46C5-47A5-925B-C4BCD58568DA}"="{9EAFE923-60C5-4FF9-9B2A-A396C98E6C2A}"
    "{84004DED-35D3-40C5-BC71-FA5C1B0342BD}"="{550072E8-9A2A-4E73-B492-149AC095B9B2}"
    "{8418CBD0-1D8B-4862-ADD6-3E3E983D06D6}"="{A885A5CC-425C-4C95-8749-FEA2E0DAAE67}"
    "{3FA2C35D-216B-47E7-A05F-F97BA176F8CA}"="{A885A5CC-425C-4C95-8749-FEA2E0DAAE67}"
    "{5F02DC33-139B-4783-B53D-6C5D90116C96}"="{9D463D1F-EB1C-47CA-ACEA-FFBCE13DD96E}"
    "{4744EA94-2D43-4552-A75E-A6D1DB054F4C}"="{9D463D1F-EB1C-47CA-ACEA-FFBCE13DD96E}"
    "{87460AF4-F818-479A-9AC6-12A208306272}"="{7483350C-4C7E-4E56-AFEE-0E34F288E472}"
    "{C9F9571A-7E3B-4300-B4FC-4E0C5FD6834A}"="{9D463D1F-EB1C-47CA-ACEA-FFBCE13DD96E}"
    "{05AE08BF-DBD1-4383-92B7-6D75CF889CA7}"="{AA5EAD3C-FD40-44E7-A057-9270EE7F2F1E}"
    "{1CB5E043-3916-4C87-9C44-8781C6FA76CD}"="{C2B6D389-8026-4BDD-B859-197AB6093BD4}"
    "{FB34FF0E-933C-4B37-BC59-1DC53DD72E43}"="{5666C98F-8A41-4272-8806-F70BE920059D}"
    "{C00B8A2F-C92C-4851-BA68-27F25FE4C55C}"="{7CD3DFB2-83A1-4CA2-ACEC-12E1ED734351}"
    "{EC889301-F6FB-4C9F-90F4-495CB037E042}"="{EA22AE93-F6AD-404B-B446-5B182B5B90F3}"
    "{997CF82A-6E4E-4DC1-A07C-359EE4FD2FE3}"="{C2922688-9417-45A2-901F-9CCF67E1950B}"
    "{C9C34F1A-66C8-4543-AE0E-F5C046A8E6F0}"="{C2922688-9417-45A2-901F-9CCF67E1950B}"
    "{EAC9AD44-2E46-4DC9-971B-3C840796C960}"="{C2922688-9417-45A2-901F-9CCF67E1950B}"
    "{A082FD71-BFD6-4FEB-83E2-4EA556B88547}"="{581591D7-BAD9-4784-9C57-8EE195A1AD9F}"
    "{1374E453-1B25-480B-B128-71B0A9D63C24}"="{D1F5AB36-74FA-455D-B18B-950626115951}"
    "{F6ACC8D6-8FB4-4989-A85D-AF040E3B5324}"="{67F70D7E-FCF2-4287-A39A-16AC50A8C258}"
    "{F8DE9ABF-F53A-408B-8A00-F873E60DE803}"="{C7100854-0A64-4D83-9947-2678A37161AA}"
    "{CF4017A4-A93C-4432-8A2A-F75C6E678AF0}"="{7945C780-7123-468B-B23D-135E8688E8DF}"
    "{9514F1F8-A46C-4340-A310-066ED382B294}"="{E395020C-784B-486C-9E4A-A6150278AC77}"
    "{5321C693-75BB-4B05-B716-592DDB89D8AF}"="{4131704F-DE58-45D7-B89B-C2988C819647}"
    "{D4263117-7341-40BC-BC10-0A5287102898}"="{D74E57D6-CAD3-4789-984D-9895322F194F}"
    "{4B3ABB55-247E-41B8-93A4-D3419C7C6C69}"="{796C3DEB-B593-4F20-953E-09501B760246}"
    "{C5EB6649-A04B-4FEE-AF9A-2B01A4F523C4}"="{C0D22C4E-A0B8-42B7-9ECC-6164CDCF3BD4}"
    "{E790B7F5-7303-40DA-98A4-5BD51531591E}"="{1C12AF93-ADA0-4C07-B30A-D9E43104F5A6}"
    "{1952D30F-5EBF-4993-8392-9D5ADF6851F3}"="{9B1CE3A4-45CF-4E5E-B91F-1BC27831401F}"
    "{F0BE8EDB-3E9E-47C1-BC52-ADEC3CCD1B97}"="{474497C0-5772-4A3A-B60F-C658F9ABA3E5}"
    "{03B0A651-42FE-458A-B393-2A0BF4399405}"="{AEDA3137-8820-4EE0-BE64-856A7D744065}"
    "{D8FA0E3B-F9B0-45D5-B4D6-0682AA39AA5C}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{554F3586-6138-461A-8667-36BCAF3E1303}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{1B9D3BF3-BD7E-4D6C-B5BB-5976C3AB189C}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{393878FE-FC0C-442A-8216-039515CF67AF}"="{A342BCDA-F4D5-4365-A7B9-F0D175F4A915}"
    "{87B59FAB-6E40-4FF0-B41B-BCAADD67F61A}"="{410210D9-E3D3-46E5-B2FC-3FF43CB4E010}"
    "{D8C83065-FAB6-4E98-9510-803789B9E7BC}"="{346076AC-EE54-4D11-805B-A303FE60E5AC}"
    "{89144C21-6048-4160-A213-4D2850669E3B}"="{346076AC-EE54-4D11-805B-A303FE60E5AC}"
    "{79F2656E-4EB9-4376-8CF1-663AEAB9727E}"="{346076AC-EE54-4D11-805B-A303FE60E5AC}"
    "{584A3C1F-DA42-4148-870D-664694D0572C}"="{770EB647-AB61-449B-8603-4449571B34A5}"
    "{2920674F-CC55-4362-8D55-07DFE59E7FD8}"="{770EB647-AB61-449B-8603-4449571B34A5}"
    "{1FF06291-2A9D-49E4-A5BF-6D32A4865E83}"="{770EB647-AB61-449B-8603-4449571B34A5}"
    "{F1881F52-21E2-467C-B6A0-0018D37436A1}"="{8BB4A7DE-2481-432A-B4C5-5EA1A1810578}"
    "{096F98B8-BDE5-4AD3-B767-844BBAF1679F}"="{CD187349-BE83-4171-A15E-BB35B95CC385}"
    "{CE214785-AC76-4890-A34C-3FBFA8943027}"="{B066A942-FA4F-44D5-B84A-B55E5ED1F847}"
    "{D3D9A4F4-8A6F-4A97-B2E1-A454345CFC44}"="{B066A942-FA4F-44D5-B84A-B55E5ED1F847}"
    "{6CD85FE7-E6C1-4E83-8EAA-B2DC91FC4803}"="{0285AF34-58F9-44EC-A7D7-C63F91B7AA7C}"
    "{A08D9B64-F9C4-4041-BA65-ABF057794522}"="{70DB6B36-AC39-44E6-927E-2F7DF443EE46}"
    "{F7A5C0A2-7324-4AD7-8002-8D3C9E346EE2}"="{70DB6B36-AC39-44E6-927E-2F7DF443EE46}"
    "{D0AD612D-8C44-4FDE-B374-424E4AA6EF22}"="{70DB6B36-AC39-44E6-927E-2F7DF443EE46}"
    "{5FF11877-87B7-463E-BA20-33A2E1771972}"="{E8EED5F2-A320-4301-AA3C-F87220736727}"
    "{371F044B-C6B1-465B-82D2-9CBA253650EF}"="{B7BCAEAB-06CF-4F70-918D-7E0533096379}"
    "{74F6E9E1-BB2F-4724-AE25-D2E0D1695418}"="{B7BCAEAB-06CF-4F70-918D-7E0533096379}"
    "{1B2E9BB3-A679-47A4-BE86-1676A0C84D0F}"="{04C5FBE0-2C06-498D-ABF1-0B9FD39F276E}"
    "{C7F14EF1-9D39-437A-A4E8-85369E0B7E88}"="{04C5FBE0-2C06-498D-ABF1-0B9FD39F276E}"
    "{BB0EA539-CB05-4B13-A360-7329FAC09A82}"="{451B984D-242D-472A-94BE-1376E108CF56}"
    "{17F75696-B60F-4DFD-8773-C2B1EE8A6FDB}"="{04C5FBE0-2C06-498D-ABF1-0B9FD39F276E}"
    "{9A0EC2FB-E7E7-412E-834D-2D16D04317A0}"="{91D7A2F0-60AC-4DDC-BCB9-11392E8854ED}"
    "{7227B25B-CDDA-45F2-8EC5-90269C48B299}"="{29722373-6D90-40C4-BBBE-29B364CE8F65}"
    "{B081C4F7-542B-43D9-874E-D968E5D37456}"="{52BC9CA5-E5B2-44B8-8370-04D115AB8C0A}"
    "{FF64491D-09E0-4DA9-9D6A-EB1C0365130C}"="{FAD16090-330A-43C4-AEC9-5ACCD6BB877A}"
    "{2B5F8EBF-E787-4A51-B7BD-FA74E105101B}"="{52BC9CA5-E5B2-44B8-8370-04D115AB8C0A}"
    "{73610FEA-50D5-4AFF-977E-FEEE340A1C53}"="{52BC9CA5-E5B2-44B8-8370-04D115AB8C0A}"
    "{E6B3F0CB-9BE5-48E8-9217-B8CE6F67701B}"="{ACCBFAEA-A7A8-46C6-85C3-68B54E0B5473}"
    "{63395A41-434E-4174-B3FA-425980640CB4}"="{B2A41215-5235-400A-92EA-A0D8B51500B8}"
    "{9284360E-55C8-4A62-AE59-E068076D24D1}"="{CF03829C-5247-414D-9A81-115D0DFB0C4C}"
    "{1E567F22-9927-4D42-AB6F-3223689DFA02}"="{3F047584-6996-4F13-9AD6-5AAE1FF6BE5E}"
    "{0290DD0E-7DB1-4164-9741-081373DEBA6A}"="{026EC6D3-32F6-412B-B242-55B2ECA88DFD}"
    "{6874B8BA-8A5C-4C87-AC8E-BF2AE937288F}"="{873D5334-0DDE-404A-B989-C4A705F557FB}"
