Skocz do zawartości
WAŻNE - Zakładanie tematu: obowiązkowe logi

Security Shield - niechciany antywirus?

owocowka

Przez owocowka
w Dział pomocy doraźnej

Rekomendowane odpowiedzi

owocowka

owocowka

Opublikowano
Opublikowano

Od wczoraj na komputerze pojawia się komunikat z programu antywirusowego, którego nigdy nie instalowałem. Cały czas ten program antywirusowy wykrywa mi różne wirusy na moim komputerze (avira nic nie widzi) i prosi o wykupienie pełnej wersji programu (security shield). Okienko ze skanu pojawia się samoistnie co jakis czas i straciłem kontrolę nad windowsowskimi ustawieniami firewalla i antywirusa i aktualizacjami.

 

załączam log z OTL i aviry (ze skanu który jakoś udało mi się przeprowadzić).

Mam windowsa xp x64.

Extras.Txt

OTL.Txt

avira log.txt

Pomoc jest darmowa, ale proszę rozważ przekazanie dotacji na utrzymanie serwisu: klik.
Landuss

Landuss

Opublikowano
Opublikowano

System jest zainfekowany rootkitem ZeroAccess. Potrzebny raport dodatkowy. Uruchom SystemLook x64 i do okna wklej:

 

:reg
HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s
 
:filefind
services.exe

 

Klik w Look i przedstaw wynikowy raport.

owocowka

owocowka

Opublikowano
  • Autor
Opublikowano

zrobione

 

SystemLook 30.07.11 by jpshortstuff

Log created at 22:53 on 24/07/2012 by Administrator

Administrator - Elevation successful

 

========== reg ==========

 

[HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

(Unable to open key - key not found)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}]

@="Microsoft WBEM New Event Subsystem"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]

@="\\.\globalroot\systemroot\Installer\{33c21ed9-e3ce-8222-9a2a-598ba816a40e}\n."

"ThreadingModel"="Both"

 

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

@="MruPidlList"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

@="%SystemRoot%\system32\shdocvw.dll"

"ThreadingModel"="Apartment"

 

 

========== filefind ==========

 

Searching for "services.exe"

C:\WINDOWS\system32\services.exe --a---- 224256 bytes [12:00 18/02/2007] [12:00 18/02/2007] D255E0DDB63A6223BFD8057266380017

C:\WINDOWS\system32\dllcache\services.exe --a--c- 224256 bytes [12:00 18/02/2007] [12:00 18/02/2007] D255E0DDB63A6223BFD8057266380017

 

-= EOF =-

Landuss

Landuss

Opublikowano
Opublikowano

1. Start > Uruchom > cmd i wklep:

 

reg add HKLM\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /ve /t REG_EXPAND_SZ /d ^%systemroot^%\system32\wbem\wbemess.dll /f

 

2. Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej następujący tekst:

 

:OTL
IE - HKU\S-1-5-21-3988961629-2529250463-1142044016-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = "my.daemon-search.com"
[2011-05-13 18:25:53 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\59qwop0k.default\extensions\DTToolbar@toolbarnet.com
[2011-04-06 22:38:56 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\59qwop0k.default\searchplugins\daemon-search.xml
O3:64bit: - HKU\S-1-5-21-3988961629-2529250463-1142044016-500\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - %SystemRoot%\system32\browseui.dll File not found
O3:64bit: - HKU\S-1-5-21-3988961629-2529250463-1142044016-500\..\Toolbar\WebBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - %SystemRoot%\system32\browseui.dll File not found
O3:64bit: - HKU\S-1-5-21-3988961629-2529250463-1142044016-500\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - %SystemRoot%\system32\SHELL32.dll File not found
O4 - HKU\S-1-5-21-3988961629-2529250463-1142044016-500..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-3988961629-2529250463-1142044016-500..\Run: [PlayNC Launcher]  File not found
 
:Files
C:\WINDOWS\Installer\{33c21ed9-e3ce-8222-9a2a-598ba816a40e}
C:\Documents and Settings\Administrator\Local Settings\Application Data\{33c21ed9-e3ce-8222-9a2a-598ba816a40e}
C:\Documents and Settings\Administrator\Local Settings\Application Data\tnhprzd.exe
 
:Commands
[emptytemp]

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Kliknij w Wykonaj skrypt. Zatwierdź restart komputera.

