Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unknown Persistant Infection


  • This topic is locked This topic is locked
2 replies to this topic

#1 rotty_rott

rotty_rott

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:54 PM

Posted 23 May 2008 - 11:13 PM

My HP 533w computer has remained effected with some sort of infection even after numerous reformats and complete harddrive wipes. No virus scan, spyware scan, ccleaner, picks up on what the infection is. Files with never heard of file extentions are created. windows updates are not downloaded or installed. Errors say that programs can not be downloaded and then after searching the computer, the programs/files have been downloaded just renames and the dates changed. For example, when I downloaded the Deckard program it would not run or install due to an error, but I just found a file in my temp folder named ~ralybne.tmp with files related to the deckard scan. Those files are as follows. Please if possible tell me what has gotten ahold of my computer and if it is possible to get it off. Oh and a few hijackthis logs that were ran when os was first re-installed.


Deckard's System Scanner v20071014.68
Run by Owner on 2008-05-22 17:05:34
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
23: 2008-05-22 22:05:39 UTC - RP23 - Deckard's System Scanner Restore Point
22: 2008-05-22 21:58:41 UTC - RP22 - Removed HP Memories Disc
21: 2008-05-22 21:57:39 UTC - RP21 - Installed hp psc 1200 series
20: 2008-05-22 21:52:42 UTC - RP20 - Installed HP Photo and Imaging 2.0 - All-in-One Drivers
19: 2008-05-22 21:50:45 UTC - RP19 - Installed HP Photo and Imaging 2.0 - All-in-One


-- First Restore Point --
1: 2008-05-20 13:55:41 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Owner.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:06:15 PM, on 5/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqDIREC.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTC07.EXE
C:\Documents and Settings\Owner\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Owner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DVDBitSet] "C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe" /NOUI
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/u...can_unicode.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1211292103578
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shock...ash/swflash.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 5908 bytes

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R3 pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

All services whitelisted.


-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.


-- Scheduled Tasks -------------------------------------------------------------

2008-05-22 16:58:53 464 --a------ C:\WINDOWS\Tasks\WebReg 20080522165852.job
2008-05-22 16:58:45 390 --a------ C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1211493454.job


-- Files created between 2008-04-22 and 2008-05-22 -----------------------------

2008-05-22 16:58:32 0 d-------- C:\Documents and Settings\Owner\Application Data\Hewlett-Packard
2008-05-22 16:53:45 0 d-------- C:\WINDOWS\LastGood
2008-05-22 16:48:59 16618 -----n--- C:\WINDOWS\hpomdl01.dat
2008-05-22 16:48:59 20454 --a------ C:\WINDOWS\hpoins01.dat
2008-05-22 16:36:28 0 d-------- C:\WINDOWS\system32\NtmsData
2008-05-22 15:57:01 0 d-------- C:\Program Files\Common Files\Hewlett-Packard
2008-05-22 15:54:40 0 d-------- C:\Program Files\Hewlett-Packard
2008-05-22 14:56:44 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-22 14:56:39 0 d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-05-22 13:53:02 0 d-------- C:\fsaua.data
2008-05-22 13:26:55 0 d-------- C:\Program Files\Trend Micro
2008-05-22 03:20:36 0 d-------- C:\Documents and Settings\Owner\Application Data\Symantec
2008-05-21 14:07:57 0 d-------- C:\Documents and Settings\Owner\Application Data\Leadertech
2008-05-21 10:56:33 0 d-------- C:\Documents and Settings\Owner\.housecall6.6
2008-05-20 23:18:20 0 d-------- C:\WINDOWS\network diagnostic
2008-05-20 13:44:32 0 d-------- C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-05-20 13:44:28 0 d-------- C:\Program Files\DVD Shrink
2008-05-20 13:42:48 0 d-------- C:\Documents and Settings\Owner\Application Data\Sonic
2008-05-20 13:42:39 0 d-------- C:\Program Files\Common Files\Sonic
2008-05-20 13:41:49 0 d-------- C:\Documents and Settings\Owner\Application Data\Macromedia
2008-05-20 13:41:49 0 d-------- C:\Documents and Settings\Owner\Application Data\Adobe
2008-05-20 13:40:54 0 d-------- C:\Program Files\Common Files\SureThing Shared
2008-05-20 13:40:40 0 d-------- C:\Program Files\Sonic_RecordNow
2008-05-20 13:40:40 0 d-------- C:\Program Files\Sonic
2008-05-20 13:39:54 0 d-------- C:\Program Files\HP DVD
2008-05-20 13:39:26 47360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>
2008-05-20 13:39:26 47360 --a------ C:\Documents and Settings\Owner\Application Data\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>
2008-05-20 13:39:25 0 d-------- C:\Documents and Settings\Owner\Application Data\Vso
2008-05-20 13:38:53 0 d-------- C:\Program Files\DVDFab 5
2008-05-20 13:33:31 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
2008-05-20 13:33:07 0 d-------- C:\WINDOWS\system32\ReinstallBackups
2008-05-20 13:32:58 0 d-------- C:\Program Files\Realtek AC97
2008-05-20 13:32:53 315392 --a------ C:\WINDOWS\alcupd.exe <Not Verified; Realtek Semiconductor Corp.; Realtek AC'97 Update driver Tool>
2008-05-20 13:32:52 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-05-20 13:32:26 0 d-------- C:\Program Files\Common Files\InstallShield
2008-05-20 09:27:13 0 d-------- C:\Program Files\Norton 360
2008-05-20 09:24:53 0 d-------- C:\Program Files\Symantec
2008-05-20 09:24:45 0 d-------- C:\Documents and Settings\All Users\Application Data\Symantec
2008-05-20 09:22:15 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-05-20 09:19:53 0 d-------- C:\Intel
2008-05-20 09:18:00 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-05-20 09:14:03 0 d-------- C:\WINDOWS\system32\PreInstall
2008-05-20 09:02:52 0 d-------- C:\WINDOWS\system32\SoftwareDistribution
2008-05-20 09:00:52 0 d--hs---- C:\Documents and Settings\Owner\UserData
2008-05-20 08:55:23 0 d-------- C:\Documents and Settings\Owner\Application Data\Identities
2008-05-20 08:55:13 0 dr------- C:\Documents and Settings\Owner\Favorites
2008-05-20 08:55:13 0 d-------- C:\Documents and Settings\Owner\Desktop
2008-05-20 08:55:13 0 d--hs---- C:\Documents and Settings\Owner\Cookies
2008-05-20 08:55:13 0 dr-h----- C:\Documents and Settings\Owner\Application Data
2008-05-20 08:55:12 0 d--h----- C:\Documents and Settings\Owner\Templates
2008-05-20 08:55:12 0 dr------- C:\Documents and Settings\Owner\Start Menu
2008-05-20 08:55:12 0 dr-h----- C:\Documents and Settings\Owner\SendTo
2008-05-20 08:55:12 0 dr-h----- C:\Documents and Settings\Owner\Recent
2008-05-20 08:55:12 0 d--h----- C:\Documents and Settings\Owner\PrintHood
2008-05-20 08:55:12 1048576 --ah----- C:\Documents and Settings\Owner\NTUSER.DAT
2008-05-20 08:55:12 0 d--h----- C:\Documents and Settings\Owner\NetHood
2008-05-20 08:55:12 0 dr------- C:\Documents and Settings\Owner\My Documents
2008-05-20 08:55:12 0 d--h----- C:\Documents and Settings\Owner\Local Settings
2008-05-20 08:55:06 0 d-------- C:\WINDOWS\SoftwareDistribution
2008-05-20 08:55:05 0 d-------- C:\WINDOWS\Prefetch
2008-05-20 08:55:04 0 d---s---- C:\WINDOWS\system32\Microsoft
2008-05-20 08:55:04 0 d--hs---- C:\Documents and Settings\LocalService\Cookies
2008-05-20 08:55:04 0 d-------- C:\Documents and Settings\LocalService\Application Data
2008-05-20 08:55:04 0 d---s---- C:\Documents and Settings\LocalService\Application Data\Microsoft
2008-05-20 08:55:03 262144 --ah----- C:\Documents and Settings\LocalService\NTUSER.DAT
2008-05-20 08:55:03 0 d--h----- C:\Documents and Settings\LocalService\Local Settings
2008-05-20 08:54:55 225280 --ah----- C:\Documents and Settings\NetworkService\NTUSER.DAT
2008-05-20 08:54:55 0 d--h----- C:\Documents and Settings\NetworkService\Local Settings
2008-05-20 08:54:55 0 d---s---- C:\Documents and Settings\NetworkService\Cookies
2008-05-20 08:54:55 0 d-------- C:\Documents and Settings\NetworkService\Application Data
2008-05-20 08:54:55 0 d---s---- C:\Documents and Settings\NetworkService\Application Data\Microsoft
2008-05-20 08:51:26 0 d-------- C:\WINDOWS\system32\xircom
2008-05-20 08:51:26 0 d-------- C:\Program Files\microsoft frontpage
2008-05-20 08:51:22 225280 ---h----- C:\Documents and Settings\Default User\NTUSER.DAT
2008-05-20 08:51:19 0 d--h----- C:\WINDOWS\$hf_mig$
2008-05-20 08:51:05 0 -rahs---- C:\MSDOS.SYS
2008-05-20 08:51:05 0 -rahs---- C:\IO.SYS
2008-05-20 08:51:05 0 --a------ C:\CONFIG.SYS
2008-05-20 08:51:05 0 --a------ C:\AUTOEXEC.BAT
2008-05-20 08:49:59 0 d--hs---- C:\Documents and Settings\All Users\DRM
2008-05-20 08:49:47 0 dr------- C:\WINDOWS\Offline Web Pages
2008-05-20 08:49:46 0 d---s---- C:\WINDOWS\Downloaded Program Files
2008-05-20 08:49:32 0 d--h----- C:\Program Files\WindowsUpdate
2008-05-20 08:49:02 0 d-------- C:\WINDOWS\system32\DirectX
2008-05-20 08:48:02 0 d---s---- C:\WINDOWS\Tasks
2008-05-20 08:48:00 0 d-------- C:\Program Files\Common Files\MSSoap
2008-05-20 08:47:53 0 d-------- C:\WINDOWS\srchasst
2008-05-20 08:47:51 0 d-------- C:\WINDOWS\system32\Macromed
2008-05-20 08:47:36 0 d-------- C:\Program Files\Movie Maker
2008-05-20 08:47:22 0 d-------- C:\WINDOWS\system32\Restore
2008-05-20 08:46:53 21640 --a------ C:\WINDOWS\system32\emptyregdb.dat
2008-05-20 08:46:38 0 d-------- C:\WINDOWS\Registration
2008-05-20 08:45:58 0 d-------- C:\Program Files\Online Services
2008-05-20 08:45:52 0 d-------- C:\Program Files\Messenger
2008-05-20 08:45:48 0 d-------- C:\Program Files\MSN Gaming Zone
2008-05-20 08:44:53 0 d-------- C:\Program Files\Windows NT
2008-05-20 08:44:47 0 d-------- C:\WINDOWS\system32\MsDtc
2008-05-20 08:44:44 0 d-------- C:\WINDOWS\system32\Com
2008-05-19 21:26:17 0 d--hs---- C:\WINDOWS\Installer
2008-05-19 21:26:16 0 d-------- C:\Program Files\Common Files\ODBC
2008-05-19 21:26:11 0 d-------- C:\Program Files\Common Files\SpeechEngines
2008-05-19 21:26:10 0 dr------- C:\Program Files
2008-05-19 21:26:10 0 d-------- C:\Program Files\Common Files
2008-05-19 21:25:28 0 d--h----- C:\Documents and Settings\Default User\Templates
2008-05-19 21:25:28 0 dr------- C:\Documents and Settings\Default User\Start Menu
2008-05-19 21:25:28 0 dr-h----- C:\Documents and Settings\Default User\SendTo
2008-05-19 21:25:28 0 d--h----- C:\Documents and Settings\Default User\Recent
2008-05-19 21:25:28 0 d--h----- C:\Documents and Settings\Default User\PrintHood
2008-05-19 21:25:28 0 d--h----- C:\Documents and Settings\Default User\NetHood
2008-05-19 21:25:28 0 d-------- C:\Documents and Settings\Default User\My Documents
2008-05-19 21:25:28 0 dr-h----- C:\Documents and Settings\Default User\Local Settings
2008-05-19 21:25:28 0 d-------- C:\Documents and Settings\Default User\Favorites
2008-05-19 21:25:28 0 d-------- C:\Documents and Settings\Default User\Desktop
2008-05-19 21:25:28 0 d---s---- C:\Documents and Settings\Default User\Cookies
2008-05-19 21:25:28 0 d--h----- C:\Documents and Settings\All Users\Templates
2008-05-19 21:25:28 0 dr------- C:\Documents and Settings\All Users\Start Menu
2008-05-19 21:25:28 0 d-------- C:\Documents and Settings\All Users\Favorites
2008-05-19 21:25:28 0 dr------- C:\Documents and Settings\All Users\Documents
2008-05-19 21:25:28 0 d-------- C:\Documents and Settings\All Users\Desktop
2008-05-19 21:25:10 0 d-------- C:\WINDOWS\system32\CatRoot2
2008-05-19 21:25:10 0 d-------- C:\WINDOWS\system32\CatRoot
2008-05-19 21:25:04 0 dr-h----- C:\Documents and Settings\Default User\Application Data
2008-05-19 21:25:04 0 d---s---- C:\Documents and Settings\Default User\Application Data\Microsoft
2008-05-19 21:25:04 0 dr-h----- C:\Documents and Settings\All Users\Application Data
2008-05-19 21:25:04 0 d---s---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-05-19 21:24:30 0 d-------- C:\Documents and Settings
2008-05-19 21:24:29 0 d--hs---- C:\System Volume Information
2008-05-19 21:15:39 0 d-------- C:\WINDOWS
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\WinSxS
2008-05-19 21:15:39 0 dr------- C:\WINDOWS\Web
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\twain_32
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\wins
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\wbem
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\usmt
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\spool
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\ShellExt
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\Setup
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\ras
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\oobe
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\npp
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\mui
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\inetsrv
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\IME
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\icsxml
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\ias
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\export
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\drivers
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\drivers\etc
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\drivers\disdn
2008-05-19 21:15:39 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\dhcp
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\config
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\3com_dmi
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\3076
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\2052
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\1054
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\1042
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\1041
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\1037
2008-05-19 21:15:39 0 d-------- C:\WINDOWS\system32\1



a347bus
a347scsi
aavmker4
abiosdsk
abp480n5
acpi
acpiec
adp94xx
adpahci
adpu160m
adpu320
aec
afcnt
afd
agp440
agpcpq
aha154x
aic116x
aic78u2
aic78xx
alcxwdm
aliide
alim1541
amdagp
amdide
amdk7
amdk8
ami0nt
amsint
arc
arcsas
arp1394
asc
asc3350p
asc3550
aspi32
aswmon2
aswrdr
aswtdi
asyncmac
atapi
atdisk
ati2mtag
atmarpc
audstub
avg anti-spyware driver
avg7core
avg7rsw
avg7rsxp
avgascln
avgclean
avgtdi
b57w2k
bdfdll
bdfsdrv
bdrsdrv
beep
bowser
brfiltlo
brfiltup
brserid
brserwdm
brusbmdm
brusbser
btaudio
btdriver
bthmodem
btkrnl
btwdndis
btwusb
buslogic
cbidf2k
ccdecode
cd20xrnt
cdaudio
cdfs
cdrom
changer
circlass
clfs
clusdisk
cmbatt
cmdide
cmdmon
compbatt
cpqarray
cpqarry2
cpqcissm
cpqfcalm
cpqfws2e
crcdisk
crusoe
csc
ctac32k
ctaud2k
ctdvda2k
ctljystk
ctprxy2k
ctsfm2k
cvirta
cvpndrva
d347bus
d347prt
dac960nt
dc21x4
deckzpsx
dellcerc
dfsc
dfsdriver
dilusbcamera
disk
diskperf
dmboot
dmio
dmload
dmusic
dpti2o
drmkaud
dtscsi
dxgkrnl
e100b
e1express
e1g60
eappkt
ecache
eectrl
efs
elxstor
emu10k
emu10k1
eraserutilrebootdrv
es1371
ewido anti-spyware 4.0 driver
fastfat
fd16_700
fdc
fileinfo
filetrace
fips
fireport
flashpnt
flpydisk
fltmgr
ftdisk
fvevol
gagp30kx
gameenum
gearaspiwdm
gmer
gpc
ha10kx2k
hap16v2k
hcmon
hdaudaddservice
hdaudbus
hidbth
hidir
hidusb
hpcisss
hpn
hpt3xx
hpzid412
hpzipr12
hpzius12
http
i2omgmt
i2omp
i8042prt
iastor
iastorv
iirsp
imapi
incdfs
incdpass
incdrm
ini910u
inspect
intcazaudaddservice
intelc51
intelc52
intelc53
intelide
intelppm
ip6fw
ipfilterdriver
ipinip
ipmidrv
ipnat
ipsec
ipsraidn
irenum
isapnp
iscsiprt
iteatapi
iteraid
kbdclass
kbdhid
kl1
klif
kmixer
ksecdd
l8042kbd
lbrtfdc
lhidflt2
lhidke
lhidrt2
lhidusb
lkbdflt2
lkbdrt2
lltdio
lmouflt2
lmouke
lp6nds35
lsi_fc
lsi_sas
lsi_scsi
luafv
lvckap
lvmvdrv
lvpr2mon
lvusbsta
megasas
mfeavfk
mfebopk
mfehidk
mferkdk
mfesmfk
mhndrv
mnmdd
modem
monitor
mouclass
mouhid
mountmgr
mpfilter
mpio
mpsdrv
mraid35x
mrxdav
mrxsmb
mrxsmb10
mrxsmb20
ms_mpu401
msahci
msdsm
msfs
msfwdrv
msfwhlpr
msisadrv
mskssrv
mspclock
mspqm
msrpc
mssmbios
mstee
mup
nabtsfec
nativewifip
navap
navapel
naveng
navex15
ncrc710
ndis
ndisip
ndistapi
ndisuio
ndiswan
ndproxy
netbios
netbt
netdetect
nfrd960
nic1394
nokia usb generic
nokia usb modem
nokia usb phone parent
npdriver
npfs
nsiproxy
ntfs
ntrigdigi
null
nv
nv_agp
nv4
nvata
nvatabus
nvax
nvenet
nvenetfd
nvndis
nvnetbus
nvnforce
nvport
nvraid
nvstor
nwlnkflt
nwlnkfwd
ohci1394
olcamudp
ossrv
p3
palmusbd
parallel
parport
partmgr
parvdm
pci
pcidump
pciide
pcmcia
pcnet
pdcomp
pdframe
pdreli
pdrframe
peauth
perc2
perc2hib
point32
pptpminiport
processor
profos
psched
ptilink
pxhelp20
ql1080
ql10wnt
ql12160
ql1240
ql1280
ql2100
ql2200
ql2300
ql40xx
qwavedrv
rasacd
rasl2tp
raspppoe
raspti
rca
rdbss
rdpcdd
rdpdr
rdpencdd
rdpwd
redbook
rfcomm
rismxdp
rspndr
rtl8023
rtl8023xp
rtl8139
rtlwusb
s3legacy
savrt
savrtpel
sbp2port
sbusb
secdrv
serenum
serial
sermouse
sffdisk
sffp_mmc
sffp_sd
sfloppy
sfman
sglfb
simbad
sisagp
sisraid2
sisraid4
slip
smb
sonypvu1
sparrow
spbbcdrv
spldr
splitter
sptd
sr
srescan
srv
srv2
srvnet
streamip
swenum
swmidi
sym_hi
sym_u3
symc810
symc8xx
symdns
symevent
symfw
symids
symidsco
symlcbrd
symmpi
symndis
symredrv
symtdi
syntp
sysaudio
tcpip
tcpip6
tcpipreg
tdpipe
tdtcp
tdx
termdd
tga
toside
trufos
tssecsrv
tunmp
tunnel
uagp35
udfs
uhcd
uliagpkx
uliahci
ulsata
ulsata2
ultra
ultra66
umbus
update
usb_rndis
usbaudio
usbccgp
usbcir
usbehci
usbhub
usbohci
usbprint
usbscan
usbser
usbstor
usbuhci
vga
vgasave
viaagp
viaagp1
viac7
viaide
viaudio
volmgr
volmgrx
volsnap
vsdatant
vsmraid
w22n51
w39n51
wacompen
wanarp
wanarpv6
wd
wdf01000
wdica
wdmaud
wlbs
wmiacpi
ws2ifsl
wstcodec
wudfpf
wudfrd
{6080a529-897e-4629-a488-aba0c29b635e}
{d31a0762-0ceb-444e-acff-b049a1f6fe91}





Hotfix for Windows XP
Hotfix for Windows XP
Microsoft .NET Framework
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Windows XP Video Decoder Checkup Utility
MSXML 4.0 SP2
Security Update for Windows Internet Explorer 7
Security Update for Windows Media Player
Security Update for Windows XP
Update for Windows XP
Windows Genuine Advantage
Windows Installer 3.1
Windows Internet Explorer 7
Windows Media Format Runtime
Windows Media Player
Windows Resource Kit Tools
Windows XP Hotfix
Windows XP Service Pack 2






Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel® Celeron® CPU 2.00GHz
Percentage of Memory in Use: 41%
Physical Memory (total/avail): 758.98 MiB / 447.7 MiB
Pagefile Memory (total/avail): 1869.86 MiB / 1551.84 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1923.84 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 74.52 GiB total, 48.74 GiB free.
D: is CDROM (No Media)
E: is CDROM (CDFS)

\\.\PHYSICALDRIVE0 - WDC WD800JB-00JJC0 - 74.53 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 74.52 GiB - C:



-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

FirstRunDisabled is set.

FW: Norton 360 v2007 (SYMANTEC Corporation)
AV: Norton 360 v2007 (SYMANTEC Corperation)

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Owner\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=MIKE
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Owner
LOGONSERVER=\\MIKE
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 7, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0207
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Owner\LOCALS~1\Temp
TMP=C:\DOCUME~1\Owner\LOCALS~1\Temp
USERDOMAIN=MIKE
USERNAME=Owner
USERPROFILE=C:\Documents and Settings\Owner
windir=C:\WINDOWS


-- User Profiles ---------------------------------------------------------------

Owner (admin)


-- Add/Remove Programs ---------------------------------------------------------

--> C:\WINDOWS\system32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
AppCore --> MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
AV --> MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
ccCommon --> MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
DVD Shrink 3.2 --> "C:\Program Files\DVD Shrink\unins000.exe"
DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.2.0 --> "C:\Program Files\DVDFab 5\unins000.exe"
GearDrvs --> MsiExec.exe /I{228F6876-A313-40A3-91C0-C3CBE6997D09}
HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
HP DVD Writer --> "C:\Program Files\HP DVD\Support\Uninstall.exe" /UNINSTALL
HP Photo and Imaging 2.0 - All-in-One --> MsiExec.exe /



lsp.txt
mswsock.dll
winrnr.dll



Directories/Files moved to C:\Deckard\System Scanner\backup

2008-05-22 13:59:02 0 d-------- C:\DOCUME~1\Owner\LOCALS~1\Temp\F-Secure
2008-05-22 13:53:02 0 d-------- C:\DOCUME~1\Owner\LOCALS~1\Temp\fsaua.tmp
2008-05-22 16:07:15 1579 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpolex000.log
2008-05-22 16:56:53 1580 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpolex001.log
2008-05-22 16:55:25 696558 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpomsi_log_d01.txt
2008-05-22 16:52:15 1582086 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpomsi_log_s01.txt
2008-05-22 16:55:07 1736 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpopdi00.log
2008-05-22 16:37:11 6976 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\HPOUNI001.2008May22-163711.LOG
2008-05-22 16:07:57 1942 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzarp000.log
2008-05-22 16:57:32 1955 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzarp001.log
2008-05-22 16:54:58 596 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi00.log
2008-05-22 16:54:58 596 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi01.log
2008-05-22 16:54:59 596 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi02.log
2008-05-22 16:55:00 596 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi03.log
2008-05-22 16:55:00 596 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi04.log
2008-05-22 16:55:00 596 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi05.log
2008-05-22 16:55:01 596 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi06.log
2008-05-22 16:55:03 1052 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi07.log
2008-05-22 16:55:03 678 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcoi08.log
2008-05-22 16:55:03 424 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzcon00.log
2008-05-22 16:55:02 1653 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzpin00.log
2008-05-22 16:39:02 114 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hpzrei000.log
2008-05-22 16:39:01 10930 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\HPZscr000.log
2008-05-22 16:32:22 3927556 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\HPZscr000_MSI_0.log
2008-05-22 16:36:16 1999976 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\HPZscr000_MSI_1.log
2008-05-22 16:07:58 1951 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\HPZset000.log
2008-05-22 16:39:03 939 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\HPZset001.log
2008-05-22 16:57:33 1955 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\HPZset002.log
2008-05-22 16:57:19 58268 --a------ C:\DOCUME~1\Owner\LOCALS~1\Temp\hp_md_MSI_LOG.txt
2008-05-22 14:56:48 0 d-------- C:\DOCUME~1\Owner\LOCALS~1\Temp\KAV Updater update files
2008-05-22 15:05:30 0 d-------- C:\DOCUME~1\Owner\LOCALS~1\Temp\OnlineScanner
2008-05-22 13:50:29 0 d--h----- C:\DOCUME~1\Owner\LOCALS~1\Temp\~kwyegxb.tmp
2008-05-22 16:54:54 596 --a------ C:\WINDOWS\temp\hpzcoi00.log
2008-05-22 16:54:55 596 --a------ C:\WINDOWS\temp\hpzcoi01.log
2008-05-22 16:54:57 924 --a------ C:\WINDOWS\temp\hpzcoi02.log
2008-05-22 16:54:57 678 --a------ C:\WINDOWS\temp\hpzcoi03.log
2008-03-24 19:33:02 1527056 --a------ C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe <Verified; Adobe Systems Incorporated; Adobe® Flash® Player ActiveX>
2008-02-27 15:59:16 588392 --a------ C:\WINDOWS\Downloaded Program Files\gatelauncher.exe <Verified; F-Secure Corporation; F-Secure GateLauncher>
2008-02-27 15:59:28 290816 --a------ C:\WINDOWS\Downloaded Program Files\auc_lib.dll <Not Verified; F-Secure Corporation; F-Secure Automatic Update Agent>
2008-02-27 15:59:28 495616 --a------ C:\WINDOWS\Downloaded Program Files\daas_s.dll <Not Verified; F-Secure Corporation; F-Secure Corporation daas>
2008-02-27 16:00:12 262144 --a------ C:\WINDOWS\Downloaded Program Files\fscax.dll <Not Verified; F-Secure Corporation; F-Secure Online Scanner>

