john.seabiscuit Posted May 23, 2011 Report Share Posted May 23, 2011 Since upgrading to version 2.2.1, utorrent stops responding as soon as a torrent is added or even when i try to click on preferences or any other item on menu bar. I have tried usual methods of reverting to earlier version, uninstalling-reinstalling, checking my system with several antivirus;avg, avast, malware bytes, super anti-spyware, creating rule in firewall (despite the fact that utorrent before upgrading was working perfectly fine with F-Secure/the application is added in the white list ), repairing winsock etc.....None of the these have helped and I am here requesting help. I am hereby reproducing the report generated though WhatIsHang and and Hijackthis; would be most grateful if any of you can point me in the right direction.Hang report for C:\Program Files\uTorrent\uTorrent.exeGenerated by using WhatIsHang on 5/22/2011 7:40:25 PMWeb site: http://www.nirsoft.netRemarks:* The program hangs in a single system call. You can look in the call stack and stack data to find out which API function cause this hang.Strings found in the stack:\Documents and Settings\John Smith\DesktopTorrentst-Ht$HHt ƒè t ƒè …—/select,"%s"Torrent 2.2.1 (build 25302)CIRCUI~1.TO~Modules found in the stack:C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll , Microsoft Corporation , Microsoft® Windows® Operating System, User Experience Controls LibraryC:\WINDOWS\system32\MSCTF.dll , Microsoft Corporation , Microsoft® Windows® Operating System, MSCTF Server DLLExecute Address:7C90E514 ntdll.dll!KiFastSystemCallRetCall Stack:0031F804 7C901046 ntdll.dll!RtlEnterCriticalSection+0x460031F864 00473DB3 uTorrent.exe+0x73db3Stack Data:0031F77C 7C90DF5A ntdll.dll!NtWaitForSingleObject+0xc0031F780 7C919B23 ntdll.dll!RtlpWaitForCriticalSection+0x8c0031F784 000002880031F788 000000000031F78C 000000000031F790 004C58F8 uTorrent.exe+0xc58f80031F794 7C901000 ntdll.dll!RtlEnterCriticalSection0031F798 00034D500031F79C 7E42AEDC USER32.dll!UpdateWindow+0x310031F7A0 000D03FA0031F7A4 0000005E0031F7A8 0031F8080031F7AC 0047A860 uTorrent.exe+0x7a8600031F7B0 000D03FA0031F7B4 000000000031F7B8 00034D500031F7BC 004C93E8 uTorrent.exe+0xc93e80031F7C0 000000000031F7C4 000000000031F7C8 000000780031F7CC 0000001E0031F7D0 000000000031F7D4 000000000031F7D8 000003B80031F7DC 000001EF0031F7E0 0000002C0031F7E4 0000001E0031F7E8 0000015E0031F7EC 000000000031F7F0 000000150031F7F4 000000990031F7F8 000000A90031F7FC 000000000031F800 000002880031F804 0031F8640031F808 7C901046 ntdll.dll!RtlEnterCriticalSection+0x460031F80C 004C58F8 uTorrent.exe+0xc58f80031F810 0041E1CA uTorrent.exe+0x1e1ca0031F814 004C58F8 uTorrent.exe+0xc58f80031F818 017A24440031F81C 017A2A880031F820 0031F8640031F824 0042955A uTorrent.exe+0x2955a0031F828 0047C33F uTorrent.exe+0x7c33f0031F82C 00034D500031F830 0031FE840031F834 7C80934A kernel32.dll!GetTickCount0031F838 017A24440031F83C 7E424389 USER32.dll!GetDlgItem+0x1b0031F840 0086EDD80031F844 00034D500031F848 00034D500031F84C 0031F8640031F850 0047F561 uTorrent.exe+0x7f5610031F854 0047F572 uTorrent.exe+0x7f5720031F858 000000000031F85C 004A6AB8 uTorrent.exe+0xa6ab80031F860 0048092A uTorrent.exe+0x8092a0031F864 004C90A0 uTorrent.exe+0xc90a00031F868 00473DB3 uTorrent.exe+0x73db30031F86C 000000000031F870 000000000031F874 0031FDE80031F878 00476304 uTorrent.exe+0x763040031F8E0 7740EA65 COMCTL32.dll+0x3ea650031F8E8 7E4298B2 USER32.dll!EnableWindow+0x690031F8EC 7E4298CF USER32.dll!GetFocus+0x70031F8F4 7740EA6B COMCTL32.dll+0x3ea6b0031F900 7740EB07 COMCTL32.dll+0x3eb070031F920 7E4194BE USER32.dll!GetWindowLongA+0x610031F9B4 7E4188DA USER32.dll!GetWindowLongW+0x340031F9BC 7740F04A COMCTL32.dll+0x3f04a0031F9C8 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031F9D0 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031F9D4 7E4188E0 USER32.dll!GetWindowLongW+0x3a0031F9E0 7740F63E COMCTL32.dll+0x3f63e0031F9F0 7740F04A COMCTL32.dll+0x3f04a0031F9F4 7740F04A COMCTL32.dll+0x3f04a0031F9F8 7E429009 USER32.dll!EndPaint+0xc0031F9FC 7741EE45 COMCTL32.dll+0x4ee450031FA10 7741EE50 COMCTL32.dll+0x4ee500031FA18 7E418734 USER32.dll!GetDC+0x6d0031FA2C 7740F04A COMCTL32.dll+0x3f04a0031FA3C 7740F04A COMCTL32.dll+0x3f04a0031FA44 7E418816 USER32.dll!GetDC+0x14f0031FA50 7E41885A USER32.dll!GetDC+0x1930031FA58 7E41882A USER32.dll!GetDC+0x1630031FA60 7740F04A COMCTL32.dll+0x3f04a0031FA6C 7E418CC3 USER32.dll!KillTimer+0x810031FA70 7E419EF0 USER32.dll!CharLowerBuffW+0x990031FA88 7E419F06 USER32.dll!SystemParametersInfoW0031FA9C 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031FAA0 7E418830 USER32.dll!GetDC+0x1690031FAA8 7E41882A USER32.dll!GetDC+0x1630031FABC 00478A48 uTorrent.exe+0x78a480031FAC8 0045232A uTorrent.exe+0x5232a0031FAD4 0044F876 uTorrent.exe+0x4f8760031FAE8 7E429E5F USER32.dll!IsWindowVisible+0x220031FAEC 7E429E6B USER32.dll!IsWindowVisible+0x2e0031FAF0 7E418C42 USER32.dll!KillTimer0031FB0C 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031FB10 7E429E70 USER32.dll!IsWindowVisible+0x330031FB14 7E42AF62 USER32.dll!ShowWindow+0xc0031FB18 7744DE23 COMCTL32.dll+0x7de230031FB24 7E418C42 USER32.dll!KillTimer0031FB38 7E418C42 USER32.dll!KillTimer0031FB40 7E42B401 USER32.dll!CallNextHookEx+0x3b0031FB58 747313D4 MSCTF.dll!TF_UninitSystem+0x9f30031FB68 747313D9 MSCTF.dll!TF_UninitSystem+0x9f80031FB84 0044EEFA uTorrent.exe+0x4eefa0031FB8C 7475F1A6 MSCTF.dll!TF_GetInputScope+0x2ae0031FB90 747313E0 MSCTF.dll!TF_UninitSystem+0x9ff0031FB98 747313D9 MSCTF.dll!TF_UninitSystem+0x9f80031FB9C 7E42B372 USER32.dll!MoveWindow+0xd40031FBB8 7E42B317 USER32.dll!MoveWindow+0x790031FBC4 0045232A uTorrent.exe+0x5232a0031FBD0 0044F876 uTorrent.exe+0x4f8760031FBE4 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031FBE8 7E42B330 USER32.dll!MoveWindow+0x920031FBF0 7E42B326 USER32.dll!MoveWindow+0x880031FBF4 7E4278D0 USER32.dll!GetWindowTextLengthW+0x9a0031FC00 7E4278E0 USER32.dll!GetWindowTextLengthW+0xaa0031FC18 7C90E473 ntdll.dll!KiUserCallbackDispatcher+0x130031FC2C 74731351 MSCTF.dll!TF_UninitSystem+0x9700031FC30 7E42B341 USER32.dll!MoveWindow+0xa30031FC44 0044F96F uTorrent.exe+0x4f96f0031FC54 7E43E1AD USER32.dll!User32InitializeImmEntryTable+0xe180031FC58 7E43E18A USER32.dll!User32InitializeImmEntryTable+0xdf50031FC70 0048DA90 uTorrent.exe+0x8da900031FC74 004B2580 uTorrent.exe+0xb25800031FC80 0044EEDA uTorrent.exe+0x4eeda0031FC9C 7E418734 USER32.dll!GetDC+0x6d0031FCC8 7E418816 USER32.dll!GetDC+0x14f0031FD04 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031FD20 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031FD24 7E418830 USER32.dll!GetDC+0x1690031FD30 7E4189CD USER32.dll!GetWindowLongW+0x1270031FD54 7E4191C6 USER32.dll!GetMessageW0031FD58 004C71F8 uTorrent.exe+0xc71f80031FD78 7E4191F1 USER32.dll!GetMessageW+0x2b0031FD80 7E44048F USER32.dll!DeregisterShellHookWindow+0x1cf0031FD84 7E4189F0 USER32.dll!GetWindowLongW+0x14a0031FD90 7E418A10 USER32.dll!DispatchMessageW+0xf0031FDA0 0044EE3D uTorrent.exe+0x4ee3d0031FDAC 004C9ADC uTorrent.exe+0xc9adc0031FDD8 004772C0 uTorrent.exe+0x772c00031FDDC 7C903400 ntdll.dll!RtlCaptureContext+0xe60031FDE8 004A56B4 uTorrent.exe+0xa56b40031FE9C 7C925800 ntdll.dll!RtlFindClearBitsAndSet+0x1b0031FEA0 7C9805E0 ntdll.dll+0x805e00031FEB0 77C35C94 msvcrt.dll!