 

3. Przez Panel sterowania odinstaluj: DAEMON Tools Toolbar / Contribute Toolbar / Deinstalator Strony V9

 

4. Uruchom AdwCleaner z opcji Delete

 

5. Uruchamiasz OTL ponownie, tym razem wywołujesz opcję Skanuj. Pokazujesz nowy log z OTL (bez extras), z SystemLook oraz z Farbar Service Scanner (zaznacz wszystko do skanowania)

owocowka

owocowka

Opublikowano
  • Autor
Opublikowano

Juz zalaczam.

 

SystemLook 30.07.11 by jpshortstuff

Log created at 21:41 on 26/07/2012 by Administrator

Administrator - Elevation successful

 

========== reg ==========

 

[HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

(Unable to open key - key not found)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}]

@="Microsoft WBEM New Event Subsystem"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]

@="%systemroot%\system32\wbem\wbemess.dll"

"ThreadingModel"="Both"

 

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}]

@="MruPidlList"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

@="%SystemRoot%\system32\shdocvw.dll"

"ThreadingModel"="Apartment"

 

 

========== filefind ==========

 

Searching for "services.exe"

C:\WINDOWS\system32\services.exe --a---- 224256 bytes [12:00 18/02/2007] [12:00 18/02/2007] D255E0DDB63A6223BFD8057266380017

C:\WINDOWS\system32\dllcache\services.exe --a--c- 224256 bytes [12:00 18/02/2007] [12:00 18/02/2007] D255E0DDB63A6223BFD8057266380017

 

-= EOF =-

Landuss

Landuss

Opublikowano
Opublikowano

1. Start > Uruchom > cmd i wpisz netsh winsock reset

 

2. Wklej do notatnika ten tekst:

 

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"DisplayName"="Zapora systemu Windows/Udostępnianie połączenia internetowego"
"DependOnService"=hex(7):4e,00,65,00,74,00,6d,00,61,00,6e,00,00,00,57,00,69,00,\
  6e,00,4d,00,67,00,6d,00,74,00,00,00,00,00
"DependOnGroup"=hex(7):00,00
"ObjectName"="LocalSystem"
"Description"="Zapewnia usługi translacji adresów sieciowych, adresowania, rozpoznawania nazw i/lub blokowania dostępu intruzów wszystkim komputerom w sieci domowej lub biurowej."
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch]
"Epoch"=dword:0000119c
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  69,00,70,00,6e,00,61,00,74,00,68,00,6c,00,70,00,2e,00,64,00,6c,00,6c,00,00,\
  00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP"="139:TCP:*:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:*:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:*:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:*:Enabled:@xpsp2res.dll,-22002"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=dword:00000001
"DoNotAllowExceptions"=dword:00000000
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008"
"139:TCP"="139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
  05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
  00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup]
"ServiceUpgrade"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate]
"All"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum]
"0"="Root\\LEGACY_SHAREDACCESS\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"DisplayName"="Centrum zabezpieczeń"
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,77,00,69,00,6e,00,\
  6d,00,67,00,6d,00,74,00,00,00,00,00
"ObjectName"="LocalSystem"
"Description"="Monitoruje ustawienia zabezpieczeń i konfiguracje systemu."
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Parameters]
"ServiceDll"=hex(2):25,00,53,00,59,00,53,00,54,00,45,00,4d,00,52,00,4f,00,4f,\
  00,54,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  77,00,73,00,63,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
  05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
  00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Enum]
"0"="Root\\LEGACY_WSCSVC\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

 

Z menu Notatnika >>> Plik >>> Zapisz jako >>> Ustaw rozszerzenie na Wszystkie pliki >>> Zapisz jako FIX.REG >>> uruchom ten plik

 

3. Po wykonaniu prezentujesz nowy log z OTL i nowy z FSS.

Landuss

Landuss

Opublikowano
Opublikowano

Winsock nadal nie został zresetowany, ale tutaj też część NameSpace jest naruszona czego nie zauważyłem wcześniej. Wykonaj fixa całej usługi.