    "{0C772C90-A29B-4805-880E-4EE5C5721846}"="{873D5334-0DDE-404A-B989-C4A705F557FB}"
    "{87223AEC-498B-477A-925A-8347BD4B0F41}"="{ACC7BFFD-E634-4CF9-B4A6-EE004DB6DBCB}"
    "{664F38EC-9B62-4C0D-9CB2-2431CAAD34D7}"="{19C292A4-4456-4B18-AD44-FE6F2293E498}"
    "{4FA7B935-8A5A-4FE7-A6EB-D7A1DB74BFF8}"="{37C447D5-E097-4F0E-AF97-EA92117B15D3}"
    "{AA4C9136-C3D3-4049-9FC8-ACC2470ED290}"="{ACB15A5F-1E41-48C4-922B-401A6187D40B}"
    "{6DD4F407-C66E-4C02-A1B7-787F75324B0D}"="{F532788E-2912-43F3-88A9-CF3AF8FC0445}"
    "{0E469F01-EE2C-4452-ADCB-2DECDC3E9A7B}"="{D08E30C8-EAAE-425E-98D4-F5925A9D285E}"
    "{6F4F21AF-4AC0-4415-85C8-52589561D719}"="{D08E30C8-EAAE-425E-98D4-F5925A9D285E}"
    "{B58CFFE2-CF93-4F7D-ACB7-2D036E552E81}"="{D94EA85A-38DC-4282-8E3A-58C87AC554F5}"
    "{D569F2D8-616B-433C-8612-AA73D25274E1}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{7ED49A74-9E86-49B7-A24C-103E2D1558A3}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{6F15698E-C3F9-4CCD-ACD4-6C3407E57FA1}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{35B18ED8-1B7B-46F5-8608-0A33248BE0E8}"="{F9DAC03F-ED0F-4508-98FD-81A7F6133D71}"
    "{8813371D-008C-4AEB-BCF4-C98A71FF9282}"="{EDBC80AD-3DD0-4D72-AE8A-6823E21FD380}"
    "{AF1754EF-7797-4D4B-A3B1-C130D82EFC1E}"="{E6074FFD-9710-4DAE-B4E8-120612430F2F}"
    "{1E117229-CB6C-4835-9417-60762C9DC274}"="{E6074FFD-9710-4DAE-B4E8-120612430F2F}"
    "{DACE0BE4-AB03-4BA4-B743-F37FB58C50E1}"="{BB6388B4-9659-4CEC-9F6B-90E8BB250EF9}"
    "{07ECCC5A-7ECE-4FF4-B380-DE7F060E0BF1}"="{E6074FFD-9710-4DAE-B4E8-120612430F2F}"
    "{1AD2F680-E62D-493B-A0BD-EB0657D39A7D}"="{C452197F-8D6A-421F-B600-A1D79E82AAA8}"
    "{0ECBA8E4-562E-402A-853A-0F26B6E6FC08}"="{FD3D5EC8-4CDF-4233-A7B4-ABAD38CDF46A}"
    "{2818204B-2E12-4541-8613-6D87B9E0F41D}"="{FD3D5EC8-4CDF-4233-A7B4-ABAD38CDF46A}"
    "{EFA168FE-803D-45FD-9E07-ED0E2441832B}"="{7910235C-36F1-4982-9623-C90BF9D035D8}"
    "{5F566FD0-E363-427C-814C-4634FBC03356}"="{DDF15074-9F1D-42BE-ADD1-9F22BD3043CB}"
    "{49A46CEA-8B49-41CB-9E5A-2FB0F3429FCB}"="{014A8CF6-BDD8-4E63-966F-573A2CEEC895}"
    "{47652250-DFB6-491B-B9AF-28A991B7AFDA}"="{764B665C-F7A0-4118-8A1E-DF42A8A50EE3}"
    "{E7423E1F-281B-42CA-8263-77EC7D429E12}"="{75CE0250-347B-4B36-B220-68A973B70E7B}"
    "{CE71C4EF-C9A3-4DE8-93CC-ED5B6270A86A}"="{515AC2DA-B2FA-42B3-8A64-84FDC317AF51}"
    "{569C088D-10D6-42AF-B105-71CC19174231}"="{515AC2DA-B2FA-42B3-8A64-84FDC317AF51}"
    "{862BF050-4A0B-4D62-9121-3E5ED33963D7}"="{208EB7C8-C891-4513-9891-099E9EF137A5}"
    "{816C5AD1-FC73-4D7C-8CE9-315FBCAA48F1}"="{9B296255-B1F8-4565-BEAD-555506F11514}"
    "{516D4F3C-A25D-4CF1-8F1F-8ECB2D66427D}"="{0249C789-27BC-4DBA-9B27-ED4D3C133BE9}"
    "{F6A6FED3-256A-42B0-9F4A-E3379AD69EF4}"="{7F0F1385-2D83-430B-8034-AD08951A7FD3}"
    "{95800924-1DFB-4EA8-961B-03E1A682E7FB}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{973F3D63-29FE-4FD7-AD12-3BC3BB4C8DEE}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{C2C894C0-2726-451F-BFC2-1BDB9CA43919}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{D151B6EF-3852-4BBF-A7BD-6469952DF5EF}"="{BC2CA3A8-9C59-4234-849C-63CAF7EC8145}"
    "{16690457-21FB-4CBA-9EA1-589EC8DB5B1E}"="{0EC898D8-5579-4922-870B-F9437EDC19B0}"
    "{09F51BD9-F4A6-4E93-A178-639A2C3BF7AB}"="{8E0A42F2-4897-42E2-89F5-3F1C66F778F2}"
    "{48F6500D-8448-4FF5-A95C-1E2654915CEA}"="{B5C4DE09-5069-4914-B2C5-63A1529244C8}"
    "{E29A47DC-47A8-4473-AB5C-27BF475E6ED1}"="{B5C4DE09-5069-4914-B2C5-63A1529244C8}"
    "{8ACA4309-C176-44DD-8EDC-787E62FEF7A6}"="{84EA1173-A26C-49FB-9DF8-A394E427272E}"
    "{67B4B017-06EE-4E31-BD69-ED3C0728F61B}"="{47571D71-F782-45A8-97E6-EA6C5A371FDC}"
    "{705438D3-B38F-4E7E-BA98-B16F697E4648}"="{47571D71-F782-45A8-97E6-EA6C5A371FDC}"
    "{303FC08E-BAF3-4948-9290-0885AA3253B9}"="{47571D71-F782-45A8-97E6-EA6C5A371FDC}"
    "{34F3E5CB-B72B-4168-8019-5A2F0A72B027}"="{100AF524-6CC1-4E0E-ACF7-AFDD85555194}"
    "{99A072C5-DC2A-4CE4-AAA6-1A9A72A9E0BE}"="{300C1B24-720D-472B-B4AC-5BA74C22B08D}"
    "{95A758D4-3A11-4637-B0E8-27D109E6C737}"="{300C1B24-720D-472B-B4AC-5BA74C22B08D}"
    "{7E86C0AC-2E5A-4C27-89AB-535F9F353454}"="{C1E5FB1E-F853-4FF8-987E-EC665C8F5A7A}"
    "{1ED2E58D-BDE5-4407-B38A-0574F768EB85}"="{85920806-1219-4C94-8C93-F45B4065BA72}"
    "{4FD625C8-88B8-4483-BDA8-421561145CE1}"="{85920806-1219-4C94-8C93-F45B4065BA72}"
    "{5ECF847B-CB36-430B-8501-1EDF8776FBE0}"="{85920806-1219-4C94-8C93-F45B4065BA72}"
    "{0433A4CF-1B49-471F-BA80-B68E1B57C221}"="{A1C6BAFA-0BD5-4143-845D-542BB1D58C90}"
    "{61F4D968-835C-4D00-8CE0-D6A5252E8AD8}"="{A1C6BAFA-0BD5-4143-845D-542BB1D58C90}"
    "{E0276077-5F15-4CEA-8509-04A459366A1E}"="{A1C6BAFA-0BD5-4143-845D-542BB1D58C90}"
    "{53360D30-378C-49EF-AD3B-64204DA30461}"="{42D6A3DD-EBF4-47D3-98E3-CAC573A13A4D}"
    "{4C3D34A0-C3CB-4445-B40C-71A9CCDC4422}"="{91B80879-75E0-433A-B0D7-D8F1773FF36E}"
    "{6F60A044-D3D3-46C6-9EFD-4AFCE52616E1}"="{22375BFC-8163-4850-A669-99DD6C321E24}"
    "{1318585E-BD10-42C2-BB4C-5AD4FF818831}"="{2FA07DCE-C7BB-438D-A137-147FB07FFCFE}"
    "{403FBA84-69EB-4D2D-B253-C73010205F21}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{28F7203B-3BF4-4663-8D9A-495CF74A47C1}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{6DD73F9A-D4D5-4A10-B38A-9B78AD7F48BF}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{DBF5AC4A-70DA-453D-ACA2-20A7A3F371B6}"="{63AE48F3-62E4-4EA5-8CD6-6CC41D725136}"
    "{5B2F2053-722B-40EE-B428-682AEEC1AC02}"="{2D7A3FE6-A0D0-4821-9D43-D18CD1E02BD9}"
    "{D7F4EDBB-5FAA-4E02-9DBB-0037F8991E6A}"="{8162A998-5067-47E1-8E2C-2E8B44E2C006}"
    "{AA605C2C-2CD5-4D1E-8174-16037DDF5F74}"="{DB9DD519-E070-4118-922C-541716CECD9A}"
    "{E221B3BC-B2AF-4615-AA4C-79C8624398F2}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{9AB96ED3-52A4-41D0-8D3B-539A25A9E35A}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{DFF5CA7B-B54C-49C2-927E-3EBB6A6C8AA9}"="{A47C9F14-72C3-4F3A-9460-19DD1759A886}"