_except_handler30031FEC0 77C2C301 msvcrt.dll!free+0xe60031FECC 0042974D uTorrent.exe+0x2974d0031FEDC 00419D87 uTorrent.exe+0x19d870031FEF4 00477353 uTorrent.exe+0x773530031FF08 77C39D7A msvcrt.dll!_initterm+0x130031FF0C 7C905D48 ntdll.dll+0x5d480031FF14 0048DE0E uTorrent.exe+0x8de0e0031FF1C 004B60AC uTorrent.exe+0xb60ac0031FF28 0048DE78 uTorrent.exe+0x8de780031FF2C 00400000 uTorrent.exe+0x00031FF3C 7C903400 ntdll.dll!RtlCaptureContext+0xe60031FF40 7C905D48 ntdll.dll+0x5d480031FFB4 0048DA90 uTorrent.exe+0x8da900031FFB8 004B22F8 uTorrent.exe+0xb22f80031FFC0 7C800000 kernel32.dll+0x00031FFC4 7C817077 kernel32.dll!RegisterWaitForInputIdle+0x490031FFE4 7C839AD8 kernel32.dll!ValidateLocale+0x2b00031FFE8 7C817080 kernel32.dll!RegisterWaitForInputIdle+0x520031FFF8 00501BF0 uTorrent.exe+0x101bf00032017C 004E0049 uTorrent.exe+0xe004900320180 004F0044 uTorrent.exe+0xf004400320300 004B0063 uTorrent.exe+0xb0063003203D8 00500069 uTorrent.exe+0x10006900320470 00500069 uTorrent.exe+0x1000690032048C 00410072 uTorrent.exe+0x1007200320540 00430022 uTorrent.exe+0x3002200320548 00490057 uTorrent.exe+0x900570032054C 0044004E uTorrent.exe+0x4004e00320564 004D005C uTorrent.exe+0xd005c00320580 004D005F uTorrent.exe+0xd005f003205A4 0047002E uTorrent.exe+0x7002e00320610 004D002E uTorrent.exe+0xd002e00320654 00500069 uTorrent.exe+0x100069003206F4 0044002E uTorrent.exe+0x4002eProcessor Registers:EAX: 00000000EBX: 00000000ECX: 035E820BEDX: 00000000ESI: 004C58F8 uTorrent.exe+0xc58f8EDI: 00000000EBP: 0031F804ESP: 0031F77CEIP: 7C90E514 ntdll.dll!KiFastSystemCallRetMemory Data:004C58F8 A8 97 5B 00 01 00 00 00 01 00 00 00 30 04 00 00 ..[.........0...004C5908 88 02 00 00 00 00 00 00 30 04 00 00 00 00 00 00 ........0.......004C5918 01 00 00 00 00 00 00 00 00 00 00 44 00 00 00 00 ...........D....004C5928 00 00 DE 43 44 19 D9 4D 00 00 00 00 00 00 00 00 ...CD..M........004C5938 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C5948 00 00 00 00 00 00 00 00 16 00 00 00 01 00 00 00 ................004C5958 01 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ................004C5968 B4 05 00 00 00 00 00 00 01 00 00 00 C8 00 00 00 ................004C5978 00 00 00 00 01 00 00 00 C8 00 00 00 F4 01 00 00 ................004C5988 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 ................004C5998 00 00 00 00 00 00 00 00 FF FF FF FF 68 9A 03 00 ............h...004C59A8 00 00 00 00 90 1F 00 00 00 00 00 00 78 9A 03 00 ............x...004C59B8 88 9A 03 00 00 00 00 00 3D 00 00 00 9D 00 00 00 ........=.......004C59C8 FB 01 00 00 57 94 00 00 00 00 00 00 00 00 00 00 ....W...........004C59D8 E4 27 00 00 00 00 00 00 FA 2F 09 00 00 00 00 00 .'......./......004C59E8 07 25 00 00 00 00 00 00 B6 2F 09 00 00 00 00 00 .%......./......00034D50 B8 6A 4A 00 FA 03 0D 00 20 3F DA 00 15 00 00 00 .jJ..... ?......00034D60 0B 0E 05 6D 00 00 00 00 00 00 00 00 A4 00 00 00 ...m............00034D70 1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034D80 88 EC 79 01 02 00 00 00 05 EE 79 01 00 00 00 00 ..y.......y.....00034D90 00 00 00 00 00 00 00 00 00 36 7A 01 10 00 00 00 .........6z.....00034DA0 01 00 00 00 FF FF FF FF 02 00 00 00 68 76 7C 01 ............hv|.00034DB0 E8 FD 31 00 00 00 00 00 50 4D 03 00 00 00 00 00 ..1.....PM......00034DC0 C8 00 01 00 43 01 AC 00 F8 EE 00 01 00 00 00 00 ....C...........00034DD0 05 00 00 00 00 00 00 00 96 00 96 00 BC 04 06 00 ................00034DE0 E0 04 06 00 BC 03 05 00 98 03 05 00 C8 03 05 00 ................00034DF0 9E 04 06 00 BA 03 05 00 01 EF 79 01 B8 03 00 00 ..........y.....00034E00 1E 00 00 00 B0 34 7A 01 00 00 00 00 05 00 00 00 .....4z.........00034E10 A0 E7 79 01 10 24 7A 01 B0 34 7A 01 00 00 00 00 ..y..$z..4z.....00034E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E40 01 01 01 01 00 00 00 00 00 9D 03 00 01 00 00 00 ................0047A860 5F 5E 5B C9 C3 55 8B EC 83 EC 14 53 56 57 8B FA _^[..U.....SVW..0047A870 8B 47 04 8B F1 3D 00 02 00 00 0F 85 E5 00 00 00 .G...=..........0047A880 33 DB 38 5E 7A 0F 84 A2 00 00 00 8D 45 EC 50 FF 3.8^z.......E.P.0047A890 76 04 FF 15 C0 F6 48 00 8A 46 7A 3C 01 75 3D 0F v.....H..Fz<.u=.0047A8A0 BF 46 78 0F BF 4F 0E 8B 55 F8 2B C8 E8 33 FA FF .Fx..O..U.+..3..0047A8B0 FF 0F BF 4E 74 3B C1 74 1C 8B 4D F8 2B C8 66 89 ...Nt;.t..M.+.f.0047A8C0 46 74 0F BF C1 66 89 4E 76 8B CE A3 D4 92 4C 00 Ft...f.Nv.....L.0047A8D0 E8 46 FA FF FF 68 85 7F 00 00 EB 3F 3C 02 75 49 .F...h. ...?<.uI0047A8E0 0F BF 46 78 0F BF 4F 0C 8B 55 F4 2B C8 E8 06 FA ..Fx..O..U.+....0047A8F0 FF FF 8D 8E 88 00 00 00 0F BF 11 3B C2 74 17 66 ...........;.t.f0047A900 89 01 66 89 86 8A 00 00 00 98 8B CE A3 D8 92 4C ..f............L0047A910 00 E8 05 FA FF FF 68 84 7F 00 00 53 FF 15 A4 F7 ......h. ..S....0047A920 48 00 50 FF 15 F4 F6 48 00 B0 01 EB 33 0F BF 46 H.P....H....3..F0047A930 74 0F BF 4F 0E 2B C8 83 F9 03 73 08 38 1D 10 93 t..O.+....s.8...0047A940 4C 00 75 91 0F BF 86 88 00 00 00 0F BF 4F 0C 2B L.u..........O.+0047A950 C8 83 F9 03 73 08 38 1D 13 93 4C 00 75 B8 32 C0 ....s.8...L.u.2.00034D50 B8 6A 4A 00 FA 03 0D 00 20 3F DA 00 15 00 00 00 .jJ..... ?......00034D60 0B 0E 05 6D 00 00 00 00 00 00 00 00 A4 00 00 00 ...m............00034D70 1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034D80 88 EC 79 01 02 00 00 00 05 EE 79 01 00 00 00 00 ..y.......y.....00034D90 00 00 00 00 00 00 00 00 00 36 7A 01 10 00 00 00 .........6z.....00034DA0 01 00 00 00 FF FF FF FF 02 00 00 00 68 76 7C 01 ............hv|.00034DB0 E8 FD 31 00 00 00 00 00 50 4D 03 00 00 00 00 00 ..1.....PM......00034DC0 C8 00 01 00 43 01 AC 00 F8 EE 00 01 00 00 00 00 ....C...........00034DD0 05 00 00 00 00 00 00 00 96 00 96 00 BC 04 06 00 ................00034DE0 E0 04 06 00 BC 03 05 00 98 03 05 00 C8 03 05 00 ................00034DF0 9E 04 06 00 BA 03 05 00 01 EF 79 01 B8 03 00 00 ..........y.....00034E00 1E 00 00 00 B0 34 7A 01 00 00 00 00 05 00 00 00 .....4z.........00034E10 A0 E7 79 01 10 24 7A 01 B0 34 7A 01 00 00 00 00 ..y..