 

1. Wklej do notatnika ten tekst (spoiler):

 

 

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock]
"ErrorControl"=dword:00000001
"Start"=dword:00000003
"Type"=dword:00000004
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\Parameters]
"Transports"=hex(7):54,00,63,00,70,00,69,00,70,00,00,00,4e,00,65,00,74,00,42,\
  00,49,00,4f,00,53,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\Setup Migration]
"Setup Version"=dword:00001009
"Provider List"=hex(7):4e,00,65,00,74,00,42,00,49,00,4f,00,53,00,00,00,54,00,\
  63,00,70,00,69,00,70,00,00,00,00,00
"Known Static Providers"=hex(7):54,00,63,00,70,00,69,00,70,00,00,00,4e,00,77,\
  00,6c,00,6e,00,6b,00,49,00,70,00,78,00,00,00,4e,00,77,00,6c,00,6e,00,6b,00,\
  53,00,70,00,78,00,00,00,41,00,70,00,70,00,6c,00,65,00,54,00,61,00,6c,00,6b,\
  00,00,00,49,00,73,00,6f,00,54,00,70,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\Setup Migration\Providers]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\Setup Migration\Providers\NetBIOS]
"WinSock 1.1 Provider Data"=hex:0e,10,00,00,11,00,00,00,14,00,00,00,14,00,00,\
  00,05,00,00,00,00,00,00,80,00,fa,00,00,0e,03,00,00,09,12,00,00,11,00,00,00,\
  14,00,00,00,14,00,00,00,02,00,00,00,00,00,00,80,00,fa,00,00,98,02,00,00,0e,\
  10,00,00,11,00,00,00,14,00,00,00,14,00,00,00,05,00,00,00,ff,ff,ff,ff,00,fa,\
  00,00,22,02,00,00,09,12,00,00,11,00,00,00,14,00,00,00,14,00,00,00,02,00,00,\
  00,ff,ff,ff,ff,00,fa,00,00,ac,01,00,00,0e,10,00,00,11,00,00,00,14,00,00,00,\
  14,00,00,00,05,00,00,00,fe,ff,ff,ff,00,fa,00,00,36,01,00,00,09,12,00,00,11,\
  00,00,00,14,00,00,00,14,00,00,00,02,00,00,00,fe,ff,ff,ff,00,fa,00,00,c0,00,\
  00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,\
  00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,44,00,39,00,33,00,\
  37,00,35,00,37,00,43,00,42,00,2d,00,42,00,35,00,30,00,36,00,2d,00,34,00,39,\
  00,35,00,46,00,2d,00,41,00,31,00,42,00,44,00,2d,00,41,00,45,00,30,00,39,00,\
  38,00,46,00,42,00,30,00,37,00,44,00,35,00,38,00,7d,00,00,00,5c,00,44,00,65,\
  00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,\
  63,00,70,00,69,00,70,00,5f,00,7b,00,44,00,39,00,33,00,37,00,35,00,37,00,43,\
  00,42,00,2d,00,42,00,35,00,30,00,36,00,2d,00,34,00,39,00,35,00,46,00,2d,00,\
  41,00,31,00,42,00,44,00,2d,00,41,00,45,00,30,00,39,00,38,00,46,00,42,00,30,\
  00,37,00,44,00,35,00,38,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,5f,00,7b,00,42,00,44,00,32,00,46,00,44,00,38,00,37,00,35,00,2d,00,36,00,\
  43,00,45,00,35,00,2d,00,34,00,45,00,33,00,39,00,2d,00,38,00,36,00,38,00,38,\
  00,2d,00,33,00,44,00,37,00,42,00,46,00,33,00,38,00,46,00,44,00,43,00,35,00,\
  33,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,\
  00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,42,00,\
  44,00,32,00,46,00,44,00,38,00,37,00,35,00,2d,00,36,00,43,00,45,00,35,00,2d,\
  00,34,00,45,00,33,00,39,00,2d,00,38,00,36,00,38,00,38,00,2d,00,33,00,44,00,\
  37,00,42,00,46,00,33,00,38,00,46,00,44,00,43,00,35,00,33,00,7d,00,00,00,5c,\