    "{057B62F9-7E32-4F97-A182-03670F473F2C}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{AFBDEFBC-68B5-4703-8E91-E4BA77BD1EC6}"="{87EA6659-D15B-4FD8-8AAB-2465D6ADBBD5}"
    "{04D1F9F8-EC86-45CA-B02F-9D7066E9FF8E}"="{2AF4F9E2-A7F7-48D7-8F40-159126C1F061}"
    "{2F1C9068-D5DD-454F-8F54-D6100B5AB8E5}"="{2AF4F9E2-A7F7-48D7-8F40-159126C1F061}"
    "{6ED27B6C-F1DC-4F18-B72F-26E397254BCE}"="{2AF4F9E2-A7F7-48D7-8F40-159126C1F061}"
    "{A18093AA-0C38-4F9F-A13B-6412EFA9A361}"="{AF49674D-79AF-4B25-A10F-27E1CDBB5A0F}"
    "{FC0C6D29-7E7F-4AC1-8C06-BDBD5D869F9C}"="{E842B353-28D4-4F96-A269-7C2D640DB96B}"
    "{5DE6A515-1C16-4472-B028-5A5EEBC55769}"="{E9863C67-C1A7-4144-B423-744E80D26263}"
    "{F035303E-AAC4-4FA5-B27E-EA5ECCFC83B7}"="{0EE2264D-2ADD-48A8-9C1C-5CA457FE28C0}"
    "{0FF5D8FB-9C87-4D13-9A90-AB5F76941D95}"="{9CC6E81B-F57D-4C0D-A755-77A45C15C30C}"
    "{FDFA655E-A3CC-45BC-BB33-E076EF148D9B}"="{4D231E24-A8BF-4986-A73A-20B8911BC5F3}"
    "{F34B3116-BA7F-4E28-B209-2B682D4FDBEB}"="{4D231E24-A8BF-4986-A73A-20B8911BC5F3}"
    "{094DFAB2-6273-4AC1-9F39-18755A880B50}"="{4D231E24-A8BF-4986-A73A-20B8911BC5F3}"
    "{0E7D3594-7EDB-4ADB-8731-FE9413A44411}"="{CF93F1DC-7BCA-490B-8FDE-F6B025E1AFB3}"
    "{D31D328B-C1BA-4178-A0D9-33D3F364C4E1}"="{C6C58D2A-3B4B-41C1-85AA-157BE1E592F0}"
    "{3B3CA74A-6845-485B-86F2-3CFD366143FF}"="{6B9E56EE-7669-496C-A28A-5D3269D6EFD5}"
    "{BEA9E2E3-E845-428F-BC00-6E2F94763BD7}"="{6B9E56EE-7669-496C-A28A-5D3269D6EFD5}"
    "{D59ED862-4DB3-41C2-BF8A-0CB8CC93B32D}"="{553D4092-93F4-4890-822D-EA298510586B}"
    "{2CADFB35-9469-4EAF-A96F-E067A2BC562D}"="{34986AD0-A533-44D1-9A80-8EE57950BC1C}"
    "{944A7FE5-2F20-47B6-BCE6-5E8C7B13B8E3}"="{E5C6F0AA-744E-4384-9F45-B3CDFFDE57AA}"
    "{1025151C-6964-427D-9EED-92DAED4443D5}"="{916213F8-52E6-42E9-994D-EE07515F4708}"
    "{9F7B450C-25B0-4021-9DB1-4CA79F07502A}"="{7940986C-54C1-4557-B2EE-A54915DF2445}"
    "{4DE01C82-5110-4BEC-A0EF-8CA3F6F8777A}"="{0C78C008-DF3A-4548-944E-B9AB95E45556}"
    "{A498803E-10E9-48D7-A74B-8201DCB12D58}"="{703BCEFA-03D3-4F05-AD0D-A085B32A8E46}"
    "{5FE7100A-B151-4DC1-A14E-6C336A6691BE}"="{703BCEFA-03D3-4F05-AD0D-A085B32A8E46}"
    "{521AD5FA-CC8C-4200-9642-1B2BF9F9A0C0}"="{4F489F2B-082B-49CA-A383-F06804F45341}"
    "{7E84F757-77F9-4916-934D-3DE055FE8A34}"="{AF64102E-5741-4140-BDA2-478D7EF557C0}"
    "{B50703C4-AD0F-4AFF-94CE-6410B937B853}"="{9E4BEC28-D439-4959-BFAE-118E5A9E0BC6}"
    "{0FA70AA2-2369-4811-80B1-3B2632B59A8F}"="{68A2B84A-7958-4ABE-B753-C75C712A0056}"
    "{FA14FC8E-FE26-47A0-A1D8-79FE2AECB10D}"="{68A2B84A-7958-4ABE-B753-C75C712A0056}"
    "{63F0BF2D-3665-49DA-9CC2-6AFBBC41D701}"="{268CF69F-B226-4CE4-BD2D-33C246A865E7}"
    "{C438E54E-CF52-4281-9346-24AB6B84353A}"="{8FA55FE8-0943-455F-A46A-C3DE249DF245}"
    "{AF4E21C0-45D8-4551-9E7C-AEB54D9607E4}"="{548D927B-F11D-4361-9E55-05AC973CD46B}"
    "{6B5FAE0D-5BB2-4C95-B375-025EBE2E9188}"="{A70CC300-89AD-46F7-8806-8FC77D49E747}"
    "{317E2C8F-B410-4B31-A763-6E85CE856343}"="{D9D56750-3BAF-48C6-92CD-9B41546CD499}"
    "{058C4030-3172-453C-BFC2-1E62164DA516}"="{8C9C7209-1457-4FBE-8BD6-1714921693ED}"
    "{B0ADDBFE-6DC6-45C3-B715-AD29A8C03583}"="{0B117C49-1F27-4278-BCFE-E0040F41C615}"
    "{4D487BBB-AAA7-461B-902F-458A246E529A}"="{002FC93D-5477-44C3-821D-04DB124348DB}"
    "{2A2E3625-B4C0-490B-9F5C-14EA8FF6FD1D}"="{002FC93D-5477-44C3-821D-04DB124348DB}"
    "{17252EC9-6536-4D43-B1D8-ABEA2E4E0B6C}"="{44C8B941-5D1D-4773-A49D-CDD910895139}"
    "ccSvcHst_ccSetMgr"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "ccSettingsService"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "SAVSubmissionEngineIPC"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "SAVSubmissionEngineCallbackIPC"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "ccSvcHst_ccEvtMgr"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "ccEvtCli"="{FB3E0320-7D1D-4DC0-9646-52C9F7F8F066}"
    "{1E7D2FF1-D616-4926-8179-6655D430F699}"="{4A0E37EE-8135-4310-97B6-217E3CF80E3C}"
    "{BFADC982-75E5-497A-A114-95856CCE9A33}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{3898DFB3-ACD1-409C-BC6A-4E688DC3D1B5}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{E4AED5F0-C98F-45AD-9ABE-51FE082EB40F}"="{10CE03F8-F3E7-407D-BBE7-123429B4759E}"
    "{A83D99E0-F87D-488F-9676-B26F91949FE5}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{E28FA5D2-2B6F-4BB7-AEE1-03329FADC558}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{E6C7DEC8-8572-4E2E-A897-544E06C2E552}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{CD258FF9-2915-4831-88C4-A143C67885FD}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{596FA579-6EBD-4F1B-BE22-46F184A4BAD0}"="{78C29A61-C4F9-4213-BFE1-D920DA6BEBCA}"
    "{5BE7790D-D9B9-44A6-A94A-428D2713B4BE}"="{A321C456-9C6E-4EFA-BFAB-BC2286100A59}"
    "{5A718E5B-9017-4AD3-B421-66F380495411}"="{A321C456-9C6E-4EFA-BFAB-BC2286100A59}"
    "{5649410D-5C7A-4FE5-937B-88809555AA1E}"="{A321C456-9C6E-4EFA-BFAB-BC2286100A59}"
    "{CA0E7469-46FD-4F0F-B4E9-36C384DF8705}"="{EC0734F8-2AEF-4960-9800-E6FA4FC61ED0}"
    "{26E558F0-63DE-4EDD-9414-C102609B1AC1}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{7BF0EEC7-D4F4-4409-AB3C-7E809FC3D44D}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{9908A8DB-07C5-4A72-90F2-633EB96A2573}"="{BE4B50F1-C621-43CC-A84E-06EC8FC5BFC3}"
    "{8D3D0913-0372-4F62-83EC-08DED03BCC71}"="{6E207B0D-A356-4A30-A3E2-E86D7500BB80}"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2011-06-25 00:50:34
    ComboFix-quarantined-files.txt 2011-06-25 04:50
    ComboFix2.txt 2011-06-25 03:23
    .
    Pre-Run: 323,602,444,288 bytes free
    Post-Run: 323,544,743,936 bytes free
    .
    - - End Of File - - 73D884CE254A9F4B8E695CB3F7D98B3F
  20. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    Still no internet?