$z..4z.....00034E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E40 01 01 01 01 00 00 00 00 00 9D 03 00 01 00 00 00 ................004C93E8 00 00 00 00 A8 90 03 00 40 00 00 00 24 00 00 00 ........@...$...004C93F8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9408 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9428 00 00 00 00 00 00 00 00 C0 01 00 00 A9 01 00 00 ................004C9438 01 00 00 00 0F 00 00 00 01 01 00 00 00 00 00 00 ................004C9448 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9458 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9468 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9478 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9488 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9498 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C94A8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C94B8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C94C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C94D8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C58F8 A8 97 5B 00 01 00 00 00 01 00 00 00 30 04 00 00 ..[.........0...004C5908 88 02 00 00 00 00 00 00 30 04 00 00 00 00 00 00 ........0.......004C5918 01 00 00 00 00 00 00 00 00 00 00 44 00 00 00 00 ...........D....004C5928 00 00 DE 43 44 19 D9 4D 00 00 00 00 00 00 00 00 ...CD..M........004C5938 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C5948 00 00 00 00 00 00 00 00 16 00 00 00 01 00 00 00 ................004C5958 01 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ................004C5968 B4 05 00 00 00 00 00 00 01 00 00 00 C8 00 00 00 ................004C5978 00 00 00 00 01 00 00 00 C8 00 00 00 F4 01 00 00 ................004C5988 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 ................004C5998 00 00 00 00 00 00 00 00 FF FF FF FF 68 9A 03 00 ............h...004C59A8 00 00 00 00 90 1F 00 00 00 00 00 00 78 9A 03 00 ............x...004C59B8 88 9A 03 00 00 00 00 00 3D 00 00 00 9D 00 00 00 ........=.......004C59C8 FB 01 00 00 57 94 00 00 00 00 00 00 00 00 00 00 ....W...........004C59D8 E4 27 00 00 00 00 00 00 FA 2F 09 00 00 00 00 00 .'......./......004C59E8 07 25 00 00 00 00 00 00 B6 2F 09 00 00 00 00 00 .%......./......0041E1CA BD 60 43 4C 00 3B FD 74 63 55 FF D6 8B CF E8 AA .`CL.;.tcU......0041E1DA FF FF FF 85 C0 7C 4E 3B 05 94 53 4C 00 73 46 8B .....|N;..SL.sF.0041E1EA 0D 2C 41 4C 00 8B F0 A1 8C 53 4C 00 6B F6 1C 8D .,AL.....SL.k...0041E1FA 44 06 04 FF 00 A1 8C 53 4C 00 FF 05 2C 41 4C 00 D......SL...,AL.0041E20A 89 4C 06 08 A1 8C 53 4C 00 53 8B 1D 64 F3 48 00 .L....SL.S..d.H.0041E21A 8D 3C 06 FF D3 89 47 14 A1 8C 53 4C 00 03 F0 FF .<....G...SL....0041E22A D3 89 46 10 5B 55 FF 15 A8 F1 48 00 5F 5E 5D C3 ..F.[u....H._^].0041E23A 53 55 8B 2D A8 F1 48 00 57 8B D9 BF 60 43 4C 00 SU.-..H.W...`CL.0041E24A 3B DF 74 5A 56 57 FF 15 7C F3 48 00 8B CB E8 2A ;.tZVW..|.H....*0041E25A FF FF FF 8B F0 FF 15 64 F3 48 00 33 D2 3B F2 7C .......d.H.3.;.|0041E26A 39 3B 35 94 53 4C 00 73 31 8B 0D 8C 53 4C 00 8B 9;5.SL.s1...SL..0041E27A C6 6B C0 1C FF 0D 2C 41 4C 00 89 54 08 08 8B 0D .k....,AL..T....0041E28A 8C 53 4C 00 8D 4C 08 04 FF 09 8B 0D 8C 53 4C 00 .SL..L.......SL.0041E29A 03 C1 39 50 04 75 03 89 50 10 57 FF D5 5E 53 FF ..9P.u..P.W..^S.0041E2AA D5 5F 5D 5B C3 56 57 8B F9 BE 60 43 4C 00 3B FE ._][.VW...`CL.;.0041E2BA 74 44 53 56 FF 15 7C F3 48 00 8B CF E8 BC FE FF tDSV..|.H.......004C58F8 A8 97 5B 00 01 00 00 00 01 00 00 00 30 04 00 00 ..[.........0...004C5908 88 02 00 00 00 00 00 00 30 04 00 00 00 00 00 00 ........0.......004C5918 01 00 00 00 00 00 00 00 00 00 00 44 00 00 00 00 ...........D....004C5928 00 00 DE 43 44 19 D9 4D 00 00 00 00 00 00 00 00 ...CD..M........004C5938 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C5948 00 00 00 00 00 00 00 00 16 00 00 00 01 00 00 00 ................004C5958 01 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ................004C5968 B4 05 00 00 00 00 00 00 01 00 00 00 C8 00 00 00 ................004C5978 00 00 00 00 01 00 00 00 C8 00 00 00 F4 01 00 00 ................004C5988 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 ................004C5998 00 00 00 00 00 00 00 00 FF FF FF FF 68 9A 03 00 ............h...004C59A8 00 00 00 00 90 1F 00 00 00 00 00 00 78 9A 03 00 ............x...004C59B8 88 9A 03 00 00 00 00 00 3D 00 00 00 9D 00 00 00 ........=.......004C59C8 FB 01 00 00 57 94 00 00 00 00 00 00 00 00 00 00 ....W...........004C59D8 E4 27 00 00 00 00 00 00 FA 2F 09 00 00 00 00 00 .'......./......004C59E8 07 25 00 00 00 00 00 00 B6 2F 09 00 00 00 00 00 .%......./......017A2444 B8 35 7A 01 10 00 00 00 01 00 00 00 10 24 7A 01 .5z..........$z.017A2454 10 0E 05 49 00 00 00 00 00 00 00 00 92 00 00 00 ...I............017A2464 EA 01 00 00 D0 0D 58 00 D0 0D 58 00 00 00 3D 00 ......X...X...=.017A2474 00 00 00 00 0E 00 0E 00 42 01 0A 01 38 7D 7B 01 ........B...8}{.017A2484 5C 00 44 00 6F 00 63 00 75 00 6D 00 65 00 6E 00 \.D.o.c.u.m.e.n.017A2494 74 00 73 00 20 00 61 00 6E 00 64 00 20 00 53 00 t.s. .a.n.d. .S.017A24A4 65 00 74 00 74 00 69 00 6E 00 67 00 73 00 5C 00 e.t.t.i.n.g.s.\.017A24B4 41 00 73 00 68 00 76 00 69 00 6E 00 20 00 43 00 A.s.h.v.i.n. .C.017A24C4 68 00 6F 00 75 00 64 00 68 00 61 00 72 00 79 00 h.o.u.d.h.a.r.y.017A24D4 5C 00 44 00 65 00 73 00 6B 00 74 00 6F 00 70 00 \.D.e.s.k.t.o.p.017A24E4 00 00 74 00 41 00 0E 00 50 01 08 01 53 00 6F 00 ..t.A...P...S.o.017A24F4 66 00 74 00 77 00 61 00 72 00 65 00 5C 00 43 00 f.t.w.a.r.e.\.C.017A2504 6C 00 61 00 73 00 73 00 65 00 73 00 5C 00 2E 00 l.a.s.s.e.s.\...017A2514 62 00 74 00 61 00 70 00 70 00 00 00 73 00 68 00 b.t.a.p.p...s.h.017A2524 65 00 6C 00 6C 00 5C 00 6F 00 70 00 65 00 6E 00 e.l.l.\.o.p.e.n.017A2534 5C 00 63 00 6F 00 6D 00 6D 00 61 00 6E 00 64 00 \.c.o.m.m.a.n.d.017A2A88 AC A4 49 00 A8 2A 7A 01 0B 00 00 00 D0 0D 58 00 ..I..*z.......X.017A2A98 00 00 00 00 00 00 00 00 04 00 04 00 99 01 0E 01 ................017A2AA8 54 00 6F 00 72 00 72 00 65 00 6E 00 74 00 73 00 T.o.r.r.e.n.t.s.017A2AB8 00 00 00 00 00 00 00 00 04 00 04 00 95 01 08 01 ................017A2AC8 AC A4 49 00 E8 2A 7A 01 00 00 00 00 00 0E 58 00 ..I..*z.......X.017A2AD8 00 00 00 00 02 00 00 00 04 00 04 00 91 01 08 01 ................017A2AE8 44 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 D.o.w.n.l.o.a.d.017A2AF8 69 00 6E 00 67 00 00 00 04 00 04 00 AD 01 08 01 i.n.g...........017A2B08 AC A4 49 00 28 2B 7A 01 07 00 00 00 30 0E 58 00 ..I.