-*- End of Logfile -*-



notify.txt

crypt32chain
cryptnet
cscdll
ScCertProp
Schedule
sclgntfy
SensLogn
termsrv
wlballoon

services


.net clr data
.net clr networking
.net data provider for oracle
.net data provider for sqlserver
.netframework
6to4
abiosdsk
abp480n5
acpi
acpiec
acprfmgrsvc
acsvc
addfiltr
adobe lm service
adpu160m
aec
aelookupsvc
afd
agp440
aha154x
aic78u2
aic78xx
alcxwdm
alerter
alg
aliide
amon
amsint
antivirservice
aol
aol acs
aol topspeedmonitor
apc ups service
appinfo
appmgmt
arp1394
asc
asc3350p
asc3550
asp.net
asp.net_2.0.50727
aspnet_state
aswupdsv
asyncmac
atapi
atdisk
ati hotkey poller
ati smart
ati2mtag
atmarpc
audioendpointbuilder
audiosrv
audstub
automatic liveupdate scheduler
avast!
avast! antivirus
avast! mail scanner
avast! web scanner
avg anti-spyware guard
avg7alrt
avg7core
avg7rsw
avg7rsxp
avg7updsvc
avgclean
avgems
avp
basic2
battc
bdss
beep
bfe
bits
brmfrmps
brother xp spl service
browser
btwdins
cbidf2k
ccevtmgr
ccproxy
ccpwdsvc
ccsetmgr
cd20xrnt
cdaudio
cdfs
cdrom
certpropsvc
changer
cisvc
clipsrv
clr_optimization_v2.0.50727_32
cltnetcnservice
cmbatt
cmdagent
cmdide
comhost
compbatt
comsysapp
contentfilter
contentindex
cpqarray
creative service for cdrom access
cryptsvc
cscservice
dac2w2k
dac960nt
dcomlaunch
defragfs
defwatch
dfs
dfsr
dhcp
disk
dlbx_device
dmadmin
dmboot
dmio
dmload
dmserver
dmusic
dnscache
dot3svc
dps
dpti2o
drmkaud
eaphost
ehrecvr
ehsched
ehstart
emdmgmt
emproxy
ersvc
es1371
eventlog
eventsystem
evteng
ewido
ewido anti-spyware 4.0 guard
ewido security suite control
fallback
fastfat
fastuserswitchingcompatibility
fax
fdc
fdphost
fdrespub
fips
flpydisk
fltmgr
fontcache3.0.0.0
fs_rec
fsks
ftdisk
gameenum
ghostsec
giveio
gmer
googledesktopmanager
gpc
gpsvc
gusvc
hamachi
hcmon
helpsvc
hidserv
hidusb
hkmsvc
hpn
hpqwmiex
hsf_dp
hsfhwbs2
http
httpfilter
i2omgmt
i2omp
i8042prt
iaantmon
idrivert
idsvc
ikeext
imapi
imapiservice
incdfs
incdpass
incdrec
incdrm
incdsrv
inetaccs
ini910u
inport
intelide
intelppm
interactivelogon
ip6fw
ipbusenum
ipfilterdriver
iphlpsvc
ipinip
ipnat
ipod service
ipod
ipodservice
ipsec
irenum
isapisearch
isapnp
ismserv
ispwdsvc
k56
kbdclass
kdc
keyiso
kmixer
kodakccs
kpf4
ksecdd
ktmrm
l8042pr2
lanmanserver
lanmanworkstation
lbrtfdc
ldap
lexbces
lhidflt2
lhidusb
licenseservice
lightscribeservice
livesrv
liveupdate
lltdsvc
lmhosts
lmouflt2
lvprcsrv
lvsrvlauncher
macromedia licensing service
mcafee hackerwatch service
mcdetect.exe
mcmispupdmgr
mcmscsvc
mcnasvc
mcods
mcpromgr
mcproxy
mcredirector
mcshield
mcsysmon
mctskshd.exe
mcupdmgr.exe
mcrdsvc
mcvsrte
mcx2svc
mdm
mdmxsdk
messenger
mmcss
mnmdd
mnmsrvc
modem
modemcsa
mouclass
mouhid
mountmgr
mpfservice
mps9
mpssvc
mraid35x
mrxdav
mrxsmb
mscamsvc
msdtc
msfs
msiscsi
msiserver
mskssrv
mspclock
mspqm
mssmbios
mssqlserveradhelper
mup
napagent
navapsvc
ndis
ndistapi
ndisuio
ndiswan
ndproxy
netbios
netbt
netdde
netddedsdm
netlogon
netman
netprofm
netsvc
nettcpportsharing
nic1394
nla
nlasvc
nod32krn
norton antivirus server
norton ghost
npfmntor
npfs
nprotectservice
nsi
ntfrs
ntfs
ntlmssp
ntmssvc
null
nv4
nv_agp
nvatabus
nvenetfd
nvnetbus
nvraid
nvsvc
nwlnkflt
nwlnkfwd
odserv
ohci1394
omniserv
ose
p2pimsvc
p2psvc
parport
partmgr
parvdm
pcasvc
pci
pcidump
pciide
pcmcia
pcnet
pdagent
pdcomp
pdengine
pdframe
pdreli
pdrframe
perc2
perc2hib
perfdisk
perfnet
perfos
perfproc
pla
plugplay
pml driver hpz12
pml
pnrpautoreg
pnrpsvc
policyagent
pptpminiport
prismxl
processor
procmon10
profsvc
protectedstorage
psched
ptilink
ql1080
ql10wnt
ql12160
ql1240
ql1280
qwave
rasacd
rasauto
rasl2tp
rasman
raspppoe
raspti
rdbss
rdpcdd
rdpdd
rdpdr
rdpnp
rdpwd
rdsessmgr
redbook
remoteaccess
remoteregistry
rksample
rpclocator
rpcss
rrrspy
rrspy
rsopprov
rsvp
rwbackupsrv
s24eventmonitor
s3savagenb
sacsvr
samss
savscan
sbservice
scarddrv
scardsvr
schedule
scpolicysvc
sdhelper
sdrsvc
secdrv
seclogon
sens
serenum
serial
sessionenv
sfloppy
sharedaccess
shellhwdetection
simbad
siteadvisor service
slsvc
sluinotify
smcservice
sndsrvc
snmptrap
softfax
sparrow
spbbcsvc
speakerphone
splitter
spooler
sr
srservice
srv
ssdpsrv
stisvc
svcwrsssdk
svv
swenum
swmidi
swprv
sym_hi
sym_u3
symantec
symantec core lc
symappcore
symc810
symc8xx
symwsc
sysaudio
sysmain
sysmonlog
tabletinputservice
tapisrv
tbs
tcpip
tdimsys
tdpipe
tdtcp
termdd
termservice
themes
threadorder
tivobeacon2
tlntsvr
tones
toside
trksvr
trkwks
trustedinstaller
tsddd
tssdis
tvt backup service
udfs
ui0detect
uleadburninghelper
ultra
umrdpservice
umwdf
unlockerdriver5
update
upnphost
ups
us30sys
usbehci
usbhub
usbohci
usbprint
usbstor
usbuhci
usnjsvc
utilman
uxsms
v124
vds
vgasave
viaide
visual studio analyzer rpc bridge
volsnap
vsmon
vss
vsserv
vstor2
vxd
w32time
w3svc
wanarp
wanminiportservice
wbengine
wcncsvc
wcspluginservice
wdica
wdiservicehost
wdisystemhost
wdmaud
webclient
webrootspysweeperservice
wecsvc
wercplsupport
wersvc
winachsf
windefend
winhttpautoproxysvc
winmgmt
winrm
winsock
winsock2
wintrust
wlansvc
wltrysvc
wmconnectcds
wmdm pmsp service
wmdmpmsn
wmi
wmiaprpl
wmiapsrv
wmpnetworksvc
wpcsvc
wpdbusenum
ws2ifsl
wscsvc
wsearch
wuauserv
wudfpf
wudfrd
wudfsvc
wwsecsvc
wzcsvc
xcomm
xmlprov
yukonwxp
yurtmonitor
{834170a7-af3b-4d34-a757-e05eb29ee96d}
{85ccb53b-23d8-4e73-b1b7-9ddb71827d9b}
{a7447300-8075-4b0d-83f1-3d75c8ebc623}
{eda5f5d3-9e0f-4f4d-8a13-1d1cf469c9cc}


signers.txt

ahead software ag^
alwil software^
analog devices, inc.^soundmax service agent
broadcom corporation^
cisco systems, inc.^cisco systems vpn client
creative technology limited^
creative technology ltd.^
divx inc.^
divxnetworks^
seiko epson corp.^epson wia
seiko epson corp.^command interpreter module
gemteks^gemteks wlservice
grisoft, s.r.o.^
lead technologies, inc.^leadtools® dll for win32
logitech inc.^logitech quickcam
logitech, inc.^logitech mouseware™
logitech, inc.^logitech mouseware
macrovision europe ltd^sdcplh
meetinghouse data communications^aegis client 3.4.3.0
microsoft corporation^3d windows controls
microsoft corporation^microsoft ® visual c++
microsoft corporation^microsoft data access components
microsoft corporation^microsoft office document imaging
microsoft corporation^microsoft sql server
microsoft corporation^microsoft windows™ ole 2.0 user interface support
microsoft corporation^microsoft® visual studio .net
microsoft corporation^microsoft® visual studio® 2005
microsoft corporation^visual basic
musicmatch, inc.^musicmatch access layer
netropa corporation^multimedia keyboard
nirsoft^nircmd
nvidia corporation^
pctools research pty ltd.^spyware doctor
prevx limited, http://www.prevx1.com/^
rdv soft^rdv soft
rdv soft^ultravnc mirror driver
rocket division software^starwind
roxio^directcd
roxio^drag-to-disc
seiko epson corp.^
sensaura^
sis corporation^ndis 5 nic driver
sonic solutions^
sony corporation^
the openssl project, http://www.openssl.org/^the openssl toolkit
via networking technologies, inc.^
via technologies, inc.^
kaspersky lab^kaspersky anti-virus
adobe systems, inc.^adobe pdf shell extension
^spywareguard protection
cerulean studios^trillian
^spywareguard download protection

ssodl.txt
postbootreminder
cdburn
webcheck
systray
upnpmonitor
wodshserviceobj


sts.txt

{438755c2-a8ba-11d1-b96b-00a0c90312e1}
{8c7461ef-2b13-11d2-be35-3078302c2030}


whitedir

appdata,\microsoft
commonprogramfiles,\
commonprogramfiles,\designer
commonprogramfiles,\microsoft shared
commonprogramfiles,\services
commonprogramfiles,\softwin
commonprogramfiles,\system
programfiles,\adobe
programfiles,\antivir personaledition classic
programfiles,\aol
programfiles,\cleanup!
programfiles,\complus applications
programfiles,\du meter
programfiles,\erunt
programfiles,\eset
programfiles,\ewido
programfiles,\ghostsecuritysuite
programfiles,\grisoft
programfiles,\haxfix
programfiles,\hijackthis
programfiles,\ieak
programfiles,\inctrl5
programfiles,\internet explorer
programfiles,\microsoft office
programfiles,\microsoft visual studio
programfiles,\mozilla firefox
programfiles,\msn
programfiles,\netmeeting
programfiles,\orktools
programfiles,\outlook express
programfiles,\pepimk software
programfiles,\prevx1
programfiles,\registry mechanic
programfiles,\softwin
programfiles,\spybot - search & destroy
programfiles,\unhackme
programfiles,\uninstall information
programfiles,\unlocker
programfiles,\windows media player
programfiles,\winrar
programfiles,\winzip
programfiles,\xerox
programfiles,\zone labs
systemdrive,\_otmoveit
systemdrive,\avenger
systemdrive,\combofix
systemdrive,\combofix.txt.bat
systemdrive,\comboscan
systemdrive,\config.msi
systemdrive,\deckard
systemdrive,\fixwareout
systemdrive,\hiberfil.sys
systemdrive,\ntdetect.com
systemdrive,\pagefile.sys
systemdrive,\recycler
systemdrive,\qoobox
systemdrive,\sdfix
systemdrive,\suspectfile
systemroot,\arclib.dll
systemroot,\assembly
systemroot,\bootstat.dat
systemroot,\catchme.exe
systemroot,\erdnt
systemroot,\gmer.bat
systemroot,\gmer.dll
systemroot,\gmer.exe
systemroot,\gmer.reg
systemroot,\gmer_uninstall.cmd
systemroot,\history
systemroot,\ie7
systemroot,\ie7updates
systemroot,\libeay32.dll
systemroot,\microsoft.net
systemroot,\minidump
systemroot,\ssleay32.dll
systemroot,\streamhlp.dll
systemroot,\system32\advpack.dll
systemroot,\system32\asuninst.exe
systemroot,\system32\avsda.dll
systemroot,\system32\bassmod.dll
systemroot,\system32\browseui.dll
systemroot,\system32\capicom.dll
systemroot,\system32\cdfview.dll
systemroot,\system32\csrss.exe
systemroot,\system32\d3dx9_24.dll
systemroot,\system32\d3dx9_25.dll
systemroot,\system32\d3dx9_27.dll
systemroot,\system32\d3dx9_28.dll
systemroot,\system32\d3dx9_29.dll
systemroot,\system32\d3dx9_30.dll
systemroot,\system32\danim.dll
systemroot,\system32\dfrgntfs.exe
systemroot,\system32\dhcpcsvc.dll
systemroot,\system32\dllhost.exe
systemroot,\system32\dnsapi.dll
systemroot,\system32\drivers\apt.sys
systemroot,\system32\drivers\avg7core.sys
systemroot,\system32\drivers\avg7rsw.sys
systemroot,\system32\drivers\avg7rsxp.sys
systemroot,\system32\drivers\avgclean.sys
systemroot,\system32\drivers\avgmfx86.sys
systemroot,\system32\drivers\avgntdd.sys
systemroot,\system32\drivers\avgntmgr.sys
systemroot,\system32\drivers\avgtdi.sys
systemroot,\system32\drivers\avipbb.sys
systemroot,\system32\drivers\cmdmon.sys
systemroot,\system32\drivers\gmer.sys
systemroot,\system32\drivers\inspect.sys
systemroot,\system32\drivers\klick.sys
systemroot,\system32\drivers\klif.sys
systemroot,\system32\drivers\klin.sys
systemroot,\system32\drivers\pxcom.sys
systemroot,\system32\drivers\pxemu.sys
systemroot,\system32\drivers\pxfsf.sys
systemroot,\system32\drivers\pxrd.sys
systemroot,\system32\drivers\pxscrmbl.sys
systemroot,\system32\drivers\pxtdi.sys
systemroot,\system32\drivers\rrspy.sys
systemroot,\system32\drivers\rrspy64.sys
systemroot,\system32\drivers\ssmdrv.sys
systemroot,\system32\drivers\usbstor.sys
systemroot,\system32\dxtmsft.dll
systemroot,\system32\dxtrans.dll
systemroot,\system32\en-us
systemroot,\system32\extmgr.dll
systemroot,\system32\fntcache.dat
systemroot,\system32\hal.dll
systemroot,\system32\icardie.dll
systemroot,\system32\ie4uinit.exe
systemroot,\system32\ieakeng.dll
systemroot,\system32\ieaksie.dll
systemroot,\system32\ieakui.dll
systemroot,\system32\ieapfltr.dat
systemroot,\system32\ieapfltr.dll
systemroot,\system32\iedkcs32.dll
systemroot,\system32\ieframe.dll
systemroot,\system32\iepeers.dll
systemroot,\system32\iernonce.dll
systemroot,\system32\iertutil.dll
systemroot,\system32\ieudinit.exe
systemroot,\system32\ieui.dll
systemroot,\system32\imon1.dat
systemroot,\system32\inseng.dll
systemroot,\system32\iphlpapi.dll
systemroot,\system32\java.exe
systemroot,\system32\javaw.exe
systemroot,\system32\javaws.exe
systemroot,\system32\jgdw400.dll
systemroot,\system32\jgpl400.dll
systemroot,\system32\jscript.dll
systemroot,\system32\jsproxy.dll
systemroot,\system32\kbdaze.dll
systemroot,\system32\kbdblr.dll
systemroot,\system32\kbdbu.dll
systemroot,\system32\kbdkaz.dll
systemroot,\system32\kbdru.dll
systemroot,\system32\kbdru1.dll
systemroot,\system32\kbdtat.dll
systemroot,\system32\kbdur.dll
systemroot,\system32\kbduzb.dll
systemroot,\system32\kbdycc.dll
systemroot,\system32\kernel32.dll
systemroot,\system32\legitcheckcontrol.dll
systemroot,\system32\libeay32_0.9.6l.dll
systemroot,\system32\moveex.exe
systemroot,\system32\mrt.exe
systemroot,\system32\msfeeds.dll
systemroot,\system32\msfeedsbs.dll
systemroot,\system32\msfeedssync.exe
systemroot,\system32\msftedit.dll
systemroot,\system32\mshtml.dll
systemroot,\system32\mshtmled.dll
systemroot,\system32\msrating.dll
systemroot,\system32\mstime.dll
systemroot,\system32\netapi32.dll
systemroot,\system32\ntkrnlpa.exe
systemroot,\system32\ntoskrnl.exe
systemroot,\system32\occache.dll
systemroot,\system32\perfc009.dat
systemroot,\system32\perfh009.dat
systemroot,\system32\pncrt.dll
systemroot,\system32\pndx5016.dll
systemroot,\system32\pndx5032.dll
systemroot,\system32\pngfilt.dll
systemroot,\system32\px.dll
systemroot,\system32\pxcpya64.exe
systemroot,\system32\pxdrv.dll
systemroot,\system32\pxhpinst.exe
systemroot,\system32\pxinsa64.exe
systemroot,\system32\pxinst.dll
systemroot,\system32\pxmas.dll
systemroot,\system32\pxsfs.dll
systemroot,\system32\pxwave.dll
systemroot,\system32\rasadhlp.dll
systemroot,\system32\rasmans.dll
systemroot,\system32\riched20.dll
systemroot,\system32\rmoc3260.dll
systemroot,\system32\rrsec.dll
systemroot,\system32\rrsec2k.exe
systemroot,\system32\shdocvw.dll
systemroot,\system32\shell32.dll
systemroot,\system32\shlwapi.dll
systemroot,\system32\shsvcs.dll
systemroot,\system32\sp2res.dll
systemroot,\system32\spmsg.dll
systemroot,\system32\ssiefr.exe
systemroot,\system32\stkit432.dll
systemroot,\system32\streamhlp.dll
systemroot,\system32\swreg.exe
systemroot,\system32\swsc.exe
systemroot,\system32\swxcacls.exe
systemroot,\system32\tzchange.exe
systemroot,\system32\url.dll
systemroot,\system32\urlmon.dll
systemroot,\system32\vfind.exe
systemroot,\system32\vsdata.dll
systemroot,\system32\vsdatant.sys
systemroot,\system32\vsinit.dll
systemroot,\system32\vsmonapi.dll
systemroot,\system32\vspubapi.dll
systemroot,\system32\vsregexp.dll
systemroot,\system32\vsutil.dll
systemroot,\system32\vswmi.dll
systemroot,\system32\vsxml.dll
systemroot,\system32\vxblock.dll
systemroot,\system32\webcheck.dll
systemroot,\system32\wgalogon.dll
systemroot,\system32\wgatray.exe
systemroot,\system32\wiaservc.dll
systemroot,\system32\windowspowershell
systemroot,\system32\winfxdocobj.exe
systemroot,\system32\wininet.dll
systemroot,\system32\wmp.dll
systemroot,\system32\wmvcore.dll
systemroot,\system32\wrlogonntf.dll
systemroot,\system32\wrlzma.dll
systemroot,\system32\x3daudio1_0.dll
systemroot,\system32\xactengine2_0.dll
systemroot,\system32\xactengine2_1.dll
systemroot,\system32\xactengine2_2.dll
systemroot,\system32\xinput1_1.dll
systemroot,\system32\xinput9_1_0.dll
systemroot,\system32\xmllite.dll
systemroot,\system32\xpsp3res.dll
systemroot,\system32\zlcomm.dll
systemroot,\system32\zlcommdb.dll
systemroot,\system32\zport4as.dll
systemroot,\temp
systemroot,\temporary internet files
systemroot,\wbem
systemroot,\wruninstall.dll


whitedirB

$msi31uninstall
$ntservicepackuninstall
$ntuninstall
$vault$.avg
.
..
adobe
application data
avg7
combofix
cookies
desktop
erdnt
favorites
grisoft
identities
java
local settings
macromedia
microsoft
mozilla
my documents
nethood
printhood
recent
sendto
sun
start menu
templates

active_setup.cf


C:\WINDOWS\system32\ieudinit.exe
C:\WINDOWS\inf\unregmp2.exe
rundll32 iedkcs32.dll
%systemroot%\system32\shmgrate.exe
C:\WINDOWS\system32\shmgrate.exe
%systemroot%\system32\themeui.dll
%programfiles%\outlook express\setup50.exe
C:\WINDOWS\inf\msnetmtg.inf
C:\WINDOWS\inf\msmsgs.inf
C:\WINDOWS\inf\wmp.inf
regsvr32.exe /s /n /i:u shell32.dll
C:\WINDOWS\system32\mscories.dll
C:\WINDOWS\system32\ie4uinit.exe
C:\WINDOWS\inf\wmp10.inf
C:\Program Files\Messenger\msgsc.dll
C:\WINDOWS\inf\fxsocm.inf
C:\WINDOWS\system32\setup\fxsocm.dll
C:\WINDOWS\inf\mswmp.inf
C:\Program Files\messenger\msgsc.dll
%systemroot%\system32\updcrl.exe
C:\WINDOWS\system32\setup\wmpocm.exe
C:\WINDOWS\INF\mplayer2.inf
%systemroot%\system32\ie4uinit.exe
regsvr32.exe /s /n /i:"S 2 true 3 true 4 true 5 true 6 true 7 true" initpki.dll
%systemroot%\inf\ie.inf
C:\WINDOWS\INF\wmp11.inf
%systemroot%\INF\msmsgs.inf
%systemroot%\INF\wpie4x86.inf
%systemroot%\inf\mcdftreg.inf
C:\WINDOWS\INF\EasyCDBlock.inf
rundll32 iesetup.dll
RunDLL setupx.dll
%programfiles%\windows mail\winmail.exe