    Bed time here, but if you have time....

    Download TDSSKiller and save it to your desktop.
    • Extract (unzip) its contents to your desktop.
    • Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
    • If an infected file is detected, the default action will be Cure, click on Continue.
    • If a suspicious file is detected, the default action will be Skip, click on Continue.
    • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
    • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
    • If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.
  21. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    TDSSKiller Log

    Internet Still does not work.


    //////////////////
    TDSSKiller Log
    /////////////////



    2011/06/25 01:05:44.0926 1880 TDSS rootkit removing tool 2.5.5.0 Jun 16 2011 15:25:15
    2011/06/25 01:05:44.0926 1880 ================================================================================
    2011/06/25 01:05:44.0926 1880 SystemInfo:
    2011/06/25 01:05:44.0926 1880
    2011/06/25 01:05:44.0926 1880 OS Version: 6.1.7600 ServicePack: 0.0
    2011/06/25 01:05:44.0926 1880 Product type: Workstation
    2011/06/25 01:05:44.0926 1880 ComputerName: NEL
    2011/06/25 01:05:44.0926 1880 UserName: Administrator
    2011/06/25 01:05:44.0926 1880 Windows directory: C:\Windows
    2011/06/25 01:05:44.0926 1880 System windows directory: C:\Windows
    2011/06/25 01:05:44.0926 1880 Running under WOW64
    2011/06/25 01:05:44.0926 1880 Processor architecture: Intel x64
    2011/06/25 01:05:44.0926 1880 Number of processors: 4
    2011/06/25 01:05:44.0926 1880 Page size: 0x1000
    2011/06/25 01:05:44.0926 1880 Boot type: Normal boot
    2011/06/25 01:05:44.0926 1880 ================================================================================
    2011/06/25 01:05:45.0799 1880 Initialize success
    2011/06/25 01:05:51.0166 0164 ================================================================================
    2011/06/25 01:05:51.0166 0164 Scan started
    2011/06/25 01:05:51.0166 0164 Mode: Manual;
    2011/06/25 01:05:51.0166 0164 ================================================================================
    2011/06/25 01:05:52.0289 0164 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
    2011/06/25 01:05:52.0351 0164 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
    2011/06/25 01:05:52.0382 0164 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
    2011/06/25 01:05:52.0445 0164 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
    2011/06/25 01:05:52.0492 0164 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
    2011/06/25 01:05:52.0601 0164 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
    2011/06/25 01:05:52.0679 0164 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
    2011/06/25 01:05:52.0710 0164 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
    2011/06/25 01:05:52.0788 0164 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
    2011/06/25 01:05:52.0897 0164 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
    2011/06/25 01:05:52.0960 0164 amdiox64 (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
    2011/06/25 01:05:53.0022 0164 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
    2011/06/25 01:05:53.0240 0164 amdkmdag (60216b0e704584de6d5a9f59e9c34c47) C:\Windows\system32\DRIVERS\atikmdag.sys
    2011/06/25 01:05:53.0365 0164 amdkmdap (6b4e9261b613b047a9a145f328889968) C:\Windows\system32\DRIVERS\atikmpag.sys
    2011/06/25 01:05:53.0443 0164 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
    2011/06/25 01:05:53.0506 0164 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
    2011/06/25 01:05:53.0537 0164 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
    2011/06/25 01:05:53.0584 0164 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
    2011/06/25 01:05:53.0677 0164 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
    2011/06/25 01:05:53.0771 0164 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
    2011/06/25 01:05:53.0802 0164 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
    2011/06/25 01:05:53.0849 0164 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    2011/06/25 01:05:53.0880 0164 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
    2011/06/25 01:05:53.0989 0164 AtiHDAudioService (4bf5bca6e2608cd8a00bc4a6673a9f47) C:\Windows\system32\drivers\AtihdW76.sys
    2011/06/25 01:05:54.0067 0164 AtiPcie (db0d3de15edc96e7529fc0d3f7760894) C:\Windows\system32\DRIVERS\AtiPcie.sys
    2011/06/25 01:05:54.0145 0164 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
    2011/06/25 01:05:54.0192 0164 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    2011/06/25 01:05:54.0317 0164 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    2011/06/25 01:05:54.0395 0164 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    2011/06/25 01:05:54.0442 0164 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
    2011/06/25 01:05:54.0473 0164 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    2011/06/25 01:05:54.0566 0164 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    2011/06/25 01:05:54.0644 0164 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    2011/06/25 01:05:54.0691 0164 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    2011/06/25 01:05:54.0722 0164 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    2011/06/25 01:05:54.0738 0164 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    2011/06/25 01:05:54.0769 0164 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
    2011/06/25 01:05:54.0878 0164 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    2011/06/25 01:05:54.0956 0164 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
    2011/06/25 01:05:55.0003 0164 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
    2011/06/25 01:05:55.0050 0164 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    2011/06/25 01:05:55.0175 0164 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
    2011/06/25 01:05:55.0222 0164 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
    2011/06/25 01:05:55.0268 0164 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
    2011/06/25 01:05:55.0300 0164 COH_Mon (2e1dfcd558b716323152b009b037cc42) C:\Windows\system32\Drivers\COH_Mon.sys
    2011/06/25 01:05:55.0331 0164 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
    2011/06/25 01:05:55.0378 0164 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
    2011/06/25 01:05:55.0487 0164 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
    2011/06/25 01:05:55.0565 0164 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
    2011/06/25 01:05:55.0612 0164 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    2011/06/25 01:05:55.0721 0164 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
    2011/06/25 01:05:55.0830 0164 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    2011/06/25 01:05:55.0924 0164 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
    2011/06/25 01:05:56.0111 0164 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
    2011/06/25 01:05:56.0220 0164 eeCtrl (eb0883462ac43829e47929d705d40933) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
    2011/06/25 01:05:56.0376 0164 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
    2011/06/25 01:05:56.0532 0164 EraserUtilRebootDrv (86fc0d272f6bb43e7214d4ba955a41e7) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
    2011/06/25 01:05:56.0641 0164 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
    2011/06/25 01:05:56.0704 0164 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
    2011/06/25 01:05:56.0719 0164 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
    2011/06/25 01:05:56.0766 0164 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
    2011/06/25 01:05:56.0797 0164 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
    2011/06/25 01:05:56.0828 0164 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
    2011/06/25 01:05:56.0844 0164 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
    2011/06/25 01:05:56.0860 0164 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
    2011/06/25 01:05:56.0953 0164 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
    2011/06/25 01:05:56.0984 0164 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
    2011/06/25 01:05:57.0031 0164 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
    2011/06/25 01:05:57.0047 0164 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
    2011/06/25 01:05:57.0094 0164 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
    2011/06/25 01:05:57.0140 0164 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
    2011/06/25 01:05:57.0234 0164 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
    2011/06/25 01:05:57.0328 0164 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
    2011/06/25 01:05:57.0359 0164 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
    2011/06/25 01:05:57.0390 0164 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
    2011/06/25 01:05:57.0437 0164 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
    2011/06/25 01:05:57.0484 0164 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
    2011/06/25 01:05:57.0593 0164 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
    2011/06/25 01:05:57.0640 0164 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
    2011/06/25 01:05:57.0671 0164 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
    2011/06/25 01:05:57.0718 0164 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
    2011/06/25 01:05:57.0764 0164 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
    2011/06/25 01:05:57.0796 0164 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
    2011/06/25 01:05:57.0889 0164 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
    2011/06/25 01:05:57.0967 0164 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    2011/06/25 01:05:57.0998 0164 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    2011/06/25 01:05:58.0030 0164 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
    2011/06/25 01:05:58.0076 0164 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
    2011/06/25 01:05:58.0123 0164 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
    2011/06/25 01:05:58.0201 0164 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
    2011/06/25 01:05:58.0279 0164 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
    2011/06/25 01:05:58.0310 0164 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
    2011/06/25 01:05:58.0342 0164 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
    2011/06/25 01:05:58.0388 0164 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
    2011/06/25 01:05:58.0404 0164 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
    2011/06/25 01:05:58.0513 0164 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
    2011/06/25 01:05:58.0607 0164 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
    2011/06/25 01:05:58.0654 0164 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
    2011/06/25 01:05:58.0669 0164 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    2011/06/25 01:05:58.0700 0164 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    2011/06/25 01:05:58.0778 0164 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
    2011/06/25 01:05:58.0872 0164 MBAMProtector (ed49fd1373de93617a1f6d128d98fe4d) C:\Windows\system32\drivers\mbam.sys
    2011/06/25 01:05:58.0934 0164 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
    2011/06/25 01:05:58.0981 0164 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
    2011/06/25 01:05:59.0075 0164 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
    2011/06/25 01:05:59.0137 0164 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
    2011/06/25 01:05:59.0200 0164 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
    2011/06/25 01:05:59.0278 0164 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
    2011/06/25 01:05:59.0309 0164 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
    2011/06/25 01:05:59.0387 0164 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
    2011/06/25 01:05:59.0449 0164 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
    2011/06/25 01:05:59.0496 0164 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
    2011/06/25 01:05:59.0543 0164 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
    2011/06/25 01:05:59.0558 0164 mrxsmb10 (a8c2d7673c8a010569390c826a0efaf4) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    2011/06/25 01:05:59.0590 0164 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    2011/06/25 01:05:59.0699 0164 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