(+z.....0.X.017A2B18 00 00 00 00 03 00 00 00 04 00 04 00 A9 01 0C 01 ................017A2B28 43 00 6F 00 6D 00 70 00 6C 00 65 00 74 00 65 00 C.o.m.p.l.e.t.e.017A2B38 64 00 00 00 0F 00 00 00 04 00 04 00 A5 01 08 01 d...............017A2B48 AC A4 49 00 68 2B 7A 01 0A 00 00 00 60 0E 58 00 ..I.h+z.....`.X.017A2B58 00 00 00 00 04 00 00 00 03 00 04 00 A1 01 0A 01 ................017A2B68 41 00 63 00 74 00 69 00 76 00 65 00 00 00 00 00 A.c.t.i.v.e.....017A2B78 04 00 03 00 A2 01 08 01 AC A4 49 00 A0 2B 7A 01 ..........I..+z.0042955A FF 05 18 59 4C 00 C3 FF 0D 18 59 4C 00 B9 F8 58 ...YL.....YL...X0042956A 4C 00 E9 C9 4C FF FF 56 57 6A 16 8B F1 59 BF 68 L...L..VWj...Y.h0042957A 59 4C 00 F3 A5 5F 5E C3 56 57 6A 16 8B F9 59 BE YL..._^.VWj...Y.0042958A 68 59 4C 00 F3 A5 5F 5E C3 B8 26 C0 00 00 3B C8 hYL..._^..&...;.0042959A 0F 87 B4 00 00 00 0F 84 A8 00 00 00 B8 03 80 00 ................004295AA 00 3B C8 77 56 74 4E 8B C1 2D DF 00 00 00 74 3F .;.wVtN..-....t?004295BA 2D 66 26 00 00 74 32 83 E8 07 74 27 2D AD 03 00 -f&..t2...t'-...004295CA 00 74 1A 2D 08 55 00 00 74 0D 48 0F 85 E6 00 00 .t.-.U..t.H.....004295DA 00 A1 64 FD 4C 00 C3 A1 88 FD 4C 00 C3 A1 8C FD ..d.L.....L.....004295EA 4C 00 C3 A1 AC FD 4C 00 C3 A1 60 FD 4C 00 C3 A1 L.....L...`.L...004295FA 68 FD 4C 00 C3 A1 5C FD 4C 00 C3 8B C1 2D 04 80 h.L...\.L....-..0042960A 00 00 74 3A 2D 01 40 00 00 74 2D 48 74 24 48 48 ..t:-.@..t-Ht$HH0042961A 74 1A 83 E8 15 74 0F 83 E8 08 0F 85 97 00 00 00 t....t..........0042962A A1 A8 FD 4C 00 C3 A1 90 FD 4C 00 C3 A1 A0 FD 4C ...L.....L.....L0042963A 00 C3 A1 A4 FD 4C 00 C3 A1 54 FD 4C 00 C3 A1 B4 .....L...T.L....0042964A FD 4C 00 C3 A1 9C FD 4C 00 C3 B8 FD C0 00 00 3B .L.....L.......;0047C33F 33 C0 39 05 58 3B 4C 00 74 16 8B 0D 50 3B 4C 00 3.9.X;L.t...P;L.0047C34F 8B 0C 81 80 61 45 FD 40 3B 05 58 3B 4C 00 75 EA ....aE.@;.X;L.u.0047C35F 8B 4F 08 33 C0 89 4C 24 20 89 44 24 10 85 C9 0F .O.3..L$ .D$....0047C36F 86 71 02 00 00 55 EB 04 8B 5C 24 1C 8B C8 8B 07 .q...U...\$.....0047C37F C1 E1 02 03 C1 FF 30 8B 8B C4 00 00 00 E8 5B 71 ......0.......[q0047C38F FD FF 8B E8 8A 5D 14 B9 F8 58 4C 00 E8 1C 1E FA .....]...XL.....0047C39F FF 33 C0 89 44 24 18 39 05 58 3B 4C 00 0F 84 15 .3..D$.9.X;L....0047C3AF 02 00 00 0F B6 DB 89 5C 24 20 8B 0D 50 3B 4C 00 .......\$ ..P;L.0047C3BF 8B 34 81 83 FB 0F 0F 87 95 01 00 00 FF 24 9D F6 .4...........$..0047C3CF C5 47 00 B0 01 E9 77 01 00 00 8B CE E8 BF 87 F8 .G....w.........0047C3DF FF F6 D8 1A C0 FE C0 E9 61 01 00 00 8B CE E8 AD ........a.......0047C3EF 87 F8 FF E9 55 01 00 00 80 BE 21 01 00 00 00 0F ....U.....!.....0047C3FF 95 C0 E9 46 01 00 00 80 BE 21 01 00 00 00 0F 94 ...F.....!......0047C40F C0 E9 37 01 00 00 8B 86 C8 01 00 00 85 C0 0F 84 ..7.............0047C41F 3D 01 00 00 80 38 00 0F 84 34 01 00 00 EB A4 8B =....8...4......0047C42F 8E 68 02 00 00 85 C9 0F 84 24 01 00 00 8B 45 18 .h.......$....E.00034D50 B8 6A 4A 00 FA 03 0D 00 20 3F DA 00 15 00 00 00 .jJ..... ?......00034D60 0B 0E 05 6D 00 00 00 00 00 00 00 00 A4 00 00 00 ...m............00034D70 1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034D80 88 EC 79 01 02 00 00 00 05 EE 79 01 00 00 00 00 ..y.......y.....00034D90 00 00 00 00 00 00 00 00 00 36 7A 01 10 00 00 00 .........6z.....00034DA0 01 00 00 00 FF FF FF FF 02 00 00 00 68 76 7C 01 ............hv|.00034DB0 E8 FD 31 00 00 00 00 00 50 4D 03 00 00 00 00 00 ..1.....PM......00034DC0 C8 00 01 00 43 01 AC 00 F8 EE 00 01 00 00 00 00 ....C...........00034DD0 05 00 00 00 00 00 00 00 96 00 96 00 BC 04 06 00 ................00034DE0 E0 04 06 00 BC 03 05 00 98 03 05 00 C8 03 05 00 ................00034DF0 9E 04 06 00 BA 03 05 00 01 EF 79 01 B8 03 00 00 ..........y.....00034E00 1E 00 00 00 B0 34 7A 01 00 00 00 00 05 00 00 00 .....4z.........00034E10 A0 E7 79 01 10 24 7A 01 B0 34 7A 01 00 00 00 00 ..y..$z..4z.....00034E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E40 01 01 01 01 00 00 00 00 00 9D 03 00 01 00 00 00 ................017A2444 B8 35 7A 01 10 00 00 00 01 00 00 00 10 24 7A 01 .5z..........$z.017A2454 10 0E 05 49 00 00 00 00 00 00 00 00 92 00 00 00 ...I............017A2464 EA 01 00 00 D0 0D 58 00 D0 0D 58 00 00 00 3D 00 ......X...X...=.017A2474 00 00 00 00 0E 00 0E 00 42 01 0A 01 38 7D 7B 01 ........B...8}{.017A2484 5C 00 44 00 6F 00 63 00 75 00 6D 00 65 00 6E 00 \.D.o.c.u.m.e.n.017A2494 74 00 73 00 20 00 61 00 6E 00 64 00 20 00 53 00 t.s. .a.n.d. .S.017A24A4 65 00 74 00 74 00 69 00 6E 00 67 00 73 00 5C 00 e.t.t.i.n.g.s.\.017A24B4 41 00 73 00 68 00 76 00 69 00 6E 00 20 00 43 00 A.s.h.v.i.n. .C.017A24C4 68 00 6F 00 75 00 64 00 68 00 61 00 72 00 79 00 h.o.u.d.h.a.r.y.017A24D4 5C 00 44 00 65 00 73 00 6B 00 74 00 6F 00 70 00 \.D.e.s.k.t.o.p.017A24E4 00 00 74 00 41 00 0E 00 50 01 08 01 53 00 6F 00 ..t.A...P...S.o.017A24F4 66 00 74 00 77 00 61 00 72 00 65 00 5C 00 43 00 f.t.w.a.r.e.\.C.017A2504 6C 00 61 00 73 00 73 00 65 00 73 00 5C 00 2E 00 l.a.s.s.e.s.\...017A2514 62 00 74 00 61 00 70 00 70 00 00 00 73 00 68 00 b.t.a.p.p...s.h.017A2524 65 00 6C 00 6C 00 5C 00 6F 00 70 00 65 00 6E 00 e.l.l.\.o.p.e.n.017A2534 5C 00 63 00 6F 00 6D 00 6D 00 61 00 6E 00 64 00 \.c.o.m.m.a.n.d.0086EDD8 FA 03 0D 00 08 00 00 00 50 7B CE E4 88 29 3C 83 ........P{...)<.0086EDE8 D8 ED EA BB 00 00 03 00 00 07 00 80 00 08 01 00 ................0086EDF8 4C 04 00 52 00 00 40 00 00 00 A4 02 00 00 00 00 L..R..@.........0086EE08 58 A8 EB BB F8 A6 EB BB 98 13 EC BB 00 00 00 00 X...............0086EE18 98 FF FF FF 57 00 00 00 50 03 00 00 46 02 00 00 ....W...P...F...0086EE28 98 FF FF FF 57 00 00 00 50 03 00 00 46 02 00 00 ....W...P...F...0086EE38 3A 3D 42 7E 70 80 EB BB 00 00 00 00 60 15 EC BB :=B~p.......`...0086EE48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................0086EE58 00 00 00 00 02 00 00 00 50 A9 EB BB 1E 00 00 00 ........P.......0086EE68 00 00 00 00 21 05 0F 00 00 00 00 00 00 00 00 00 ....!...........0086EE78 05 00 00 00 00 00 00 00 AC 40 5C 00 00 00 00 00 .........@\.....0086EE88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................0086EE98 00 00 00 00 00 00 00 00 16 00 1A 00 00 01 08 00 ................0086EEA8 BC 03 05 00 01 00 00 00 50 7B CE E4 88 29 3C 83 ........P{...)<.0086EEB8 A8 EE EA BB 00 00 02 00 10 07 00 80 04 0A 00 00 ................0086EEC8 80 00 01 50 00 00 40 00 00 00 00 00 00 00 00 00 ...P..