clsid.cf
00000000-0000-0000-0000-000000000000
00000000-0000-0000-0000-000000000002
00000000-0000-0000-0000-C4CA9A05F1E2
00000000-0002-0002-0000-000000000000
00000000-0006-5041-4354-0020E48020AF
00000000-0007-5041-4354-0020E48020AF
00000000-0008-5041-4354-0020E48020AF
00000000-000A-5041-4354-0020E48020AF
00000000-000B-5041-4354-0020E48020AF
00000000-12C8-4305-82F9-43058F20E8D2
00000000-280E-445B-B051-A8B2DA7E798A
00000000-5736-4205-0008-2FE89C996183
00000000-5736-4205-0008-781CD0E19F00
00000000-5736-4205-0008-F7ED0776FB27
00000000-623A-11D4-BCDB-005004131771
00000000-6C30-11D8-9363-000AE6309654
00000000-6C30-11D8-9363-000AE6309656
00000000-6C30-11D8-9363-000AE6309657
00000000-6C30-11D8-9363-000AE6309658
00000000-6CB0-410C-8C3D-8FA8D2011D0A
00000000-F183-11D1-BE1C-00000100C596
00000003-1118-11DA-8CD6-0800200C9888
00000011-04FA-11D1-B7DA-00A0C9010000
0000001D-BA9B-11D2-BDF1-0090272A6D78
000000A4-5858-4E36-BA5B-FDD80F3D5145
00000178-CD4A-447A-BCF9-6FD0096B5527
00000285-B716-11D3-92F3-00D0B709A7D8
00000AAA-A363-466E-BEF5-9BB68697AA7F
0000CC75-ACF3-4CAC-A0A9-DD3868E06852
00011268-E188-40DF-A514-835FCD78B1BF
000123B4-9B42-4900-B3F7-F4B073EFC214
00033313-E2DF-11D3-A281-00E09801CFF2
0005A87C-D626-4B3A-84F9-1D9571695F55
0005A87D-D626-4B3A-84F9-1D9571695F55
0005A87D-D626-4B3A-84F9-1D9571695F57
00071603-6F90-11D3-B4BF-00902757504C
000FCCCE-C733-11D3-A704-009027A7903D
001165C1-A640-11D7-9FD9-0080481ADA61
001B3456-4ADE-44D0-8C23-D69D32658D84
001F2570-5DF5-11D3-B991-00A0C9BB0874
0025739A-5875-4E33-8056-C03BABE37F9C
002F5D22-AB48-4D51-A45A-9C2F22BE98B9
0034C07B-6FB8-43A1-B6C8-FB838EDB558E
003762F1-BB5A-48EB-A59D-01625443229F
00490D79-3A7F-4C8A-9E04-2BC1D89676F1
004A5840-FF59-11D2-B50D-0090271D3FD4
004B23E0-1E63-4ED6-BCAC-922BA26CF096
0050A87F-CF26-41AE-9C0A-C32307C941CB
00533B73-E574-46E9-B06A-FDF4592E67CB
0055C089-8582-441B-A0BF-17B458C2A3A8
00649EC2-E572-11D3-8F5F-00C0DFEF760F
0096CC0A-623C-4829-AD9C-19AF0DC9D8FE
00A6FAF1-072E-44CF-8957-5838F569A31D
00B1D504-60FD-44AE-B142-996FF6C5B7CF
00BD2861-C654-4694-A44A-98642D73247D
00C6482C-C502-44C8-8409-FCE54AD9C208
00C6482D-C502-44C8-8409-FCE54AD9C208
00F17ECE-12DA-46A0-B541-BDE4EB7DF027
0124123D-61B4-456F-AF86-78C53A0790C5
01443AEC-0FD1-40FD-9C87-E93D1494C233
014DA6C1-189F-421A-88CD-07CFE51CFF10
014DA6C9-189F-421A-88CD-07CFE51CFF10
0165E3F9-CD53-4D1F-A78D-3AF2A012B657
0170ED45-A2D5-4987-B19D-5C1EF5B7DD40
017CFF13-49C1-4752-9B8F-561F3AF87574
019592B0-8E51-43B5-A438-EE3A58F16D64
019866BF-33EF-4D75-B732-B2C3A5A7F296
01A7812B-59E8-4A4F-BFD6-EEE6D4CB6BA2
01E04581-4EEE-11D0-BFE9-00AA005B4383
01E69986-A054-4C52-ABE8-EF63DF1C5211
020B192B-60FC-4301-BFD4-9D86668D3FF8
02336F51-24CA-4422-AB63-18841ADF35E6
02464DDC-3187-11D8-8004-0020ED227566
0246A1A7-820A-469A-85A7-7B7F01EB808C
02478D28-C3F9-4EFB-9B51-7695ECA05670
02478D37-C3F9-4EFB-9B51-7695ECA05670
02478D38-C3F9-4EFB-9B51-7695ECA05670
02681612-869A-4A07-9D7D-984F42217890
027B8600-4C22-4CBF-A14D-3EF257DDFD12
02871142-4517-4931-8809-F89A01D2650B
028FC160-482B-4274-A855-915C3E8138ED
029CA12C-89C1-46A7-A3C7-82F2F98635CB
02DCA195-602B-4B1F-83FF-381B7E804BDB
02F70F62-1717-4A69-8F51-E9B9B50B88DB
0315AA2C-10C7-4504-A1C4-F552ABA8A095
03183603-F684-11D2-A17F-00A0C90AE44B
031F120A-BBAF-45D8-B306-375F2A6B9398
03646F67-527E-4D2A-8073-092EE87A3DD5
039036AA-7710-11D7-ACDA-00B0D094B576
039AF219-4B6F-4AC6-8763-7BF5BBD481B3
03D51D12-87EA-45A6-B6FA-188A47F159E1
03FD3234-98CA-4C47-B814-0799F74DA780
04011C11-2F3B-44ED-977C-270CA669C6B2
04047354-D353-11D2-B3EB-0060B03C5581
04079851-5845-4DEA-848C-3ECD647AA554
04164EC4-1E48-4279-818E-3721931E7636
04719991-296F-4958-AA0F-FA25FFA5008B
0489B39F-0C00-4B2F-85D6-81BE913B70B9
0494D0D1-F8E0-41AD-92A3-14154ECE70AC
0494D0D9-F8E0-41AD-92A3-14154ECE70AC
04970F9F-F2AB-4D1E-B842-313E1E2A3078
04BEAB9D-5C42-4C40-BBF0-C6C7470AD2B2
04C7B109-8162-A0D6-B186-DBE176064A3E
0520255B-04B4-427A-9D3F-67435F6C93D9
0549E6CB-9985-42F6-8FD6-4EC017E6AAE1
055FD26D-3A88-4E15-963D-DC8493744B1D
05783771-5B40-4036-B3C7-C988880CF3FE
058FC709-D5CD-4A95-92DB-59E6488ECDA4
059B2FC0-741D-40F8-AEFA-D2C919EB9217
05A34600-8920-479B-92A9-68FACF7BB8FA
05A5A56D-82C6-4853-A290-173826C7BF71
05B60808-39C2-45A8-B911-8A7EFA7AAF81
05F8C4F5-7CCF-4129-B221-B2B4CFC589DA
060235DC-6D84-47BD-95D7-A4EF5099A59D
063E5FF2-A15A-4FCD-9DCE-EE6AA438C9DF
06647158-359E-4D10-A8DE-E6145DA90BE9
06663B51-0D73-4F9F-BCC5-4AA941470AFD
06849E9E-C8D7-4D59-B87D-784B7D6BE0B3
06849E9F-C8D7-4D59-B87D-784B7D6BE0B3
06860C11-7110-4059-A410-44578348328E
06A548B7-25F0-416E-88AB-A8F6C4DE325C
06E58E5E-F8CB-4049-991E-A41C03BD419E
06EF399D-109D-4991-B9C0-88D2FC9DDA25
0748BCEA-3708-4842-A65F-7AA6E56EBCD9
074C1DC5-9320-4A9A-947D-C042949C6216
07584D35-58F7-4B65-B9E7-CC54B09DED74
075BBE29-FEC0-404A-A459-FF58713616FA
077E0680-7C2E-48A0-B64F-471E6220F552
077FD0C2-1291-4104-A356-41E36B252682
079AC330-0A09-404C-8CA0-ABAC82F0A312
07B18EA1-A523-4961-B6BB-170DE4475CCA
07B18EA9-A523-4961-B6BB-170DE4475CCA
07D7F044-2F5F-41B2-BAA5-936814AF0163
07EC6145-3D74-401E-A74D-EA2007F38902
08351226-6472-43BD-8A40-D9221FF1C4CE
08351227-6472-43BD-8A40-D9221FF1C4CE
08442457-929D-4522-AE24-9D3E4664A0C1
087774B9-C132-445F-A476-95368F3F0751
089FD14D-132B-48FC-8861-0048AE113215
08A55CA7-37D5-4FB1-AE8A-6D4DAEDAD5D7
08B2E5B7-9E4D-4FB9-831D-F4E407A1CE7E
08E1C8E1-E565-44FC-A766-C9539BB3ABB7
08E39D47-DF6C-4E64-AA36-AAF76033CFB8
08E74C67-99A6-45C7-94DA-A397A8FD8082
0914953A-B6C0-42C3-983E-5213C64AFA9B
09197FFB-C236-4153-B268-31051E4F3B6C
094176F1-BF35-4BCB-B68A-108DFB8C3825
094176F9-BF35-4BCB-B68A-108DFB8C3825
0941C58F-E461-4E03-BD7D-44C27392ADE1
0950C008-880D-46F3-AFE0-AE85C6458044
09549E9B-8BC0-40A4-B5D6-BD761338D631
09628AAA-66AD-4FA2-82E2-698185B66463
0976B5E5-5014-4E79-81A8-A11178B7F9A0
0979C81F-A46C-4606-9579-8BC82E9C2C31
099C2990-E592-49EC-B772-83CFD8BE6E74
09A13260-97E7-4554-8867-A474B3866B2E
09AF76DD-6988-4664-97D0-362F1011E311
09C02180-3B46-4CD8-83FF-34DAF442BDEF
09F0F280-FB9A-481B-B69A-CB00DC44D027
0A068765-A165-4A8F-9ECC-D0B230966BA7
0A120D41-244B-11D5-8122-005004F6D77D
0A4DC360-26A5-4FC1-8FB2-ADD00738A99B
0A50AAD3-7B56-4480-99E6-D76DF37408A1
0A6A6F79-BBE3-4A8B-8A64-9D1D1100A347
0A87E45F-537A-40B4-B812-E2544C21A09F
0A94B111-4504-4E26-AB05-E61E474AA38B
0AAEAEDE-AEFD-4672-A764-5C5C037612A2
0ACF00E0-C1E4-4F6B-B290-10AC7505C47A
0ADCDFE7-8490-406D-91BF-88F71FD7F8AE
0B1B0D47-95F7-4BAD-9309-A945B655AE61
0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7
0B9D65AC-6C3D-4A74-9319-7D1098EDD338
0BD12BC7-B856-4087-B8CF-7A25D04F30BC
0BECAB3A-E1F8-45E6-8332-38DD750EBA01
0BF43445-2F28-4351-9252-17FE6E806AA0
0BFDDA12-9C1A-46B8-9681-AFF63C2A1EF0
0C0E5FD9-B58D-4321-BA3B-6620E7565C22
0C6DD65A-F36B-4AC8-89EB-6175AEE6BB8C
0C7C23EE-A848-485B-873C-0ED954731014
0C9B3AB9-DEDF-11D8-A2D4-0050FC464B19
0C9C5C64-0347-46A3-A937-4A9906C7CD0A
0CF0B8EE-6596-11D5-A98E-0003470BB48E
0D1B0A32-94B2-4959-B304-157B44112F91
0D245396-8535-11D3-B3F9-00A0C9424626
0D42E1BD-09DD-4873-A826-9C7E793EB7B6
0D4B3487-A5CB-4E63-A945-203C9034FBC9
0D6E0DD2-A7F3-4FA5-8E7F-7D76E495BFA6
0D704FAD-66E9-4F0A-BFED-4F665770DDB3
0D8A1FF1-6419-4F91-A4BE-D46F7D07FD10
0D929918-C804-4756-B0AC-640EF3F061E9
0DB66BA8-5E1F-4963-93D1-E1D6B78FE9A2
0DD41AE7-6196-42E7-BDE5-4F393997449E
0E1230F8-EA50-42A9-983C-D22ABC2EED3B
0E1230F8-EA50-42A9-983C-D22ABC2EED3C
0E1230F8-EA50-42A9-983C-D22ABC2EED4B
0E1230F8-EA50-42A9-983C-E22ABC2EED3F
0E5CBF21-D15F-11D0-8301-00AA005B4383
0E677221-E309-4341-81BD-3CC3018BF5B3
0E677229-E309-4341-81BD-3CC3018BF5B3
0E7505F8-8F30-41E0-9D1E-D9DEABD36D38
0EEDB912-C5FA-486F-8334-57288578C627
0F212779-6D88-4958-8AD3-83C12D86ADC7
0F469452-B579-4F29-94A2-AE86C86067A6
0F62D223-9206-4EA3-9EA8-D0F3C7C82ACA
0F660F64-F4C9-477F-8529-44181B717472
0F9CECE1-0306-4BB0-8BEF-C9EA3841E38A
0FD387DF-5E13-4EAB-BB19-A1F4C2D0B325
0FFE2F08-3AC9-4A91-A61D-4FF24F91A561
10134636-E7AF-4AC5-A1DC-C7C44BB97D81
1017A80C-6F09-4548-A84D-EDD6AC9525F0
101B2144-014D-49AF-AE2B-1B294AE19F4F
1028F737-81E7-452B-A860-E50CAD90A08C
102BAD8B-CD05-46FF-94FF-A2C1ABD5F7D5
10384D0E-2BC1-48B6-844B-AD0E9E6D2511
107DA6A6-EE3B-4E01-9FE0-2569FFA6B43B
10853DC2-7A27-4E4F-A444-1518B76AB2EC
1094DF41-C1E3-4957-B20D-585D0FA7683D
10CA15EA-C0A5-7CAF-B9E9-B8B2A87EFE11
11111111-2B8D-44AF-82FA-F86E57899FB8
11111111-CAF8-4B45-B6C5-356C0F69C4D4
1112954A-58B9-4677-8358-2B9EB5046685
111CAA23-6F4F-42AC-8555-B48C1D87BBAB
11352A67-0178-46B1-8855-D50B2F81C054
11359F4A-B191-42D7-905A-594F8CF0387B
113D26E3-F212-4919-9AA1-0DFD38EC8B1A
115F6E46-FCBC-41ED-B3B5-3BDDD4AAB5E5
119DBEDA-9C41-4F97-94B4-B6BCD01133CF
11AF48E4-CA6C-45EE-A181-282CD7A5BFCD
11C77FF3-9E2B-4A93-BD3E-256481F83D9B
11D003B5-B3B5-4BCC-A974-71148786E968
1201333E-BAD9-481C-BCF5-6904498CF85B
1205D44C-FFD2-44E5-AA1D-929DCA37EB7A
120FF052-1C61-4C14-8F54-BBBC4A988590
1215ACF9-ED27-49B8-80DD-EFF3D84D7FDE
1224BD74-F586-4C9C-9BE3-56E68E22F843
123249EB-F891-44C4-946F-450064F9080E
1270B213-5BA9-4A46-B7B2-DFAD48E5E0A3
12BA043E-293E-4CE4-A8C7-8460934FE801
12C1127D-DFDD-4BD9-B5E3-39E31BA3D415
12E0F2DC-1597-4F5E-96F4-94913725B8A3
12F02779-6D88-4958-8AD3-83C12D86ADC7
12FC9A49-CFE0-49AA-BE9E-8F4EEAFC9443
1315B9B4-76AC-4589-80F6-62C38132A0E2
13707362-08A2-11D3-A26D-0060976E9E6A
13F537F0-AF09-11D6-9029-0002B31F9E59
1402DF89-8043-44E9-AFE8-CB3DB644EF7D
145B29F4-A56B-4B90-BBAC-45784EBEBBB7
146245FD-0140-4C8F-8F74-9711B6289F67
1463CA2F-6CDE-11D3-8806-00902759E7B0
147D6308-0614-4112-89B1-31402F9B82C4
14B0D0D3-D1E6-4BF6-9EEF-F050527D607D
14F844A5-89D0-41DD-B000-3E24F0D4F9DC
14FB0D44-DF34-412F-96FB-D3C98303BA1A
15256C66-A8BE-4428-B2F8-3F7B746D4D05
1536BA74-8625-4240-99B0-BE65883689C8
15757333-2BCA-4B77-A807-D0955132F812
157B91D9-D643-403B-92FE-FB48DA68D6C4
157F70D2-49E8-11D3-B094-005004116944
15BB258F-B477-4DF6-A4E7-65EA4B016CB0
15C9938F-CB96-496D-800A-B827F2E34EA1
15DDE988-CD45-4561-BF99-D22C0D5C2B74
15F32ED9-C897-4B56-A560-4FD731816B1E
15F4D456-5BAA-4076-8486-EECB38CD3E57
16122F02-9713-11D3-9744-005004116944
1624F640-49AC-11D3-8ABD-00C04FA95EE0
164E93C4-09BF-4647-9E0B-D5FBB1D35E63
165EAF06-A068-4BE1-8418-D92B2A196878
16664845-0E00-11D2-8059-000000000000
1685C500-A1A8-4B18-91DD-B79D39A8A532
16E8A050-74CE-43D5-8DC0-BADD7347B2DD
17456D4E-823D-9B68-283C-1A819CBBDD19
1758A162-79FF-4C60-96B6-24EFAFE98E3F
17598C5F-F014-4D4B-9AD7-E4F8C952FBCB
1765F51E-F1D0-4AEE-8A8A-A078C9B5BAD4
17939A30-18E2-471E-9D3A-56DD725F1215
17965926-B1C0-4302-A699-FF6345EA3148
17A54BFC-8214-4F5C-B1A7-A161BFA5FDCC
17FDB9F8-DCC4-4F6A-AE07-B16018A48469
1808648B-3102-4293-8AD3-06AF71D3321B
180C46DE-1FBB-4B46-91B3-3A3CF7688EE6
1827766B-9F49-4854-8034-F6EE26FCB1EC
184AF5F9-FB5C-4D70-95C8-3613B5DC0E23
186A2813-D175-4CF8-B179-3873AC4E975C
187328FA-2206-4432-B7B0-0D5B43A74E39
1897E906-6880-4AB9-8752-B80987FA7862
18A5CAE8-FAF6-49A9-B3D8-2954437D9BBC
18AD2309-B249-46FB-9012-3B787446707F
18B21D25-F344-46E1-AD88-2D42932B1321
1935E690-1AC1-4AA5-BA23-3D9D0CEB3A00
1973395E-67F8-4723-BCC0-832CF4A5DDBC
19850308-4B15-11D1-ABED-709549C10000
19BAFA27-8B67-46C5-9E3D-CFA2D815F4B6
19C8E43B-07B3-49CB-BFFC-6777B593E6F8
1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A
1A1DAC8C-074D-440F-8707-7009A672D7D1
1A214F62-47A7-4CA3-9D00-95A3965A8B4A
1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D
1A2CD84F-2175-4AE8-BD60-CE0D04442B4F
1A533B73-E574-46E9-B06A-FDF4592E67CB
1A99F92C-A02C-48F5-9D88-FE4685E0E161
1AA2D474-56B4-4DB3-B121-A7B8F2675F09
1AC85D88-F777-471B-B541-48450C23F34D
1AFE5D5A-4EC5-439D-AB7B-2A1D59669F86
1B0E7715-898E-48CC-9690-4E338E8DE1D3
1B2F92A1-CDAF-4511-9382-91E3F5CE0880
1B728C8D-9F82-41FA-93CC-25445F51FC70
1B77D30A-81C9-497A-8647-142F7511B1FB
1BA1F1FE-B5D8-4C20-BB20-95EE87D7C803
1BB22D38-A411-4B13-A746-C2A4F4EC7344
1C4E26EF-A354-45FE-81B0-62931E90889E
1C900459-DEEF-4AA9-B260-1EF0F0C70A8D
1CB20BF0-BBAE-40A7-93F4-6435FF3D0411
1CBC8587-1E29-4C2B-9739-D0E563905B32
1CBF31FC-3C23-4BA6-AF16-2CEC501BD837
1CE4EE89-2D5C-4361-AF3B-D902AB545381
1D1901C3-F72A-46F3-9DBB-0AAA0DEEF6DF
1D34419D-BEF2-486D-B87B-70DC9AA5517D
1D62BD48-16F6-4004-A54A-3C41E4955A87
1D7A52EE-FBCB-4F46-AD2A-9C0ABAA20BC0
1D9B10E0-E90C-11D7-A399-B7BAC8911A3F
1DA183EF-8E1B-4A18-B927-CAB06B60FA46
1DBAB667-A486-421E-AFE4-CF07DD0088E5
1DD3AA35-D7C0-4030-A318-F4252E292E43
1E1B2879-30C7-11D4-8DDF-525400E483E3
1E1B2879-88FA-11D3-8D96-D7ACAC95951A
1E1B2879-88FF-11D2-8D96-FFFFAC95951F
1E1B2879-88FF-11D3-8D96-D7ACAC95951F
1E6700F0-0F85-40FD-8022-7EB60AB46F10
1E8A6170-7264-4D0F-BEAE-D42A53123C75
1E9FB1C4-F40B-4E10-898E-D6209B122F6B
1EA6604B-4C8D-468D-8F3A-E95BE71458AB
1EC1C113-F5D6-4CBF-94E2-3CEC44B399CF
1EC9C976-8B7D-4507-B727-DFEC440D576E
1EE1AB45-223D-4677-B7CE-47C04F934347
1F023FFF-B052-489C-A6B4-3D8DECBFCAD6
1F0C8547-2639-4C91-B8AA-C7ECA24C3163
1F1DDA1B-876D-4F30-8106-E7BFFA7200D0
1F2E844B-8211-46FF-8262-772F03295CF4
1F326B8F-CE7F-4C98-96A1-AC7A2B61D742
1F385865-F3D4-41FF-960D-7B7D0A7A72F6
1F3E0E4E-214C-11D6-8CCA-00C0DF034AE8
1F5D3D5F-5738-423C-A962-066EC1A6427F
1F68E72C-50E5-44B8-8F56-6A54D3AF1DA4
1F97BE73-7957-4D7E-92F7-03204ED1E496
1FBCAFD1-7F43-4661-89CC-40E8DD7E8B64
1FD7EA94-0650-4CF5-ACFF-CDB36A6E924F
1FEA1109-9F65-4FDC-AEC5-033F6CC60641
1FEA39D6-46B3-4F66-BC38-4839CFE198EA
200488FD-C76C-47CD-BDE5-FC2571261B63
2005F7BA-6189-4607-BF8B-667679251CC0
2020DFEF-8C87-4229-AA41-549D82210355
2069A8C8-FAD1-424B-B76C-D7F33D77DC4C
206E52E0-D52E-11D4-AD54-0000E86C26F6
20988EDF-4CB5-4083-9829-262BBFD0CD52
20A66F2F-31CE-11D5-8BF7-0090CC12D082
20E5DE3E-3D2C-4E4F-969E-6C3F00354BC7
20F88735-345D-404A-B830-0CE3BC715976
21301D69-B8F1-46AA-B0B5-09EE2285914C
213C7491-5A0D-4B99-8B6B-1498B14B398F
2170AE22-BED6-4BD8-8A30-775F233B45C0
2184469F-67DA-49CB-BF3C-9CAB5974A280
21C32A07-0176-4FFE-BCDA-65D4A24F4303
21DADF7B-9D2D-475A-A30B-5D4424D2BC60
21F6ADFF-CCEA-4148-82FC-C3B026A5CB93
22106538-88A0-4A0C-ACAC-F1C58E9C6E88
2278622B-7A5D-451F-96F9-DA814693796D
227B8AA8-DAF2-4892-BD1D-73F568BCB24E
22B36723-2435-441F-ADDE-5950FEC1BE0E
22BF413B-C6D2-4D91-82A9-A0F997BA588C
22C1B5B2-ACB4-11D3-A719-0060089C5699
22D003CE-6952-46C5-80B9-D19B479620AB
22D8E815-4A5E-4DFB-845E-AAB64207F5BD
23128821-FF38-4B38-82EA-FFC6DF4A7DD1
2318C2B1-4965-11D4-9B18-009027A5CD4F
232409D8-8BD0-4662-B475-16E02E313376
234CFBE7-DD40-4694-B3BF-0C6479AED177
236BFC7E-7D97-4750-87E6-C31D4D4BFC6D
23849BDD-E8A8-4B9E-AB7A-5830D3828AAE
238D3404-0761-4B4D-851C-050A3A0AC40A
24180B00-2EB6-11D7-BD6F-004854603DCE
242ED84B-61BE-476C-BEDF-C3F11A7B0CB3
243B17DE-77C7-46BF-B94B-0B5F309A0E64
248B131E-01EA-4587-8EFE-1D915E143D5E
24AC2D89-8566-4A52-850A-24FAF8DF57E0
255215E2-87DC-4819-8724-D0B4C94DBEF5
259F616C-A300-44F5-B04A-ED001A26C85C
25E2F98F-C94F-4B7A-8CD7-2052F5F786C1
25EDC164-41A6-47C3-80BD-5E4FBE1BA7AB
25EEFF3E-58EE-4811-95CC-78F922605006
25F97EB4-1C02-45BA-BA0C-E67AACE64D4
25F97EB4-1C02-45BA-BA0C-E67AACE64D4A
262E6712-56E8-4653-AF12-C43EE7C2A606
2645D297-DD4B-4DD3-BAB0-34D4BB8F7EE6
2685A3D0-1459-45EE-8426-5B8CF98899A8
269A2B63-A21D-46DA-BE3C-E2F7E3B700F1
26CA4BD4-E63A-423D-AE08-933C2F8F0977
26CB33C5-1F3C-4C52-8B26-29D6E0635770
26E71720-56EE-4656-B61D-FA7C89CD8DCD
2709D830-B643-4E72-9A1E-701CFFFCF30C
27794310-E494-40CA-B5A3-024AEC4F64DA
2843DAC1-05EF-11D2-95BA-0060083493D6
28880C09-187F-4E97-BF87-9148C12435F3
28BC2EC4-5EAD-45E1-9F9F-82CD5E293601
292C9657-B39C-41F9-993B-B34170BC9D79
296AE49F-E195-4835-895C-91788B938DF8
297CAF50-E4F7-11D1-A380-00600896ECCC
298EEBAC-69D7-40A3-A94A-FAC364D6E2A5
29AE6F33-4E1A-451A-A5CB-EA520EE06F11
29C88E20-4234-41B9-A9DB-982958C95FB1
29D1A18B-E46C-4CDB-83A9-B660D0E1B135
2A646672-9C3A-4C28-9A7A-1FB0F63F28B6
2AB7292B-8F1B-4DC5-A584-280928B28FC9
2AD46959-7EE4-47C3-B976-C0912755DE1F
2B9F5787-88A5-4945-90E7-C4B18563BC5E
2BDEC2E4-819F-11D5-8846-006097B89050
2BFD1E50-167E-11D4-AA85-006008CACA2E
2C0A5F28-48D8-408B-9172-9C6121025BCE
2C1EA443-7C24-4E58-80E6-D021D77A76DF
2C9DBA87-B014-4D5D-89C5-8AE79BB66321
2CA511C5-C677-4E33-A018-EADF07E08299
2CB1AD8E-CBFE-462B-9C9B-5BDF72B1757A
2D1DDD38-CE4D-459B-A01C-F11BC92D5B69
2D43D3A0-EC29-11D2-8ADE-0020182CECB3
2D58DD23-2759-4C7B-9351-D68AF7D0D868
2DA93FD3-C7D8-472D-9FA4-CC1A2DAD91C6
2DB66063-BB98-466A-AA0D-3E7ACF5ED853
2DFC54AD-2B04-4E4A-96FA-79D2701F3763
2E03C0FD-4C48-43A7-9A54-00240C70FF16
2E3C3651-B19C-4DD9-A979-901EC3E930AF
2E560504-B9C8-48AA-982A-08B79C3FD40E
2E5E4BAC-FEC7-4DD6-AFAF-F4139B1B9FB6
2E5E800E-6AC0-411E-940A-369530A35E43
2E608F70-C430-4BC5-96F6-608E02EBA5B2
2E6F36CE-1217-4BA1-982F-24560C0EB677
2EAA261D-6F4E-42FE-B898-CDC160FD2463
2ECB7FB2-0333-416F-92FD-4904AD49252B
2EF37A01-884F-11D5-AC99-B112050ECB4F
2EF39867-654F-48B6-8F93-B4FC3E8C6844
2F19BBE7-D050-4C39-829E-C2F9E15C90F0
2F2FBF0D-254F-11D5-B1E5-0050DAD7AF62
2F364305-AA45-47B5-9F9D-39A8B94E7EF7
2F364306-AA45-47B5-9F9D-39A8B94E7EF7
2F4F8CC3-FF89-11D1-9F63-0020182D7E20
2F6D24B1-55BE-4B29-A541-BBF61DA807CD
2F85D76C-0569-466F-A488-493E6BD0E955
300BC64A-BF32-4CC8-8917-91148CEFE700
30121F5F-E81C-4EC0-A219-3395B0E42EE4
3049C3E9-B461-4BC5-8870-4C09146192CA
3050CDCA-E35E-4696-A544-8B0A589CE885
305C398B-4278-4AD6-86D9-6A2774596BE3
30843C1C-520C-4C07-BE0A-03EB63C6058E
30C4957C-A15E-48E2-99ED-7623B8EF4182
30DA8584-E4B3-45F7-A164-DB8F869FCF77
30EBA2E2-58B2-4980-9C41-F12F5F1422C5
311F9DE8-6126-4EEE-B15F-65CBB3B4F9F6
3160BAF9-CF68-48EC-9076-FAED7CE49467
316AEF8D-3C37-423E-9E6E-13820A9DC37A
31801B7B-6A29-43A2-A54F-A8920FA70F9C
31816979-F864-4ACF-919F-D0B3B56432E6
31CF9EBE-5755-4A1D-AC25-2834D952D9B4
31D1CA78-F919-4198-8DA5-AB6F44E4AB28
31EBA2E2-58B2-4980-9C41-F12F5F1422C5
31FF080D-12A3-439A-A2EF-4BA95A3148E8
327C2873-E90D-4C37-AA9D-10AC9BABA46C
333F6B96-3992-4D58-A499-145A10FE48C3
33414365-E6C7-460D-880A-A163BD69E84D
3389D064-B48C-430F-BC74-3176AECE71D3
3392BD0A-A851-4AA4-86E0-4651006F9EA8
33973600-925A-11D9-A1F6-9234C84D2622
33BBE42F-0E42-4F12-B075-8D21ACB10DCB
33C6FD78-5226-4F82-A2BB-CAFBA3789857
33D2056E-E8D5-444B-ADC5-2169139B74F9
340166BC-786B-401F-96AC-7C8821EFA9CD
3424643B-A93E-45BF-ACA9-AF8B3ACC7BF0
3453E1A9-9D23-4B6B-9222-4A4B5E1002C9
348FE907-249E-4C65-A838-F34A193FE1D1
34F459B8-1D37-4FF2-9EFA-192D8E3ABA6F
35065594-9169-4A34-B167-FC4865038E53
352E3B39-CAB5-4DBC-B940-C7F84D0447D8
35402C01-1777-4159-9ABA-3480BA70D90A
357F7D08-5442-4B61-AF3C-B18443B62354
35EB9C91-1CA6-11D5-8B2B-00C04F779127
3611204F-4B3C-11D4-B416-E159A5067F41
3614926A-225F-4E00-8A1E-1D3095547FC8
36AB28F6-4BBF-11D4-9756-00000E492F6A
36BE52FC-3977-4402-8FB2-BE1941EDB829
3717DF55-0396-463D-98B7-647C7DC6898A
371C6960-302C-45D0-9504-50B820247439
379C7E78-0977-49BE-AF4D-288E1E8B0686
37B85A21-692B-4205-9CAD-2626E4993404
37B85A29-692B-4205-9CAD-2626E4993404
37C8204D-97C3-4127-BB28-1BFF3FA2F7DA
37DE7A73-1E01-47D6-BB9B-99BEDB7A22E2
383AFE58-8544-4A38-BF3F-F808CC8BBDD5
383FD303-3FE0-4C92-87BB-AC3A532245E3
385AB8C5-FB22-4D17-8834-064E2BA0A6F0
3873A5A5-C3F8-4830-ABF5-9C83C8347B09
387EDF53-1CF2-4523-BC2F-13462651BE8C
38AAF321-C5B4-11D1-B75E-400000000000
38D2A281-0444-433C-9ED6-A2851795F32A
38D3FE60-3D53-4F37-BB0E-C7A97A26A156
38D5592B-1B6F-4F9B-9879-58B696405AC1
38E77F01-89FC-44F5-B3AB-11DDEB791947
3909D052-FC24-4456-A14C-5633EC1798F8
392F75CD-6D7A-4F00-B23B-B87B6E41F48E
397B3223-7D10-11D6-ABC6-00B0D094B576
39DA0623-CD65-44D5-B816-3590E4C3F38B
39F2FB27-6803-4EF6-92BF-1FE49EE90A57
39F7E361-828A-4B5A-BCAF-5B79BFDFEA60
39F7E362-828A-4B5A-BCAF-5B79BFDFEA60
3A6514CD-A457-11D4-8AF3-000102686B79
3A72E30A-30F4-40A2-B5D7-0EFB7ED77E68
3A9DB4A6-E29C-4AE8-9C44-B058941EB5D0
3B1763E8-C82A-41A4-BC0F-1A29342071B7
3BB63FD4-3C00-44D7-94A9-5DE211900DEF
3BE313C3-DAD6-4DA6-801D-75860118A0B5
3C060EA2-E6A9-4E49-A530-D4657B8C449A
3C24A589-43D7-4CA2-AACE-30424985B955
3C6301ED-0F78-4AF2-8150-D9C052361A8E
3C6A1597-3058-481A-8884-684A01988815
3C6AC49C-7BA5-49AA-B0DA-FB9303FEF661
3C7195F6-D788-4D50-BA72-2EE212EDAC78
3C84954D-23A1-4D71-9185-6BE2BB312C24
3CA2F312-6F6E-4B53-A66E-4E65E497C8C0
3D1B06AB-EF14-4FF9-871A-9B023FA28A7E
3D2C1DA4-BCD3-4317-9548-2E08BD222FF0
3D503C16-EFC5-425A-965C-9D34414BF387
3D5EB85C-D084-4449-BDEC-DB6EF6DAC21A
3D898C55-74CC-4B7C-B5F1-45913F368388
3DA353C2-FE7F-428C-B494-791DCDAF516E
3DA56661-F9C5-42A8-B943-849CA2DCD36A
3DB1C21B-A7E0-4C3F-B39E-E00DD8792D90
3DDF45E0-9271-11D5-B1C2-000255705902
3DE88907-3E38-11D4-BEB2-CBE76C0598DD
3DE8F786-2B5A-4660-94FA-C5A443F55DD0
3E1201F4-1707-409F-BB45-A5F192381DA0
3E422F48-1566-40D3-B43D-077EF739AC32
3E558823-0ED3-41E4-8DC6-15F055ABF468
3E74382F-E627-4B4C-BE31-C8543FEA784A
3EB9350E-7671-46E2-AE6C-110DF6568780
3EB9C349-7473-48AC-A59B-42F31751974B
3EBB6ECC-75A9-40F7-8A12-0845F0D4B98B
3EBD3651-4CCA-4656-9F98-BAB4B72C6031
3EC8255F-E043-4CAE-8B3B-B191550C2A22
3EF38581-2F76-4EA0-A035-27AA22AD77B4
3F0F269D-2BC8-4102-A64E-E4DE13B9B8EF
3F1ABCDB-A875-46C1-8345-B72A4567E486
3F3714A1-89A4-46BE-8AF3-D0C9D1FB03F9
3F3714A9-89A4-46BE-8AF3-D0C9D1FB03F9
3F59A812-9C30-4ECD-938D-DD73E7C6497D
3F753E5A-DF80-4850-801C-35880F80756C
3F756BC4-26CB-497E-9409-8F09C1850C80
3F888695-9B41-4B29-9F44-6B560E464A16
3F8B04A8-2AB5-4A71-A94E-B5D70399B0D1
3FE20A68-5F78-4CF1-A941-3AAA55DE4C9D
3FE23F63-28D9-4986-A086-87D2FE07848B
3FF41DB4-33EA-4D77-9D24-180754FF76F2
4018FEE0-AAEB-4C2F-8F5A-66A637718AE5
4064EA35-578D-4073-A834-C96D82CBCF40
406F94EF-504F-4A40-8DFD-58B0666ABEBD
40D1C3A7-4FFB-4443-B3A0-A64B2DF7FC3B
40D41A8B-D79B-43D7-99A7-9EE0F344C385
40D61F04-59E4-4C8D-BF6E-697AB9C21F43
40FB69E1-9B7B-453F-B238-37D8E9528929
4115122B-85FF-4DD3-9515-F075BEDE5EB5
4122853D-4AD1-4B15-A42A-08D8BE194B44
41353F8B-78CE-48A5-BE44-153ED293D192
415FE275-B913-4960-A64E-70AEA29E56F8
4180A6C9-26D0-4A15-A2CD-A24E3178E386
4194307F-65BB-454A-81D4-9E8A9D7CBAEA
41C098D1-A36B-11D4-9F8C-00E07D02355A
41D68ED8-4CFF-4115-88A6-6EBB8AF19000
420F61A2-B3BE-4A80-8A68-A2080770CD4C
424B6AD1-785D-43E7-9C9B-AB96E77477D0
4254E07D-1B18-446C-BA07-20A70E629F88
42A2F05F-E171-4CEF-852F-02475F698C24
42A7CE31-CEE7-4CCE-A060-A44A7E52E062
42AFACEE-2A77-41EB-9EE2-D9F8AF827F90
42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6
430DDB4F-38CC-4E91-AF33-4157334EC937
4319648B-98DC-4101-80C9-62F553DA51DE
432CAE3B-690F-4C3B-BD97-070EBDA210D5
4340E603-67EE-4A8F-9861-7D79044D9696
43537A86-707C-46E7-B408-82588B7993D3
437434D2-065E-499D-A337-59657DF3342F
43869BB3-22FD-4F15-9B46-238106BA2F4E
43872F3D-F7C8-4FA6-BE94-B3C263C1E2A9
43A518F9-8CCE-45D6-9DC9-42E8C471D099
43A7096B-0623-4BC1-98AD-2BF037902E07
43AE45CB-DDA7-454B-9650-93A4C090BDB8
43CDDD56-4323-4B8B-8AA8-229411D7BD14
43D29D14-460E-4F3A-9037-E60F11EF12F0
43D9E6F0-1776-4897-AE14-ECEDECBAFEC0
43DF16FD-D9ED-4C9E-B14A-F3236A12C649
43F02779-6D88-4958-8AD3-83C12D86ADC7
43F2A7F9-06F6-48A5-B0DC-8530BF29CE66
43F31A50-EBB0-4926-A058-9F89EDC21C41
4401FDC3-7996-4774-8D2B-C1AE9CD6CC25
442599A9-EB41-4F1F-B999-737BC587F314
445347CE-D04F-11D5-8A3E-444553540000
445A58D3-5310-455A-BF8B-B10639E713D5
44AF5221-A43E-224E-56BA-ABCD43C344D1
44D1E473-D8E8-4630-86DA-09AAB1DDB399
44E7EF6C-6F5C-4AAF-A080-7725A27878ED
455C3AE7-B91A-4A56-B6ED-638B8EA5AE16
456E6433-CBC4-48B9-895B-07DF7034555D
458E6614-0D24-415A-824A-130064AF7BF8
4596013B-6C31-408B-A266-DEAE5C086DC2
459CAF0F-CA9F-4D69-A1A9-B0699D07AB8A
45A4902D-4479-4EAE-A186-8D0F7E4C78DE
45AB24F1-92AC-4DB7-B32F-D1F02756BFAB
45AC8D9F-5C3B-4802-8667-2702E27A3D08
45AD732C-2CE2-4666-B366-B2214AD57A49
45C768F0-9B73-4AA7-8817-D3B063F4335F
45DDA5B1-F0B8-432E-ACEA-5B1EDA749A00
45E1A125-41A3-4253-A5EC-3354A4E7C56D
463DF6D5-BEC1-4D67-B217-59DB692DFC53
4647E382-520B-11D2-A0D0-004033D0645D
4650480D-72DA-40D0-BCF7-D4FF5304C750
465E08E7-F005-4389-980F-1D8764B3486C
46832FF5-95B5-4654-88F4-7F5F37AD1FC2
468CD8A9-7C25-45FA-969E-3D925C689DC4
46AE03C0-BCFA-4728-90E7-00EB4A8B3863
46AE04C0-BCFA-4728-90E7-00EB4A8B3863
46B9D770-1B7D-45D1-81B4-AC07B2F127EF
4708D1EF-3800-4E4E-9948-360BA9164264
472F8EA9-162F-4B01-9D2D-03E14C8C8EFC
474264BC-9571-47C1-85B9-780F756DC9CE
477A7A3C-8B11-4B02-ADD1-7A01C4D00FA2
47833539-D0C5-4125-9FA8-0819E2EAAC93
4788BFAC-1DB2-4D99-9D42-D37A37FF27B2
47D5A45E-6B1A-11D7-BA96-000021F32E38
47EE33DA-0E2B-41E4-8923-0899631D2CF7
4845C240-1DFD-11D3-97DE-00104B873412
484FF54A-CC44-467E-9C31-5B89FC753007
487CA274-DDC9-45CA-BF51-2017CE8D6D8A
48BF2BC0-2945-11D8-8CAC-00080EC65465
491AF6C5-21F2-46E1-C653-3DF529127D7B
49468D3C-2731-45E5-A4AD-D2DB9B68A9FA
496756A6-05E2-4646-96B5-071EC0394E9C
497313F3-57A0-44C5-BD20-5D7E29590399
4982D40A-C53B-4615-B15B-B5B5E98D167C
49A69FA0-2678-45CD-A069-6ACC372B20F8
49B97BE1-C9FA-42E9-AA69-7E9F8A3A59EC
49E0E0F0-5C30-11D4-945D-000000000000
49E0E0F0-5C30-11D4-945D-000000000001
49E0E0F0-5C30-11D4-945D-000000000003
49E0E0F0-5C30-11D4-945D-000000000010
49E0E0F0-5C30-11D4-945D-010002000012
49E489BF-C4B8-11D6-9547-00C0DFF1DE9E
49F21871-EE44-4ED4-9C80-79B913A1E8F1
4A241D35-F7EB-401B-8C5B-A904A50F280E
4A334B0A-DC75-49D7-9989-0B3C4E4AF773
4A34B4F8-19E5-46D9-B2C9-DA6DB8C8A65C
4A360645-F363-416A-A7A3-54E4804F90ED
4A368E80-174F-4872-96B5-0B27DDD11DB2
4A3A071E-F913-4EEE-AE15-AEFFA16FB6BC
4A41E0D2-D514-4CA6-A494-7EB8420A865F
4A5BE5EE-CFAD-11D9-8FAD-0007E9AA247E
4A77B761-F91C-4A91-94A1-B638B146B6F9
4AE165F6-CCA4-4E9A-98CE-C2FE8B59F383
4B3803EA-5230-4DC3-A7FC-33638F3D3542
4B5F2E08-6F39-479A-B547-B2026E4C7EDF
4B7B69EB-A00F-4FCD-B601-ACCBB86ED528
4B8ACD00-2E8E-4D8F-883B-25BAA3502643
4BA01F98-3D88-4310-B212-2C6B32BC9A6E
4BC3AC04-3E56-411D-B465-4FEA06654611
4BD9653E-D4C7-454B-9151-A8517B84BA08
4C12361F-3431-4A69-B0CA-CA788A8F7C12
4C4C942D-03B0-4041-94F2-73991832615F
4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2
4C7B6DE1-99A4-4CF1-8B44-68889900E1D0
4C8A20CF-1E77-4F08-A27B-3ED7D9C76244
4CEFC204-9A33-4DDD-9BAA-ABDD97595491
4D053320-23CF-417F-B498-0DCF8EBF49C3
4D0B671C-7F9A-4516-B4DB-D30F3A12EE26
4D1C4E81-A32A-416B-BCDB-33B3EF3617D3
4D1C4E89-A32A-416B-BCDB-33B3EF3617D3
4D1EF2C9-5540-455B-9550-272AD595F425
4D25F921-B9FE-4682-BF72-8AB8210D6D75
4D25F926-B9FE-4682-BF72-8AB8210D6D75
4D46ED77-1429-4CF6-8F63-C84B5D710BAF
4D63CEBE-B169-426C-B092-C130C498B6E6
4D66A7C5-1A4B-405A-B994-CB2090E762E3
4DF1DB24-A57C-11D3-A180-00A0C90AE44B
4DF5B116-4FD9-4039-B377-1130953A980F
4E16A8FB-0521-46D1-AA2C-D0FC7ABF6AF9
4E5A300B-B911-4608-88E2-C6F06214F3F7
4E7BD74F-2B8D-469E-84BA-B830E8D4E122
4E7BD74F-2B8D-469E-85A6-FD7CA39AB631
4E7BD74F-2B8D-469E-85AA-FD60BB9AAE22
4E7BD74F-2B8D-469E-88A9-EB6DA381A928
4E7BD74F-2B8D-469E-88BC-BC28F89AAE3C
4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D
4E7BD74F-2B8D-469E-8AA5-A930F887B531
4E7BD74F-2B8D-469E-8CBD-FD60BB9AAE2E
4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33
4E7BD74F-2B8D-469E-8FA9-FE78A79BBF3A
4E7BD74F-2B8D-469E-8FB0-B921F5DBF922
4E7BD74F-2B8D-469E-92A5-F865B88CBE28
4E7BD74F-2B8D-469E-92EA-EC65A294AE31
4E7BD74F-2B8D-469E-92FB-F17FB598B535
4E7BD74F-2B8D-469E-93B8-B66DBA94AD34
4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29
4E7BD74F-2B8D-469E-95BA-ED6DB186BE32
4E7BD74F-2B8D-469E-96B6-B337BB9CA934
4E7BD74F-2B8D-469E-99FF-FD60BB9AAE2D
4E7BD74F-2B8D-469E-99FF-FD63B990BE2C
4E7BD74F-2B8D-469E-9EB4-FE6FA694B13E
4E7BD74F-2B8D-469E-9FA5-A33DE8DBE931
4E7BD74F-2B8D-469E-A08F-EB64F4D5FA7D
4E7BD74F-2B8D-469E-A0EC-FE6EA084B77D
4E7BD74F-2B8D-469E-A0F1-F068B59BBB2A
4E7BD74F-2B8D-469E-A0FB-F862B587B57D