  00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,\
  5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,32,00,31,00,43,00,38,00,39,\
  00,31,00,35,00,31,00,2d,00,31,00,31,00,36,00,46,00,2d,00,34,00,43,00,45,00,\
  32,00,2d,00,41,00,35,00,31,00,38,00,2d,00,30,00,35,00,41,00,33,00,33,00,41,\
  00,45,00,46,00,34,00,43,00,41,00,34,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\
  69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,\
  00,69,00,70,00,5f,00,7b,00,32,00,31,00,43,00,38,00,39,00,31,00,35,00,31,00,\
  2d,00,31,00,31,00,36,00,46,00,2d,00,34,00,43,00,45,00,32,00,2d,00,41,00,35,\
  00,31,00,38,00,2d,00,30,00,35,00,41,00,33,00,33,00,41,00,45,00,46,00,34,00,\
  43,00,41,00,34,00,7d,00,00,00
"WinSock 2.0 Provider ID"=hex:30,18,5f,8d,73,c2,cf,11,95,c8,00,80,5f,48,a1,92
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\Setup Migration\Providers\Tcpip]
"WinSock 2.0 Provider ID"=hex:a0,1a,0f,e7,8b,ab,cf,11,8c,a3,00,80,5f,48,a1,92
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\Setup Migration\Well Known Guids]
"IsoTp"=hex:b0,cb,e4,89,c1,b9,cf,11,95,c8,00,80,5f,48,a1,92
"McsXns"=hex:b1,cb,e4,89,c1,b9,cf,11,95,c8,00,80,5f,48,a1,92
"AppleTalk"=hex:a0,17,3b,2c,df,c6,cf,11,95,c8,00,80,5f,48,a1,92
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters]
"WinSock_Registry_Version"="2.0"
"Current_NameSpace_Catalog"="NameSpace_Catalog5"
"Current_Protocol_Catalog"="Protocol_Catalog9"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5]
"Num_Catalog_Entries"=dword:00000003
"Serial_Access_Num"=dword:00000004
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001]
"LibraryPath"="%SystemRoot%\\System32\\mswsock.dll"
"DisplayString"="TCP/IP"
"ProviderId"=hex:40,9d,05,22,9e,7e,cf,11,ae,5a,00,aa,00,a7,11,2b
"SupportedNameSpace"=dword:0000000c
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000000
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002]
"LibraryPath"="%SystemRoot%\\System32\\winrnr.dll"
"DisplayString"="NTDS"
"ProviderId"=hex:ee,37,26,3b,80,e5,cf,11,a5,55,00,c0,4f,d8,d4,ac
"SupportedNameSpace"=dword:00000020
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000000
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003]
"LibraryPath"="%SystemRoot%\\System32\\mswsock.dll"
"DisplayString"="Obszar nazw rozpoznawania lokalizacji w sieci (NLA)"
"ProviderId"=hex:3a,24,42,66,a8,3b,a6,4a,ba,a5,2e,0b,d7,1f,dd,83
"SupportedNameSpace"=dword:0000000f
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000000
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Num_Catalog_Entries"=dword:0000000b
"Next_Catalog_Entry_ID"=dword:000003f4
"Serial_Access_Num"=dword:00000004
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,66,00,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,08,00,00,00,a0,1a,0f,e7,8b,ab,cf,11,8c,a3,00,80,5f,\
  48,a1,92,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,02,00,00,00,10,00,00,\