@.........00034D50 B8 6A 4A 00 FA 03 0D 00 20 3F DA 00 15 00 00 00 .jJ..... ?......00034D60 0B 0E 05 6D 00 00 00 00 00 00 00 00 A4 00 00 00 ...m............00034D70 1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034D80 88 EC 79 01 02 00 00 00 05 EE 79 01 00 00 00 00 ..y.......y.....00034D90 00 00 00 00 00 00 00 00 00 36 7A 01 10 00 00 00 .........6z.....00034DA0 01 00 00 00 FF FF FF FF 02 00 00 00 68 76 7C 01 ............hv|.00034DB0 E8 FD 31 00 00 00 00 00 50 4D 03 00 00 00 00 00 ..1.....PM......00034DC0 C8 00 01 00 43 01 AC 00 F8 EE 00 01 00 00 00 00 ....C...........00034DD0 05 00 00 00 00 00 00 00 96 00 96 00 BC 04 06 00 ................00034DE0 E0 04 06 00 BC 03 05 00 98 03 05 00 C8 03 05 00 ................00034DF0 9E 04 06 00 BA 03 05 00 01 EF 79 01 B8 03 00 00 ..........y.....00034E00 1E 00 00 00 B0 34 7A 01 00 00 00 00 05 00 00 00 .....4z.........00034E10 A0 E7 79 01 10 24 7A 01 B0 34 7A 01 00 00 00 00 ..y..$z..4z.....00034E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E40 01 01 01 01 00 00 00 00 00 9D 03 00 01 00 00 00 ................00034D50 B8 6A 4A 00 FA 03 0D 00 20 3F DA 00 15 00 00 00 .jJ..... ?......00034D60 0B 0E 05 6D 00 00 00 00 00 00 00 00 A4 00 00 00 ...m............00034D70 1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034D80 88 EC 79 01 02 00 00 00 05 EE 79 01 00 00 00 00 ..y.......y.....00034D90 00 00 00 00 00 00 00 00 00 36 7A 01 10 00 00 00 .........6z.....00034DA0 01 00 00 00 FF FF FF FF 02 00 00 00 68 76 7C 01 ............hv|.00034DB0 E8 FD 31 00 00 00 00 00 50 4D 03 00 00 00 00 00 ..1.....PM......00034DC0 C8 00 01 00 43 01 AC 00 F8 EE 00 01 00 00 00 00 ....C...........00034DD0 05 00 00 00 00 00 00 00 96 00 96 00 BC 04 06 00 ................00034DE0 E0 04 06 00 BC 03 05 00 98 03 05 00 C8 03 05 00 ................00034DF0 9E 04 06 00 BA 03 05 00 01 EF 79 01 B8 03 00 00 ..........y.....00034E00 1E 00 00 00 B0 34 7A 01 00 00 00 00 05 00 00 00 .....4z.........00034E10 A0 E7 79 01 10 24 7A 01 B0 34 7A 01 00 00 00 00 ..y..$z..4z.....00034E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E40 01 01 01 01 00 00 00 00 00 9D 03 00 01 00 00 00 ................0047F561 39 86 A4 00 00 00 75 09 6A 00 8B CE E8 E8 CC FF 9.....u.j.......0047F571 FF 8B CE E8 1F E5 FF FF 8B CE 5E E9 01 82 FF FF ..........^.....0047F581 55 8B EC 56 8B F1 8B 4E 64 C6 46 7C 00 85 C9 74 U..V...Nd.F|...t0047F591 26 FF 75 0C E8 E6 E9 FD FF 84 C0 74 1A FF 75 0C &.u........t..u.0047F5A1 8B 4E 64 FF 75 08 E8 A8 F8 FD FF 85 C0 74 08 33 .Nd.u........t.30047F5B1 C0 40 E9 78 01 00 00 8B 4D 08 53 57 E8 B8 07 FD .@.x....M.SW....0047F5C1 FF 8B 3D 68 F7 48 00 0F B7 D8 89 5D 08 83 FB 0D ..=h.H.....]....0047F5D1 0F 85 D0 00 00 00 8B 46 04 6A 1B 50 FF D7 8B 4D .......F.j.P...M0047F5E1 0C 3B C1 75 07 6A 25 E9 F8 00 00 00 39 8E 94 00 .;.u.j%.....9...0047F5F1 00 00 75 74 8B 9E 94 00 00 00 FF 15 4C F7 48 00 ..ut........L.H.0047F601 3B C3 74 4B 8B 3D 20 FF 4C 00 33 D2 8B CB E8 A9 ;.tK.= .L.3.....0047F611 07 FD FF 8B C8 E8 56 BD FB FF 8B CF 66 8B 10 66 ......V.....f..f0047F621 3B 11 75 1E 66 85 D2 74 15 66 8B 50 02 66 3B 51 ;.u.f..t.f.P.f;Q0047F631 02 75 0F 83 C0 04 83 C1 04 66 85 D2 75 DE 33 C0 .u.......f..u.3.0047F641 EB 05 1B C0 83 D8 FF 85 C0 0F 84 D7 00 00 00 8B ................0047F651 8E 94 00 00 00 8B 7E 04 68 7C 64 4A 00 33 D2 E8 ......~.h|dJ.3..0047F572 8B CE E8 1F E5 FF FF 8B CE 5E E9 01 82 FF FF 55 .........^.....U0047F582 8B EC 56 8B F1 8B 4E 64 C6 46 7C 00 85 C9 74 26 ..V...Nd.F|...t&0047F592 FF 75 0C E8 E6 E9 FD FF 84 C0 74 1A FF 75 0C 8B .u........t..u..0047F5A2 4E 64 FF 75 08 E8 A8 F8 FD FF 85 C0 74 08 33 C0 Nd.u........t.3.0047F5B2 40 E9 78 01 00 00 8B 4D 08 53 57 E8 B8 07 FD FF @.x....M.SW.....0047F5C2 8B 3D 68 F7 48 00 0F B7 D8 89 5D 08 83 FB 0D 0F .=h.H.....].....0047F5D2 85 D0 00 00 00 8B 46 04 6A 1B 50 FF D7 8B 4D 0C ......F.j.P...M.0047F5E2 3B C1 75 07 6A 25 E9 F8 00 00 00 39 8E 94 00 00 ;.u.j%.....9....0047F5F2 00 75 74 8B 9E 94 00 00 00 FF 15 4C F7 48 00 3B .ut........L.H.;0047F602 C3 74 4B 8B 3D 20 FF 4C 00 33 D2 8B CB E8 A9 07 .tK.= .L.3......0047F612 FD FF 8B C8 E8 56 BD FB FF 8B CF 66 8B 10 66 3B .....V.....f..f;0047F622 11 75 1E 66 85 D2 74 15 66 8B 50 02 66 3B 51 02 .u.f..t.f.P.f;Q.0047F632 75 0F 83 C0 04 83 C1 04 66 85 D2 75 DE 33 C0 EB u.......f..u.3..0047F642 05 1B C0 83 D8 FF 85 C0 0F 84 D7 00 00 00 8B 8E ................0047F652 94 00 00 00 8B 7E 04 68 7C 64 4A 00 33 D2 E8 58 .....~.h|dJ.3..X0047F662 07 FD FF 8B D7 EB 32 68 8B 05 00 00 8D 9E 9C 00 ......2h........004A6AB8 9C BF 47 00 4D 0A 48 00 08 F8 47 00 FC 82 44 00 ..G.M.H...G...D.004A6AC8 F7 FA 43 00 1D 09 48 00 16 C2 44 00 9A DE 45 00 ..C...H...D...E.004A6AD8 37 8A 47 00 63 07 48 00 16 07 48 00 22 00 25 00 7.G.c.H...H.".%.004A6AE8 73 00 22 00 00 00 00 00 2F 00 73 00 65 00 6C 00 s."...../.s.e.l.004A6AF8 65 00 63 00 74 00 2C 00 22 00 25 00 73 00 22 00 e.c.t.,.".%.s.".004A6B08 00 00 00 00 75 6E 6B 6E 6F 77 6E 00 28 00 25 00 ....unknown.(.%.004A6B18 64 00 25 00 25 00 29 00 20 00 25 00 73 00 00 00 d.%.%.). .%.s...004A6B28 0D 00 0A 00 3C 00 41 00 20 00 48 00 52 00 45 00 ....<.A. .H.R.E.004A6B38 46 00 3D 00 22 00 68 00 74 00 74 00 70 00 3A 00 F.=.".h.t.t.p.:.004A6B48 2F 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 /./.u.p.d.a.t.e.004A6B58 2E 00 75 00 74 00 6F 00 72 00 72 00 65 00 6E 00 ..u.t.o.r.r.e.n.004A6B68 74 00 2E 00 63 00 6F 00 6D 00 2F 00 73 00 75 00 t...c.o.m./.s.u.004A6B78 72 00 76 00 65 00 79 00 3F 00 74 00 79 00 70 00 r.v.e.y.?.t.y.p.004A6B88 65 00 3D 00 25 00 73 00 2D 00 25 00 53 00 26 00 e.=.%.s.-.%.S.&.004A6B98 68 00 3D 00 25 00 53 00 22 00 3E 00 54 00 61 00 h.=.%.S.".>.T.a.004A6BA8 6B 00 65 00 20 00 4F 00 75 00 72 00 20 00 53 00 k.e. .O.u.r. .S.0048092A 33 C0 5D C2 08 00 83 FA 02 75 07 E8 27 D1 FF FF 3.]......u..'...0048093A EB EE 83 FA FD 75 06 5D E9 3A EC FF FF 83 FA FC .....u.].:......0048094A 75 06 5D E9 5D B5 FF FF 83 FA 06 75 07 E8 8D F5 u.].]......u....0048095A FF FF EB CC 83 FA 07 75 0A FF 75 08 E8 CA ED FF .......u..u.....0048096A FF EB BD 83 FA 08 75 0A FF 75 08 E8 6B B5 FF FF ......u..u..k...0048097A EB AE 83 FA 09 75 0A FF 75 08 E8 4C EB FF FF EB .....u..u..L....0048098A 9F 83 FA 0A 75 0A FF 75 08 E8 17 B0 FF FF EB 90 ....u..u........0048099A 5D E9 C0 EB FC FF 8B 0D 8C 9B 4C 00 85 C9 74 05 ].........L...t.004809AA E9 95 F4 FF FF C3 55 8B EC 83 EC 14 56 57 8B F2 ......U.....VW..004809BA FF 76 08 8B F9 FF 15 B0 F6 48 00 83 F8 1B 74 0B .v.......H....t.004809CA 3D A9 05 00 00 75 78 6A 20 EB 6D 0F BF 46 0C 89 =....uxj .m..F..004809DA 45 EC 0F BF 46 0E 89 45 F0 8D 45 EC 50 FF 76 08 E...F..E..E.P.v.004809EA FF 15 40 F6 48 00 83 4D FC FF 8D 45 EC 50 6A 00 ..