4E7BD74F-2B8D-469E-A1FB-F862B587B57D
4E7BD74F-2B8D-469E-A28F-ED6DB680B92F
4E7BD74F-2B8D-469E-A3F1-F068B59BBB2A
4E7BD74F-2B8D-469E-A3F3-E96FF4D5FA7D
4E7BD74F-2B8D-469E-A3FA-F363B384B77D
4E7BD74F-2B8D-469E-A6FB-F862B587B57D
4E7BD74F-2B8D-469E-BCDD-C939F0D3F960
4E7BD74F-2B8D-469E-C0FB-FA62BD92B438
4E7BD74F-2B8D-469E-C0FB-FB6DA681FA7D
4E7BD74F-2B8D-469E-C0FF-FD60B590A87D
4E7BD74F-2B8D-469E-C0FF-FD60B890A37D
4E7BD74F-2B8D-469E-C0FF-FD61BB96BC7D
4E7BD74F-2B8D-469E-C0FF-FD63A08DBF29
4E7BD74F-2B8D-469E-C0FF-FD63B39BBF2B
4E7BD74F-2B8D-469E-C0FF-FD63B697BB35
4E7BD74F-2B8D-469E-C0FF-FD68B198FA7D
4E7BD74F-2B8D-469E-C0FF-FD69B994BD34
4E7BD74F-2B8D-469E-C0FF-FD69BD9BBF3A
4E7BD74F-2B8D-469E-C0FF-FD6DB787FA7D
4E7BD74F-2B8D-469E-C0FF-FD75B9D5FA7D
4E7BD74F-2B8D-469E-C0FF-FD78A087B530
4E7BD74F-2B8D-469E-C0FF-FD78B598BB30
4E7BD74F-2B8D-469E-C1EB-ED65B786FA7D
4E7BD74F-2B8D-469E-C1F2-F063A081BF33
4E7BD74F-2B8D-469E-C3FF-FB7FB59BFA7D
4E7BD74F-2B8D-469E-C6F3-F06FA69CBF7D
4E7BD74F-2B8D-469E-C6FB-F46FBB87B37D
4E7BD74F-2B8D-469E-CBFF-F37CB0E7FA7D
4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C
4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D
4E7BD74F-2B8D-469E-D1FB-EF7FB3D5FA7D
4E7BD74F-2B8D-469E-D3EC-FE6EB89AB529
4E7BD74F-2B8D-469E-D3F2-B93FFED6ED63
4E7BD74F-2B8D-469E-D3F3-FE6BB585FA7D
4E7BD74F-2B8D-469E-D3FC-F363BB81A82F
4E7BD74F-2B8D-469E-D7EC-ED6DB68DFA7D
4E7BD74F-2B8D-469E-D7EC-EF6EA084A97D
4E7BD74F-2B8D-469E-D7EE-FE6FA781BF33
4E7BD74F-2B8D-469E-D7F0-F660BA9AAE7D
4E7BD74F-2B8D-469E-DAEE-FE7EB39ABD7D
4E7BD74F-2B8D-469E-DCF7-E869A199B87D
4E7BD74F-2B8D-469E-DDF9-F165B897FA7D
4E7D0B40-F575-4A29-9710-4675EAF4686A
4E83D567-4697-4F7B-B1F0-A513B01DB89A
4E8E825B-E848-4888-85AD-D44750C6E5C9
4E9CAE1A-545D-48EA-8EEF-4D1DB6695AD3
4EBDC6E1-4B3C-11D7-BC75-008048C7A589
4F04E7B0-F5FD-467E-9A91-54C688F3A947
4F2530BA-8C1D-4A6A-8BA0-74E93ADC9B12
4F869C58-D71D-4850-8BDD-7B5CDF8EC911
4F92B827-1E56-4E30-A978-A17A7861A606
4FA955E8-C73C-4D72-BDCC-EA12227B45D9
4FB971C4-99FB-480D-BA3F-55B8263010FB
4FC00340-F75E-4EB5-880C-651A8A76965F
4FC2E1D1-F0CA-4EBF-ADEA-E92DDA0E8D32
4FCC864F-07EF-4409-95F5-CF62803E7D0E
502C3BA4-2C3E-4317-BC29-C0445E82B1F9
5093EB4C-3E93-40AB-9266-B607BA87BDC8
509D3C6C-7BD2-49F7-B0F9-6C32AC4A8836
50BD81C3-E799-4F0F-A301-859B966E859C
50D31413-8B14-4158-94A5-80BE78E23058
50ED6ACB-A649-4E70-B7EC-F67EAD93FFC0
5115AC94-F268-4CF3-B8B2-8D88169EC7B0
512ACF1B-64D9-4928-B382-A80556F28DB4
515DE07E-DDF2-4D73-B8CE-4BAA65FE55B7
516E2306-7ADF-47EC-AEA8-ACB6B51899F1
517BDDE4-E3A7-4570-B21E-2B52B6139FC7
51819320-5B57-49FE-BEB5-B498CBBA1097
51C8BCA8-2524-4523-BF09-738C4EEBFC58
51D72277-601E-4D4C-915D-113E34F61523
52706EF7-D7A2-49AD-A615-E903858CF284
52A9AD99-CC4B-44B2-8493-3D0CA9040134
52CDD23E-6C91-4669-B63E-1B4F1F8FD79F
52D06F97-5511-43FA-8FDA-C481864FD26E
531C49A7-179F-43CA-AF5E-AF375FBB8840
5338DF6C-3B3B-4E38-8B31-7B99986627B2
53707962-6F74-2D53-2644-206D7942484F
53829F91-1B06-4DB9-B13E-812A986169F9
53F53E00-4C2B-43E5-8AF0-D3C863E8FC65
5420BE57-2ED4-4F4F-9EB9-381CEC2290E7
5499BCB1-5641-4A4C-9F75-462D4D8D0DA0
54A9ADE6-DA20-42F9-9882-26F6B7999AEF
54B02808-B60E-44CD-A72D-9865117E4E62
54B62CEF-8A07-4D3C-A2EF-DDF184264374
54BEDD5E-CDF7-4E97-8481-AE381AF7F110
54E4AB95-3E29-4A52-95DA-E0B28AB0E0D9
54EBD539-9BC1-480B-966A-843A333CA162
54EBD53A-9BC1-480B-966A-843A333CA162
54F33362-1828-4181-9CC7-4BC727C38B78
54F8C0E2-34F9-474F-B47F-2CFCFE2300A2
55302804-482E-470E-8A57-6795A1487F90
55302805-482E-470E-8A57-6795A1487F90
5538FB62-F725-4433-A965-91314E8D8E4D
556AFBD5-667F-4E3E-91C4-3FAACBD7024E
55825511-174A-4B4E-84B7-69AAC4E294B6
55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD
55D376A0-36CB-4C42-A3B4-E5FC2C92E1ED
55EA1964-F5E4-4D6A-B9B2-125B37655FCB
55FAF0F2-44D4-425F-B5F5-6B275B621EAB
56071E0D-C61B-11D3-B41C-00E02927A304
562C1A20-72E7-4ED8-A26D-0DC57415FE92
56796C51-A689-4360-B813-18A47C9D05C2
56879C4B-B0B1-447C-9FDF-259F70BE9F76
569E7719-1A11-415E-9206-AC1860FB8BFF
56B38F40-4E70-11D4-A076-0080AD86BA2F
56CD20F0-7C09-11D5-A768-0050042307CE
56CF4856-ECB4-4E46-A897-A378821F97B9
56DC779C-A526-485D-94B9-9BF08A0E168F
576EB0AD-6980-11D5-A9CD-0001032FEE17
5776A2BC-D803-47F6-9DC0-8344DB8D604C
577EBCA9-8ED3-45FC-A514-55B3817D4BCF
57A30D1E-08B9-4EF4-B273-AAEA1C234A5B
57D23905-A2A3-4002-8C48-09DEA366703F
57E91B41-F40A-11D1-B792-444553540000
57ECFB51-CD00-4B9D-961A-704E762AC529
57ECFB59-CD00-4B9D-961A-704E762AC529
57F02779-3D88-4958-8AD3-83C12D86ADC7
57F379B3-66C0-4190-92F8-F66FE4613E4D
58112A01-1F24-4EFE-A6B2-297DC7CDFEF2
5854FAC4-5BF0-47DD-B5A9-A5EA8CFF3CF4
585BA0F1-7DEE-4272-B216-39EA3E246679
588869E0-6C28-400A-8A1A-2A099E41CE9B
58A83E4F-477A-4A3F-BF9B-B65BC2BD5598
58EA989D-FD9C-4660-B6BC-9AE5296DA453
590579CA-FD8A-4AB0-8956-975CC19C6867
59062B7A-61BD-4A26-A7A6-6A213F2601F7
590B14B9-73BD-4BFD-93B0-A5E279F05DA0
593FA054-6BFB-4CE5-B87A-0A68DB7C0F08
5A074B21-F830-49DE-A31B-0ADDB9667925
5A074B21-F830-49DE-A31B-26E51D6FD4D9
5A074B21-F830-49DE-A31B-474187A344B8
5A074B21-F830-49DE-A31B-5BB9D7F6B407
5A074B29-F830-49DE-A31B-5BB9D7F6B407
5A098C30-7AF2-48E9-BD7C-4E980D8D1E11
5A263CF7-56A6-4D68-A8CF-345BE45BC911
5A4ABF21-0A44-41A7-95D3-B6A061E147F5
5ADA9CAC-04F9-4DD2-ABFD-74D673BE8624
5B06A365-B740-480D-9824-25146E10D387
5B2AD7D7-81E3-4B74-8B74-4600A67BBB8A
5B327C15-C1B7-4D1F-A5B7-A2F5FFDF2881
5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897
5BBFC00A-312C-4777-A5DF-DDA65C67120C
5BCF4C83-4D9D-4877-810D-28E2102D1034
5C11EE98-400F-4CD7-90A6-D8C6797153E2
5C2073DD-2ED6-4FF9-80D1-543F720043A9
5C43B8A2-24E8-4336-B86E-A94558E10C60
5C472352-90D0-4214-BF20-8E4A2B82F980
5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB
5C9DCA26-CEC4-4280-A831-D622D4DBF113
5CA3D70E-1895-11CF-8E15-001234567890
5CBE3B7C-1E47-477E-A7DD-396DB0476E29
5CE1F973-16E2-49A1-BF2A-F4172C65509B
5D33B3E0-4FB3-4ED1-9106-B6EB06A3B7C2
5D3B77B7-0FB7-4A08-999E-DF15C8076D58
5D956A61-05E7-427B-A2B1-BF32FB18B1BE
5D9CE7FD-8ACF-498E-9D42-159C9B404641
5DC2C36D-747C-4FEE-8BC3-E86C21981440
5DE4E98D-DE09-4BC3-8A70-A6D9A24F4EC9
5E0553EA-A853-4E93-B758-5F037D41A950
5E92F538-B50B-46C5-9C5F-C6EECED3F6C6
5EEA2160-93A2-44F3-9326-1B680ED69352
5F186CB1-08C6-4034-8529-CDC625463D99
5F1ABCDB-A875-46C1-8345-B72A45670039
5F48C39E-5581-4701-9A76-96A6E25E5BCC
5F50A50A-0A0F-4F58-8B1C-62BC60F9B05A
5F589742-1560-4313-9C36-10A6CBC313DC
5F5A5394-0747-448C-B6BE-9C54EDC92F52
5F6293C0-8686-11D5-9C62-000102117FC3
5F8C29F1-7509-437E-8A92-D454A783F74A
5FE96BC0-E89F-409D-9B68-6D3693E1BA83
601ED020-FB6C-11D3-87D8-0050DA59922B
603EC267-504E-4BD4-97F3-5DD71A271EAF
604B283A-4E26-4504-98E7-72859F949547
605F5EB4-E40B-4000-BD60-70CF5494ED9F
60BF5EE3-0105-4858-AD98-17C19F86B042
60C718BD-2471-44E4-AFCF-6625BEB620BF
60D3AAEB-AA39-4AE0-B2F9-E4AF0613A2A3
60DF4425-F36F-42D7-AECF-A409EBE4558C
60EC89B7-367D-402B-8C55-30FAEB32A705
61136458-6103-49BE-8AA3-E156759C3042
61225C49-D70F-4082-B2F6-90C7B66D06C8
6165D324-3AAF-4C63-B545-C7D2285BEA1C
6172E460-FAE3-11D2-B494-004005A47AAA
61B5B39F-0750-4637-9D70-A63A79978B5D
62355041-605D-4469-84FD-5D66ED67A7E3
625405C7-5D0E-4B4D-8C6B-040B37D46736
626636D0-04B8-4241-84B5-8A6BC3F03501
628CD0A4-60A0-47C8-838F-86318CCEFB9B
6291957C-8CE9-4C90-BEFF-12D9E68CFF30
62999427-33FC-4BAF-9C9C-BCE6BD127F08
630FDD08-3035-4880-B2FE-E67F514319FB
635A7AFA-FB22-4A4E-8AB8-C85CFAB14626
6380715A-2F84-4155-9D7F-5E7BF97DDD07
63837897-A6BB-424F-ACB8-F25C93F87890
63983FD2-298E-40B0-A246-D32FD0C9CACD
63CC63C6-1AE1-491C-B96A-812A7950A1EC
63CCAACE-9D54-4149-9085-1B3BA48D0FE2
63D57694-0659-4DEC-AC5B-2F37B547A599
63D687A8-0913-49DE-9EAF-9ABF2D384BD6
63DB37DD-6349-43F8-BFCC-FF683EF3CAC9
6427806D-3820-11D5-9939-00B0D0522EB5
645FCD0C-EADE-4B52-8CDB-EF33692A2E75
64634180-B0EA-48B6-82B7-9620D33362C1
64F56FC1-1272-44CD-BA6E-39723696E350
650EB965-8A1D-41C9-A941-0578F5CFC569
6536EB3A-ECC0-40C8-B0DA-47F52B3AA0F5
65394353-C60B-4480-ADC3-02B7B4C434B4
656EC4B7-072B-4698-B504-2A414C1F0037
65D886A2-7CA7-479B-BB95-14D1EFB7946A
65DCB62D-0C89-467B-BCC3-B04FB0773D1E
660046EF-A399-4A78-AD12-773DC603733A
6620E618-1AB9-4EB2-ACA4-CBBE9066DBE6
66252F33-BE30-4188-9199-63F2AC8BA137
663C7429-E454-11D3-B9AE-0000B4C32B4D
668352A3-EBD4-11D4-857C-00C04F656DC9
6690AF45-86F5-4AFF-ADDD-6067C749D927
669695BC-A811-4A9D-8CDF-BA8C795F261C
669695BC-AABB-4A9D-8CDF-BA8C795F261C
66C2947B-903C-45A1-88A8-8299B2BBE99B
66D61D7A-EB71-4619-A3D5-5918CF7BE7D6
66FBBF2F-A36F-434F-AAB9-590C0BE6EC53
6728D3F8-662C-413A-A40C-2A8EF95222B8
6754A456-BAD9-11D4-93D3-00B0D03A2F91
67970B26-F57D-4455-8262-81C3AE3B8B5E
67984BEB-075D-49AE-A50B-352E145FAAB8
67A4F320-3C5C-4E2C-A1C5-6014B73F373F
67A90DD5-128D-43AB-B97C-565D2DD42A28
67BCF957-85FC-4036-8DC4-D4D80E00A77B
67E9834D-B226-49E6-B6F6-85AA64E14BA3
681A6C0B-A772-4F63-BBB9-5B434DE1F9B2
68C55168-E188-40DF-A514-835FCD78B1BF
68E69D9D-63C9-4C32-A53B-CBE1D5A5903E
68F17A93-FC78-4565-8BB4-04105D1725CC
68F9551E-0411-48E4-9AAF-4BC42A6A46BE
68FF9E0F-2E96-4467-87FA-1A8B9734C7E7
691AFBC1-3C46-406D-AD22-EB3A0F665FC1
6932D140-ABC4-4073-A44C-D4A541665E35
6937BD2F-EF19-44AA-93DE-9D47E50ECE12
696D8C1E-7039-40C8-9C66-07D9D2A2D00D
698EB731-CDFE-4485-9162-0C955CA153BB
69A87B7D-DE56-4136-9655-716BA50C19C7
69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2
69D333CC-1909-4145-BDEE-CA1830367E94
6A2AB3A5-CFB6-4440-AE73-4996D22508DF
6A373B7E-496E-424F-A9BE-486A5E9AB018
6A3EBAF8-C030-4E10-9D09-DB76740E85B1
6A87B991-A31F-4130-AE72-6D0C294BF082
6A882320-BDD0-4FF4-BE3A-D8BAF82668E9
6AC15BAC-8AE7-11D3-A458-0000C07BA55F
6ACD11BD-4CA0-4283-A8D8-872B9BA289B6
6ADB0F93-1AA5-4BCF-9DF4-CEA689A3C111
6AE02E1C-8859-4F57-9097-5A55A56A4CAF
6AFF8A94-6B61-11D4-850E-00C0F018CA62
6B49F76B-190A-4FC6-83EA-BAAD234BAFF8
6BB8F8F1-EFD5-45A0-87BA-74A0E7AFD10B
6BC013D0-77D9-11D5-AB95-0050DA664D35
6BCB43AF-A20F-4996-8860-48F511A222DB
6BDB7256-E43F-429D-BA08-D864FBB56B6F
6C31790D-1EDF-4B05-83DC-925B3A8E2318
6C3797D2-3FEF-4CD4-B654-D3AE55B4128C
6D106759-3F98-4026-A46B-8E34DE30DA80
6D34AA11-39F6-48F4-B23D-3211FCB46490
6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89
6D5E4A7B-DD4B-4FED-893E-FD5571A78B34
6D6F1AF0-DDCB-477F-A896-5D75E53B80A3
6D9CBAF0-281A-49AF-B89E-E8A110E126F0
6DFD889B-7F81-44C4-BC1F-06A857C01C41
6E0BD0AE-25B1-4627-9FA4-AFDF76112892
6E18F3FD-82DA-46EE-944C-CBEC9071D2F7
6E398F38-B49F-4EAF-80DE-AD5345F4DB42
6E48A5AF-4EE0-42E4-AC31-6BA0D9572285
6E4CBCE7-DC27-489B-BF5B-0146CB726BFB
6E5B18CB-0EB6-4461-88B8-33B4683613D5
6E753CA1-7CED-11D8-A178-000BCDB8C679
6E94ACD5-2C6A-48AC-84EF-A4DE746D385F
6E9CAC95-D71B-4DE9-979E-1C6C30583733
6EF05952-B48D-4944-AA91-57A6A1A48EF8
6F2DB0CA-D4CA-455B-9F0B-DB135C875345
6F60C5C5-61B3-4378-8902-ED9497663AC9
6F6690B9-C5DB-4F08-8833-F2EF4DEE956B
6F6D1BD2-9270-4E9E-B491-0287F418B5AB
6F91A936-734D-4EE7-9320-50718870285D
6FAB4A77-8C33-4EF9-9DBC-A1321AE949B5
6FAD227D-47FE-4923-AF04-36F3FCED2CBB
7009FCD4-05BE-44F4-9583-93FE419AB7B0
7056E733-8C57-4E4E-9085-E50DE6F3374E
70DE7956-479D-4EB7-8641-2B45774C350E
70E1F00F-DD39-4C24-A93C-DD5BADD08F25
710AD28C-8464-4074-AE9A-341BBEA75626
712B650E-8940-4860-8EE9-B03F58AB36EF
7157CE13-F711-49CD-AA5F-4FA80EAA622B
71821EC4-3CD6-11D6-AEC6-000102AC7057
718C4769-73B9-4D6F-839F-3E1E37C5FB07
7191B2E2-6201-4BDD-8B62-8B61EF6A067A
71AAABE5-1F0F-11D7-BD6F-004854603DCE
71B6ACF7-4F0F-4FD8-BB69-6D1A4D271CB7
71BEEABD-D990-491F-8626-28A7AF43C382
720B3C59-7EDE-44D1-AD9C-71106A7550AF
724D43A0-0D85-11D4-9908-00400523E39A
724D43A9-0D85-11D4-9908-00400523E39A
72853161-30C5-4D22-B7F9-0BBC1D38A37E
72A02820-A655-4ECF-BA65-9F9F6DB26FF3
72EFCEB7-436E-11D3-93ED-0008C7396667
7345F548-C9AC-46F7-A350-524964350D25
7369D359-5B70-4A5B-B789-B25FE09B4AF3
7369D35A-5B70-4A5B-B789-B25FE09B4AF3
7385D9F8-418B-4E6A-938F-F7596857CB54
73C8103B-6C6F-4FD3-9BC4-4BA81AFBDFB1
73D56F24-4B0A-4027-868C-E2EDDCD31CFC
73F7F495-A325-4C52-BE48-5F97FA511E89
740FE5FB-65F1-46C5-9E54-A19C8A8D7AC2
741EF2D4-A3C3-4F7D-85BC-09A3C1DF0DDD
7435856C-6CA1-45CF-A00D-82178387F223
74654569-770F-44C2-BB4C-9323BB8BEC9F
748A5D0A-68D3-11D4-A67E-00E098823A80
74A0AC27-3753-4080-B94E-557CC43E9E8B
74E677D9-0F37-4654-85E9-02F36AA295EB
7559B76E-0222-4D77-9499-CCE9EB4EDC2F
756727E5-1E5C-4284-B2DA-C21D3A283A38
75770A73-AE54-4D18-8F75-880ADE6BC226
75A0D830-27F2-416B-82F7-CB67D0F0611B
75B1A646-CDCE-4C06-B52F-84F4463B4FC8
75CD0BC5-E317-449C-9FF6-4986B3D48F64
75E5BE62-491C-43D1-9AA0-764A88CF2D32
761233B6-F228-49E4-8F6B-668499D4E55A
761497BA-D6F0-462C-B6EB-D4DAF1D92D43
761497BB-D6F0-462C-B6EB-D4DAF1D92D43
7619CFB0-5B53-4AE7-8D2A-4524BE88752A
7632ABCA-B104-4FBC-9C70-419C41470619
7632ABCA-B104-4FBC-9C70-419C4147061B
76886F39-D4D8-4F00-A354-3CC1C364F363
769A6A36-ED24-4376-BC7C-80225BF35698
769A6FAD-C100-4AF9-9BF9-439E05BA1542
76D92AF6-2C25-4667-A54F-F75012BCB7B1
76EAE03C-F2B1-4397-97E8-390920B7C2DC
774E69B6-C981-11D6-B1B1-0050DAB9F678
7754C418-F62E-44AA-B169-E719E718BCFD
77712A64-F30B-47C8-A363-CDA1CEC7DC1B
777D0B4C-75C9-4874-ABFF-80B4BE8DC532
778B6755-2A32-11D4-A68C-00104BB641A7
77EA9EE9-7514-45C6-BCA7-B4BA06AC5681
77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F
77FBF9B8-1D37-4FF2-9CED-192D8E3EBE6F
77FEF28D-EB96-44FF-B511-3185DEA48697
78104A01-8E71-4F30-9A36-3793799615B4
784D8FBC-4165-4D88-90FB-62907ACDD045
7858D2DD-A1EA-4E5E-8A22-F7CCD19F67F8
78839ABD-14B9-11D4-BA68-00104BC6425F
78B5D524-8F7C-4B57-8D17-0D446F868994
78C21EFD-53BA-406C-AF1A-33A38ABD3958
78C6DD72-1F43-4040-8DA4-FEC930A920C3
78FF8577-D6CA-40B1-A0EB-4DD4D4082941
79043293-F03A-4ED3-9E0E-D0D97AB4D937
790C1F44-C559-434B-BE18-13C042555D8E
7914D9F0-DD27-4260-9BC1-AE01834B77CA
79594677-0416-4097-A421-41BE9667B36F
79594D61-BB8F-492F-BF61-1805B25C8375
796AF358-6E53-4E90-AB45-503C3C8D2891
799C8DD5-DBD2-4328-AD1A-AC9DE92C5F66
79C9FDA0-0A67-4C56-BC89-6AB3FEC2752F
79CC2110-A6D4-49F7-9A28-DB30FB062D2D
79F99A29-FFA7-4F2D-A23A-512A548B597C
79FCBF9D-044A-4D1C-A004-D3E4E2D12FB0
7A33D136-248C-4BA5-B72D-BB68F4AD9039
7A3BA17E-A5C6-4889-8A78-80A3C3382118
7A431EC4-CC21-4DF7-9DB1-A2CF74C4CC98
7A4853AD-45DD-4672-8352-F543CEF2D878
7A4CB73C-64DF-4155-9EFA-57F86560245E
7A9BC6B1-7F27-47C6-A66D-13582E81E537
7AA07AE6-01EF-44EC-93CA-9D7CD41CCDB6
7B0B549D-2EB3-4B56-8A29-B112ABECA310
7B49A2A5-B45F-46F3-AC60-2578477671EE
7B64270B-1216-47CE-9708-DE9D2D628CC5
7BA7B95F-9B92-4132-8012-E19B585CAF21
7BC54849-1236-49C8-AEC1-67F62865AE68
7BE2E2E3-4B8A-4FE4-BE98-95FA313FDD19
7BF01667-0A8E-45A4-A940-575CCA5F5826
7C084E19-A66E-4585-8270-66A3813A5B70
7C0AFA0E-CECC-4FD0-ACDE-6566D4B4CD46
7C0D0F1A-AA1F-4F43-94EC-3F88651C8C7F
7C1CE531-09E9-4FC5-9803-1C2956615786
7C1CE794-AE42-4B82-B9D8-D5CBAF06E48A
7C554162-8CB7-45A4-B8F4-8EA1C75885F9
7C6B6610-6203-49B8-9952-5D2A85B6D179
7C7A8947-5935-4430-AC0E-E7D04697414E
7CB3EADB-4D4D-4B37-857A-9CDE73B58ECF
7D1FD2B7-1877-451F-95CD-0CAC38C104C5
7D237819-B1E1-48E6-8127-E45301F077C7
7D577908-38F9-4F56-97E1-C0973947F445
7D5FBE1D-F012-4F2A-8A1C-42E1037972B7
7D9E713D-0388-4384-BDD8-2A42EB1C4F04
7DAAC7DE-9EF0-4FF0-BFA5-AFF3E899054C
7DAFD8A1-A6F8-11D3-9B51-0000E85300BA
7DB2D5A0-7241-4E79-B68D-6309F01C5231
7DE7B623-A17E-4A0B-94BA-D1B3BA646792
7E3659A6-4BC5-4D93-B3FD-8B5ACC2FEDED
7E600446-2123-4CC9-A69D-7EEC55AB9956
7E6CDC1C-3B90-47D7-B2A8-24438CA96075
7E82235C-F31E-46CB-AF9F-1ADD94C585FF
7E853D71-626A-48EC-A868-BA8D5E23E045
7E853D72-626A-48EC-A868-BA8D5E23E045
7EBFB6D4-F752-4657-93DD-10B6B986DD1D
7EED2A74-002E-481F-A283-D96B81EA244B
7EEF1E3D-FD97-4401-BCDB-5827F2D11709
7F09A208-7569-46DB-94E5-1E385E68F77A
7F16E247-9F8E-4778-956E-AFEDF3D2FE0C
7F377E8B-B4A7-46E1-950E-F04276E9BF6F
7F9FBFAC-C171-4B2B-AC7E-1EA1119C938D
8017CFC2-1836-4A82-A5B6-829780A41536
801BF87E-A000-11D3-81FE-00902741DE09
80230FFE-53DD-11D2-AE5F-0000832F3A64
8036D4D7-AAD3-4793-AB49-329E437155A8
807DADF1-18CF-4A7F-8792-8443C960E055
808D8583-4257-3148-89A6-E2F6B8FAC307
80BF4636-D65B-43F3-BB60-C5DD3D5FB7B9
80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9
80DAB143-0FD4-4758-8DD8-F131515F524A
8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489
8151A854-F9E0-46F2-A1DC-72093BCA624F
8170D7DC-BDD6-461E-88EB-F047257898C9
81766E08-CE68-4F23-95C4-C1468FDE68AA
8177B516-1245-4D15-8185-F36ACA073216
81B6A512-B861-4192-9C6B-5A832D6DE08C
81CA3009-6200-4A6D-93C6-F1E9A6821C7F
81F4066B-F330-4872-8094-3E9FBCCEC8C1
820EA695-5A03-4633-BA5E-97303C6B0597
8272B062-BD4D-4EAD-A149-45B3CE3F5CDA
829CAB51-A4EA-4A15-87B6-4B7D0747939C
82B45815-2688-4853-B008-2C41A60A2F2D
82CC2983-CA87-4D46-B33B-D285BD667A56
82D266AF-DDB7-4469-8DA8-56E67A1316DE
82DE967B-6DB5-4AC2-8450-C732F8358A43
82DF1118-9B92-45D8-B78F-1737A69A06E1
831AA893-5930-4A2B-8D38-B881AD1764E2
833CFE4E-05BD-43A3-97A7-A4E80D742F0F
83804FF6-42C5-4730-94F0-D2D7848C2609
83A2F9B1-01A2-4AA5-87D1-45B6B8505E96
83A30C59-3A50-49E6-9DAF-4923C4EA3C23
83B80A9C-D91A-4F22-8DCF-EA7204039F79
83E8BF99-F3C0-4475-B453-9F9E8E4548C3
83EF376D-8874-4769-A2E7-7096480E7DEF
84053DA7-03DE-4FB6-80AE-202C04691D8A
849CC480-5983-4D30-A12C-774E8E8D8291
84B94901-3645-4D80-A6B7-4D0050B19455
84BC9DE6-2283-47EC-8375-1773F6FF9633
852AA4EA-68B0-487B-98E7-4F03898CB502
855F3B16-6D32-4FE6-8A56-BBB695989046
85810C93-C14C-11D5-BC4B-0050BA28E4FE
85880F59-485A-474D-9955-915EC345316C
85A3F3A9-CCD8-40E0-95BE-18D218855BCD
85C5B796-EDA5-4353-B26E-A5D181AD9CD0
85CF4327-68DE-1974-B32E-766E84A9706C
85DDD882-701E-401B-8A7D-D51227048214
85E0B173-04FA-11D1-B7DA-00A0C90348D6
85EC6F6D-A09C-4668-9D57-209BC721A92E
85F685C3-20D9-4943-95E4-EB4224056C3F
862FB893-B24B-4FAD-80D3-A1158EB34DB4
864B4D50-3B9A-11D2-B8DB-00C04FA3471C
868290F7-32E3-11D4-8533-00C04F033A35
8692FED1-9267-4624-96B9-3B94946A0524
86B09C4E-4137-4863-B585-380205F1F774
86BCA93E-457B-4054-AFB0-E428DA1563E1
86BE1CDA-4F72-4C2F-9526-8E6A22DF46ED
86CBF051-1EDE-48E0-BFB8-5CF7770572D3
86D44A84-333C-4A3A-95E6-09E09E0A6192
86EA4148-BEE6-4CEE-A72F-DA27A5112BD1
871F91FD-3A92-4988-A842-16AB2CFF5AF1
8755877D-4952-441A-8AAB-841D479F07FE
87FF76F0-BCA9-40DC-B1E5-254062EEE8F4
8892C699-6978-4DD9-8EB2-951C93DB4F62
889D2FEB-5411-4565-8998-1DD2C5261283
889EB3F6-F16B-4BC0-BC81-9C407C8A3240
88C5C070-8C60-4F45-9345-3FFB96334CAD
88DE6D22-4F4D-4D83-95A2-8E9A4BB166BF
88F05591-0079-4C37-B138-5DA8BC1782EF
88F2B391-8D09-4C0E-9824-5ECD0F382F66
89044184-F260-4FDD-8FAB-2662814846E5
891F621C-85C4-406A-9666-1B7C822A91F4
8924A422-F9E1-470A-AA90-528F15BDA39A
892E81F6-EC63-4D13-8422-835A7A05D6EB
893490FF-6611-4CAB-9D28-9560E7AB668D
8A03D6E7-7FDA-4CE9-95D0-988790911BF0
8A252526-B3EA-11D3-AEE3-00C0DF647817
8A321C7D-9CED-45A8-870D-DAE843A45FD0
8A7B6C4E-282C-4000-8336-27859E0A38FF
8AA99D86-978D-4963-A845-24AF39FB0CF2
8AAE1BCA-A973-423F-9232-7007D8CED2C7
8AE33802-00D3-4F1B-B5C7-6FEE34E402CE
8B11A219-80C8-4B42-B558-B8C14D1AA8C4
8B3868B4-EBA8-48FA-A19B-E1DFB99066FA
8B4F961F-0B84-4201-BBB1-34E45368F39E
8B50176C-DD6E-4C14-A603-727A859337CD
8B57DF7C-9BF9-4D52-B94E-37ACE3893F7D
8B68564D-53FD-4293-B80C-993A9F3988EE
8B6FCDA2-469E-4689-9F8A-80D65E68BB4F
8B79EE88-E62D-4AA8-B530-CC357BA112B7
8C12F453-7E44-4851-8EDE-DB1773A39482
8C1AC562-06F2-4668-99DA-B0343780FEBF
8C3733AE-F794-439A-A959-844DCA64F1A2
8C3887BA-3367-4297-B288-13472BD407E4
8C4392BE-3FF9-4F91-B742-77648B6A68E8
8C6EC82A-8314-46D1-8C74-2350797D3A99
8C8BE7D9-EB66-4472-A839-CDF72443B2DE
8CA7E745-EF75-4E7B-BB86-8065C0CE29CA
8CD08AD4-C69B-4BED-88CA-15D3094E25EA
8CE36BF5-F4CD-49C3-8EE0-181CF6DA6647
8CEB3591-5DDC-47EC-AF97-66699BC85FE0
8D13872E-6174-49C1-B8D2-793F90CCAFAC
8D4CAD95-7199-4771-8D6B-E2657903576F
8D616FE8-BCAF-422B-A151-B6E5622F849F
8DB3D69D-DA5E-4165-B781-72A761790672
8DC238E8-E3D0-4ED9-8A4D-43E9C1C5BBA9
8DC6CA8E-1FCE-4F2B-A5C9-735D81D0A7C7
8DE39FEF-1E2F-402F-8FF3-142749F7564B
8DE6DCEB-AD6E-43BB-9D31-F59D0B236E53
8E09B2CC-C2A0-4786-B099-0B9101E92CA1
8E1E80F3-A3F0-41D4-BAA7-470442CFC906
8E2FF476-C576-4637-9F73-5FFE2116CC12
8E4AA109-7239-4B85-8196-7377A53DDEFF
8E6C1C49-F9CE-4311-9FB4-D70E8B0AEAEB
8E718888-423F-11D2-876E-00A0C9082467
8E85E48B-7FD4-423D-BFAD-FA345D497EB5
8E929F51-5914-11D6-971F-0050FC3F9161
8E9A7A9D-0674-4639-98E6-7B37BF6E37DB
8EA2F0B0-CA9F-4EAA-A21E-7D14D35E8D68
8EAB99C1-F9EC-4B64-A4BA-D9BCAE8779C2
8EAB99C9-F9EC-4B64-A4BA-D9BCAE8779C2
8EB5BB59-8846-4CEF-9D72-902148AF7426
8EDAB5C0-B061-11D1-801D-204C4F4F5020
8EDAB5C0-B061-11D1-801D-204C4F4F5021
8F05B1A8-9D77-4B8F-AF54-6B2202066F95
8F0F47B1-7D4B-4834-A981-91E2A3DCE069
8F1FF1A7-C048-4D6B-B052-56E42CE427CB
8F26EAA1-D8B4-41A2-994F-704AEEE25536
8F644576-314F-11D4-8531-00C04F033A35
8F6E45AE-F89E-4E54-AAC5-16232008816E
8FA29996-D0A6-444F-85F6-9691A0EAE6F3
8FB1B824-62C1-4E9E-9C8B-32F7A461F708
8FB98BEA-1BDD-41AE-B3E1-EC8AAE954B06
8FC8AE66-AC15-4C0D-9E9A-51296A0C52FA
8FE3B060-4574-4691-B15A-B8A6703EBF6F
8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3
90222687-F593-4738-B738-FBEE9C7B26DF
9030D463-4C02-4ABF-8ECC-5164760863C6
9030D464-4C02-4ABF-8ECC-5164760863C6
904691A1-C588-4B27-BC47-D8599EDB3F97
905BEDEF-14B4-4B49-A97A-875326A61911
908A31E8-2A6E-4736-8E8A-AAF00C4AE38F
90C95909-E316-46E6-A74A-7373D632C339
90D37F7B-DFF3-43AC-AEC8-53310B8E62BE
911A1534-8E65-448E-92AE-E22D49F870C4
911C4A8E-0F75-4B83-BEB9-02BDDF29D11E
914A4D0F-8597-4F5A-B829-AF4C725A69BD
9198CEC1-4DD8-95E7-1053-F5AAFDBBE0FB
91DE4477-9CDC-4806-9BCB-28A963988E94
92085AD4-F48A-450D-BD93-B28CC7DF67CE
920EF065-42BE-4F0A-B254-C85DDAEE74BC
9219C216-79A9-485F-AB78-1017825BC5D4
923A63EB-3D61-44A5-9E54-545127FEAEEA
926E3DBB-F9F0-4DA2-B3CA-F54DFDAD65D6
9274F072-625B-4F55-A121-7237B9672C5E
92857633-2441-4A14-8236-DFCB97AD3E87
92B255FE-94E2-4BCA-958D-3926CE38913F
92CBA277-292B-461F-9DEA-67A5C834E101
92CC204C-026A-472F-88FF-EC154B6A7693
92F02779-6D88-4958-8AD3-83C12D86ADC7
92FB5F8F-8254-4978-9C50-03D9B0405062
930E4DE1-973D-42D6-BF6E-6788E06BD003
9323C176-6AA5-4902-B0B9-4D37AA8DFB9A
933E7167-F302-48C8-A4E9-19C4D4C15B3B
934DEC23-E27D-4074-BB22-57F1814B7047
9356AC0E-FC67-4EE2-B8FF-FBC1B0B5E9B4
935832F1-736E-49A2-9CFF-4D0DB8991B46
9377C91E-EB13-4AF4-9B45-42BE835BB548
9381C0A1-92C0-4873-AD71-BB2513BECDC8
9394EDE7-C8B5-483E-8773-474BF36AF6E4
93AE98A9-E4F6-4F76-BD98-872FA7D45E51
93C44EA2-65E9-4C94-9E5B-7CCF329A9BA6
93C69D87-A11D-4FFC-BC56-BE7EE0D235BA
93E4D845-DBA0-47F0-8720-4549BDACF648
9470E8E6-E19F-4675-9832-5DE295F77E89
947657DD-6584-4F4E-A26B-227B4BFE0FE4
94A69487-D8F8-4991-BDC9-4FE3EABA6F0B
95188727-288F-4581-A48D-EAB3BD027314
9527D42F-D666-11D3-B8DD-00600838CD5F
954F618B-0DEC-4D1A-9317-E0FC96F87865
955BE0B8-BC85-4CAF-856E-8E0D8B610560
9566395F-43D2-4C64-B525-B501FFA276E2
9579D574-D4D8-4335-9560-FE8641A013BD
9595C62C-76C6-49A6-9BDA-3253DD7A34FF
95DAA571-4DEF-4A6D-97D8-98A346672A24
96372AB6-15EB-4316-B497-71C741BC548C
968631B6-4729-440D-9BF4-251F5593EC9A
968A8CAE-5F37-11D5-860B-00C04FB9957B
96EA61A9-4236-4F7C-B7E2-BABAF4F5EBB3
9724B1CB-4E72-41A9-953E-EBCEA61DD819
97387E2B-B2FA-4E4A-A607-F3B5C134F71C
97720F21-6D88-4958-8AD3-83C12D86ADC7
98166A42-BBB9-48ED-9768-147787A2CBE8
981FE6A8-260C-4930-960F-C3BC82746CB0
982E186D-7E13-45AC-9789-50B535246E28
987D027C-F0EF-40FA-9A1A-C45007F1F36F
98828DED-A591-462F-83BA-D2F62A68B8B8
988B07F5-7392-455A-8A1F-64935CB8B6ED
98C92840-EB1C-40BD-B6A5-395EC9CD6510
98D58B8B-4C54-45A0-8920-60EA87F07E4A
98DE779A-2364-4293-AB71-2B97C61C4640
9961627E-4059-41B4-8E0E-A7D6B3854ADF
99A10100-66BB-11D4-A02A-00600818E7D8
99A7C4DD-B2E6-4CA0-BB6E-737A61364155
99AFC088-C0DD-40ED-92D8-0C53E8997510
99C06C01-BB1C-11D4-9A4A-00C04F018885
99EBA16F-C13A-40A6-A9C7-5F3EEC4E7BE6
9A0527C1-4D5F-4E45-9D28-6257F75EDDB1
9A065C65-4EE7-4DDD-9918-F129089A894A
9A0844DB-84CF-4440-BDB1-1F4F7C4F7FB0
9A23B8A4-C6C9-4A68-8FA6-5F905DC8FF80
9A2A2BF3-A049-407A-B548-4668E673DCF7
9AA2F14F-E956-44B8-8694-A5B615CDF341
9AD4907C-C3BB-4A16-9A6B-8485187C2410
9AD9826C-E2B6-4E24-A3AC-C49A505BD0EA
9AFD91F9-6B03-4D22-A1E1-67D224CB7AB1
9B1FC2A8-4C46-4D96-9967-388684D5B3B4
9B393B85-708D-4E61-9529-2FA61D4A4904
9B5173E6-2046-4E36-9AFE-877FF7F1AB94
9BC6ABD4-63C4-41E0-9C96-77D7F0AF78CE
9C3AC6C8-DED3-11DB-9705-00E08161165F
9C613A63-B5AD-4C06-B9E0-6530D88296C5
9C64F7E6-73B0-4768-807E-2C00C6B6751A
9C777253-3E17-42D6-897A-11B8617A8FC7
9C9C909E-9E0D-468A-A4D2-C0846D493D88
9CB65201-89C4-402C-BA80-02D8C59F9B1D
9D006D63-579B-4D77-9C12-15623661ADDA
9D3E1F75-D26F-4BF1-B68A-DF80C22A9976
9D6B51CE-25C0-461C-893E-FF0EF332745C
9E0B5480-4FF0-4FEE-818B-D4DB0F220D64
9E0C6AAD-A8E3-4E49-9DBD-786099B599A4
9E1128F1-53FA-11D5-8490-0048548030CA
9E1C7F44-3032-4536-92DD-19BA1211129D
9E3849D6-41EF-4B2F-86B7-632EF90758E4
9E5BD40E-6287-11D6-9772-0002A5DD2483
9E7E32DD-9584-4265-B223-43AA0D6E4E8C
9EBBE90B-282E-4C39-8A7E-120749169F0F
9EC4EFB1-7675-11D3-9558-0020AF269C92
9ECB9560-04F9-4BBC-943D-298DDF1699E1
9EDB89EF-E4BC-4C70-B102-8F7A4365EE33
9EE20FFE-E1BA-06DF-BC32-1D01066DE008
9EEE0111-E81A-11D6-B1B2-444553540000
9F6A22E6-1682-4F82-9B72-6314794CB253
9FD12933-810D-4526-B7C4-0914E098D384
9FEA5BDA-695A-417B-AA31-B54A06570053
A0533E6E-B672-405F-9BD2-431C686FA857
A09790E7-DD00-4A83-B632-5B563423CFBB
A0BC4BAA-B046-442E-A3DB-6F067F7EFC61
A0C6B099-30FA-4464-B098-2686D8BC7340
A10DC0CB-728F-456B-90F9-7FD1351E841A
A114D52B-870C-4F15-8021-B6D7F91A054B
A17B153F-2267-4161-A165-73DCD6C31BEF
A1AD13F3-B8F0-4584-8088-8BCBDB42663F
A1B2F3FA-DD1D-470B-A23E-A133B2F8EF60
A1C18A7B-55E9-4DA3-A880-D112C791A9D8
A1CA2C67-B736-4058-A18B-0C9AE899B2E9
A20854FD-DDB5-4931-8F76-D11EA2364D94
A20A76AD-7A29-4756-87FE-70C334CB40C0
A2D34382-BEF0-4DEB-8E16-A28010A41B11
A2DCACA9-D48E-48DE-8993-EBDAAE788A2A
A2E1AE65-BB68-11D6-B1B2-96787719A248
A30B8EF5-82CA-4789-B77F-9C1C20DF53CB
A3524025-A9E4-4283-9E75-FF3980BA181C
A3AD19D0-69A9-43A1-94B5-F2FFEE9B88CC
A3C27493-6C2D-4CCC-87E8-7077F2356EE1
A3C4086C-097C-46B0-AFB0-76B5CC294233
A3EAF105-FBC1-470B-BC69-B27CA48A0640
A3EB65EC-D9B4-4DC1-88AF-0C7A21EBE5F9
A411D7F4-8D11-43EF-BDE4-AA921666388A
A4246795-7981-42C9-966F-B83B706481E4
A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E
A461BD6B-2AC0-4F0E-8594-AAEE7BB4C70B
A491D208-B353-490F-B81A-A8A3DC97042D
A4CBFF57-E56F-43E9-AEF7-80524EC43EF9
A4D90779-6CB2-4752-83C2-A2AB4D9A672D
A4EBF937-B424-42A6-B2B1-326176D87157
A50B6E91-4081-4B37-BEA1-AD98A3CD51BA
A5181F8A-0B9D-43AC-8BE5-EB61651DB685
A519CE41-E431-407D-8A79-B8FA3FBEBD0A
A5352191-32C0-4EDB-B265-382F576C32FF
A5366673-E8CA-11D3-9CD9-0090271D075B
A58686ED-FC46-44C3-95C6-4A812AB776F1
A586BE00-52AC-11D3-A075-E51A86A6C62B
A5899B52-3AF9-4F56-85FE-AD7B3BE8490F
A5947C19-1FD8-49BF-A9B3-AC4C7F83C091
A5FDAD74-BBF1-47DE-8330-8C641800AC0E
A601B013-3DDB-4902-948A-9879E1F6A1A7
A66CC04D-CA4E-4050-8E18-51F7E6D18096
A6790AA5-1213-4567-A46D-0FDAC4EA90EB
A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB
A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF
A6790AA5-C6C7-4BCF-A46F-0FDAC4EA90EB
A6890AA5-C6C7-4BCF-A46D-0FDAC4EA90EB
A6927151-F5B4-11D4-AE7A-00D00925CF52
A6984C00-C6EB-11D4-B4A4-080000180323
A69DD619-0385-4347-801D-781C09701BF2
A6A49249-57AE-4295-8D4D-18A9502C7D8E
A6F74643-242A-A7A4-8DD5-AB40B9E25345
A7327C09-B521-4EDB-8509-7D2660C9EC98
A79E8A01-5B3B-4AE1-907D-9E4AFC8057BB
A7CCC4AF-45A9-4B35-9AF4-F14339FA9063
A83E9D7E-119A-4A2C-94FE-2D4315ED3D40
A8415B7A-F661-4D31-92D7-4398E50483DF
A84524F0-D48B-4CFF-8012-5E67DECAF1D5
A84859C9-EEE9-4686-9059-A89242BB4BEF