  00,10,00,00,00,01,00,00,00,06,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,54,00,63,00,70,\
  00,69,00,70,00,20,00,5b,00,54,00,43,00,50,00,2f,00,49,00,50,00,5d,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,09,06,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,08,00,00,00,a0,1a,0f,e7,8b,ab,cf,11,8c,a3,00,80,5f,\
  48,a1,92,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,02,00,00,00,10,00,00,\
  00,10,00,00,00,02,00,00,00,11,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  bb,ff,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,54,00,63,00,70,\
  00,69,00,70,00,20,00,5b,00,55,00,44,00,50,00,2f,00,49,00,50,00,5d,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,09,06,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,0c,00,00,00,a0,1a,0f,e7,8b,ab,cf,11,8c,a3,00,80,5f,\
  48,a1,92,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,02,00,00,00,10,00,00,\
  00,10,00,00,00,03,00,00,00,00,00,00,00,ff,00,00,00,00,00,00,00,00,00,00,00,\
  bb,ff,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,54,00,63,00,70,\
  00,69,00,70,00,20,00,5b,00,52,00,41,00,57,00,2f,00,49,00,50,00,5d,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,72,73,76,70,73,70,2e,64,6c,6c,00,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,09,26,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,08,00,00,00,e0,a9,60,9d,7a,33,d0,11,bd,88,00,00,c0,\
  82,e6,9a,ec,03,00,00,01,00,00,00,c4,f9,78,01,16,00,18,00,10,3c,5b,75,00,00,\
  00,00,78,f8,78,01,3f,87,5c,75,00,00,00,00,06,00,00,00,02,00,00,00,10,00,00,\
  00,10,00,00,00,02,00,00,00,11,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  bb,ff,00,00,00,00,00,00,52,00,53,00,56,00,50,00,20,00,55,00,44,00,50,00,20,\
  00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,20,00,50,00,72,00,6f,00,76,00,\
  69,00,64,00,65,00,72,00,00,00,fc,fb,78,01,02,00,00,00,00,00,00,00,00,00,00,\
  00,01,00,00,00,8c,24,f5,77,b2,17,f5,77,01,00,00,00,fc,fb,78,01,01,00,00,00,\
  00,00,00,00,a4,f9,78,01,6b,11,f5,77,9a,11,f5,77,9f,11,f5,77,00,00,00,00,a4,\
  f9,78,01,6b,11,f5,77,00,f9,78,01,b0,f9,78,01,6c,f9,78,01,5c,00,44,00,65,00,\
  76,00,69,00,63,00,65,00,5c,00,7b,00,32,00,31,00,43,00,38,00,39,00,31,00,35,\
  00,31,00,2d,00,31,00,31,00,36,00,46,00,2d,00,34,00,43,00,45,00,32,00,2d,00,\
  41,00,35,00,31,00,38,00,2d,00,30,00,35,00,41,00,33,00,33,00,41,00,45,00,46,\
  00,34,00,43,00,41,00,34,00,7d,00,00,00,41,00,33,00,33,00,41,00,45,00,46,00,\
  34,00,43,00,41,00,34,00,7d,00,00,00,f5,77,0e,00,07,80,44,df,4c,02,70,71,2b,\
  00,50,fc,78,01,00,01,00,00,02,00,07,80,c8,f9,78,01,34,88,5c,75,44,0b,00,00,\
  10,3c,5b,75,d0,f9,78,01,d4,f9,78,01,b6,58,f7,77,b9,17,dc,77,e4,0a,00,00,00,\
  00,00,00,58,fc,78,01,59,18,dc,77,e0,f9,78,01,ef,50,5d,75,00,00,00,00,70,71,\
  2b,00,00,00,00,00,ac,71,2b,00,90,9f,dd,77,ff,ff,ff,ff,3b,19,dc,77,8c,24,f5,\
  77,b2,17,f5,77,8c,24,f5,77,b2,17,f5,77,01,00,00,00,68,fd,78,01,04,00,00,00,\
  70,fc,78,01,00,00,00,00,74,00,74,00,8c,24,f5,77,b2,17,f5,77,01,00,00,00,8c,\