@.H..M...E.Pj.004809FA 68 39 10 00 00 FF 76 08 FF 15 D0 F6 48 00 8B 45 h9....v.....H..E00480A0A FC 85 C0 7C 31 8B 8F C0 00 00 00 8B 49 28 0F B6 ...|1.......I(..00480A1A 04 01 83 F8 15 75 04 6A 02 EB 1D 83 F8 19 75 04 .....u.j......u.004C90A0 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 ................004C90B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C90C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C90D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C90E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C90F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9100 B5 00 54 00 6F 00 72 00 72 00 65 00 6E 00 74 00 ..T.o.r.r.e.n.t.004C9110 20 00 32 00 2E 00 32 00 2E 00 31 00 20 00 28 00 .2...2...1. .(.004C9120 62 00 75 00 69 00 6C 00 64 00 20 00 32 00 35 00 b.u.i.l.d. .2.5.004C9130 33 00 30 00 32 00 29 00 20 00 00 00 00 00 00 00 3.0.2.). .......004C9140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................004C9180 B5 00 54 00 6F 00 72 00 72 00 65 00 6E 00 74 00 ..T.o.r.r.e.n.t.004C9190 20 00 32 00 2E 00 32 00 2E 00 31 00 00 00 00 00 .2...2...1.....00473DB3 5E C3 53 56 8B F1 E8 D8 B0 FD FF 8D 4E 58 C7 06 ^.SV........NX..00473DC3 B4 56 4A 00 E8 C3 E4 FD FF 33 DB 89 5E 24 88 5E .VJ......3..^$.^00473DD3 7A 89 5E 74 88 5E 7D 39 1D F4 91 4C 00 68 A4 56 z.^t.^}9...L.h.V00473DE3 4A 00 0F 95 C0 89 35 98 90 4C 00 88 46 7E 88 5E J.....5..L..F~.^00473DF3 7F C6 46 7C FF 89 9E A8 00 00 00 89 9E 84 00 00 .F|............00473E03 00 88 9E B4 00 00 00 FF 15 D0 F5 48 00 6A 01 6A ...........H.j.j00473E13 02 BA 90 56 4A 00 59 89 86 80 00 00 00 89 5E 28 ...VJ.Y.......^(00473E23 89 5E 2C 89 5E 64 89 5E 68 89 5E 6C E8 00 40 FE .^,.^d.^h.^l..@.00473E33 FF 89 86 A4 00 00 00 89 9E AC 00 00 00 89 9E B0 ................00473E43 00 00 00 E8 23 91 FC FF 8B C6 5E 5B C3 56 8B F2 ....#.....^[.V..00473E53 83 7E 08 00 57 8B F9 74 14 8B 47 2C 85 C0 74 16 .~..W..t..G,..t.00473E63 50 FF 15 50 F7 48 00 C6 46 10 01 EB 09 FF 15 4C P..P.H..F......L00473E73 F7 48 00 89 47 2C 8B CF 5F 8B D6 5E E9 F6 B9 FD .H..G,.._..^....00473E83 FF 56 8B F1 33 C0 39 46 28 74 0F 8B 4E 28 57 8B .V..3.9F(t..N(W.00473E93 39 50 50 6A 06 5A FF 57 14 5F 8B CE E8 26 B3 FD 9PPj.Z.W._...&..00473EA3 FF 5E C2 04 00 83 FA FD 75 05 E9 31 D7 FF FF 83 .^......u..1....00476304 EB 07 33 C9 E8 F1 B7 F9 FF 33 FF B9 90 B4 4C 00 ..3......3....L.00476314 E8 D2 44 01 00 A0 A0 90 4C 00 2C 02 3C 03 73 3A ..D.....L.,.<.s:00476324 8B CE E8 85 AF FF FF 84 C0 75 08 39 3D F4 91 4C .........u.9=..L00476334 00 74 27 8B CD E8 40 F1 FD FF 3B C7 74 11 83 F8 .t'...@...;.t...00476344 02 0F 94 C0 0F B6 C0 50 8B CE E8 51 E7 FF FF A1 .......P...Q....00476354 2C 59 4C 00 89 86 88 00 00 00 A1 A8 86 4C 00 5D ,YL..........L.]00476364 3B C7 74 29 50 8D 44 24 28 68 D8 5A 4A 00 50 89 ;.t)P.D$(h.ZJ.P.00476374 3D A8 86 4C 00 C7 44 24 30 01 00 00 00 C7 44 24 =..L..D$0.....D$00476384 34 30 00 00 00 E8 85 A6 FD FF 83 C4 0C B9 4C 8F 40............L.00476394 4C 00 E8 09 9B FD FF 84 C0 75 1E 38 46 7D 75 1D L........u.8F}u.004763A4 8A 46 7B 84 C0 74 16 FE C8 88 46 7B 75 0F 8B CE .F{..t....F{u...004763B4 E8 85 EB FF FF 84 C0 74 04 C6 46 7B 02 E8 1F 04 .......t..F{....004763C4 FC FF E8 92 99 FF FF 39 3D 8C 90 4C 00 74 53 FF .......9=..L.tS.004763D4 D3 2B 05 8C 90 4C 00 3D 10 27 00 00 76 44 89 3D .+...L.=.'..vD.=004763E4 8C 90 4C 00 E8 3A B3 FE FF 84 C0 74 35 33 C9 E8 ..L..:.....t53..004763F4 50 A7 FA FF BF 05 00 07 80 68 00 01 00 00 8D 94 P........h......0052E580 00 00 00 00 1C 00 00 00 04 00 00 00 25 00 00 00 ............%...0052E590 06 00 00 00 02 00 00 00 00 00 00 00 28 4E 51 00 ............(NQ.0052E5A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 FF ................0052E5B0 76 A1 A5 EA 00 01 0C FF 49 00 00 00 02 00 00 00 v.......I.......0052E5C0 94 00 00 00 15 00 00 00 08 00 00 00 1C 00 00 00 ................0052E5D0 04 00 00 00 29 00 00 00 06 00 00 00 02 00 00 00 ....)...........0052E5E0 00 00 00 00 80 72 8A 01 00 00 00 00 00 00 00 00 .....r..........0052E5F0 00 00 00 00 00 00 00 00 7F A1 A5 EA 00 01 0C FF ........ .......0052E600 94 00 00 00 02 00 00 00 D1 00 00 00 15 00 00 00 ................0052E610 09 00 00 00 1C 00 00 00 04 00 00 00 1B 00 00 00 ................0052E620 06 00 00 00 02 00 00 00 00 00 00 00 70 4E 51 00 ............pNQ.0052E630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................0052E640 08 A1 A5 EA 00 01 0C FF D1 00 00 00 02 00 00 00 ................0052E650 11 01 00 00 15 00 00 00 0A 00 00 00 1C 00 00 00 ................0052E660 04 00 00 00 1E 00 00 00 06 00 00 00 02 00 00 00 ................0052E670 00 00 00 00 88 4E 51 00 00 00 00 00 00 00 00 00 .....NQ.........005F5118 C0 03 05 00 FA 03 0D 00 40 00 01 54 00 00 00 00 ........@..T....005F5128 01 00 00 00 00 00 00 00 04 00 00 00 06 00 00 00 ................005F5138 00 00 00 00 00 00 00 00 20 71 8A 01 50 00 00 00 ........ q..P...005F5148 04 00 00 00 00 00 00 00 EE 0E 0A 05 00 00 00 00 ................005F5158 FF FF FF FF CB 01 00 00 2A 00 00 00 13 00 00 00 ........*.......005F5168 1F 03 00 00 11 00 00 00 00 00 00 00 06 00 00 00 ................005F5178 06 00 00 00 03 00 00 00 60 00 00 00 00 00 00 00 ........`.......005F5188 00 00 00 00 FF FF FF FF 02 00 00 00 00 00 00 00 ................005F5198 88 E1 5C 00 00 00 00 00 21 05 0F 00 00 00 00 00 ..\.....!.......005F51A8 00 00 00 00 00 00 00 00 0D 00 00 00 00 00 00 00 ................005F51B8 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................005F51C8 C1 5F A9 EA 00 00 0C FF 47 00 32 00 3F 14 00 00 ._......G.2.?...005F51D8 B5 3E C5 54 20 00 43 49 52 43 55 49 7E 31 2E 54 .>.T .CIRCUI~1.T005F51E8 4F 7E 00 00 8E 00 03 00 04 00 EF BE B5 3E C5 54 O~...........>.T005F51F8 B5 3E C5 54 14 00 00 00 43 00 69 00 72 00 63 00 .>.T....C.i.r.c.005F5208 75 00 69 00 74 00 73 00 5F 00 66 00 6F 00 72 00 u.i.t.s._.f.o.r.0052E570 02 00 00 00 02 00 00 00 49 00 00 00 15 00 00 00 ........I.......0052E580 00 00 00 00 1C 00 00 00 04 00 00 00 25 00 00 00 ............%...0052E590 06 00 00 00 02 00 00 00 00 00 00 00 28 4E 51 00 ............(NQ.0052E5A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 FF ................0052E5B0 76 A1 A5 EA 00 01 0C FF 49 00 00 00 02 00 00 00 v.......I.......0052E5C0 94 00 00 00 15 00 00 00 08 00 00 00 1C 00 00 00 ................0052E5D0 04 00 00 00 29 00 00 00 06 00 00 00 02 00 00 00 ....)