A8533C62-9399-4640-B36B-D1DDE91EB8B1
A891DF3C-858A-453B-B45A-EB7325295FE7
A8E16533-7A2A-43F1-9EE9-901136EBA5D8
A8F38D8D-E480-4D52-B7A2-731BB6995FDD
A9120C4F-5402-4572-9113-94661623D420
A92916C6-B3CC-4C75-BD38-CFF04CC54DDC
A93A3CC1-BA23-4D0D-9440-6A0148362B7E
A93A3CC9-BA23-4D0D-9440-6A0148362B7E
A94EDD52-85B3-472F-8BC0-D651D760FBF8
A968A4B4-C492-4834-B651-17602C3885C8
A9930D97-9CF0-42A0-A10D-4F28836579D5
A9BE1152-9DB7-4E4F-8F33-B314A5E364D7
A9BE2902-C447-420A-BB7F-A5DE921E6138
A9EBC8A7-1E64-4CD2-B658-6453CA39CF63
AA1F9DDB-E605-4BA6-81D4-E427DEE012AD
AA58ED58-01DD-4D91-8333-CF10577473F7
AA7BC78C-2AD5-4C6C-8014-B1F5E75CB0F4
AA90C815-C7ED-44C2-89AA-3D82DE73B8C5
AA988FBC-2EF3-49EA-B3FF-3616DD91AFC2
AAA9F5F4-27F6-4F85-A879-7EA50B4322CD
AAAE1C1A-89F7-4AF6-ABD1-F8FBCFA47408
AAAE832A-5FFF-4661-9C8F-369692D1DCB9
AACBDEE8-0813-4308-8121-94CB60848B2C
AAE83410-C935-4517-889B-BEBA6AD7601B
AB37CD3D-DC1D-46B2-ADCA-3CDC80FD2AD6
AB41010D-4804-4793-A6A2-3B5EBE2348DD
AB4758E0-5BC4-11D6-A846-DCEF4DE0604E
AB77A7BF-8C5B-486A-B547-F9AD2B41A904
ABC9A420-1D87-4277-97E1-250AA864F84E
ABD7CF2F-2CB1-4152-9818-166CDF79712B
ABECD8B7-5A3C-443B-9509-175FA74037EF
ABF33BF2-7401-4624-8C1B-34CFBBC0E4F2
AC1E3A8D-DFE9-4009-BD64-F816361E1E9C
AC2E8306-D24E-4082-8669-7781499F4E03
AC36AB03-0C7B-4363-A48E-342B7419337C
AC41D38F-B56D-40AD-94E0-B493D130C959
AC716F07-89CE-4A95-8DD0-37C429C263DA
AC897D33-1DB7-4151-B425-2DA88D5A6BED
AC89BF9C-4296-476C-86BC-6CAA3B398AB5
ACA3C41B-3735-4052-8B7A-F5FF9C83EC05
ACB1E670-3217-45C4-A021-6B829A8A27CB
ACB9752A-FB42-436E-84AF-35EA8313A587
AD0BAB4B-212D-45D7-9E5B-CB1579132715
AD5D98F1-B15F-4455-BA8A-CF4977D57CDE
AD8088D4-219C-40DB-B16A-5E53261BED3D
ADECBED6-0366-4377-A739-E69DFBA04663
AE07101B-46D4-4A98-AF68-0333EA26E114
AE113CC0-1115-BDD1-1B3D-229549C10001
AE123CB2-1115-BDD1-1B3D-229549C20001
AE40EBA0-2D49-48C9-BA8D-E9F046240F5F
AE4DF123-9140-4F93-9B32-FF0186389CC3
AE6F2894-AF10-4C9C-B16E-1DFC6FF8C0C6
AE7CD045-E861-484F-8273-0445EE161910
AE821A68-7090-4228-A8FA-8A88454E2A89
AE8EF38E-64E0-472C-B9B4-E29643D152C1
AE908F56-650D-4C05-9F01-98F5FC381273
AEC32322-9D72-4C55-A108-33875F07BC03
AF2A1C5A-1AED-4E92-8BA8-D708EB79537E
AF69DE43-7D58-4638-B6FA-CE66B5AD205D
AF7BB79F-070F-420D-83B7-8D138611A26F
AFF6E516-CBE5-4F8A-9C2F-38A68013E766
B0000209-50CF-11D1-A140-0000F802C250
B0744341-96E0-4341-9ED2-8BC36CE0CCD0
B0A26676-4185-479F-B7B1-B3968B956468
B0CD151E-D4F1-4474-9BED-7D0173050EAD
B0D3D090-CE97-4E3E-A388-CFD55B1F5E63
B0FDBB8E-5C2C-41ED-A18C-228F9B2F598C
B13721C7-F507-4982-B2E5-502A71474FED
B16F8052-1A10-4967-9F98-1A21ECC782F2
B1701E70-B5D0-432C-9058-C3E3FFBCA4BA
B1864187-E770-47FA-9345-552A7D6DC5BC
B1CC6DA6-1341-40C2-9930-086ACD067289
B1E741E7-1E77-40D4-9FD8-51949B9CCBD0
B24BA06E-FB7B-4757-95C2-DC01125F750E
B2847E28-5D7D-4DEB-8B67-05D28BCF79F5
B28B4479-D9C2-41D1-B74D-74A1827037CD
B2A8E0D7-5764-433D-A89B-2332B9D9BE00
B2C9A858-A8BE-426C-B1C7-7FD258B28CAA
B2CE7F1F-9039-462A-B3B7-3935C3CCCCAC
B2DE56E2-907A-4080-AE06-5C2A7BD4364E
B2DE6C6C-F6B9-4427-96E4-3B8DE900A2B6
B32296EB-477F-4A6A-9F32-AF683FAA49A1
B3269F9A-6521-4793-A951-3E9A9B2E55E7
B37B14B8-699F-4002-9254-D1AB00FD07B5
B3C48858-CC9C-452F-B6A4-48C95C59EB45
B3C54716-9D0A-4666-A81A-6072A6325A5A
B3ECCAC9-C7FA-462C-894B-8E9930A70E14
B3F54FA1-C780-4F8F-94D9-E3FB544C4368
B427BF1E-A970-47DA-9BC3-02E8C5EC667D
B4B15CDF-0EA2-45A8-AE99-660B7254FAAC
B4B3001E-0F56-4E51-8250-BDE11547EC55
B50FCD28-C2CC-4F3B-B755-62B086EDE4D5
B5146C40-189A-4311-BDA9-FBAE3E023187
B564528E-B429-4575-8272-50218C3FD6E0
B56A7D7D-6927-48C8-A975-17DF180C71AC
B574D419-5BDA-454F-B2E5-49C74EEAAF6D
B57F2FF0-F338-4ED0-BD82-FB074FEFAA1F
B5A3367F-0C90-4955-8E3F-E32EF58D0E8B
B5A34A93-D538-43A7-8371-864CB6148D12
B5B57F4F-EFA5-11D4-A971-444553540000
B5D4581D-ED6A-4905-A267-25BAF7BE79C1
B602FDE0-843C-40D4-880D-D007FBF120D4
B6125673-3340-4B8D-9452-AD673121A8E3
B62502B0-FFD0-40A9-908E-9EE4FC493EBF
B6374F26-93CB-11D4-82FF-00C04F258A43
B63D81CF-90DC-4D13-8782-9524A2752039
B652FAF2-E5A3-4C4E-9676-78EFAB36ED31
B67A62FA-7054-4335-B04B-FF28C61FF9DB
B680F620-A770-468C-AE8F-918531F1B143
B68134C1-3A8C-4A78-B120-718AE8A97960
B69A9DB4-D0A1-4722-B56B-F20757A29CDF
B69F34DC-F0F9-42DC-9EDD-957187DA688D
B69F34DD-F0F9-42DC-9EDD-957187DA688D
B6ADE150-743D-11D4-8141-00E029626F6A
B6FA00D9-86EC-4158-9488-D00DFF897E86
B6FFE2AE-4D12-451F-B457-FE6125FFB1CF
B7154C4D-87C0-4A2C-AB64-DA132BAC2EE6
B71B15CE-3093-459C-B764-AEB2486F2273
B71B15CF-3093-459C-B764-AEB2486F2273
B753C7C5-0942-4B7F-BC27-942B52BDAC66
B75F81F9-584E-42AE-97D7-721B4FBBE81D
B789A28C-D063-4826-A31A-9268D503852E
B7B76DD6-B6F0-4443-AF81-6A3ECF12A57D
B7D3E479-CC68-42B5-A338-938ECE35F419
B7DB7E5A-81FD-11D1-8B75-0080C83788F7
B7F8D98E-4EC2-4FE2-B639-A9F4844FA012
B7FDA31E-A16D-47F9-B374-78A866AC813D
B8238B20-FF2C-11D7-9FD9-0080481ADA61
B85B5D0E-E7C3-11D2-9ECF-00104BFF1A51
B88D638F-C266-4667-9E71-F6F857C295AE
B88D6F42-A1AC-11D3-8424-00105A9B8D85
B930BA63-9E5A-11D3-A288-0000E80E2EDE
B9749D11-4BC1-4220-B092-02EAA1DB9782
B99F805C-F0B1-48EA-8C8B-753BFCBED912
B99F805C-F0B1-48EA-8C8B-753BFCBED913
B9D1647F-A66A-4695-B249-07901A45FF59
B9D6B3C2-09AD-464A-8162-8C55114C808A
B9F633F6-EA44-45F4-91EB-FABFC65A0634
B9F7135C-B512-4CC3-9316-FA0044083914
BA25708B-154D-4D40-8607-67AA5190C395
BA52B914-B692-46C4-B683-905236F6F655
BA5D8DF9-1851-4660-B3AE-89E6E030AC34
BA727652-F90E-4D82-9CE4-98766DFFC375
BAB31FC4-CB97-46F4-9565-26D65225CC2C
BB544049-306F-45B5-B719-CF9AB5A05B8E
BB62FFF4-41CB-4AFC-BB8C-2A4D4B42BBDC
BB670D0B-5C46-40C7-B38B-40DD26987723
BBBE1C1A-89F7-4AF6-ABD1-F8FBCFA47408
BBBE1C1A-89F7-4AF6-ABD1-F8FBCFA47408
BBE59AF5-EE22-4A3A-AB26-3F774D1B4216
BC0310B6-BAE5-11D2-A797-080009BBAD2C
BC246652-868E-11D5-9C62-000102117FC3
BC4FFE41-DE9F-46FA-B455-AAD49B9F9938
BCBF738C-4891-4B9A-959A-C6BF7F608C3A
BD0D4420-5E4C-4FCC-AFC0-EEA69B608E75
BD0E4D83-654E-4213-965B-FCBE887061F4
BD905548-E9DA-4A37-98E7-3A67495DF69C
BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0
BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0
BDCA7AC9-C27B-4D30-A808-9B9081279C03
BDEEE1B1-8B25-42BE-9925-1E0228C27126
BDF3E430-B101-42AD-A544-FADC6B084872
BE4C982C-F55A-4744-A386-DAFB281F87C0
BE505F39-3DD1-EF1F-B64A-B6F7A853A63A
BE842726-5F31-4C89-B665-9288EA1379EF
BE8D24EF-2DC5-47B8-9821-DF8C05203783
BEBF337B-9073-4574-9FC1-E0175BB25292
BEC59B9A-1545-44FD-863B-6E07B5BE8BEC
BEEC2DFD-BB14-40F3-8299-EF6E736F01CA
BF00E119-21A3-4FD1-B178-3B8537E75C92
BF09613A-4564-4936-B6BB-B23B1D3D4FD7
BF55256A-3B3B-11D2-B05B-000001145917
BFB5F154-9212-46F3-B547-AC6106030A54
BFC32E1D-EE75-4A48-BC60-104E11EE2431
BFDDBDBB-F62C-4D4A-B574-59D276F47196
BFEDE0E4-93B8-4E48-918B-0026C10AA7E4
BFFEC7B3-7CE7-11D4-9EC1-00C04F656DC9
C001E001-146C-11D4-855C-000629268C15
C079AD60-CD4A-447A-BCF9-6FD0096B5527
C08DF07A-3E49-4E25-9AB0-D3882835F153
C09C9904-FD44-11D6-A711-00105AC8F168
C0D5D8B0-D626-4C77-8ED4-CFE4C41BCDA1
C107F7A0-B489-11D2-B2FE-005004055BFB
C11483F7-D7D8-4804-98D8-6055470BB989
C12D2216-6A10-4C7D-A38F-D801D9CF9D03
C14DA743-6596-455A-B5AC-06F0543E4DC5
C14DC52F-B4D9-11D5-B1E6-0050DAD7AF62
C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A
C1724158-90ED-413D-AE2D-6360F0CAA755
C17590D2-ECB4-4B15-8820-F58798DCC118
C1D05A96-FEA8-4D7C-927C-1B1DC57B5AB6
C1D458F1-B97C-11D5-B3DF-00B0D0A5B433
C1D79200-7718-4656-A7B2-F23046E264E7
C2614DA1-D197-11D3-9765-ED762A928249
C28F8038-7DDE-CF39-F341-109E33E21EA2
C29797C5-D550-4530-9207-B2D447887F7E
C298FB42-E3E2-11D3-ADCD-0050DAC24E8F
C2A67A83-B03E-4AC5-9469-E1BE7F9DDF48
C2C7C8F0-AB5B-4273-8291-C10737CCDB29
C2DB26A0-3070-4F7B-A9AD-2EF824C13592
C333CF63-767F-4831-94AC-E683D962C63C
C338BA09-B77C-11D5-9214-00104B3195F0
C34AFC14-3FF5-4EF0-A935-720AE0621C08
C363E0F4-1D07-4FFB-A69F-BB7D3F4E70A5
C36E543B-FD54-4506-A742-C1D98B172BD6
C3BF5D6D-4C43-4D82-849F-B172BC3D6EFB
C3DEA25E-A515-4B65-8760-AEE03089F1CD
C3EBC7C0-CF8B-11D4-9F90-006008DFE22A
C4069E3A-68F1-403E-B40E-20066696354B
C41A1C0E-EA6C-11D4-B1B8-444553540000
C41A1C0E-EA6C-11D4-B1B8-444553540001
C41A1C0E-EA6C-11D4-B1B8-444553540003
C41A1C0E-EA6C-11D4-B1B8-444553540007
C41A1C0E-EA6C-11D4-B1B8-444553540008
C420DE13-AB17-4875-9A82-E3FEC5568FD6
C420F40F-9AD0-4EC5-BF71-01B8384CD66C
C4296108-BF2F-448F-AF2F-10062E5121BC
C4370071-9FF8-4442-B9C7-F849AC0789CA
C44158E1-6121-2432-ABE6-FD53D6534DCB
C44B1312-178E-40A7-8B32-FEC9D6F4A159
C451C08A-EC37-45DF-AAAD-18B51AB5E837
C4672F26-5862-40FE-94B8-7B35285DAF82
C46CED39-05C9-40C3-88D1-E07AB8128E02
C46D697A-777D-4031-AEF9-BB3E856D5176
C4923397-F976-40C7-A378-FEF5D55AB339
C49A89A1-D366-4151-904C-16F69B1C444E
C4D5E343-9494-97E4-8635-440B49E25FD5
C4F54343-9494-4754-8D35-440B49325FD5
C501607C-4A98-4F5E-B9AF-425E6BBD5186
C52149CE-7962-4C8D-95A4-8733F63199BF
C532F3FF-9049-45F5-ACE4-DB7F8A368A3D
C533B2DD-4B69-4078-9CF9-05ADC852C4D9
C55D30C7-3B86-4D70-98D3-CAA716DF0D83
C56CB6B0-0D96-11D6-8C65-B2868B609932
C5AF4D9B-0B55-4BAC-9486-218EA2C6BC3E
C5E5DB7E-46B1-47E6-8447-2E517F269925
C5F7A735-70F1-477F-8C36-6FF3C736017B
C6139A57-16FB-4FA4-8045-A847FBFFD695
C63ABCEE-45DC-4AF6-B45F-5A6841B77FC8
C6429812-4127-47C6-88BA-EF79B6735132
C65185B1-D52B-44A9-861F-8201B50D1F37
C668F19A-93FB-49A1-86C4-091E0D624443
C66AF7F0-2CF6-48CB-9F94-04EC2504B4FC
C68AE9C0-0909-4DDC-B661-C1AFAEDFAE53
C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53
C68F45EB-A501-46AB-8165-BC042CD27136
C6B08E8D-3F9A-4710-9F38-E4BF827C6AC2
C6B81F6D-019A-4EFD-8457-66335FC87426
C6BF4B79-CFB8-42F3-9BDD-696B5967BC03
C6C04637-E680-4971-B656-9FF46E7785F7
C6CEAC32-D45C-11D4-94AF-0050BABD5FD6
C6D75153-D615-4CEB-860C-40D11EC04BCC
C6EA5A8D-8B01-4498-8B9A-B40AA281035F
C709AC25-FF3B-4DCD-BBBC-AFB8B240CE4A
C70E30C7-140A-4166-A2E8-43557E62B41A
C733AE47-6AC0-4837-93DA-70278E88E7B2
C7768536-96F8-4001-B1A2-90EE21279187
C86AE9C0-0909-4DDC-B661-C1AFB9F5AE53
C8847EEA-72D6-11D4-AB4F-00B0D02332EE
C89657E6-D083-4EA3-81D2-D7AD3D0ED490
C8A2098A-2B10-4C48-B671-5F27A7D0488B
C8C0204E-F720-4EC9-96F2-DF6C33C1E3CB
C94158E1-6151-4442-ABE6-FD53D6534CCB
C966C82E-DAEA-4A30-B788-EF32D6F7C3D4
C9A0A71B-D13E-4761-818E-A220D9C705B2
C9C5A476-AE44-4D75-B1E1-71A5C3598F1C
C9E8B651-F2D7-4A26-9654-4CF4931FF641
CA0B9B71-C2AF-11D3-B376-0800460222F0
CA1953D8-3459-45C3-8161-F99C7952C1F1
CA289809-C3F5-4A4E-8A02-68E497443E38
CA2BD8B5-70EA-4190-AB73-78E58D5311CD
CA6319C0-31B7-401E-A518-A07C3DB8F777
CA70AF0D-0D07-4B80-9ECE-B0F1BEFC5822
CA8A9780-280D-11CF-A24D-444553540000
CAAE9D7F-FFCC-46CF-8DEE-00DCC6CDF5A1
CAB710D6-532E-4B68-97AE-398477FA5524
CABF784C-D9C3-4F73-8E46-E4C6416DFD8D
CAC335E0-9FFB-4A59-A3F5-03B7713E937B
CADC957A-EF3E-4A08-B6DA-366BFFB97321
CAE188AE-945B-11D4-ABBB-B9EE7E4C3B20
CAE88C30-6EF7-49D2-9BDE-1E8BC6A02CEB
CAF10411-51F6-4182-B815-AE98A548FDCC
CB2D4F91-8F9E-4992-880E-5962045A36E1
CB2D4F99-8F9E-4992-880E-5962045A36E1
CB789373-04D5-4EF4-9C16-871463FD0830
CB7CE223-955E-11D3-81AA-344203C10000
CBA74CDA-DF78-4AD9-954E-3B15D0A993DE
CBAA6F21-985C-11D4-A02B-00B0D073E889
CBAD142F-ADC4-11D4-9303-0000B4C32B4D
CBB0A6A0-8430-11D4-814D-0050047090B1
CBB185ED-8551-44D5-B068-E9DF85F884C5
CBF6F119-EA59-4612-96C3-EFD538C88C0A
CC48EB38-F950-48C0-9F22-D64F829AE3DF
CC4B2EE5-4803-11D7-8A38-00B0D0C6B814
CC59E0F9-7E43-44FA-9FAA-8377850BF205
CC7C8206-344B-45AB-B898-78D06229268F
CC7E636D-39AA-49B6-B511-65413DA137A1
CC8C8F4F-F2E8-404B-A43D-5CC57876A008
CC962137-2E78-4F94-975E-FC0C07DBD78F
CCAC2CB9-9A12-4728-B3FC-D1779DF05643
CCB7F598-AC28-4238-93BC-51D30BFC8723
CCCCCCD3-666F-4F81-8B69-745DE9F6D897
CCCCCCDB-4DDB-4703-95D4-DD2C526397BF
CD292324-974F-4224-D074-CACA427AA030
CD292324-974F-4224-FA0A-A6F53D14F330
CD292324-974F-4224-FA0E-B3FB071CEE33
CD3EBD6D-75C3-11D4-AA9D-0000E8EB9341
CD5B5E2B-DB49-4299-B587-B0283A825D32
CD860DEB-B4A7-4B80-8B06-4F275E778340
CD915D28-FBE3-44D3-94B8-1CDA1DA11587
CD9B7762-DFBC-42B1-BB30-02A78287B456
CDEEC43D-3572-4E95-A2A5-F519D29F00C0
CDF4B833-67D5-4E14-8F01-EEFD3FD10152
CE000992-A58C-4441-8938-744CD72AB27F
CE0A34D3-C30F-4F3D-B0D3-9B936EDFBD91
CE224528-809F-494E-AB97-75D7362C045D
CE2D5EF2-385C-4850-8C22-0A9005DA8F3A
CE57DA55-F491-45C6-B3DB-6C98E4B17CDC
CE7C3CF0-4B15-11D1-ABED-709549C10000
CE7C3CF0-4B15-11D1-ABED-709549C10111
CE7C3CF0-4B15-11D1-ABED-809549C14812
CE899E3C-524B-47EE-9EDA-29140AC0FCCE
CE92F0E4-87AD-11D3-B713-00C04F8F6C86
CEBDB438-82A6-4542-B960-5FD1E91EA88A
CECFF8DE-C145-4570-B030-10105AA82920
CEDDA62B-5FBE-4AB2-AE2E-5E069F444444
CEF9EBEF-42EE-491B-8394-C1E5A9A9B5D1
CF19BAE8-CD7A-4869-B5EC-8C58314763E0
CF418B05-72F5-4CCA-96D5-D39EA22BE927
CF7C3CF0-4B15-11D1-ABED-709549C10000
CFB252EF-4D5F-11D6-AB7B-00B0D094B576
CFB25594-4D5F-11D6-AB7B-00B0D094B576
CFB4012C-10E4-4B58-B052-9D8A6E3FF52C
CFBC2741-0C1F-11D6-9224-004F490BED09
CFE40ED8-564E-4693-A9D9-80DB70C8E460
D0035573-5C85-40A7-9B17-ED6B89A21C40
D02BA59A-9A8E-4B25-8145-E068B7A7A715
D03B6018-E880-4A89-99A2-7354FE52DDAE
D0711285-ABC9-4DFA-81BF-89E6B5A9E0EF
D0943516-5076-4020-A3B5-AEFAF26AB263
D09CFF09-A42A-4EDC-9804-E61224F59CA1
D123A09F-32E2-44EF-BF8C-A850C5F77BB3
D2000F80-ABC6-11D3-9794-0090274D4CCA
D20B7545-42B9-4765-9D3C-6B2C84647B89
D242E311-93E0-442A-8093-DBA4938A4D2E
D27FB612-E7D9-46BB-A4E1-20CDC4B55D16
D2BF470E-ED1C-487F-A333-2BD8835EB6CE
D2BF470E-ED1C-487F-A666-2BD8835EB6CE
D2F63D33-C571-41E9-9525-A17CA1804D3B
D2F719F3-106A-402B-9996-3A5B12ACA564
D2F8F919-690B-4EA2-9FA7-A203D1E04F75
D3117279-E115-4C9B-A8FE-D2983653EC51
D3138B39-C8A6-440B-9D42-50F766AEA8C7
D3403F23-7D39-435F-A8CB-45016C29E48E
D3403F28-7D39-435F-A8CB-45016C29E48E
D3403F2A-7D39-435F-A8CB-45016C29E48E
D35D808B-16DD-4572-861B-44966B93247B
D369081E-2AE8-4CAF-9A55-3E6CF9BC4A71
D3919E1A-D6A5-11D6-AC3E-00B0D094B576
D3919E2C-D6A5-11D6-AC3E-00B0D094B576
D3919E86-D6A5-11D6-AC3E-00B0D094B576
D3AA56A9-8137-4950-A6F9-D0190A82AF2A
D3AF1D75-A9ED-4C69-9A52-A9366010A1BE
D3B071BE-7C15-43F6-8348-01EFC6092591
D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A
D3EA3B57-9A3E-4E80-BFF0-595F7A91D55E
D4003A01-9B2C-4E24-9CD2-8D7DB1BDE096
D408001A-E1C0-4FA9-B256-D6CDF2754E7D
D41289F2-69C6-417B-897E-C653D677CBAF
D44BBB61-E17F-4AE6-A502-8D7E0B29E616
D476B977-AF6C-481A-8472-2ABAB5E89F20
D48DF30A-56B3-4094-AD84-D4D9B2FAD730
D4B99E76-8B54-4B00-BA62-68FC54A990F1
D4CA7B06-ADAB-4E61-BF0C-BEBAA21243F5
D4E7C68D-37FD-11D4-9D32-0000A00B0B0B
D51C7E20-6800-4AE7-9702-64D9021BFEC1
D5233FCD-D258-4903-89B8-FB1568E7413D
D52EE69D-ADC2-4AE7-BC19-4AEEC1890C76
D52FD2D8-1D63-47DF-83D6-43032EF1A36A
D53CEAB9-7153-2E81-7D21-7DC2BE5646C6
D554D8FC-B36D-4BB4-93DB-4A3394D505E3
D5572540-47AD-11D2-A534-00805F8A7AC4
D593DE91-7B41-45C2-830E-E9A99AB142AA
D5C87C9F-4412-4E48-8B59-99AD1DACA786
D6223CBC-A263-4CB1-B35E-1AE40FEF3B3B
D68EAA26-C9FF-41E8-81C7-443B8F813568
D695B6EC-25D9-4244-B604-988AA1DFB8F3
D6A99B1F-FAB9-4FA5-9C9D-D0D0CF846C05
D70E6A20-7060-4829-B3D7-B6624A1DE7C6
D714A94F-123A-45CC-8F03-040BCAF82AD6
D73E76A3-F902-45BD-8FC8-95AE8E014671
D73F49B1-B51B-4D32-A3B7-BD04B8342F53
D7456664-7B4F-42F7-8CAC-4A27574DE793
D74EC18E-3DDD-4174-B1B1-949FE3B8366D
D772C84A-0605-4025-8103-40305D6C47B7
D79559E8-9991-41C5-AA2B-A96EC766F43F
D7B4D56E-FAB7-11DA-A843-0013D4B31400
D7BD4990-009F-4A9B-BA7E-F6DD22C50CDE
D7EEF1C5-B053-4A70-B378-3462074D3226
D7F30B62-8269-41AF-9539-B2697FA7D77E
D8073790-84C7-4602-BF77-C6ACBF1612E4
D80E1356-AC78-4218-961C-A7689B4CB7FE
D81AB57B-7327-4347-B7C7-9EF7CA87CE09
D880FC15-AF5D-4929-9FB5-F06D01CDF70C
D88E6549-E892-4096-AE86-5BDC08BD4BDE
D8AAC594-9AF9-4598-8BE6-583FF09BC05C
D8AF8CAD-BCDC-4FDD-9D4C-9DE8C63EC4B3
D940F380-49C7-4A05-9E33-53930AF5768F
DA01E204-7859-4175-86A0-6EF2209C54B2
DA6D2623-CF53-460A-87A5-BA223F40B600
DABE0C57-5B57-4E2D-837A-08F290F7458E
DAC6ED64-8DD1-4AB8-AEDF-B97892D28FFE
DAF2C8C2-1CD1-48F8-A5C6-3B438127A8FD
DAFE562C-5AC0-4D8B-8A81-244B1602B9C0
DB264E15-F83B-4603-BFC1-4EA7E3204686
DB43E4E6-FF8A-4018-8C8E-F68587A44A73
DB5FC78C-0D12-448B-A0B0-DB0F0E6B67DB
DB87BFA2-A2E3-451E-8E5A-C89982D87CBF
DB87CDE1-EF9C-44EB-A42F-6D0B3C72C516
DB92EC3F-697D-4C3B-9A3B-3ABBD23D4A85
DB96792F-834A-40FC-97CD-9A8ECDF484FE
DB9ECD4F-FB8F-4311-B3CE-90B976C2707C
DBBABB93-DDBC-48CA-B6BE-7F85E50D8FC7
DBD2C8C0-4DE1-412C-B6BB-25FB64CBA532
DC0F2F93-27FA-4F84-ACAA-9416F90B9511
DC200356-0864-4F66-8964-5D43A19300F5
DC290157-B53C-44A0-815C-964726389C7A
DC3B5271-4E49-41F4-A920-DDE9D755E214
DC3EB972-8628-4C46-B7CE-25EBD05EA362
DC59A0D4-0ED6-4A73-B356-1B977F2A7725
DC99E960-6594-45E3-9D5D-141D825B8096
DC9D1549-8BA3-4476-B6EA-23E263570E93
DD41D66E-CE4F-11D2-8DA9-00A0249EABF4
DD9C9488-0B2F-435A-8E94-359CED492F64
DDFF7594-1808-4847-9F31-8EFE47B8EBCC
DE3A0297-5EFF-4FF2-A48D-ABBC67D4D774
DE9C389F-3316-41A7-809B-AA305ED9D922
DEAD37E1-56BE-4B65-BAA9-ADDBC73A2F58
DEBDD6EC-E81A-4987-9C9C-06DDC5ADDECE
DEDEDE03-0000-0000-C000-00A300000043
DF09FBDB-181D-4301-9D86-748AF16FBE05
DF159BE7-E9BF-4252-88DA-33CCA235B48C
DF21F1DB-80C6-11D3-9483-B03D0EC10000
DF390801-491F-4659-8E7F-FCCC639A37BD
DF615F8D-B98B-47C0-8348-3CD723DEC62F
DF8BE390-5F8A-4890-8212-7427B5048607
DFB0A387-2DC3-4402-8BC8-1C8C05FAE6EB
E0000C3F-8DE9-4FCB-9294-22FC06851B37
E0019445-4C1F-414D-A70E-AD80F231C584
E003FE73-C578-43F1-86D3-26BDE04C44AC
E01D96AB-DBBD-451D-BDCB-0EE420BC91B1
E02E86EB-220B-4B59-A251-F849405E1D64
E038C6C6-666B-43AA-AE82-A296AF7A80D2
E07201D0-8DA2-4BB4-87B1-C1BAACEBF8BD
E077DA94-6314-41F1-9F08-6607DF65952E
E0B1B541-149F-483A-8CCA-026BA4D7CA45
E0C7B854-D5CE-4DB6-9804-BE1438603D89
E0E329E7-80D2-4D57-9E1D-99EDE462A5CA
E0E899AB-F487-11D5-8D29-0050BA6940E3
E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53
E12A882B-F14F-4440-9BC0-84A5EB766605
E166B4A2-83E7-11D3-B4FD-004005A47AAA
E16AB45F-35A8-4F4D-922F-8D00D760F85B
E19569C7-DBCA-4576-96A6-97DE7C5A22EF
E19E589B-749F-4641-9ED3-032DEB7A8D92
E1B459E4-A432-46E6-B62A-2B916ED188C3
E1C242F3-E610-4227-8660-0FA157CA8347
E1EAF699-2EF8-49E2-95F4-8BFBC5AF51BB
E22E8D11-0F3E-4D46-8FC1-7264B4D5EA01
E22F9B9D-1A1F-473E-BED6-D8BC152441F4
E24AD748-155E-4254-B674-4EDF86E7E1DF
E2550E4B-5DD6-4DD7-81BF-B25CD007E324
E26FDEC1-053B-11D6-B969-CEEBA9E95046
E29983D9-A3FB-483B-8E36-138D275C0D43
E31CE47F-C268-41BA-897B-B415E613947D
E3215F20-3212-11D6-9F8B-00D0B743919D
E3578B37-6346-4EC1-A82B-38273A100DCF
E3771925-A474-44CC-B8DA-2046D0CB18E6
E37C36AB-D44D-43B1-86EF-3E8F189D2B58
E3E1B903-F307-4D2A-B987-D942A2F0A24F
E3EA4FD1-CADE-4AE5-84F7-086EEE888BE
E421B744-12A1-4447-AB8A-DA2F96D9D9EE
E434D3C7-A673-4100-8140-79C020945017
E46A2169-E328-471A-9788-F2B52BB9C681
E479EDE1-923E-11D3-B82B-00E09871521B
E49C2526-26BF-499F-912F-B97B44814087
E4CAA75E-9B5F-45EB-8E4E-8B743B44F171
E552EEFC-DE97-45D4-BA1A-F534A1B4A579
E5A1691B-D188-4419-AD02-90002030B8EE
E5CA3FCB-32F0-4602-A3FD-0785E3F0F5BF
E5CD7155-19C9-4860-84C2-B84CFE6836A5
E5E2F8B2-79A4-495C-8581-90BA2C845CC2
E606052C-C26E-4A9D-835B-BABA8BA9F1F9
E60D9E2D-2AFD-11D3-80DC-0060B086599E
E61F967D-046F-462F-9D32-61F1305CCADD
E626DA33-FCDD-4918-833D-FD39900B11F0
E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F
E6A32CAD-E025-4ABD-8A8D-C1017D923E7A
E6B48BC7-4EA9-4643-A4B3-BB7C4F69287A
E6B64F67-B100-4636-8D51-D113E1F5FF93
E6DF0B46-7D6F-407A-A6A2-62D17A021A9A
E6F718B1-5470-4275-BB7F-E8A6D6E83BCC
E70201E2-A4A1-4DC0-867D-A3D701D97B93
E70C26AE-DFF1-40A8-8D37-19180F56F0AA
E711B376-050E-4F6C-88C4-1C22F9C3F611
E713904C-DF05-4C79-BBAD-02DB923253BE
E75B287F-2D04-11D5-BBE0-0050047AA3D1
E7D38ED4-2933-43B8-B0B9-52D11CE9CA10
E7DC02F7-A213-4866-B800-FDCB4555FB79
E7E38969-E0F4-4D47-869E-74B9387C7E33
E822F1E1-BD04-4F20-B944-DD1DF2792010
E828EC21-EAA9-44B3-8021-EE89101C6ACD
E868656B-F0D3-4A61-8FE8-F47C90119E39
E8803722-A7F5-45C5-B39A-A8B244486EC2
E8893D9E-169E-4A05-B0B6-FC5809D1AA77
E8AC0181-7B34-4507-BFFD-2B020BCC645A
E8B31A72-AACE-412D-AA2C-D03FA6FCCDEF
E8BC850B-09BC-41A2-AE97-11D064CF5707
E8C0F153-B768-4E68-B14F-40F0E8531675
E915E62E-41DA-40D0-8106-3438B4D24394
E929661E-3728-4E52-BCCB-AE4058F75466
E92BEFBA-E79D-4F41-9733-68DA49C4492B
E92FA9BB-A1BD-4B56-9C7A-442FF66FA953
E947A403-B614-4FA8-B9E7-E790F0BDC87E
E97B5F2E-CA8E-4D34-BDA3-44EEC4ED2B12
E97DAE80-0305-427E-ABA1-BDD775EF53B0
E99421FB-68DD-40F0-B4AC-B7027CAE2F1A
E9A345C9-3ABC-47C8-91A0-93C29C622EEB
E9B4C530-DDC6-42A1-8BCE-D3A18A691A8E
E9CFF983-9580-4D74-A7BD-FBF10BB2672A
E9E027BF-C3F3-4022-8F6B-8F6D39A59684
EA1194AD-F64B-4FE2-BEAD-5881D52F2754
EA4587EB-3106-448A-8B31-F1572E981765
EA4F5D40-8A91-46D6-95AD-25EAF5C10727
EA658AE9-BD4F-4179-9AA0-ACEC5D4BC972
EA7F9A52-0A05-11D2-98C5-00104B7229C2
EAD33BFA-1A76-4882-BBDC-FEFC24D3690C
EAD3A971-6A23-4246-8691-C9244E858967
EAE191BA-FB87-40CA-80D2-D639A2595150
EB06291F-730D-4A11-9DD6-5C51732AC076
EB20BED0-D6AF-44AC-AF98-66329EEEDD89
EB2CA209-3FF6-472A-B905-35F9739DB884
EBB03E3E-020A-418D-B322-761B730CA860
EBC780C8-5A2F-4BF2-B274-FDA3D61ACC6C
EBCDDA60-2A68-11D3-8A43-0060083CFB9C
EBDCEF51-9973-49E5-BBE8-5CC880CE2030
EBE9E2B5-B526-48BC-AD46-687263EDCB0E
EC11267F-71A2-F1C2-7D96-EABCAC9597E1
EC1EB3CD-9916-4869-9AAF-441BD28F462D
EC2D89DE-6936-4CB3-A641-94DB2CAAF67F
EC3A37EF-F4CF-447A-B0FD-206073E2DAE9
EC41BF0A-01A1-4A85-9265-A074875305B5
EC52BEDA-CCF3-45E1-AFFD-03618DB9F10A
EC5BB10A-FDA1-41D6-8CE4-C00C1E5DC464
EC5D2125-D8AB-4A18-A599-D97D2731DE19
EC732582-7C24-4301-87F4-724E0DB3FDD4
EC80F574-3F76-4EE9-BED2-8CB15D2A00E2
ED0E8CA5-42FB-4B18-997B-769E0408E79D
ED1184DA-E57E-4480-99D0-A16809037F54
ED24BB32-17E8-422E-993F-159800A392E7
ED2E7DE7-07DB-4941-A06D-F780B93BA730
ED3582D0-92F9-46CF-920A-8ABD16715AB0
ED46E61C-C391-49ED-82F8-A3DCAA44671F
ED4BD629-C1B6-4399-8A34-02CCAA921DC9
ED4EB1BD-03A0-4484-93A3-2BAA7CD146A2
ED51E9A3-16C5-4236-99E0-9F093B021433
ED83DAF3-2655-4172-BE9B-02973E346F53
ED859E8A-8172-45ED-90FC-E305F0DFBFDF
EDC0F17F-F4B7-47E4-B73E-887FAEB376FA
EDDEB5CF-6CC3-11D6-ABAA-00B0D094B576
EDFB8B62-59EE-11D5-86C2-00E02975242F
EE392A64-F30B-47C8-A363-CDA1CEC7DC1B
EE48F53D-233C-4906-903A-D08B7A7C8AFB
EE5D279F-081B-4404-994D-C6B60AAEBA6D
EE9DD090-902D-4623-9360-FB7D8666202B
EECC161C-D8F9-411A-A8E6-C17EB736F16B
EEE1A699-C438-486B-8B23-347A37F77328
EF1D17A9-089F-40CC-8D64-7324CDEBA0DB
EF341F91-4715-46E2-B0AF-724E3225E52E
EF56413F-9398-4DF5-BC88-6FC3B227D5C5
EF72500A-C234-46C4-BF0A-9AA6913DDF34
EF741E6A-782E-4F13-A7B6-4254920E5547
EF99BD32-C1FB-11D2-892F-0090271D4F88
EFA24E62-B078-11D0-89E4-00C04FC9E26E
EFA8BFF4-AB8A-4FAC-9AAC-2098C3665E77
EFAE365E-DB89-4353-A952-EB035103204F
EFCA9D4B-F2E8-487D-8505-E4D0E459ABFE
EFD440C0-0943-11D3-9D65-00A0CC22CBC4
F03966D3-8EA0-47B4-BBE0-85BFE6CBC8AC
F040E541-A427-4CF7-85D8-75E3E0F476C5
F053C368-5458-45B2-9B4D-D8914BDDDBFF
F05F3153-08B2-44A6-8A0B-132011E28F21
F081D70D-477F-11D9-95EC-004095356F63
F0852D72-3334-4A11-9201-8A04435FA50F
F0852D73-3334-4A11-9201-8A04435FA50F
F0BD2AEF-6A48-42DC-85CE-F4C335C59B5E
F0CABD54-804C-452A-AAA0-C8264997FC6D
F0F8ECBE-D460-4B34-B007-56A92E8F84A7
F101D8F9-9E90-4401-9FBF-9B515CAA045F
F10D927F-D3DF-4734-98AB-DD258253F5FD
F14AABDD-0232-4E5A-9B52-4178AC0A62B5
F14B0CCD-AA41-4406-AB68-C5DE9D85B4A3
F156768E-81EF-470C-9057-481BA8380DBA
F1608F6D-1B95-46F3-A9DB-86E42F70C251
F166BC04-3C84-44CC-A6E9-2315EC4844B9
F16E9E5F-92DD-4000-8701-FBDD48F24B86
F18D4965-532F-4907-A55F-7406218BF861
F1C0FAF2-E52F-4370-BC75-2C828C027B9E
F1D49A84-8656-43CE-AE3D-AABC1A12243E
F1F69322-008F-4895-B2BF-AD194219825A
F1FF080D-12A3-439A-A2EF-4BA95A3148E8
F236CC5A-F6E4-4011-9EED-C52FDF51CE3D
F2570A0D-001D-477D-93D1-D05EF5EB95CD
F25D0054-4CA2-49D5-A8B0-D79B7829D14E
F264E777-7AB7-4BEB-8A42-5C37C8F4B6B4
F2717CA1-FF74-429C-A0A9-DEB1447B0134
F273FA0B-572A-44E9-A2E4-976D6D039942
F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D
F2E259E8-0FC8-438C-A6E0-342DD80FA53E
F34EA099-67D1-40C7-97A0-74E4C663E8DC
F35CE83E-9EBF-40D5-AE87-53F982389740
F35D66AE-DF50-4601-ACB4-083AF95C7D9B
F3FAF2F7-D2C0-4EA4-8DAD-B4B974371C1E
F467B295-9381-4C32-9A16-07CF36ED9762
F4A27D22-E603-4B1B-B8D0-1CF7D57E56F2
F4D76F01-7896-458A-890F-E1F05C46069F
F4D76F09-7896-458A-890F-E1F05C46069F
F50CE767-AE72-45EB-AECD-E8786C240373
F5528ECB-D64C-479D-AFEB-89C90FA191A3
F5735C15-1FB2-41FE-BA12-242757E69DDE
F599A890-5BA5-4373-806A-47FB470456DC
F5A82B56-150E-4D4F-8802-94B0ED71E257
F5C93451-2609-4723-A053-5C19516BE1A8
F6104497-54FD-4688-9162-5115CC8AB0FB
F62A47A7-4CA3-9D00-95A3-6724D43A9E8C
F645F56F-4ED4-4076-8E02-9123B3EACCC5
F67BEA7B-70D4-4417-9227-480B35DDD500
F693F5A9-2B5C-4002-B538-301E86E3FD5A
F6FF266D-19FB-11D5-BB12-881900000000
F757FBBF-10E5-4DDA-BBEA-2357E54BEA2B
F79AD27F-8140-4E33-8B1D-C4FC6B663CCA
F79B2338-A6E7-46D4-9202-422AA6E74F43
F7B040B5-307B-4FAC-BB93-556A08156BAC
F80F5B01-EFC8-4CC4-9D21-62894C16257D
F8147928-0836-4FD4-B1D9-6C55901D5CD4
F81D63ED-E9EE-4581-A3E6-BA279CA68600
F83BE649-1CC3-48EE-B2E2-0826CEF3822A
F83C6003-6FE1-4814-9B52-272BD8A64C77
F84A4CD0-C330-4FC4-80EF-A407E4990E47
F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD
F8A53FBE-5846-11D2-A022-006097D2400E
F8AC5CE3-4B50-49D6-B632-FAEA1734FD29
F8AD5AA5-D966-4667-9DAF-2561D68B2012
F8C68C08-CF24-41AB-89D8-B58FA2721F0C
F8CC9B08-C14F-4A5C-B73B-518AFECC067A
F8E5CA21-C27B-43E7-B2BE-4CA93C9F9A1F
F9296309-B99E-4479-8672-E0059E1B70DC
F930B8EF-B41C-43F8-884D-DE132AA223F1
F96385F8-C1D9-45AE-9A73-61E209120574
F97DA966-F09D-4CAB-BF29-75A0026986EA
F984E521-72ED-421F-89C4-E7EE1623C4D0
F98EE03D-9156-4088-A0AB-C7EF482023B7
F998C683-89D8-47FA-8C55-3E2CA27D7581
F998DBF2-AA30-4599-8901-490F433E2ABC
F9B71757-A493-4C57-B0ED-DED4280F7FFC
F9B9480F-8BE3-4117-985D-350ACEF1897A
F9E5F47A-45FD-450C-91DF-81C72E1FADB0
F9F16E0D-0644-40A7-8096-1DDD29A2B275
FA36F9EB-DC26-40D3-8D1B-EBA4F4A80CBF
FA6D230B-173A-49D1-ABFA-34392994EC7A
FA91B828-F937-4568-82C1-843627E63ED7
FB986A68-EAE4-11D4-9BD1-0080C6F60B6A
FB9FFB4B-9680-4256-8178-5ECDB2C19B23
FBBAEDE1-39FF-42C8-AB9D-0FC44D4D23EC
FBF2401B-7447-4727-BE5D-C19B2075CA84
FC4C5EAE-66EE-11D4-BC67-0000E8E582D2
FC56FC30-367D-44EE-BBF5-5121868DC3A6
FC87D68E-339D-4C1C-8BB0-DC8E11B0B9F6
FCADDC14-BD46-408A-9842-CDBE1C6D37EB
FCADDC15-BD46-408A-9842-CDBE1C6D37EB
FCBCCB87-9224-4B8D-B117-F56D924BEB18
FCDE35DE-1BDB-487F-8860-99575C0C5148
FCE11386-CB42-40AD-8888-AE3B4838FC3C
FCEECAE2-358B-4955-ABCD-4D9ED965B11E
FCF9FD72-694D-411F-A322-D002CB13735F
FD30CBF0-1F96-4E66-ABBA-2A47AD916B66
FD721B2F-245A-4A45-8344-7F77B0F915D1
FD7720CC-0033-4651-81D1-5FFAE93E2DD8
FD882730-D24B-43CB-9399-787174BB6C86
FDD3B846-8D59-4FFB-8758-209B6AD74ACC
FE063DB1-4EC0-403E-8DD8-394C54984B2C
FE063DB9-4EC0-403E-8DD8-394C54984B2C
FE23C052-4B9E-44F5-9902-9FBEC5EA4F1F
FE4F0F2C-6D90-41EC-A49D-D7440D2DDC40
FE7953EE-25ED-40D8-A53F-066C124CE023
FE893C7D-3F24-41DA-B4DF-7EEB7639A2F5
FE9B006F-47DE-47A3-92F3-C7E07D56A4A4
FEBDACA2-86EC-4305-B9A7-CE839241FA6B
FEC04425-2553-44B9-AB6E-FE5B2FA1D963
FEDF637B-F631-4583-A210-33CC828D42DB
FEFAFFDD-573B-4795-BDB7-85F2D68743D8
FF278623-9AA4-489C-84CE-CF14D90CC70C
FF284F5C-7CF9-4682-8701-D467C1DBB99F
FF32A4CE-E54D-11D3-9FB7-E3582B1BD44D
FFCBEECE-FB0C-11D2-AB16-00104B9BBBD2
FFDA4F6F-2EA3-4942-9420-E42880965A3A
FFDD804F-A7F8-4395-93D2-66A85DA2BDAB
FFFF08F5-F6F8-42AB-B62A-5531F1F42CE2
FFFF8BAD-BB43-4A08-8258-BFB40A29FBD7
FFFFFEF0-5B30-21D4-945D-000000000000
FFFFFFA2-C40D-475D-8C91-9A9876ACFCDD
FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFD
F2CF5485-4E02-4F68-819C-B92DE9277049