    2011/06/25 01:05:59.0761 0164 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
    2011/06/25 01:05:59.0824 0164 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
    2011/06/25 01:05:59.0839 0164 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
    2011/06/25 01:05:59.0870 0164 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
    2011/06/25 01:05:59.0917 0164 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
    2011/06/25 01:05:59.0995 0164 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
    2011/06/25 01:06:00.0058 0164 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
    2011/06/25 01:06:00.0089 0164 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
    2011/06/25 01:06:00.0120 0164 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
    2011/06/25 01:06:00.0167 0164 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
    2011/06/25 01:06:00.0198 0164 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
    2011/06/25 01:06:00.0245 0164 MTsensor (6936198f2cc25b39cf5262436c80df46) C:\Windows\system32\DRIVERS\ASACPI.sys
    2011/06/25 01:06:00.0338 0164 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
    2011/06/25 01:06:00.0401 0164 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
    2011/06/25 01:06:00.0526 0164 NAVENG (f594e1acbbb3ba48586b5dd69b3a6bc2) C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20110623.018\ENG64.SYS
    2011/06/25 01:06:00.0619 0164 NAVEX15 (cfe00b55488acf0cd9f62b0401297864) C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20110623.018\EX64.SYS
    2011/06/25 01:06:00.0728 0164 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
    2011/06/25 01:06:00.0791 0164 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
    2011/06/25 01:06:00.0838 0164 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
    2011/06/25 01:06:00.0869 0164 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
    2011/06/25 01:06:00.0916 0164 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
    2011/06/25 01:06:00.0978 0164 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
    2011/06/25 01:06:01.0056 0164 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
    2011/06/25 01:06:01.0087 0164 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
    2011/06/25 01:06:01.0150 0164 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
    2011/06/25 01:06:01.0212 0164 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
    2011/06/25 01:06:01.0243 0164 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
    2011/06/25 01:06:01.0352 0164 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
    2011/06/25 01:06:01.0399 0164 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
    2011/06/25 01:06:01.0664 0164 nvlddmkm (3a916891b2ab5acb6bb92348cbfd8cc3) C:\Windows\system32\DRIVERS\nvlddmkm.sys
    2011/06/25 01:06:01.0820 0164 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
    2011/06/25 01:06:01.0883 0164 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
    2011/06/25 01:06:01.0930 0164 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
    2011/06/25 01:06:01.0992 0164 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
    2011/06/25 01:06:02.0101 0164 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
    2011/06/25 01:06:02.0148 0164 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
    2011/06/25 01:06:02.0195 0164 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
    2011/06/25 01:06:02.0242 0164 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
    2011/06/25 01:06:02.0273 0164 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
    2011/06/25 01:06:02.0304 0164 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
    2011/06/25 01:06:02.0335 0164 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
    2011/06/25 01:06:02.0444 0164 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
    2011/06/25 01:06:02.0522 0164 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
    2011/06/25 01:06:02.0585 0164 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
    2011/06/25 01:06:02.0632 0164 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
    2011/06/25 01:06:02.0710 0164 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
    2011/06/25 01:06:02.0772 0164 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
    2011/06/25 01:06:02.0803 0164 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
    2011/06/25 01:06:02.0850 0164 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
    2011/06/25 01:06:02.0881 0164 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
    2011/06/25 01:06:02.0944 0164 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
    2011/06/25 01:06:03.0006 0164 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
    2011/06/25 01:06:03.0022 0164 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
    2011/06/25 01:06:03.0100 0164 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
    2011/06/25 01:06:03.0162 0164 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
    2011/06/25 01:06:03.0193 0164 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
    2011/06/25 01:06:03.0209 0164 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
    2011/06/25 01:06:03.0256 0164 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
    2011/06/25 01:06:03.0287 0164 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
    2011/06/25 01:06:03.0380 0164 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
    2011/06/25 01:06:03.0474 0164 RTL8167 (abcb5a38a0d85bdf69b7877e1ad1eed5) C:\Windows\system32\DRIVERS\Rt64win7.sys
    2011/06/25 01:06:03.0552 0164 RTL8169 (335352091acc9884b9c527edcdd643bb) C:\Windows\system32\DRIVERS\Rtlh64.sys
    2011/06/25 01:06:03.0646 0164 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
    2011/06/25 01:06:03.0739 0164 SCDEmu (b2f50286dc82b93c013e3fc57ba1a956) C:\Windows\system32\drivers\SCDEmu.sys
    2011/06/25 01:06:03.0802 0164 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
    2011/06/25 01:06:03.0864 0164 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
    2011/06/25 01:06:03.0895 0164 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
    2011/06/25 01:06:03.0958 0164 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
    2011/06/25 01:06:04.0020 0164 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
    2011/06/25 01:06:04.0098 0164 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
    2011/06/25 01:06:04.0160 0164 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    2011/06/25 01:06:04.0192 0164 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
    2011/06/25 01:06:04.0223 0164 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
    2011/06/25 01:06:04.0270 0164 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    2011/06/25 01:06:04.0332 0164 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
    2011/06/25 01:06:04.0410 0164 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
    2011/06/25 01:06:04.0472 0164 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
    2011/06/25 01:06:04.0582 0164 SRTSP (620df2e4eca4d3b18486a0976b731411) C:\Windows\system32\Drivers\SRTSP64.SYS
    2011/06/25 01:06:04.0613 0164 SRTSPL (15ae63bfb22579a06d9dfdce3a094aa1) C:\Windows\system32\Drivers\SRTSPL64.SYS
    2011/06/25 01:06:04.0660 0164 SRTSPX (9560cf1b6b002b3277b427491f9e6819) C:\Windows\system32\Drivers\SRTSPX64.SYS
    2011/06/25 01:06:04.0722 0164 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
    2011/06/25 01:06:04.0784 0164 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
    2011/06/25 01:06:04.0831 0164 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
    2011/06/25 01:06:04.0909 0164 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
    2011/06/25 01:06:04.0972 0164 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
    2011/06/25 01:06:05.0018 0164 SymEvent (70c8d165063eb76f1a373b74456d2aab) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
    2011/06/25 01:06:05.0112 0164 Tcpip (61dc720bb065d607d5823f13d2a64321) C:\Windows\system32\drivers\tcpip.sys
    2011/06/25 01:06:05.0252 0164 TCPIP6 (61dc720bb065d607d5823f13d2a64321) C:\Windows\system32\DRIVERS\tcpip.sys
    2011/06/25 01:06:05.0284 0164 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
    2011/06/25 01:06:05.0330 0164 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
    2011/06/25 01:06:05.0377 0164 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
    2011/06/25 01:06:05.0424 0164 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
    2011/06/25 01:06:05.0455 0164 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
    2011/06/25 01:06:05.0486 0164 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
    2011/06/25 01:06:05.0596 0164 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
    2011/06/25 01:06:05.0658 0164 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
    2011/06/25 01:06:05.0705 0164 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
    2011/06/25 01:06:05.0752 0164 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
    2011/06/25 01:06:05.0783 0164 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
    2011/06/25 01:06:05.0814 0164 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
    2011/06/25 01:06:05.0861 0164 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
    2011/06/25 01:06:05.0970 0164 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys
    2011/06/25 01:06:06.0064 0164 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
    2011/06/25 01:06:06.0126 0164 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys
    2011/06/25 01:06:06.0173 0164 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys
    2011/06/25 01:06:06.0220 0164 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\DRIVERS\usbohci.sys
    2011/06/25 01:06:06.0298 0164 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
    2011/06/25 01:06:06.0376 0164 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
    2011/06/25 01:06:06.0422 0164 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\drivers\USBSTOR.SYS
    2011/06/25 01:06:06.0454 0164 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys
    2011/06/25 01:06:06.0516 0164 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
    2011/06/25 01:06:06.0610 0164 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
    2011/06/25 01:06:06.0656 0164 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
    2011/06/25 01:06:06.0688 0164 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
    2011/06/25 01:06:06.0797 0164 VIAHdAudAddService (4e166ea08e18693962bb4645c50d16da) C:\Windows\system32\drivers\viahduaa.sys
    2011/06/25 01:06:06.0859 0164 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
    2011/06/25 01:06:06.0875 0164 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
    2011/06/25 01:06:06.0953 0164 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
    2011/06/25 01:06:07.0000 0164 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
    2011/06/25 01:06:07.0062 0164 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
    2011/06/25 01:06:07.0124 0164 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
    2011/06/25 01:06:07.0171 0164 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
    2011/06/25 01:06:07.0265 0164 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/06/25 01:06:07.0312 0164 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/06/25 01:06:07.0421 0164 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
    2011/06/25 01:06:07.0452 0164 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
    2011/06/25 01:06:07.0530 0164 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
    2011/06/25 01:06:07.0639 0164 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
    2011/06/25 01:06:07.0733 0164 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
    2011/06/25 01:06:07.0795 0164 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
    2011/06/25 01:06:07.0826 0164 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
    2011/06/25 01:06:07.0873 0164 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
    2011/06/25 01:06:07.0904 0164 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
    2011/06/25 01:06:07.0920 0164 ================================================================================
    2011/06/25 01:06:07.0920 0164 Scan finished
    2011/06/25 01:06:07.0920 0164 ================================================================================
    2011/06/25 01:06:07.0920 1480 Detected object count: 0
    2011/06/25 01:06:07.0920 1480 Actual detected object count: 0
  22. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    Let's try some basic steps....