  24,f5,77,b2,17,f5,77,00,00,00,00,00,00,00,00,58,00,00,00,8c,24,f5,77,b2,17,\
  f5,77,01,00,00,00,68,fd,78,01,01,00,00,00,73,96,5d,75,00,00,00,00,ac,71,2b,\
  00,b4,fc,78,01,53,00,59,00,18,52,d3,02,28,57,d9,02,5c,00,43,00,75,00,72,00,\
  98,01,1c,00,40,57,d9,02,43,00,6f,00,6e,00,74,00,8c,24,f5,77
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,72,73,76,70,73,70,2e,64,6c,6c,00,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,66,20,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,08,00,00,00,e0,a9,60,9d,7a,33,d0,11,bd,88,00,00,c0,\
  82,e6,9a,ed,03,00,00,01,00,00,00,6f,00,63,00,6b,00,64,00,6f,00,77,00,02,00,\
  00,00,00,00,1c,00,a0,58,d3,02,00,00,00,00,06,00,00,00,02,00,00,00,10,00,00,\
  00,10,00,00,00,01,00,00,00,06,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,52,00,53,00,56,00,50,00,20,00,54,00,43,00,50,00,20,\
  00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,20,00,50,00,72,00,6f,00,76,00,\
  69,00,64,00,65,00,72,00,00,00,00,00,00,00,1b,e8,5f,75,2c,e8,5f,75,fc,fb,78,\
  01,e0,cd,30,02,a8,58,d3,02,a8,58,d3,02,b0,fb,78,01,88,01,1c,00,a0,58,d3,02,\
  00,00,00,00,00,00,00,00,00,00,c3,00,10,00,00,00,b0,54,eb,02,00,00,00,00,4c,\
  fc,78,01,c9,1d,f5,77,00,00,1c,00,00,00,1c,00,00,02,1c,00,e8,3e,99,02,02,00,\
  00,00,02,00,00,00,00,02,1c,00,68,3f,99,02,08,06,1c,00,6a,16,f5,77,00,00,00,\
  00,88,5b,d3,02,88,5b,d3,02,68,fd,78,01,08,00,00,00,70,58,eb,02,e0,01,1c,00,\
  00,20,00,00,e0,3e,99,02,00,00,00,00,88,01,1c,00,40,51,d9,02,90,01,1c,00,00,\
  00,00,00,00,00,00,00,00,00,c3,00,80,5b,d3,02,b8,54,eb,02,10,00,00,00,03,00,\
  00,00,08,00,00,00,11,00,00,00,70,58,eb,02,88,5b,d3,02,00,00,00,00,00,00,00,\
  00,e0,01,1c,00,80,5b,d3,02,12,00,00,00,00,00,00,00,00,00,c3,00,60,00,00,00,\
  04,00,00,00,04,00,00,00,0a,00,00,00,01,00,00,00,04,00,90,7b,00,00,00,00,f4,\
  fc,78,01,00,00,1c,00,c8,f6,4a,02,00,00,00,00,24,fd,78,01,c9,1d,f5,77,00,00,\
  1c,00,c8,1e,f5,77,08,06,1c,00,6a,16,f5,77,88,5a,df,02,00,00,00,00,14,ef,99,\
  02,b4,65,f7,77,f4,fc,78,01,05,90,f7,77,a8,d5,f6,77,ff,ff,ff,ff,9f,11,f5,77,\
  21,37,dc,77,00,00,00,00,00,00,00,00,00,00,00,00,44,0b,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,0b,00,00,04,fd,78,01,e3,37,\
  dc,77,d8,04,1c,00,d0,f6,4a,02,10,00,00,00,0d,00,00,00,d8,04,1c,00,c8,f6,4a,\
  02,00,00,00,00,00,00,00,00,88,5a,df,02,00,00,00,00,14,ef,99,02,9a,11,f5,77,\
  9f,11,f5,77,88,5a,df,02,00,00,00,00,14,ef,99,02,f4,fc,78,01
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,0e,00,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,08,00,00,00,30,18,5f,8d,73,c2,cf,11,95,c8,00,80,5f,\
  48,a1,92,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,11,00,00,00,14,00,00,\
  00,14,00,00,00,05,00,00,00,00,00,00,80,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,fa,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,4e,00,65,00,74,\
  00,42,00,49,00,4f,00,53,00,20,00,5b,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,5f,00,7b,00,32,00,31,00,43,00,38,00,39,00,31,00,35,00,31,00,2d,00,31,00,\