...........0052E5E0 00 00 00 00 80 72 8A 01 00 00 00 00 00 00 00 00 .....r..........0052E5F0 00 00 00 00 00 00 00 00 7F A1 A5 EA 00 01 0C FF ........ .......0052E600 94 00 00 00 02 00 00 00 D1 00 00 00 15 00 00 00 ................0052E610 09 00 00 00 1C 00 00 00 04 00 00 00 1B 00 00 00 ................0052E620 06 00 00 00 02 00 00 00 00 00 00 00 70 4E 51 00 ............pNQ.0052E630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................0052E640 08 A1 A5 EA 00 01 0C FF D1 00 00 00 02 00 00 00 ................0052E650 11 01 00 00 15 00 00 00 0A 00 00 00 1C 00 00 00 ................0052E660 04 00 00 00 1E 00 00 00 06 00 00 00 02 00 00 00 ................005F5118 C0 03 05 00 FA 03 0D 00 40 00 01 54 00 00 00 00 ........@..T....005F5128 01 00 00 00 00 00 00 00 04 00 00 00 06 00 00 00 ................005F5138 00 00 00 00 00 00 00 00 20 71 8A 01 50 00 00 00 ........ q..P...005F5148 04 00 00 00 00 00 00 00 EE 0E 0A 05 00 00 00 00 ................005F5158 FF FF FF FF CB 01 00 00 2A 00 00 00 13 00 00 00 ........*.......005F5168 1F 03 00 00 11 00 00 00 00 00 00 00 06 00 00 00 ................005F5178 06 00 00 00 03 00 00 00 60 00 00 00 00 00 00 00 ........`.......005F5188 00 00 00 00 FF FF FF FF 02 00 00 00 00 00 00 00 ................005F5198 88 E1 5C 00 00 00 00 00 21 05 0F 00 00 00 00 00 ..\.....!.......005F51A8 00 00 00 00 00 00 00 00 0D 00 00 00 00 00 00 00 ................005F51B8 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................005F51C8 C1 5F A9 EA 00 00 0C FF 47 00 32 00 3F 14 00 00 ._......G.2.?...005F51D8 B5 3E C5 54 20 00 43 49 52 43 55 49 7E 31 2E 54 .>.T .CIRCUI~1.T005F51E8 4F 7E 00 00 8E 00 03 00 04 00 EF BE B5 3E C5 54 O~...........>.T005F51F8 B5 3E C5 54 14 00 00 00 43 00 69 00 72 00 63 00 .>.T....C.i.r.c.005F5208 75 00 69 00 74 00 73 00 5F 00 66 00 6F 00 72 00 u.i.t.s._.f.o.r.005FB060 BA 03 05 00 FA 03 0D 00 09 12 31 50 20 00 00 00 ..........1P ...005FB070 01 00 00 00 00 00 00 00 04 02 00 00 06 00 00 00 ................005FB080 00 00 00 00 44 08 00 00 01 00 00 00 00 00 00 00 ....D...........005FB090 12 00 00 00 30 44 01 00 04 02 00 00 EE 0E 0A 05 ....0D..........005FB0A0 FF FF FF 00 00 00 00 00 00 00 00 FF 00 00 00 FF ................005FB0B0 00 00 00 FF 90 0E 10 82 00 00 51 00 0D 00 00 00 ..........Q.....005FB0C0 05 00 00 00 0C 00 00 00 FF FF FF FF FF FF FF FF ................005FB0D0 FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 ................005FB0E0 1B 03 00 00 11 01 00 00 00 00 00 00 00 00 00 00 ................005FB0F0 00 00 00 00 00 00 00 00 00 00 00 00 B6 03 05 00 ................005FB100 FF FF FF FF 00 00 00 00 00 00 00 00 F8 D4 5C 00 ..............\.005FB110 10 00 00 00 10 00 00 00 00 00 00 00 60 00 00 00 ............`...005FB120 11 00 00 00 00 00 00 00 2B 00 00 00 2B 00 00 00 ........+...+...005FB130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................005FB140 00 00 00 00 00 00 00 00 FF FF FF 7F 00 00 00 00 ........... ....005FB150 00 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................00034D50 B8 6A 4A 00 FA 03 0D 00 20 3F DA 00 15 00 00 00 .jJ..... ?......00034D60 0B 0E 05 6D 00 00 00 00 00 00 00 00 A4 00 00 00 ...m............00034D70 1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034D80 88 EC 79 01 02 00 00 00 05 EE 79 01 00 00 00 00 ..y.......y.....00034D90 00 00 00 00 00 00 00 00 00 36 7A 01 10 00 00 00 .........6z.....00034DA0 01 00 00 00 FF FF FF FF 02 00 00 00 68 76 7C 01 ............hv|.00034DB0 E8 FD 31 00 00 00 00 00 50 4D 03 00 00 00 00 00 ..1.....PM......00034DC0 C8 00 01 00 43 01 AC 00 F8 EE 00 01 00 00 00 00 ....C...........00034DD0 05 00 00 00 00 00 00 00 96 00 96 00 BC 04 06 00 ................00034DE0 E0 04 06 00 BC 03 05 00 98 03 05 00 C8 03 05 00 ................00034DF0 9E 04 06 00 BA 03 05 00 01 EF 79 01 B8 03 00 00 ..........y.....00034E00 1E 00 00 00 B0 34 7A 01 00 00 00 00 05 00 00 00 .....4z.........00034E10 A0 E7 79 01 10 24 7A 01 B0 34 7A 01 00 00 00 00 ..y..$z..4z.....00034E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E40 01 01 01 01 00 00 00 00 00 9D 03 00 01 00 00 00 ................00034DB8 50 4D 03 00 00 00 00 00 C8 00 01 00 43 01 AC 00 PM..........C...00034DC8 F8 EE 00 01 00 00 00 00 05 00 00 00 00 00 00 00 ................00034DD8 96 00 96 00 BC 04 06 00 E0 04 06 00 BC 03 05 00 ................00034DE8 98 03 05 00 C8 03 05 00 9E 04 06 00 BA 03 05 00 ................00034DF8 01 EF 79 01 B8 03 00 00 1E 00 00 00 B0 34 7A 01 ..y..........4z.00034E08 00 00 00 00 05 00 00 00 A0 E7 79 01 10 24 7A 01 ..........y..$z.00034E18 B0 34 7A 01 00 00 00 00 00 00 00 00 00 00 00 00 .4z.............00034E28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E38 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 ................00034E48 00 9D 03 00 01 00 00 00 00 00 00 00 00 00 00 00 ................00034E58 E0 F4 79 01 00 00 00 00 01 00 00 00 14 66 4A 00 ..y..........fJ.00034E68 94 03 00 00 B0 0B 00 00 7C 03 00 00 80 03 00 00 ........|.......00034E78 B8 6F 8A 01 FF FF FF FF 00 00 00 00 00 00 00 00 .o..............00034E88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00034E98 00 00 00 00 05 3A 63 74 04 00 2B 00 19 01 0D 00 .....:ct..+.....00034EA8 70 61 63 6B 61 67 65 73 2F 6F 62 6A 65 63 74 2E packages/object.00478A48 A1 08 3B 4C 00 85 C0 75 08 39 05 2C AD 4B 00 74 ..;L...u.9.,.K.t00478A58 5A 56 33 F6 80 BE 72 AE 4B 00 03 75 42 FF 05 68 ZV3...r.K..uB..h00478A68 9B 4C 00 83 3D 68 9B 4C 00 07 6A 0B 59 7E 07 83 .L..=h.L..j.Y~..00478A78 25 68 9B 4C 00 00 85 C0 74 09 8B 0D 68 9B 4C 00 %h.L....t...h.L.00478A88 83 C1 1B 51 FF B6 80 AE 4B 00 8B 8F C4 00 00 00 ...Q....K.......00478A98 E8 9B 82 FD FF A1 08 3B 4C 00 A3 2C AD 4B 00 83 .......;L..,.K..00478AA8 C6 18 81 FE 68 01 00 00 72 AA 5E B0 01 5F C2 04 ....h...r.^.._..00478AB8 00 8B 41 10 85 C0 74 0F 8B 40 28 85 C0 74 08 52 ..A...t..@(..t.R00478AC8 8B C8 E8 B3 54 FF FF C3 56 8B F1 80 7E 04 00 74 ....T...V...~..t00478AD8 07 8B 0E E8 1E BA FC FF 83 26 00 5E C3 56 8B F1 .........&.^.V..00478AE8 E8 AE 82 FD FF F6 44 24 08 01 74 07 56 E8 D1 BA ......D$..t.V...00478AF8 FC FF 59 8B C6 5E C2 04 00 55 8B EC 56 57 FF 75 ..Y..^...U..VW.u00478B08 24 8B F1 FF 75 10 FF 75 1C FF 75 18 FF 75 08 E8 $...u..u..u..u..00478B18 98 E9 FF FF FF 75 24 33 FF 8D 4E 20 C7 06 B0 43 .....u$3..N ...C00478B28 4A 00 89 7E 1C E8 49 87 FA FF FF 75 14 89 7E 2C J..~..I....u..~,00478B38 89 7E 30 C6 46 34 01 8D 4E 40 89 7E 38 E8 5E C8 .~0.F4..N@.~8.