    Make sure, your computer is set to obtain IP address automatically.
    1. Go Start>Settings>Control Panel (Vista/7 users: Start>Control Panel)
    2. Double click Network Connections (Vista/7 users: Network and Sharing Center)
    3. Vista/7 users - From the list of tasks on the left, click Manage network connections.
    4. For a wired network connection, right-click Local Area Connection, and then select Properties.
    For a wireless network connection, right-click Wireless Network Connection, and then select Properties.
    5. From the General tab (Vista/7 users: Networking tab), click Internet Protocol (TCP/IP), make sure it is checked, and then click Properties
    6. Click Obtain an IP Address Automatically, and then click OK.

    If that doesn't work...
    Turn off computer. Disconnect router, and modem from power source for 1 minute. At the same time disconnect ethernet cable as well.
    Reconnect everything.
    Restart computer.

    If that doesn't work, bypass router, and connect computer straight to the modem.

    If that doesn't work...
    Go Start>Run (Start search in Vista), type in:
    cmd
    Click OK (in Vista and 7, while holding CTRL, and SHIFT, press Enter).

    In Command Prompt window, type in following commands, and hit Enter after each one:
    ipconfig /flushdns
    ipconfig /registerdns
    ipconfig /release
    ipconfig /renew
    net stop "dns client"
    net start "dns client"


    Restart computer.

    If that doesn't work...
    Go Start>Run (Start search in Vista and 7), type in:
    cmd
    Click OK (in Vista, while holding CTRL, and SHIFT, press Enter).

    At Command Prompt, type in:
    netsh int ip reset reset.log
    Hit Enter.
    Type in:
    netsh winsock reset catalog
    Hit Enter.

    Restart computer.
  23. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    Internet Works!

    The Last set of commands you gave me for the command prompt finally got my internet back working! Thank you so much. But is the Google redirection virus successfully removed? Everything seems to be running fine so far.
  24. Broni

    Broni Malware Annihilator Posts: 46,781   +254

    Great!

    We need to run couple more checks to make sure.

    Download OTL to your Desktop.

    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Scan All Users checkbox.
    • Under the Custom Scan box paste this in:


    netsvcs
    drivers32
    %SYSTEMDRIVE%\*.*
    %systemroot%\Fonts\*.com
    %systemroot%\Fonts\*.dll
    %systemroot%\Fonts\*.ini
    %systemroot%\Fonts\*.ini2
    %systemroot%\Fonts\*.exe
    %systemroot%\system32\spool\prtprocs\w32x86\*.*
    %systemroot%\REPAIR\*.bak1
    %systemroot%\REPAIR\*.ini
    %systemroot%\system32\*.jpg
    %systemroot%\*.jpg
    %systemroot%\*.png
    %systemroot%\*.scr
    %systemroot%\*._sy
    %APPDATA%\Adobe\Update\*.*
    %ALLUSERSPROFILE%\Favorites\*.*
    %APPDATA%\Microsoft\*.*
    %PROGRAMFILES%\*.*
    %APPDATA%\Update\*.*
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\System32\config\*.sav
    %PROGRAMFILES%\bak. /s
    %systemroot%\system32\bak. /s
    %ALLUSERSPROFILE%\Start Menu\*.lnk /x
    %systemroot%\system32\config\systemprofile\*.dat /x
    %systemroot%\*.config
    %systemroot%\system32\*.db
    %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
    %USERPROFILE%\Desktop\*.exe
    %PROGRAMFILES%\Common Files\*.*
    %systemroot%\*.src
    %systemroot%\install\*.*
    %systemroot%\system32\DLL\*.*
    %systemroot%\system32\HelpFiles\*.*
    %systemroot%\system32\rundll\*.*
    %systemroot%\winn32\*.*
    %systemroot%\Java\*.*
    %systemroot%\system32\test\*.*
    %systemroot%\system32\Rundll32\*.*
    %systemroot%\AppPatch\Custom\*.*
    %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
    %PROGRAMFILES%\PC-Doctor\Downloads\*.*
    %PROGRAMFILES%\Internet Explorer\*.tmp
    %PROGRAMFILES%\Internet Explorer\*.dat
    %USERPROFILE%\My Documents\*.exe
    %USERPROFILE%\*.exe
    %systemroot%\ADDINS\*.*
    %systemroot%\assembly\*.bak2
    %systemroot%\Config\*.*
    %systemroot%\REPAIR\*.bak2
    %systemroot%\SECURITY\Database\*.sdb /x
    %systemroot%\SYSTEM\*.bak2
    %systemroot%\Web\*.bak2
    %systemroot%\Driver Cache\*.*
    %PROGRAMFILES%\Mozilla Firefox\0*.exe
    %ProgramFiles%\Microsoft Common\*.*
    %ProgramFiles%\TinyProxy.
    %USERPROFILE%\Favorites\*.url /x
    %systemroot%\system32\*.bk
    %systemroot%\*.te
    %systemroot%\system32\system32\*.*
    %ALLUSERSPROFILE%\*.dat /x
    %systemroot%\system32\drivers\*.rmv
    dir /b "%systemroot%\system32\*.exe" | find /i " " /c
    dir /b "%systemroot%\*.exe" | find /i " " /c
    %PROGRAMFILES%\Microsoft\*.*
    %systemroot%\System32\Wbem\proquota.exe
    %PROGRAMFILES%\Mozilla Firefox\*.dat
    %USERPROFILE%\Cookies\*.txt /x
    %SystemRoot%\system32\fonts\*.*
    %systemroot%\system32\winlog\*.*
    %systemroot%\system32\Language\*.*
    %systemroot%\system32\Settings\*.*
    %systemroot%\system32\*.quo
    %SYSTEMROOT%\AppPatch\*.exe
    %SYSTEMROOT%\inf\*.exe
    %SYSTEMROOT%\Installer\*.exe
    %systemroot%\system32\config\*.bak2
    %systemroot%\system32\Computers\*.*
    %SystemRoot%\system32\Sound\*.*
    %SystemRoot%\system32\SpecialImg\*.*
    %SystemRoot%\system32\code\*.*
    %SystemRoot%\system32\draft\*.*
    %SystemRoot%\system32\MSSSys\*.*
    %ProgramFiles%\Javascript\*.*
    %systemroot%\pchealth\helpctr\System\*.exe /s
    %systemroot%\Web\*.exe
    %systemroot%\system32\msn\*.*
    %systemroot%\system32\*.tro
    %AppData%\Microsoft\Installer\msupdates\*.*
    %ProgramFiles%\Messenger\*.*
    %systemroot%\system32\systhem32\*.*
    %systemroot%\system\*.exe
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
    /md5start
    /md5stop


    • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them back here.
  25. aznavatar

    aznavatar TS Rookie Topic Starter Posts: 25

    OTL Log part 1

    //////////////////////////////
    OTL LOG part 1
    //////////////////////////////



    OTL logfile created on: 6/25/2011 12:08:18 PM - Run 1
    OTL by OldTimer - Version 3.2.24.1 Folder = C:\Users\Administrator\Downloads
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 8.0.7600.16385)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    4.00 Gb Total Physical Memory | 2.67 Gb Available Physical Memory | 66.67% Memory free
    8.00 Gb Paging File | 6.53 Gb Available in Paging File | 81.70% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 465.76 Gb Total Space | 300.64 Gb Free Space | 64.55% Space Free | Partition Type: NTFS