  31,00,36,00,46,00,2d,00,34,00,43,00,45,00,32,00,2d,00,41,00,35,00,31,00,38,\
  00,2d,00,30,00,35,00,41,00,33,00,33,00,41,00,45,00,46,00,34,00,43,00,41,00,\
  34,00,7d,00,5d,00,20,00,53,00,45,00,51,00,50,00,41,00,43,00,4b,00,45,00,54,\
  00,20,00,30,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,09,02,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,08,00,00,00,30,18,5f,8d,73,c2,cf,11,95,c8,00,80,5f,\
  48,a1,92,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,11,00,00,00,14,00,00,\
  00,14,00,00,00,02,00,00,00,00,00,00,80,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,fa,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,4e,00,65,00,74,\
  00,42,00,49,00,4f,00,53,00,20,00,5b,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,5f,00,7b,00,32,00,31,00,43,00,38,00,39,00,31,00,35,00,31,00,2d,00,31,00,\
  31,00,36,00,46,00,2d,00,34,00,43,00,45,00,32,00,2d,00,41,00,35,00,31,00,38,\
  00,2d,00,30,00,35,00,41,00,33,00,33,00,41,00,45,00,46,00,34,00,43,00,41,00,\
  34,00,7d,00,5d,00,20,00,44,00,41,00,54,00,41,00,47,00,52,00,41,00,4d,00,20,\
  00,30,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,0e,00,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,30,18,5f,8d,73,c2,cf,11,95,c8,00,80,5f,\
  48,a1,92,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,11,00,00,00,14,00,00,\
  00,14,00,00,00,05,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,fa,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,4e,00,65,00,74,\
  00,42,00,49,00,4f,00,53,00,20,00,5b,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,5f,00,7b,00,42,00,44,00,32,00,46,00,44,00,38,00,37,00,35,00,2d,00,36,00,\
  43,00,45,00,35,00,2d,00,34,00,45,00,33,00,39,00,2d,00,38,00,36,00,38,00,38,\
  00,2d,00,33,00,44,00,37,00,42,00,46,00,33,00,38,00,46,00,44,00,43,00,35,00,\
  33,00,7d,00,5d,00,20,00,53,00,45,00,51,00,50,00,41,00,43,00,4b,00,45,00,54,\
  00,20,00,31,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,09,02,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,30,18,5f,8d,73,c2,cf,11,95,c8,00,80,5f,\
  48,a1,92,f1,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,11,00,00,00,14,00,00,\
  00,14,00,00,00,02,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,fa,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,4e,00,65,00,74,\
  00,42,00,49,00,4f,00,53,00,20,00,5b,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,5f,00,7b,00,42,00,44,00,32,00,46,00,44,00,38,00,37,00,35,00,2d,00,36,00,\
  43,00,45,00,35,00,2d,00,34,00,45,00,33,00,39,00,2d,00,38,00,36,00,38,00,38,\
  00,2d,00,33,00,44,00,37,00,42,00,46,00,33,00,38,00,46,00,44,00,43,00,35,00,\
  33,00,7d,00,5d,00,20,00,44,00,41,00,54,00,41,00,47,00,52,00,41,00,4d,00,20,\
  00,31,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,0e,00,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,30,18,5f,8d,73,c2,cf,11,95,c8,00,80,5f,\
  48,a1,92,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,11,00,00,00,14,00,00,\
