ComboFix 11-06-07.02 - Mortillaro 08/06/2011 11.25.24.1.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.2.1252.39.1040.18.1023.549 [GMT 2:00]
Eseguito da: e:\documenti\Downloads\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {0012F2B4-5AF1-7C92-0300-000000000000}
FW: ZoneAlarm Firewall *Disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Menu Avvio\Programmi\OfferBox Browser.lnk
c:\documents and settings\Mortillaro\Dati applicazioni\OfferBox
c:\documents and settings\Mortillaro\Dati applicazioni\OfferBox\config.dat
c:\documents and settings\Mortillaro\Dati applicazioni\OfferBox\config.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\1.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\a.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\b.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\c.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\d.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\e.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\f.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\g.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\h.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\i.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\J.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\k.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\l.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\m.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\mru.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\n.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\o.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\p.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\q.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\r.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\s.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\t.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\u.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\v.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\w.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\x.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\y.xml
c:\documents and settings\Mortillaro\Dati applicazioni\PriceGong\Data\z.xml
c:\programmi\OfferBox
c:\programmi\OfferBox\OfferBox.exe
c:\programmi\OfferBox\OfferBoxChromeExtension.crx
c:\programmi\OfferBox\OfferBoxEngine.dll
c:\programmi\OfferBox\offerboxffx@offerbox.com\chrome.manifest
c:\programmi\OfferBox\offerboxffx@offerbox.com\chrome\content\events.js
c:\programmi\OfferBox\offerboxffx@offerbox.com\chrome\content\overlay.xul
c:\programmi\OfferBox\offerboxffx@offerbox.com\components\OfferBoxXpCom.dll
c:\programmi\OfferBox\offerboxffx@offerbox.com\components\OfferBoxXpCom.xpt
c:\programmi\OfferBox\offerboxffx@offerbox.com\install.rdf
c:\programmi\OfferBox\OfferBoxLauncher.exe
c:\programmi\OfferBox\res\language.xml
c:\programmi\OfferBox\res\loader.gif
c:\programmi\OfferBox\uninst.exe
c:\windows\command.com
c:\windows\command\Regdelw.exe
c:\windows\ISUN0410.EXE
c:\windows\system\MSLS31.DLL
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\key_index.dat
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\known.met
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\known2_64.met
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\load_index.dat
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\queries-00.cache
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\queries-01.cache
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\queries-02.cache
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\queries-03.cache
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\queries-04.cache
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\queries-06.cache
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\queries-07.cache
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\server.met
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\server_met.old
c:\windows\system32\config\systemprofile\Impostazioni locali\Dati applicazioni\Windows Internet Name Service\src_index.dat
c:\windows\system32\install.exe
.
.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MYWEBSEARCHSERVICE
-------\Legacy_WINDOWS_INTERNET_NAME_SERVICE
.
.
((((((((((((((((((((((((( Files Creati Da 2011-05-08 al 2011-06-08 )))))))))))))))))))))))))))))))))))
.
.
2011-06-05 05:44 . 2011-06-05 05:44 -------- d-----w- c:\documents and settings\Mortillaro\Impostazioni locali\Dati applicazioni\ConduitEngine
2011-06-05 05:44 . 2011-06-05 05:44 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-06-05 05:44 . 2011-06-05 05:44 -------- d-----w- c:\programmi\ConduitEngine
2011-05-25 11:30 . 2011-05-25 11:30 -------- d-----w- c:\documents and settings\Mortillaro\Impostazioni locali\Dati applicazioni\Aleph_Informatica
2011-05-25 10:08 . 2011-05-25 10:08 -------- d-----w- c:\programmi\DVD Juris data
2011-05-22 07:39 . 2011-06-05 10:55 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-21 06:02 . 2011-05-21 06:02 -------- d-----w- c:\programmi\Smart File Advisor
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-16 23:21 . 2011-01-02 11:26 137656 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-04-03 12:42 . 2011-04-03 12:42 388096 ----a-r- c:\documents and settings\Mortillaro\Dati applicazioni\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-11-27 11:19 . 2010-11-27 11:19 5470720 ----a-w- c:\programmi\SharePod.exe
2001-10-31 06:17 . 2006-09-16 10:37 224768 ----a-w- c:\programmi\EuroConv.exe
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}"= "c:\programmi\uTorrentBar_IT\prxtbuTo2.dll" [2011-03-28 176936]
.