    Computer Name: NEL | User Name: Administrator | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2011/06/25 12:07:22 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Users\Administrator\Downloads\OTL.exe
    PRC - [2010/11/19 12:05:39 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
    PRC - [2010/07/12 12:32:48 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
    PRC - [2009/08/17 04:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    PRC - [2009/06/24 14:42:10 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe
    PRC - [2009/06/24 14:42:10 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
    PRC - [2009/06/24 14:42:08 | 002,440,632 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
    PRC - [2009/06/24 14:42:08 | 000,050,616 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe


    ========== Modules (SafeList) ==========

    MOD - [2011/06/25 12:07:22 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Users\Administrator\Downloads\OTL.exe
    MOD - [2010/08/21 01:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll


    ========== Win32 Services (SafeList) ==========

    SRV:64bit: - [2011/04/20 02:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
    SRV:64bit: - [2011/01/04 23:07:10 | 000,354,304 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
    SRV:64bit: - [2010/06/17 06:23:36 | 000,194,496 | ---- | M] (Advanced Micro Devices) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe -- (AMD Reservation Manager)
    SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
    SRV - [2010/12/28 04:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files (x86)\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
    SRV - [2010/11/11 21:29:54 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
    SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2009/12/25 01:27:14 | 001,568,768 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\BattlePing\BattleP.exe -- (BATTLEP)
    SRV - [2009/08/17 04:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
    SRV - [2009/06/24 14:42:10 | 000,387,400 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE -- (SNAC)
    SRV - [2009/06/24 14:42:10 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
    SRV - [2009/06/24 14:42:10 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
    SRV - [2009/06/24 14:42:08 | 003,098,440 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
    SRV - [2009/06/24 14:42:08 | 002,440,632 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
    SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
    SRV - [2009/03/20 19:10:15 | 003,093,880 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - [2011/05/29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) [File_System | Disabled | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
    DRV:64bit: - [2011/04/20 02:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
    DRV:64bit: - [2011/04/20 01:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
    DRV:64bit: - [2011/03/11 02:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
    DRV:64bit: - [2011/03/11 02:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
    DRV:64bit: - [2010/11/17 08:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
    DRV:64bit: - [2010/02/18 10:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
    DRV:64bit: - [2009/10/10 06:22:33 | 000,172,080 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
    DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
    DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
    DRV:64bit: - [2009/07/13 21:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
    DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
    DRV:64bit: - [2009/06/24 14:42:12 | 000,480,304 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\srtspl64.sys -- (SRTSPL)
    DRV:64bit: - [2009/06/24 14:42:12 | 000,441,904 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\srtsp64.sys -- (SRTSP)
    DRV:64bit: - [2009/06/24 14:42:12 | 000,032,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\srtspx64.sys -- (SRTSPX)
    DRV:64bit: - [2009/06/24 14:42:06 | 000,025,424 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\COH_Mon.sys -- (COH_Mon)
    DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
    DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
    DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
    DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
    DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
    DRV:64bit: - [2009/03/01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
    DRV:64bit: - [2009/02/15 22:27:48 | 001,119,232 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
    DRV:64bit: - [2008/12/12 01:41:44 | 000,188,416 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rtlh64.sys -- (RTL8169)
    DRV:64bit: - [2008/04/28 09:25:06 | 000,016,400 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) ATI PCI Express (3GIO)
    DRV:64bit: - [2006/11/02 20:00:00 | 000,015,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
    DRV - [2011/05/17 04:00:00 | 002,011,768 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20110623.018\EX64.SYS -- (NAVEX15)
    DRV - [2011/05/17 04:00:00 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20110623.018\ENG64.SYS -- (NAVENG)
    DRV - [2011/05/09 04:00:00 | 000,481,912 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
    DRV - [2011/05/09 04:00:00 | 000,136,824 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
    DRV - [2009/06/24 14:42:12 | 000,480,304 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\srtspl64.sys -- (SRTSPL)
    DRV - [2009/06/24 14:42:12 | 000,441,904 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\SysWOW64\drivers\srtsp64.sys -- (SRTSP)
    DRV - [2009/06/24 14:42:12 | 000,032,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\srtspx64.sys -- (SRTSPX)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.startsearcher.com

    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.startsearcher.com
    IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - Reg Error: Key error. File not found
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


    [2011/06/25 10:14:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
    [2010/08/19 18:59:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
    [2011/04/15 08:20:18 | 001,034,544 | ---- | M] (BitComet) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npBitCometAgent.dll
    [2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
    [2010/07/12 12:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll

    O1 HOSTS File: ([2011/06/25 00:49:28 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
    O1 - Hosts: 127.0.0.1 localhost
    O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
    O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - File not found
    O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found
    O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found
    O4:64bit: - HKLM..\Run: [DLCCCATS] C:\Windows\SysNative\spool\DRIVERS\x64\3\DLCCtime.DLL ()
    O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
    O4 - HKLM..\Run: [ccApp] C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
    O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
    O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
    O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
    O4 - HKCU..\Run: [Aim] C:\Program Files (x86)\AIM\aim.exe (AOL Inc.)
    O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
    O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O8:64bit: - Extra context menu item: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
    O8:64bit: - Extra context menu item: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
    O8 - Extra context menu item: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
    O8 - Extra context menu item: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
    O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.11.1
    O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
    O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
    O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
    O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O24 - Desktop WallPaper:
    O24 - Desktop BackupWallPaper:
    O32 - HKLM CDRom: AutoRun - 1
    O34 - HKLM BootExecute: (autocheck autochk *) - File not found
    O35:64bit: - HKLM\..comfile [open] -- "%1" %*
    O35:64bit: - HKLM\..exefile [open] -- "%1" %*
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
    O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
    O37 - HKLM\...com [@ = ComFile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*


    Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
    Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
    Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
    Drivers32: vidc.ffds - C:\Program Files (x86)\Combined Community Codec Pack\Filters\FFDShow\ff_vfw.dll ()

    CREATERESTOREPOINT
    Restore point Set: OTL Restore Point

    ========== Files/Folders - Created Within 30 Days ==========

    [2011/06/25 01:10:45 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
    [2011/06/25 00:50:35 | 000,000,000 | ---D | C] -- C:\Windows\temp
    [2011/06/25 00:39:07 | 000,000,000 | ---D | C] -- C:\ProgramData\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}
    [2011/06/24 23:15:09 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
    [2011/06/24 23:15:09 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
    [2011/06/24 23:15:09 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
    [2011/06/24 23:15:03 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
    [2011/06/24 23:15:01 | 000,000,000 | ---D | C] -- C:\Qoobox
    [2011/06/24 21:09:08 | 004,770,816 | ---- | C] (Geza Kovacs) -- C:\unetbtin.exe
    [2011/06/24 18:13:13 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\PackageAware
    [2011/06/24 15:37:56 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Malwarebytes
    [2011/06/24 15:37:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
    [2011/06/24 15:37:43 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
    [2011/06/24 15:21:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
    [2011/06/24 02:20:39 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\ElevatedDiagnostics
    [2011/06/24 01:02:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
    [2011/06/23 22:05:49 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\CrashDumps
    [2011/06/23 22:04:54 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
    [2011/06/23 22:04:20 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Google
    [2011/06/23 20:09:39 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
    [2011/06/23 20:08:27 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
    [2011/06/23 16:16:22 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\AMD
    [2011/06/23 16:15:20 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\ATI
    [2011/06/23 15:29:06 | 000,000,000 | ---D | C] -- C:\ProgramData\AIM
    [2011/06/23 15:29:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIM
    [2011/06/23 15:29:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Software Update Utility
    [2011/06/23 15:29:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AIM
    [2011/06/23 15:08:06 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\NPE
    [2011/06/23 15:08:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
    [2011/06/23 14:54:30 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Adobe
    [2011/06/23 14:40:46 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Symantec
    [2011/06/23 14:40:18 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\AIM
    [2011/06/23 14:39:50 | 000,000,000 | ---D | C] -- C:\Users\AznAvatar\AppData\Local\Temp
    [2011/06/23 14:21:30 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\AOL
    [2011/06/23 14:20:56 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Mozilla
    [2011/06/23 14:20:07 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Apps
    [2011/06/12 20:01:02 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\skypePM
    [2011/06/12 20:01:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype Extras
    [2011/06/12 19:57:23 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Skype
    [2011/06/12 19:56:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    [2011/06/12 19:56:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
    [2011/06/12 19:56:25 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
    [2011/06/12 19:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
    [2011/06/10 16:42:20 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
    [2011/06/10 16:42:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
    [2011/06/10 16:42:13 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Notepad++
    [2011/06/10 16:42:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++
    [2011/05/31 12:01:38 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Desktop\LM8
    [2011/05/28 23:34:47 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Desktop\Leatrix Latency Fix 1.23
    [2011/05/28 23:32:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet
    [2011/05/28 23:30:53 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Documents\T0527-705288
    [2010/06/08 14:10:02 | 000,413,696 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccinpa.dll
    [2010/06/08 14:10:02 | 000,397,312 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcciesc.dll
    [2010/06/08 14:10:02 | 000,323,584 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcchcp.dll
    [2010/06/08 14:10:01 | 001,224,704 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccserv.dll
    [2010/06/08 14:10:01 | 000,991,232 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccusb1.dll
    [2010/06/08 14:10:01 | 000,696,320 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcchbn3.dll
    [2010/06/08 14:10:01 | 000,643,072 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccpmui.dll
    [2010/06/08 14:10:01 | 000,585,728 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcclmpm.dll
    [2010/06/08 14:10:01 | 000,538,096 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcccoms.exe
    [2010/06/08 14:10:01 | 000,421,888 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcccomm.dll
    [2010/06/08 14:10:01 | 000,386,544 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccih.exe
    [2010/06/08 14:10:01 | 000,181,744 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccppls.exe
    [2010/06/08 14:10:01 | 000,163,840 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccprox.dll
    [2010/06/08 14:10:01 | 000,094,208 | ---- | C] ( ) -- C:\Windows\SysWow64\dlccpplc.dll
    [2010/06/08 14:10:00 | 000,684,032 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcccomc.dll
    [2010/06/08 14:10:00 | 000,382,448 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcccfg.exe
    [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