  00,14,00,00,00,05,00,00,00,fe,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,fa,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,4e,00,65,00,74,\
  00,42,00,49,00,4f,00,53,00,20,00,5b,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,5f,00,7b,00,44,00,39,00,33,00,37,00,35,00,37,00,43,00,42,00,2d,00,42,00,\
  35,00,30,00,36,00,2d,00,34,00,39,00,35,00,46,00,2d,00,41,00,31,00,42,00,44,\
  00,2d,00,41,00,45,00,30,00,39,00,38,00,46,00,42,00,30,00,37,00,44,00,35,00,\
  38,00,7d,00,5d,00,20,00,53,00,45,00,51,00,50,00,41,00,43,00,4b,00,45,00,54,\
  00,20,00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"PackedCatalogItem"=hex:25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,\
  6d,33,32,5c,6d,73,77,73,6f,63,6b,2e,64,6c,6c,00,b6,01,00,00,00,00,14,05,b6,\
  01,00,00,00,00,3e,06,b6,01,00,00,00,00,68,07,b6,01,00,00,00,00,8a,08,b6,01,\
  05,00,00,00,b4,09,b6,01,00,00,00,00,d6,0a,b6,01,00,00,00,00,00,0c,b6,01,00,\
  00,00,00,2a,0d,b6,01,00,00,00,00,54,0e,b6,01,00,00,00,00,7e,0f,b6,01,00,00,\
  00,00,a8,10,b6,01,00,00,00,00,d2,11,b6,01,00,00,00,00,fc,12,b6,01,00,00,00,\
  00,1e,14,b6,01,00,00,00,00,48,15,b6,01,09,00,00,00,72,16,b6,01,00,00,00,00,\
  9c,17,b6,01,00,00,00,00,c6,18,b6,01,00,00,00,00,e8,19,b6,01,00,00,00,00,12,\
  1b,b6,01,0c,00,00,00,3c,1c,b6,01,04,00,00,00,e5,1c,96,06,00,00,00,00,07,1e,\
  96,06,00,00,00,00,31,1f,96,06,00,00,00,00,53,20,96,06,00,00,00,00,75,21,96,\
  06,00,00,00,00,97,22,96,06,00,00,00,00,c1,23,96,06,09,02,02,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,30,18,5f,8d,73,c2,cf,11,95,c8,00,80,5f,\
  48,a1,92,f3,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,11,00,00,00,14,00,00,\
  00,14,00,00,00,02,00,00,00,fe,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,fa,00,00,00,00,00,00,4d,00,53,00,41,00,46,00,44,00,20,00,4e,00,65,00,74,\
  00,42,00,49,00,4f,00,53,00,20,00,5b,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,5f,00,7b,00,44,00,39,00,33,00,37,00,35,00,37,00,43,00,42,00,2d,00,42,00,\
  35,00,30,00,36,00,2d,00,34,00,39,00,35,00,46,00,2d,00,41,00,31,00,42,00,44,\
  00,2d,00,41,00,45,00,30,00,39,00,38,00,46,00,42,00,30,00,37,00,44,00,35,00,\
  38,00,7d,00,5d,00,20,00,44,00,41,00,54,00,41,00,47,00,52,00,41,00,4d,00,20,\
  00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

 

 

Z menu Notatnika >>> Plik >>> Zapisz jako >>> Ustaw rozszerzenie na Wszystkie pliki >>> Zapisz jako FIX.REG >>> uruchom ten plik

 

Zrestartuj komputer i wykonaj nowy log z OTL.

  • 2 tygodnie później...
owocowka

owocowka

Opublikowano
  • Autor
Opublikowano

Nie mogę otworzyc pliku fix.reg. Wyskakuje błąd "Cannot import ....fix.reg. The specified file is not a registry file. You can only import binary registry files from within the registry editor"

Gość
Ten temat został zamknięty. Brak możliwości dodania odpowiedzi.
Tematy

  • Ostatnio przeglądający   0 użytkowników

    • Brak zarejestrowanych użytkowników przeglądających tę stronę.
×
×
  • Dodaj nową pozycję...