^.All Threads:2696 7C810705 kernel32.dll!CreateThread+0x2e1552 7C8106F9 kernel32.dll!CreateThread+0x222256 7C8106F9 kernel32.dll!CreateThread+0x221072 7C8106F9 kernel32.dll!CreateThread+0x223024 7C8106F9 kernel32.dll!CreateThread+0x222660 7C8106F9 kernel32.dll!CreateThread+0x22928 7C8106F9 kernel32.dll!CreateThread+0x222992 7C8106F9 kernel32.dll!CreateThread+0x223176 7C8106F9 kernel32.dll!CreateThread+0x222872 7C8106F9 kernel32.dll!CreateThread+0x222196 7C8106F9 kernel32.dll!CreateThread+0x223248 7C8106F9 kernel32.dll!CreateThread+0x221820 7C8106F9 kernel32.dll!CreateThread+0x223564 7C8106F9 kernel32.dll!CreateThread+0x221652 7C8106F9 kernel32.dll!CreateThread+0x222772 7C8106F9 kernel32.dll!CreateThread+0x221736 7C8106F9 kernel32.dll!CreateThread+0x223712 7C8106F9 kernel32.dll!CreateThread+0x22548 7C8106F9 kernel32.dll!CreateThread+0x221912 7C8106F9 kernel32.dll!CreateThread+0x223964 7C8106F9 kernel32.dll!CreateThread+0x22_________________________________________________________________________________Logfile of Trend Micro HijackThis v2.0.4Scan saved at 8:11:09 PM, on 5/23/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\agrsmsvc.exeC:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Anti-Virus\fsgk32st.exeC:\Program Files\F-Secure\Technology Preview\fshoster32.exeC:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Anti-Virus\FSGK32.EXEC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Common\FSMA32.EXEC:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Anti-Virus\fssm32.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exeC:\Program Files\WordWeb\wweb32.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Common\FSM32.EXEC:\Program Files\F-Secure\Technology Preview\fshoster32.exeC:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\FWES\Program\fsdfwd.exeC:\DOCUME~1\JOHN~1\LOCALS~1\Temp\RtkBtMnt.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\uTorrent\uTorrent.exeC:\Documents and Settings\John Smith\Desktop\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://securityresponse.symantec.com/avcenter/fix_homepage/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://securityresponse.symantec.com/avcenter/fix_homepage/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.comR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files\KeyScrambler\KeyScramblerIE.dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dllO2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\F-Secure\Technology Preview\apps\OnlineSafety\BPP\iescript\BaseLitmus.dllO2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dllO3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\F-Secure\Technology Preview\apps\OnlineSafety\BPP\iescript\BaseLitmus.dllO4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXEO4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exeO4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"O4 - HKLM\..\Run: [WordWeb] "C:\Program Files\WordWeb\wweb32.exe" -startupO4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Common\FSM32.EXE" /splashO4 - HKLM\..\Run: [F-Secure Hoster] "C:\Program Files\F-Secure\Technology Preview\fshoster32.exe" -app -hosterid:1O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -schedulerO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')O4 - HKUS\S-1-5-18\..\RunOnce: [KeyScrambler] C:\Program Files\KeyScrambler\getting_started.html (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')O4 - HKUS\.DEFAULT\..\RunOnce: [KeyScrambler] C:\Program Files\KeyScrambler\getting_started.html (User 'Default user')O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htmO8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htmO8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htmO8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htmO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000O8 - Extra context menu item: Se&nd to OneNote - res:///105O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htmO9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dllO9 - Extra 'Tools' menuitem: &KeyScrambler... - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO10 - Unknown file in Winsock LSP: c:\program files\f-secure\technology preview\apps\onlinesafety\fscc\fscclsp.dllO10 - Unknown file in Winsock LSP: c:\program files\f-secure\technology preview\apps\onlinesafety\fscc\fscclsp.dllO10 - Unknown file in Winsock LSP: c:\program files\f-secure\technology preview\apps\onlinesafety\fscc\fscclsp.dllO10 - Unknown file in Winsock LSP: c:\program files\f-secure\technology preview\apps\onlinesafety\fscc\fscclsp.dllO10 - Unknown file in Winsock LSP: c:\program files\f-secure\technology preview\apps\onlinesafety\fscc\fscclsp.dllO22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dllO23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exeO23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeO23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Anti-Virus\fsgk32st.exeO23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\FWES\Program\fsdfwd.exeO23 - Service: F-Secure Dll Hoster (fshoster) - F-Secure Corporation - C:\Program Files\F-Secure\Technology Preview\fshoster32.exeO23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Technology Preview\apps\ComputerSecurity\Common\FSMA32.EXEO23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\F-Secure\Technology Preview\apps\CCF_Reputation\fsorsp.exeO23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exeO23 - Service: McAfee Personal Firewall Service (McMPFSvc) - Unknown owner - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (file missing)O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - Unknown owner - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (file missing)O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe--End of file - 10858 bytes Link to comment Share on other sites More sharing options...
GTHK Posted May 23, 2011 Report Share Posted May 23, 2011 Well I don't know assembly yet but from some quick wikipedia to confirm that EIP points to the current instruction, that weird log says the hang is in the kernel. I don't know the current status of the UDP bugs in Win7, some fixed and others not so fixed afaik. Either that or firewall/av software. Nuke all the rules in fsecure. If you have more then one av/firewall that runs actively nuke all of them and reinstall only one active scanning pair. Windows update, and manual go over of the device manager and check for driver updates at the manufacturers site, particularly hard drive and networking hardware. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.