    ========== Files - Modified Within 30 Days ==========

    [2011/06/25 12:09:05 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500UA.job
    [2011/06/25 12:00:47 | 000,011,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2011/06/25 12:00:47 | 000,011,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2011/06/25 11:53:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
    [2011/06/25 11:53:12 | 3220,525,056 | -HS- | M] () -- C:\hiberfil.sys
    [2011/06/25 10:16:39 | 000,730,320 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
    [2011/06/25 10:16:39 | 000,626,844 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
    [2011/06/25 10:16:39 | 000,107,160 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
    [2011/06/25 00:49:28 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
    [2011/06/24 22:09:00 | 000,000,888 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500Core.job
    [2011/06/24 21:06:52 | 004,770,816 | ---- | M] (Geza Kovacs) -- C:\unetbtin.exe
    [2011/06/23 22:04:57 | 000,002,347 | ---- | M] () -- C:\Users\Administrator\Desktop\Google Chrome.lnk
    [2011/06/23 20:10:25 | 001,684,874 | ---- | M] () -- C:\Windows\SysNative\drivers\Cat.DB
    [2011/06/23 20:06:06 | 000,000,730 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.bak
    [2011/06/23 15:29:11 | 000,000,719 | -H-- | M] () -- C:\IPH.PH
    [2011/06/23 15:29:06 | 000,001,935 | ---- | M] () -- C:\Users\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\AIM.lnk
    [2011/06/23 15:29:06 | 000,001,911 | ---- | M] () -- C:\Users\Public\Desktop\AIM.lnk
    [2011/06/16 08:58:08 | 000,416,080 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
    [2011/06/12 20:01:09 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat
    [2011/06/12 12:15:18 | 291,322,451 | ---- | M] () -- C:\Users\Administrator\Desktop\nagoya2011_draft.mp4
    [2011/06/05 23:11:55 | 322,766,084 | ---- | M] () -- C:\Users\Administrator\Documents\[SubDESU-H] Ore wa Kanojo o Shinjiteru! 01 [186DFBA0].mkv
    [2011/06/05 23:08:09 | 392,446,590 | ---- | M] () -- C:\Users\Administrator\Documents\[SubDESU-H] Ran-Sem Hakudaku Delmo Tsuma no Miira Tori 01.mkv
    [2011/06/03 13:28:43 | 1046,493,293 | ---- | M] () -- C:\Users\Administrator\Documents\[gg]_Break_Blade_-_5_(720p)_[2D22C45D].mkv
    [2011/05/29 23:03:03 | 000,001,720 | ---- | M] () -- C:\Windows\SysWow64\BATTLEP.ini
    [2011/05/29 10:11:35 | 481,653,231 | ---- | M] () -- C:\Users\Administrator\Documents\[Tsuki]_Naruto_Shippuuden_-_213_[1280x720][D309FC68].mkv
    [2011/05/29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
    [2011/05/29 00:39:13 | 395,121,026 | ---- | M] () -- C:\Users\Administrator\Documents\Ran-Sem Hakudaku Delmo Tsuma no Miira Tori - 01.wmv
    [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

    ========== Files Created - No Company Name ==========

    [2011/06/24 23:15:09 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
    [2011/06/24 23:15:09 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
    [2011/06/24 23:15:09 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
    [2011/06/24 23:15:09 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
    [2011/06/24 23:15:09 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
    [2011/06/23 22:04:57 | 000,002,347 | ---- | C] () -- C:\Users\Administrator\Desktop\Google Chrome.lnk
    [2011/06/23 22:04:22 | 000,000,940 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500UA.job
    [2011/06/23 22:04:21 | 000,000,888 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3213172611-107097552-3265808761-500Core.job
    [2011/06/23 20:10:01 | 001,684,874 | ---- | C] () -- C:\Windows\SysNative\drivers\Cat.DB
    [2011/06/23 19:51:08 | 000,024,576 | ---- | C] () -- C:\Users\Administrator\Desktop\memtest.exe
    [2011/06/23 15:29:06 | 000,001,935 | ---- | C] () -- C:\Users\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\AIM.lnk
    [2011/06/23 15:29:06 | 000,001,911 | ---- | C] () -- C:\Users\Public\Desktop\AIM.lnk
    [2011/06/12 20:01:09 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
    [2011/06/12 13:09:51 | 291,322,451 | ---- | C] () -- C:\Users\Administrator\Desktop\nagoya2011_draft.mp4
    [2011/06/05 22:55:03 | 322,766,084 | ---- | C] () -- C:\Users\Administrator\Documents\[SubDESU-H] Ore wa Kanojo o Shinjiteru! 01 [186DFBA0].mkv
    [2011/06/05 22:54:23 | 392,446,590 | ---- | C] () -- C:\Users\Administrator\Documents\[SubDESU-H] Ran-Sem Hakudaku Delmo Tsuma no Miira Tori 01.mkv
    [2011/06/03 11:15:12 | 1046,493,293 | ---- | C] () -- C:\Users\Administrator\Documents\[gg]_Break_Blade_-_5_(720p)_[2D22C45D].mkv
    [2011/05/29 10:03:22 | 481,653,231 | ---- | C] () -- C:\Users\Administrator\Documents\[Tsuki]_Naruto_Shippuuden_-_213_[1280x720][D309FC68].mkv
    [2011/05/28 23:33:31 | 395,121,026 | ---- | C] () -- C:\Users\Administrator\Documents\Ran-Sem Hakudaku Delmo Tsuma no Miira Tori - 01.wmv
    [2011/05/05 09:58:30 | 000,003,624 | ---- | C] () -- C:\Users\Administrator\AppData\Roaming\DD84.369
    [2011/04/14 01:54:01 | 000,000,600 | ---- | C] () -- C:\Users\Administrator\AppData\Roaming\PUTTY.RND
    [2011/03/17 17:51:46 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
    [2011/02/11 21:07:04 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
    [2010/12/28 12:40:13 | 000,000,268 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
    [2010/10/09 07:11:32 | 000,001,720 | ---- | C] () -- C:\Windows\SysWow64\BATTLEP.ini
    [2010/10/07 12:58:10 | 000,200,704 | ---- | C] () -- C:\Windows\SysWow64\BattleP.dll
    [2010/06/08 14:10:02 | 000,274,432 | ---- | C] () -- C:\Windows\SysWow64\dlccinst.dll
    [2010/06/08 14:10:02 | 000,135,168 | ---- | C] () -- C:\Windows\SysWow64\dlccjswr.dll
    [2010/06/08 14:10:02 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\dlccinsr.dll
    [2010/06/08 14:10:02 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\dlcccur.dll
    [2010/06/08 14:10:01 | 000,434,176 | ---- | C] () -- C:\Windows\SysWow64\dlccutil.dll
    [2010/06/08 14:10:01 | 000,176,128 | ---- | C] () -- C:\Windows\SysWow64\dlccinsb.dll
    [2010/06/08 14:10:01 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\dlccins.dll
    [2010/06/08 14:10:01 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\dlcccub.dll
    [2010/06/08 14:10:01 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\dlcccu.dll
    [2010/06/08 14:10:00 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\dlcccfg.dll
    [2010/02/11 22:33:13 | 000,722,382 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
    [2009/10/04 14:04:05 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
    [2009/10/01 17:15:33 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
    [2009/10/01 16:36:25 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
    [2009/09/19 05:50:49 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
    [2009/09/19 05:45:27 | 000,025,234 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
    [2009/08/03 03:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
    [2009/08/03 03:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
    [2009/08/03 03:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
    [2009/08/03 03:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
    [2009/08/03 03:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
    [2009/08/03 03:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
    [2009/08/03 03:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
    [2009/08/03 03:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
    [2009/08/03 03:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
    [2009/08/03 03:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
    [2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
    [2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
    [2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
    [2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
    [2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
    [2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
    [2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
    [2007/12/28 03:22:02 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS

    ========== LOP Check ==========

    [2010/02/02 18:51:48 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\acccore
    [2011/05/05 09:58:16 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Babylon
    [2011/01/10 22:12:34 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\BitComet
    [2010/02/02 18:51:49 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\DAEMON Tools Lite
    [2011/04/12 19:23:57 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\GetRightToGo
    [2011/06/10 16:42:50 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Notepad++
    [2011/05/05 11:43:57 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Octoshape
    [2011/06/23 13:24:37 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\RIFT
    [2011/05/15 09:13:30 | 000,032,610 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

    ========== Purity Check ==========



    ========== Custom Scans ==========
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.