438755C2-A8BA-11D1-B96B-00A0C90312E1
8C7461EF-2B13-11d2-BE35-3078302C2030
EC654325-1273-C2A9-2B7C-45D29BCE68FB
553858A7-4922-4e7e-B1C1-97140C1C16EF
EC654325-1273-C2A9-2B7C-45D29BCE68FD
EC654325-1273-C2A9-2B7C-45D29BCE68FF
E31004D1-A431-41B8-826F-E902F9D95C81
F5DF91F9-15E9-416B-A7C3-7519B11ECBFC
BCBCD383-3E06-11D3-91A9-00C04F68105C
6D972050-A934-44D7-AC67-7C9E0B264220
1799460C-0BC8-4865-B9DF-4A36CD703FF0
35CEC8A3-2BE6-11D2-8773-92E220524153
E6FB5E20-DE35-11CF-9C87-00AA005127ED
AAA288BA-9A4C-45B0-95D7-94D524869DB5
AEB6717E-7E19-11D0-97EE-00C04FD91972
81559C35-8464-49F7-BB0E-07A383BEF910
091EB208-39DD-417D-A5DD-7E2C2D8FB9CB
54D9498B-CF93-414F-8984-8CE7FDE0D391
57B86673-276A-48B2-BAE7-C6DBB3020EB8
B5A7F190-DDA6-4420-B3BA-52453494E6CD
9EF34FF2-3396-4527-9D27-04C8C1C67806
7849596a-48ea-486e-8937-a2a3009f31a9
fbeb8a05-beee-4442-804e-409d6c4515e9
e57ce738-33e8-4c51-8354-bb4de9d215d1
7007ACCF-3202-11D1-AAD2-00805FC1270E