[HKEY_CLASSES_ROOT\clsid\{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-04-03 08:27 254760 ----a-w- c:\documents and settings\Mortillaro\Impostazioni locali\Dati applicazioni\ConduitEngine\ldrConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}]
2011-03-28 16:22 176936 ----a-w- c:\programmi\uTorrentBar_IT\prxtbuTo2.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}"= "c:\programmi\uTorrentBar_IT\prxtbuTo2.dll" [2011-03-28 176936]
.
[HKEY_CLASSES_ROOT\clsid\{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{4AE0C3D6-F713-4EED-BC65-25DC3FFDAAC1}"= "c:\programmi\uTorrentBar_IT\prxtbuTo2.dll" [2011-03-28 176936]
.
[HKEY_CLASSES_ROOT\clsid\{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DIRECTX"="REGEDIT" [X]
"swg"="c:\programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-09-03 39408]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Tweak UI"="TWEAKUI.CPL" [2000-10-09 108744]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-06-08 29696]
"ZoneAlarm Client"="c:\programmi\Zone Labs\ZoneAlarm\zlclient.exe" [2008-07-09 919016]
"avgnt"="c:\programmi\Avira\AntiVir Desktop\avgnt.exe" [2010-09-01 281768]
"TkBellExe"="c:\programmi\Real\RealPlayer\update\realsched.exe" [2011-02-18 273544]
"SoundMan"="SOUNDMAN.EXE" [2005-04-15 77824]
"Smart File Advisor"="c:\programmi\Smart File Advisor\sfa.exe" [2011-04-04 280824]
"Google Quick Search Box"="c:\programmi\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2011-05-22 126976]
.
c:\documents and settings\Mortillaro\Menu Avvio\Programmi\Esecuzione automatica\
MemInfo.lnk - c:\programmi\MemInfo\meminfo.exe [2006-6-23 614400]
.
c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
MemInfo.lnk - c:\programmi\MemInfo\meminfo.exe [2006-6-23 614400]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Alice ti aiuta.lnk]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^McAfee Security Scan Plus.lnk]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Mortillaro^Menu Avvio^Programmi^Esecuzione automatica^LimeWire On Startup.lnk]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 17:37 932288 ----a-w- c:\programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-18 06:58 40368 ----a-w- c:\programmi\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AliceRE_McciTrayApp]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
2009-05-20 20:01 177472 ----a-w- c:\programmi\File comuni\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Quick Search Box]
2011-05-22 08:02 126976 ----a-w- c:\programmi\Google\Quick Search Box\GoogleQuickSearchBox.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark 2200 Series]
2004-02-13 13:27 57344 ----a-w- c:\programmi\Lexmark 2200 Series\lxbvbmgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Motive SmartBridge]
2006-04-21 13:41 438359 ----a-w- c:\progra~1\ALICET~1\SMARTB~1\MotiveSB.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-05-26 15:18 413696 ----a-w- c:\programmi\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-01-11 13:21 246504 ----a-w- c:\programmi\File comuni\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-09-03 18:54 39408 ----a-w- c:\programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2011-03-26 12:49 399736 ----a-w- c:\documents and settings\All Users\Menu Avvio\Programmi\VIDEO\uTorrent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\System32\\fxsclnt.exe"=
"c:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"c:\\Documents and Settings\\All Users\\Menu Avvio\\Programmi\\VIDEO\\uTorrent.exe"=
.