errdbg.cf

C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe

executables
.bak1
.bak2
.bat
.cmd
.com
.dll
.ini2
.pif
.reg
.ren
.scr
.sys
.vbs
.vir
.exe
.dat
.bin

netsvc.bad.cf

Relations
Investor
Partner
Indtry
Servicel
Scripts
msgsat
Remote Access Connection Management
Performance Monitor
Applog
Logical Disk Manager Administrator Service
Net Monitor
Imsvc
Usbpda
gb
ldrsvc
Security
Event Service
Tech
Selaris
clipart
framework
templates
dmtd
NtmlSvc
AtWork

notifykeys.cf

crypt32chain
cryptnet
cscdll
sccertprop
schedule
sclgntfy
senslogn
termsrv
wlballoon
wzcnotif
wgalogon
igfxcui
klogon
atiextevent
navlogon
wrnotifier


policies.cf

nodrive
classicshell
nocontrolpanel.*0x0
nonethood
nocomputersnearme
cdrautorun
NoCDBurning
displaylastuser
legalnotice
withoutlogon
NoInternetOpenWith
verbosestatus
ConsentPromptBehaviorAdmin.*0x0
ConsentPromptBehaviorUser.*0x1
EnableInstallerDetection.*0x1
EnableLUA.*0x1
EnableSecureUIAPaths.*0x1
EnableVirtualization.*0x1
PromptOnSecureDesktop.*0x1
ValidateAdminCodeSignatures.*0x0
scforceoption.*0x0
FilterAdministratorToken.*0x0

safeboot.cf
File system=Driver Group
RpcSs=Service
vgasave.sys=Driver
{4D36E967-E325-11CE-BFC1-08002BE10318}=DiskDrive
{4D36E96A-E325-11CE-BFC1-08002BE10318}=Hdc
{4D36E96B-E325-11CE-BFC1-08002BE10318}=Keyboard
{4D36E96F-E325-11CE-BFC1-08002BE10318}=Mouse
{4D36E97D-E325-11CE-BFC1-08002BE10318}=System
{71A27CDD-812A-11D0-BEC7-08002BE2092F}=Volume

safeboot.def.cf

AppMgmt=Service
Base=Driver Group
Boot Bus Extender=Driver Group
Boot file system=Driver Group
CryptSvc=Service
DcomLaunch=Service
dmadmin=Service
dmboot.sys=Driver
dmio.sys=Driver
dmload.sys=Driver
dmserver=Service
EventLog=Service
File system=Driver Group
Filter=Driver Group
HelpSvc=Service
Netlogon=Service
PCI Configuration=Driver Group
PlugPlay=Service
PNP Filter=Driver Group
Primary disk=Driver Group
RpcSs=Service
SCSI Class=Driver Group
sermouse.sys=Driver
sr.sys=FSFilter System Recovery
SRService=Service
System Bus Extender=Driver Group
vga.sys=Driver
vgasave.sys=Driver
WinMgmt=Service
{36FC9E60-C465-11CF-8056-444553540000}=Universal Serial Bus controllers
{4D36E965-E325-11CE-BFC1-08002BE10318}=CD-ROM Drive
{4D36E967-E325-11CE-BFC1-08002BE10318}=DiskDrive
{4D36E969-E325-11CE-BFC1-08002BE10318}=Standard floppy disk controller
{4D36E96A-E325-11CE-BFC1-08002BE10318}=Hdc
{4D36E96B-E325-11CE-BFC1-08002BE10318}=Keyboard
{4D36E96F-E325-11CE-BFC1-08002BE10318}=Mouse
{4D36E977-E325-11CE-BFC1-08002BE10318}=PCMCIA Adapters
{4D36E97B-E325-11CE-BFC1-08002BE10318}=SCSIAdapter
{4D36E97D-E325-11CE-BFC1-08002BE10318}=System
{4D36E980-E325-11CE-BFC1-08002BE10318}=Floppy disk drive
{71A27CDD-812A-11D0-BEC7-08002BE2092F}=Volume
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}=Human Interface Devices
AVG Anti-Spyware Driver=Driver
AVG Anti-Spyware Guard=Service
WinDefend=Service
::::

svhost.cf

httpfilter httpfilter
localservice alerter webclient lmhosts remoteregistry upnphost ssdpsrv
networkservice dnscache
dcomlaunch dcomlaunch termservice
rpcss rpcss
imgsvc stisvc
termsvcs termservice
wudfservicegroup wudfsvc
bitsgroup bits
wugroup wuauserv


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:27:16 PM, on 5/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DVDBitSet] "C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe" /NOUI
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1211292103578
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 5037 bytes


StartupList report, 5/22/2008, 1:28:01 PM
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.6000.16640)
* Using default options
* Including empty and uninteresting sections
* Showing rarely important sections
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\Owner\Start Menu\Programs\Startup]
*No files*

Shell folders AltStartup:
*Folder not found*

User shell folders Startup:
*Folder not found*

User shell folders AltStartup:
*Folder not found*

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
*No files*

Shell folders Common AltStartup:
*Folder not found*

User shell folders Common Startup:
*Folder not found*

User shell folders Alternate Common Startup:
*Folder not found*

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

[HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
*Registry value not found*

[HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

IgfxTray = C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds = C:\WINDOWS\system32\hkcmd.exe
ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
Symantec PIF AlertEng = "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
AlcxMonitor = ALCXMNTR.EXE
SoundMan = SOUNDMAN.EXE
UpdateManager = "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
DVDTray = "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
DVDBitSet = "C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe" /NOUI

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background
ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

--------------------------------------------------

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

--------------------------------------------------

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\system32\mshta.exe "%1" %*

--------------------------------------------------

File association entry for .TXT:
HKEY_CLASSES_ROOT\txtfile\shell\open\command

(Default) = %SystemRoot%\system32\NOTEPAD.EXE %1

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] *
StubPath = C:\WINDOWS\system32\ieudinit.exe

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}] *
StubPath = C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig

[>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] *
StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

[>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] *
StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

[{5945c046-1e7d-11d1-bc44-00c04fd912be}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

[{6BF52A52-394A-11d3-B153-00C04F79FAA6}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = C:\WINDOWS\system32\ie4uinit.exe -BaseSettings

--------------------------------------------------

Enumerating ICQ Agent Autostart apps:
HKCU\Software\Mirabilis\ICQ\Agent\Apps

*Registry key not found*

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\system32\ssmyst.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
C:\WINDOWS\Fonts\Explorer.exe: not present

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Verifying REGEDIT.EXE integrity:

- Regedit.exe found in C:\WINDOWS
- .reg open command is normal (regedit.exe %1)
- Company name OK: 'Microsoft Corporation'
- Original filename OK: 'REGEDIT.EXE'
- File description: 'Registry Editor'

Registry check passed

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll - {1E8A6170-7264-4D0F-BEAE-D42A53123C75}

--------------------------------------------------

Enumerating Task Scheduler jobs:

*No jobs found*

--------------------------------------------------

Enumerating Download Program Files:

[Trend Micro ActiveX Scan Agent 6.6]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\Housecall_ActiveX.dll
CODEBASE = http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab

[WUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\wuweb.dll
CODEBASE = http://www.update.microsoft.com/windowsupd...b?1211292103578

[HP Download Manager]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\HPDEXAXO.dll
CODEBASE = https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
CODEBASE = http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #1: C:\WINDOWS\System32\mswsock.dll
NameSpace #2: C:\WINDOWS\System32\winrnr.dll
NameSpace #3: C:\WINDOWS\System32\mswsock.dll
Protocol #1: C:\WINDOWS\system32\mswsock.dll
Protocol #2: C:\WINDOWS\system32\mswsock.dll
Protocol #3: C:\WINDOWS\system32\mswsock.dll
Protocol #4: C:\WINDOWS\system32\rsvpsp.dll
Protocol #5: C:\WINDOWS\system32\rsvpsp.dll
Protocol #6: C:\WINDOWS\system32\mswsock.dll
Protocol #7: C:\WINDOWS\system32\mswsock.dll
Protocol #8: C:\WINDOWS\system32\mswsock.dll
Protocol #9: C:\WINDOWS\system32\mswsock.dll
Protocol #10: C:\WINDOWS\system32\mswsock.dll
Protocol #11: C:\WINDOWS\system32\mswsock.dll

--------------------------------------------------

Enumerating Windows NT/2000/XP services

Microsoft ACPI Driver: system32\DRIVERS\ACPI.sys (system)
Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)
AFD: \SystemRoot\System32\drivers\afd.sys (system)
Service for Realtek AC97 Audio (WDM): system32\drivers\ALCXWDM.SYS (manual start)
Alerter: %SystemRoot%\system32\svchost.exe -k LocalService (disabled)
Application Layer Gateway Service: %SystemRoot%\System32\alg.exe (manual start)
Application Management: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
RAS Asynchronous Media Driver: system32\DRIVERS\asyncmac.sys (manual start)
Standard IDE/ESDI Hard Disk Controller: system32\DRIVERS\atapi.sys (system)
ATM ARP Client Protocol: system32\DRIVERS\atmarpc.sys (manual start)
Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Audio Stub Driver: system32\DRIVERS\audstub.sys (manual start)
Background Intelligent Transfer Service: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
Computer Browser: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Symantec Event Manager: "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (autostart)
Symantec Settings Manager: "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (autostart)
CD-ROM Driver: system32\DRIVERS\cdrom.sys (system)
Indexing Service: %SystemRoot%\system32\cisvc.exe (manual start)
ClipBook: %SystemRoot%\system32\clipsrv.exe (disabled)
Symantec Lic NetConnect service: "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (autostart)
COM Host: "C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe" (manual start)
COM+ System Application: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start)
Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
DCOM Server Process Launcher: %SystemRoot%\system32\svchost -k DcomLaunch (autostart)
DHCP Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Disk Driver: system32\DRIVERS\disk.sys (system)
Logical Disk Manager Administrative Service: %SystemRoot%\System32\dmadmin.exe /com (manual start)
dmboot: System32\drivers\dmboot.sys (disabled)
dmio: System32\drivers\dmio.sys (disabled)
dmload: System32\drivers\dmload.sys (disabled)
Logical Disk Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Microsoft Kernel DLS Syntheiszer: system32\drivers\DMusic.sys (manual start)
DNS Client: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart)
Microsoft Kernel DRM Audio Descrambler: system32\drivers\drmkaud.sys (manual start)
Symantec Eraser Control driver: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (system)
EraserUtilRebootDrv: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (manual start)
Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Event Log: %SystemRoot%\system32\services.exe (autostart)
COM+ Event System: C:\WINDOWS\system32\svchost.exe -k netsvcs (manual start)
Fast User Switching Compatibility: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Floppy Disk Controller Driver: system32\DRIVERS\fdc.sys (manual start)
Floppy Disk Driver: system32\DRIVERS\flpydisk.sys (manual start)
FltMgr: system32\DRIVERS\fltMgr.sys (system)
Volume Manager Driver: system32\DRIVERS\ftdisk.sys (system)
GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start)
Generic Packet Classifier: system32\DRIVERS\msgpc.sys (manual start)
Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Human Interface Device Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
HTTP: System32\Drivers\HTTP.sys (manual start)
HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start)
i8042 Keyboard and PS/2 Mouse Port Driver: system32\DRIVERS\i8042prt.sys (system)
ialm: system32\DRIVERS\ialmnt5.sys (manual start)
CD-Burning Filter Driver: system32\DRIVERS\imapi.sys (system)
IMAPI CD-Burning COM Service: C:\WINDOWS\system32\imapi.exe (manual start)
IntelIde: system32\DRIVERS\intelide.sys (system)
Intel Processor Driver: system32\DRIVERS\intelppm.sys (system)
IPv6 Windows Firewall Driver: system32\DRIVERS\Ip6Fw.sys (manual start)
IP Traffic Filter Driver: system32\DRIVERS\ipfltdrv.sys (manual start)
IP in IP Tunnel Driver: system32\DRIVERS\ipinip.sys (manual start)
IP Network Address Translator: system32\DRIVERS\ipnat.sys (manual start)
IPSEC driver: system32\DRIVERS\ipsec.sys (system)
IR Enumerator Service: system32\DRIVERS\irenum.sys (manual start)
PnP ISA/EISA Bus Driver: system32\DRIVERS\isapnp.sys (system)
Keyboard Class Driver: system32\DRIVERS\kbdclass.sys (system)
Microsoft Kernel Wave Audio Mixer: system32\drivers\kmixer.sys (manual start)
Server: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
LiveUpdate: "C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE" (manual start)
LiveUpdate Notice Service Ex: "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (autostart)
LiveUpdate Notice Service: "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll" (autostart)
TCP/IP NetBIOS Helper: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)
LT Modem Driver: system32\DRIVERS\ltmdmnt.sys (manual start)
Messenger: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled)
NetMeeting Remote Desktop Sharing: C:\WINDOWS\system32\mnmsrvc.exe (manual start)
Mouse Class Driver: system32\DRIVERS\mouclass.sys (system)
WebDav Client Redirector: system32\DRIVERS\mrxdav.sys (manual start)
MRXSMB: system32\DRIVERS\mrxsmb.sys (system)
Distributed Transaction Coordinator: C:\WINDOWS\system32\msdtc.exe (manual start)
Windows Installer: C:\WINDOWS\system32\msiexec.exe /V (manual start)
Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start)
Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start)
Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start)
Microsoft System Management BIOS Driver: system32\DRIVERS\mssmbios.sys (manual start)
NAVENG: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080522.003\NAVENG.SYS (manual start)
NAVEX15: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080522.003\NAVEX15.SYS (manual start)
Remote Access NDIS TAPI Driver: system32\DRIVERS\ndistapi.sys (manual start)
NDIS Usermode I/O Protocol: system32\DRIVERS\ndisuio.sys (manual start)
Remote Access NDIS WAN Driver: system32\DRIVERS\ndiswan.sys (manual start)
NetBIOS Interface: system32\DRIVERS\netbios.sys (system)
NetBios over Tcpip: system32\DRIVERS\netbt.sys (system)
Network DDE: %SystemRoot%\system32\netdde.exe (disabled)
Network DDE DSDM: %SystemRoot%\system32\netdde.exe (disabled)
Net Logon: %SystemRoot%\system32\lsass.exe (manual start)
Network Connections: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Network Location Awareness (NLA): %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
NT LM Security Support Provider: %SystemRoot%\system32\lsass.exe (manual start)
Removable Storage: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
IPX Traffic Filter Driver: system32\DRIVERS\nwlnkflt.sys (manual start)
IPX Traffic Forwarder Driver: system32\DRIVERS\nwlnkfwd.sys (manual start)
Parallel port driver: system32\DRIVERS\parport.sys (manual start)
PCI Bus Driver: system32\DRIVERS\pci.sys (system)
VSO Software pcouffin: System32\Drivers\pcouffin.sys (manual start)
Plug and Play: %SystemRoot%\system32\services.exe (autostart)
IPSEC Services: %SystemRoot%\system32\lsass.exe (autostart)
WAN Miniport (PPTP): system32\DRIVERS\raspptp.sys (manual start)
Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)
QoS Packet Scheduler: system32\DRIVERS\psched.sys (manual start)
Direct Parallel Link Driver: system32\DRIVERS\ptilink.sys (manual start)
PxHelp20: System32\Drivers\PxHelp20.sys (system)
Remote Access Auto Connection Driver: system32\DRIVERS\rasacd.sys (system)
Remote Access Auto Connection Manager: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
WAN Miniport (L2TP): system32\DRIVERS\rasl2tp.sys (manual start)
Remote Access Connection Manager: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
Remote Access PPPOE Driver: system32\DRIVERS\raspppoe.sys (manual start)
Direct Parallel: system32\DRIVERS\raspti.sys (manual start)
Rdbss: system32\DRIVERS\rdbss.sys (system)
RDPCDD: System32\DRIVERS\RDPCDD.sys (system)
Remote Desktop Help Session Manager: C:\WINDOWS\system32\sessmgr.exe (manual start)
Digital CD Audio Playback Filter Driver: system32\DRIVERS\redbook.sys (system)
Routing and Remote Access: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled)
Remote Procedure Call (RPC) Locator: %SystemRoot%\system32\locator.exe (manual start)
Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)
QoS RSVP: %SystemRoot%\system32\rsvp.exe (manual start)
Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver: system32\DRIVERS\RTL8139.SYS (manual start)
Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)
Smart Card: %SystemRoot%\System32\SCardSvr.exe (manual start)
Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Secdrv: system32\DRIVERS\secdrv.sys (manual start)
Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Serenum Filter Driver: system32\DRIVERS\serenum.sys (manual start)
Serial port driver: system32\DRIVERS\serial.sys (system)
Windows Firewall/Internet Connection Sharing (ICS): %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
SPBBCDrv: \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (system)
Microsoft Kernel Audio Splitter: system32\drivers\splitter.sys (manual start)
Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)
System Restore Filter Driver: system32\DRIVERS\sr.sys (system)
System Restore Service: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
SRTSP: System32\Drivers\SRTSP.SYS (manual start)
SRTSPL: System32\Drivers\SRTSPL.SYS (manual start)
SRTSPX: System32\Drivers\SRTSPX.SYS (system)
Srv: system32\DRIVERS\srv.sys (manual start)
SSDP Discovery Service: %SystemRoot%\system32\svchost.exe -k LocalService (manual start)
Windows Image Acquisition (WIA): %SystemRoot%\system32\svchost.exe -k imgsvc (manual start)
Software Bus Driver: system32\DRIVERS\swenum.sys (manual start)
Microsoft Kernel GS Wavetable Synthesizer: system32\drivers\swmidi.sys (manual start)
MS Software Shadow Copy Provider: C:\WINDOWS\system32\dllhost.exe /Processid:{E262D5CB-E134-4BB7-8DEF-9248ACB12184} (manual start)
Symantec Core LC: "C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe" (manual start)
SYMDNS: \SystemRoot\System32\Drivers\SYMDNS.SYS (manual start)
SymEvent: \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (manual start)
SYMFW: \SystemRoot\System32\Drivers\SYMFW.SYS (manual start)
SYMIDS: \SystemRoot\System32\Drivers\SYMIDS.SYS (manual start)
SYMIDSCO: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs\20080521.001\SymIDSCo.sys (manual start)
SYMNDIS: \SystemRoot\System32\Drivers\SYMNDIS.SYS (manual start)
SYMREDRV: \SystemRoot\System32\Drivers\SYMREDRV.SYS (manual start)
SYMTDI: \SystemRoot\System32\Drivers\SYMTDI.SYS (system)
Microsoft Kernel System Audio Device: system32\drivers\sysaudio.sys (manual start)
Performance Logs and Alerts: %SystemRoot%\system32\smlogsvc.exe (manual start)
Telephony: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
TCP/IP Protocol Driver: system32\DRIVERS\tcpip.sys (system)
Terminal Device Driver: system32\DRIVERS\termdd.sys (system)
Terminal Services: %SystemRoot%\System32\svchost -k DComLaunch (manual start)
Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Microcode Update Driver: system32\DRIVERS\update.sys (manual start)
Universal Plug and Play Device Host: %SystemRoot%\system32\svchost.exe -k LocalService (manual start)
Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start)
Microsoft USB Generic Parent Driver: system32\DRIVERS\usbccgp.sys (manual start)
Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: system32\DRIVERS\usbehci.sys (manual start)
USB2 Enabled Hub: system32\DRIVERS\usbhub.sys (manual start)
Microsoft USB PRINTER Class: system32\DRIVERS\usbprint.sys (manual start)
Microsoft USB Universal Host Controller Miniport Driver: system32\DRIVERS\usbuhci.sys (manual start)
VgaSave: \SystemRoot\System32\drivers\vga.sys (system)
Volume Shadow Copy: %SystemRoot%\System32\vssvc.exe (manual start)
Windows Time: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Remote Access IP ARP Driver: system32\DRIVERS\wanarp.sys (manual start)
Microsoft WINMM WDM Audio Compatibility Driver: system32\drivers\wdmaud.sys (manual start)
WebClient: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)
Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Portable Media Serial Number Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WMI Performance Adapter: C:\WINDOWS\system32\wbem\wmiapsrv.exe (manual start)
Security Center: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Automatic Updates: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Network Provisioning Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)


--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:\WINDOWS\Temp\JETCBB2.tmp||C:\WINDOWS\Temp\JETCC3F.tmp


--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*Registry key not found*

--------------------------------------------------

End of report, 31,610 bytes
Report generated in 0.297 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only



Adobe Flash Player ActiveX
AppCore
AV
ccCommon
DVD Shrink 3.2
DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.2.0
GearDrvs
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
HP DVD Writer
Intel® Extreme Graphics Driver
LiveUpdate 3.2 (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Norton 360
Norton 360
Norton 360
Norton 360 (Symantec Corporation)
Norton 360 Help
Norton Confidential Browser Component
Norton Confidential Web Authentification Component
Norton Confidential Web Protection Component
Realtek AC'97 Audio
RecordNow!
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944338)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Sonic Update Manager
SPBBC 32bit
SuppSoft
Symantec Technical Support Controls
SymNet
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781

Process list saved on 1:30:42 PM, on 5/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)

[pid] [full path to filename] [file version] [company name]
424 C:\WINDOWS\System32\smss.exe 5.1.2600.2180 Microsoft Corporation
504 C:\WINDOWS\system32\winlogon.exe 5.1.2600.2180 Microsoft Corporation
548 C:\WINDOWS\system32\services.exe 5.1.2600.2180 Microsoft Corporation
560 C:\WINDOWS\system32\lsass.exe 5.1.2600.2180 Microsoft Corporation
704 C:\WINDOWS\system32\svchost.exe 5.1.2600.2180 Microsoft Corporation
832 C:\WINDOWS\System32\svchost.exe 5.1.2600.2180 Microsoft Corporation
1124 C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 106.2.0.21 Symantec Corporation
1288 C:\WINDOWS\Explorer.EXE 6.0.2900.3156 Microsoft Corporation
1440 C:\WINDOWS\system32\spoolsv.exe 5.1.2600.2696 Microsoft Corporation
1660 C:\WINDOWS\system32\hkcmd.exe 3.0.0.3943 Intel Corporation
1700 C:\Program Files\Common Files\Symantec Shared\ccApp.exe 106.2.0.21 Symantec Corporation
1828 C:\Program Files\HP DVD\Umbrella\DVDTray.exe 2.0.0.1 Hewlett-Packard Company
1872 C:\Program Files\Messenger\msmsgs.exe 4.7.0.3001 Microsoft Corporation
1884 C:\WINDOWS\system32\ctfmon.exe 5.1.2600.2180 Microsoft Corporation
2448 C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe 1.9.2.74
1984 C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe 1.2.0.28 Symantec Corporation
3768 C:\Program Files\Internet Explorer\iexplore.exe 7.0.6000.16640 Microsoft Corporation
2864 C:\Program Files\Internet Explorer\iexplore.exe 7.0.6000.16640 Microsoft Corporation
644 C:\Program Files\Trend Micro\HijackThis\HijackThis.exe 2.0.0.2 Trend Micro Inc.
2788 C:\WINDOWS\system32\notepad.exe 5.1.2600.2180 Microsoft Corporation


DLLs loaded by process C:\WINDOWS\system32\winlogon.exe:

[full path to filename] [file version] [company name]
C:\WINDOWS\system32\ntdll.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\kernel32.dll 5.1.2600.3119 Microsoft Corporation
C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.3173 Microsoft Corporation
C:\WINDOWS\system32\Secur32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\AUTHZ.dll 5.1.2600.2622 Microsoft Corporation
C:\WINDOWS\system32\msvcrt.dll 7.0.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\CRYPT32.dll 5.131.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\USER32.dll 5.1.2600.3099 Microsoft Corporation
C:\WINDOWS\system32\GDI32.dll 5.1.2600.3316 Microsoft Corporation
C:\WINDOWS\system32\MSASN1.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\NDdeApi.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\PROFMAP.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\NETAPI32.dll 5.1.2600.2976 Microsoft Corporation
C:\WINDOWS\system32\USERENV.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\PSAPI.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\REGAPI.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\SETUPAPI.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\VERSION.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINSTA.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINTRUST.dll 5.131.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\IMAGEHLP.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WS2_32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WS2HELP.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\IMM32.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\MSGINA.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\SHELL32.dll 6.0.2900.3241 Microsoft Corporation
C:\WINDOWS\system32\SHLWAPI.dll 6.0.2900.3314 Microsoft Corporation
C:\WINDOWS\system32\COMCTL32.dll 5.82.2900.2982 Microsoft Corporation
C:\WINDOWS\system32\ODBC32.dll 3.525.1117.0 Microsoft Corporation
C:\WINDOWS\system32\comdlg32.dll 6.0.2900.2180 Microsoft Corporation
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 6.0.2900.2982 Microsoft Corporation
C:\WINDOWS\system32\odbcint.dll 3.525.1117.0 Microsoft Corporation
C:\WINDOWS\system32\SHSVCS.dll 6.0.2900.3051 Microsoft Corporation
C:\WINDOWS\system32\sfc.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\sfc_os.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\ole32.dll 5.1.2600.2726 Microsoft Corporation
C:\WINDOWS\system32\Apphelp.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\msctfime.ime 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINSCARD.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WTSAPI32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\sxs.dll 5.1.2600.3019 Microsoft Corporation
C:\WINDOWS\system32\uxtheme.dll 6.0.2900.2180 Microsoft Corporation
C:\WINDOWS\system32\WINMM.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\cscdll.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WlNotify.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINSPOOL.DRV 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\MPR.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\rsaenh.dll 5.1.2600.2161 Microsoft Corporation
C:\WINDOWS\system32\SAMLIB.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\msv1_0.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\iphlpapi.dll 5.1.2600.2912 Microsoft Corporation
C:\WINDOWS\system32\cscui.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\MPRAPI.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\ACTIVEDS.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\adsldpc.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\ATL.DLL 3.5.2284.0 Microsoft Corporation
C:\WINDOWS\system32\OLEAUT32.dll 5.1.2600.3266 Microsoft Corporation
C:\WINDOWS\system32\rtutils.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\xpsp2res.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\NTMARTA.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\wdmaud.drv 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\msacm32.drv 5.1.2600.0 Microsoft Corporation
C:\WINDOWS\system32\MSACM32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\midimap.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\COMRes.dll 2001.12.4414.258 Microsoft Corporation
C:\WINDOWS\system32\CLBCATQ.DLL 2001.12.4414.308 Microsoft Corporation

Process list saved on 1:30:42 PM, on 5/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)

[pid] [full path to filename] [file version] [company name]
424 C:\WINDOWS\System32\smss.exe 5.1.2600.2180 Microsoft Corporation
504 C:\WINDOWS\system32\winlogon.exe 5.1.2600.2180 Microsoft Corporation
548 C:\WINDOWS\system32\services.exe 5.1.2600.2180 Microsoft Corporation
560 C:\WINDOWS\system32\lsass.exe 5.1.2600.2180 Microsoft Corporation
704 C:\WINDOWS\system32\svchost.exe 5.1.2600.2180 Microsoft Corporation
832 C:\WINDOWS\System32\svchost.exe 5.1.2600.2180 Microsoft Corporation
1124 C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 106.2.0.21 Symantec Corporation
1288 C:\WINDOWS\Explorer.EXE 6.0.2900.3156 Microsoft Corporation
1440 C:\WINDOWS\system32\spoolsv.exe 5.1.2600.2696 Microsoft Corporation
1660 C:\WINDOWS\system32\hkcmd.exe 3.0.0.3943 Intel Corporation
1700 C:\Program Files\Common Files\Symantec Shared\ccApp.exe 106.2.0.21 Symantec Corporation
1828 C:\Program Files\HP DVD\Umbrella\DVDTray.exe 2.0.0.1 Hewlett-Packard Company
1872 C:\Program Files\Messenger\msmsgs.exe 4.7.0.3001 Microsoft Corporation
1884 C:\WINDOWS\system32\ctfmon.exe 5.1.2600.2180 Microsoft Corporation
2448 C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe 1.9.2.74
1984 C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe 1.2.0.28 Symantec Corporation
3768 C:\Program Files\Internet Explorer\iexplore.exe 7.0.6000.16640 Microsoft Corporation
2864 C:\Program Files\Internet Explorer\iexplore.exe 7.0.6000.16640 Microsoft Corporation
644 C:\Program Files\Trend Micro\HijackThis\HijackThis.exe 2.0.0.2 Trend Micro Inc.
2788 C:\WINDOWS\system32\notepad.exe 5.1.2600.2180 Microsoft Corporation


DLLs loaded by process C:\WINDOWS\system32\winlogon.exe:

[full path to filename] [file version] [company name]
C:\WINDOWS\system32\ntdll.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\kernel32.dll 5.1.2600.3119 Microsoft Corporation
C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.3173 Microsoft Corporation
C:\WINDOWS\system32\Secur32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\AUTHZ.dll 5.1.2600.2622 Microsoft Corporation
C:\WINDOWS\system32\msvcrt.dll 7.0.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\CRYPT32.dll 5.131.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\USER32.dll 5.1.2600.3099 Microsoft Corporation
C:\WINDOWS\system32\GDI32.dll 5.1.2600.3316 Microsoft Corporation
C:\WINDOWS\system32\MSASN1.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\NDdeApi.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\PROFMAP.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\NETAPI32.dll 5.1.2600.2976 Microsoft Corporation
C:\WINDOWS\system32\USERENV.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\PSAPI.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\REGAPI.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\SETUPAPI.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\VERSION.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINSTA.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINTRUST.dll 5.131.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\IMAGEHLP.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WS2_32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WS2HELP.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\IMM32.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\MSGINA.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\SHELL32.dll 6.0.2900.3241 Microsoft Corporation
C:\WINDOWS\system32\SHLWAPI.dll 6.0.2900.3314 Microsoft Corporation
C:\WINDOWS\system32\COMCTL32.dll 5.82.2900.2982 Microsoft Corporation
C:\WINDOWS\system32\ODBC32.dll 3.525.1117.0 Microsoft Corporation
C:\WINDOWS\system32\comdlg32.dll 6.0.2900.2180 Microsoft Corporation
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 6.0.2900.2982 Microsoft Corporation
C:\WINDOWS\system32\odbcint.dll 3.525.1117.0 Microsoft Corporation
C:\WINDOWS\system32\SHSVCS.dll 6.0.2900.3051 Microsoft Corporation
C:\WINDOWS\system32\sfc.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\sfc_os.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\ole32.dll 5.1.2600.2726 Microsoft Corporation
C:\WINDOWS\system32\Apphelp.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\msctfime.ime 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINSCARD.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WTSAPI32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\sxs.dll 5.1.2600.3019 Microsoft Corporation
C:\WINDOWS\system32\uxtheme.dll 6.0.2900.2180 Microsoft Corporation
C:\WINDOWS\system32\WINMM.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\cscdll.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WlNotify.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WINSPOOL.DRV 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\MPR.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\rsaenh.dll 5.1.2600.2161 Microsoft Corporation
C:\WINDOWS\system32\SAMLIB.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\msv1_0.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\iphlpapi.dll 5.1.2600.2912 Microsoft Corporation
C:\WINDOWS\system32\cscui.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\MPRAPI.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\ACTIVEDS.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\adsldpc.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\ATL.DLL 3.5.2284.0 Microsoft Corporation
C:\WINDOWS\system32\OLEAUT32.dll 5.1.2600.3266 Microsoft Corporation
C:\WINDOWS\system32\rtutils.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\xpsp2res.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\NTMARTA.DLL 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\wdmaud.drv 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\msacm32.drv 5.1.2600.0 Microsoft Corporation
C:\WINDOWS\system32\MSACM32.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\midimap.dll 5.1.2600.2180 Microsoft Corporation
C:\WINDOWS\system32\COMRes.dll 2001.12.4414.258 Microsoft Corporation
C:\WINDOWS\system32\CLBCATQ.DLL 2001.12.4414.308 Microsoft Corporation


also files included in the ~ralybne.tmp file with the date of 07/29/07
md5deep.exe
sed.exe
inkread.vbs
regdump.bat

BC AdBot (Login to Remove)

 


#2 suebaby41

suebaby41

    W.A.M. (Women Against Malware)


  • Malware Response Team
  • 6,248 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:South Carolina, USA
  • Local time:09:54 PM

Posted 23 June 2008 - 02:14 PM

Welcome to the BleepingComputer Forums. Since it has been a few days, please post a new HijackThis log. Thank you for your patience.

If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped.
You don't stop laughing when you get old; you get old when you stop laughing.
A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)
Malware Removal University Masters Graduate

Posted Image
Join The Fight Against Malware
No reply within 5 days will result in your topic being closed. If you need more time, please let me know by posting in this topic so that your topic will not be closed.

#3 suebaby41

suebaby41

    W.A.M. (Women Against Malware)


  • Malware Response Team
  • 6,248 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:South Carolina, USA
  • Local time:09:54 PM

Posted 01 July 2008 - 05:27 AM

This subject is now closed. If you need this topic reopened, please contact a member of the HJT Team and we will reopen it for you. Include the address of this thread in your request. If you should have a new issue, please start a new topic. This applies only to the original topic starter. Everyone else please begin a New Topic.
You don't stop laughing when you get old; you get old when you stop laughing.
A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)
Malware Removal University Masters Graduate

Posted Image
Join The Fight Against Malware
No reply within 5 days will result in your topic being closed. If you need more time, please let me know by posting in this topic so that your topic will not be closed.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users