R0 m5289;m5289;c:\windows\system32\drivers\m5289.sys [16/03/2005 10.37.00 52480]
R0 uliagpkx;ULi AGP Bus Filter Driver v2.20 WHQL;c:\windows\system32\drivers\AGPKX.SYS [08/03/2006 19.11.26 45056]
R2 Network WanMiniport First Position;Network WanMiniport First Position;c:\programmi\Telecom Italia\WanMiniport1st\srvany.exe [03/09/2009 21.02.19 8192]
R3 ip100xp;IC Plus IP100 10/100 Fast Ethernet Adapter NT Driver;c:\windows\system32\drivers\ipfnd51.sys [08/03/2006 19.12.40 26752]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13.16.28 130384]
S2 gupdate;Servizio di Google Update (gupdate);c:\programmi\Google\Update\GoogleUpdate.exe [31/12/2010 5.33.57 135664]
S3 gupdatem;Servizio Google Update (gupdatem);c:\programmi\Google\Update\GoogleUpdate.exe [31/12/2010 5.33.57 135664]
S3 MTK;Media Technology Kernel Driver;c:\windows\system32\drivers\FIDE.SYS [15/09/2006 12.36.26 14601]
S3 pbfilter;pbfilter;c:\programmi\PeerBlock\pbfilter.sys [02/03/2011 16.56.32 19056]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13.16.28 753504]
.
Contenuto della cartella 'Scheduled Tasks'
.
2009-09-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
2011-04-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cc048f7763169e.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2010-12-31 03:33]
.
2011-06-07 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-746137067-606747145-839522115-1003.job
- c:\programmi\Real\RealUpgrade\realupgrade.exe [2011-01-24 12:25]
.
2011-06-07 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-746137067-606747145-839522115-1003.job
- c:\programmi\Real\RealUpgrade\realupgrade.exe [2011-01-24 12:25]
.
.
------- Scansione supplementare -------
.
uStart Page =
hxxp://www.wordart.it/uSearch Page =
hxxp://www.GOOGLE.ituSearchMigratedDefaultURL =
hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uWindow Title = Wordart - The Universal Portal
uDefault_Page_URL =
hxxp://www.wordart.itmWindow Title = Wordart
mSearch Bar =
hxxp://www.google.com/ieuInternet Settings,ProxyOverride = 127.0.0.1;*.local
uSearchAssistant =
hxxp://www.google.com/ieuSearchURL,(Default) =
hxxp://www.google.com/search?q=%s
mSearchAssistant =
hxxp://www.GOOGLE.itmCustomizeSearch =
hxxp://www.GOOGLE.itIE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\Mortillaro\Dati applicazioni\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Google Sidewiki... - c:\programmi\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
DPF: Microsoft XML Parser for Java
.
- - - - CHIAVI ORFANE RIMOSSE - - - -
.
URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-Ordina_Menu - c:\windows\command\Regdelw.exe
HKCU-Run-ORDINA_MENU2 - c:\windows\command\Regdelw.exe
AddRemove-OfferBox Browser - c:\programmi\OfferBox\uninst.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2011-06-08 11:32
Windows 5.1.2600 Service Pack 2 FAT NTAPI
.
scansione processi nascosti ...
.
scansione entrate autostart nascoste ...
.
Scansione files nascosti ...
.
Scansione completata con successo
Files nascosti: 0
.
**************************************************************************
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------
.
- - - - - - - > 'winlogon.exe'(588)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2352)
c:\windows\system32\msi.dll
c:\programmi\Google\Quick Search Box\bin\1.2.1151.245\qsb.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\programmi\Avira\AntiVir Desktop\sched.exe
c:\programmi\Avira\AntiVir Desktop\avguard.exe
c:\programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\programmi\Bonjour\mDNSResponder.exe
c:\programmi\Avira\AntiVir Desktop\avshadow.exe
c:\programmi\Java\jre6\bin\jqs.exe
c:\programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\programmi\CDBurnerXP\NMSAccessU.exe
c:\programmi\Telecom Italia\WanMiniport1st\WanMiniport1st_srv.exe
c:\programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\fxssvc.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\SOUNDMAN.EXE
c:\programmi\Internet Explorer\iexplore.exe
c:\programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
.
**************************************************************************
.
Ora fine scansione: 2011-06-08 11:35:20 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2011-06-08 09:35
.
Pre-Run: 402.227.200 byte disponibili
Post-Run: 273.678.336 byte disponibili
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /nodebug
C:\="Microsoft Windows 98se"
.
- - End Of File - - A60B1B57DB5A4C09DA1C110029BB01A9