ComboFix 11-01-19.03 - Jirka 28.09.2006 7:12.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.447.84 [GMT 2:00]
Spuštěný z: h:\documents and settings\Jirka\Plocha\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: ActiveArmor Firewall *Disabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
h:\documents and settings\Jirka\Plocha\[Torrentreactor.to] - Stargate Universe S02E04 Pathogen HDTV XviD FQM.torrent
h:\windows\system\winspool.drv
h:\windows\system32\AutoRun.inf
h:\windows\system32\ieuinit.inf
h:\windows\system32\sshnas21.dll
h:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
Nakažená kopie h:\windows\system32\msgsvc.dll byla nalezena a vyléčena.
Obnovena kopie z - h:\windows\ServicePackFiles\i386\msgsvc.dll
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_SSHNAS
-------\Service_SSHNAS
((((((((((((((((((((((((( Soubory vytvořené od 2006-08-28 do 2006-09-28 )))))))))))))))))))))))))))))))
.
2011-01-10 11:36 . 2011-01-10 11:36 -------- d-----w- H:\Datasoft
2010-12-27 19:24 . 2010-12-27 19:24 -------- d-----w- h:\docume~1\Jirka\DATAAP~2
2010-09-18 07:43 . 2010-09-18 12:21 -------- d-----w- H:\Fraps
2010-08-19 17:00 . 2010-08-19 17:00 -------- d-----w- H:\totalcmd
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-09 14:52 . 2006-03-02 12:00 249856 ----a-w- h:\windows\system32\odbc32.dll
2010-11-05 05:02 . 2006-03-02 12:00 668160 ----a-w- h:\windows\system32\wininet.dll
2010-11-05 05:02 . 2006-03-02 12:00 81920 ----a-w- h:\windows\system32\ieencode.dll
2010-11-05 05:02 . 2006-03-02 12:00 61952 ----a-w- h:\windows\system32\tdc.ocx
2010-11-05 05:02 . 2006-03-02 12:00 1510912 ----a-w- h:\windows\system32\shdocvw.dll
2010-11-05 04:59 . 2006-03-02 12:00 370176 ----a-w- h:\windows\system32\html.iec
2010-11-02 15:17 . 2006-03-02 12:00 40960 ----a-w- h:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:09 . 2006-03-02 12:00 290048 ----a-w- h:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2006-03-02 12:00 1853312 ----a-w- h:\windows\system32\win32k.sys
2010-09-18 10:23 . 2006-03-02 12:00 974848 ----a-w- h:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2006-03-02 12:00 974848 ----a-w- h:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2006-03-02 12:00 954368 ----a-w- h:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2006-03-02 12:00 953856 ----a-w- h:\windows\system32\mfc40u.dll
2010-08-27 08:03 . 2006-03-02 12:00 119808 ----a-w- h:\windows\system32\t2embed.dll
2010-08-27 05:54 . 2006-03-02 12:00 99840 ----a-w- h:\windows\system32\srvsvc.dll
2010-08-26 13:39 . 2006-03-02 12:00 357248 ----a-w- h:\windows\system32\drivers\srv.sys
2010-08-23 16:12 . 2006-03-02 12:00 617472 ----a-w- h:\windows\system32\comctl32.dll
2010-08-17 13:17 . 2006-03-02 12:00 58880 ----a-w- h:\windows\system32\spoolsv.exe
2010-08-16 08:45 . 2006-03-02 12:00 590848 ----a-w- h:\windows\system32\rpcrt4.dll
2010-07-27 06:30 . 2006-03-02 12:00 8466432 ----a-w- h:\windows\system32\shell32.dll
2010-07-16 12:00 . 2006-03-02 12:00 1287680 ----a-w- h:\windows\system32\ole32.dll
2010-06-30 12:33 . 2006-03-02 12:00 149504 ----a-w- h:\windows\system32\schannel.dll
2010-06-18 17:47 . 2006-03-02 12:00 293376 ----a-w- h:\windows\system32\winsrv.dll
2010-06-17 14:03 . 2006-03-02 12:00 80384 ----a-w- h:\windows\system32\iccvid.dll
2010-06-15 16:18 . 2006-03-02 12:00 143422 ----a-w- h:\windows\system32\l3codecx.ax
2010-06-14 14:31 . 2010-08-18 05:25 744448 ----a-w- h:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-14 07:43 . 2006-03-02 12:00 1172480 ----a-w- h:\windows\system32\msxml3.dll
2010-04-28 18:15 . 2006-03-02 12:00 2192128 ----a-w- h:\windows\system32\ntoskrnl.exe
2010-04-28 05:45 . 2004-08-17 15:45 2068992 ----a-w- h:\windows\system32\ntkrnlpa.exe
2010-04-16 15:38 . 2006-03-02 12:00 406016 ----a-w- h:\windows\system32\usp10.dll
2010-03-29 22:52 . 2006-03-02 12:00 262416 ----a-w- h:\windows\system32\mpg4ds32.ax
2010-03-09 11:11 . 2006-03-02 12:00 430080 ----a-w- h:\windows\system32\vbscript.dll
2010-03-05 14:42 . 2006-03-02 12:00 65536 ----a-w- h:\windows\system32\asycfilt.dll
2010-02-24 13:11 . 2006-03-02 12:00 455680 ----a-w- h:\windows\system32\drivers\mrxsmb.sys
2010-02-12 04:35 . 2006-03-02 12:00 100864 ----a-w- h:\windows\system32\6to4svc.dll
2010-02-11 12:02 . 2006-03-02 12:00 226880 ----a-w- h:\windows\system32\drivers\tcpip6.sys
2010-02-05 18:27 . 2006-03-02 12:00 1294336 ----a-w- h:\windows\system32\quartz.dll
2010-01-29 14:45 . 2006-03-02 12:00 307260 ----a-w- h:\windows\system32\l3codeca.acm
2010-01-13 14:02 . 2006-03-02 12:00 86016 ----a-w- h:\windows\system32\cabview.dll
2009-12-24 07:04 . 2006-03-02 12:00 177664 ----a-w- h:\windows\system32\wintrust.dll
2009-12-14 07:10 . 2006-03-02 12:00 33280 ----a-w- h:\windows\system32\csrsrv.dll
2009-12-08 09:25 . 2006-03-02 12:00 474112 ----a-w- h:\windows\system32\shlwapi.dll
2009-11-27 17:14 . 2004-08-17 15:49 17920 ----a-w- h:\windows\system32\msyuv.dll
2009-11-27 16:09 . 2006-03-02 12:00 28672 ----a-w- h:\windows\system32\msvidc32.dll
2009-11-27 16:09 . 2001-10-24 12:25 8704 ----a-w- h:\windows\system32\tsbyuv.dll
2009-11-27 16:09 . 2006-03-02 12:00 84992 ----a-w- h:\windows\system32\avifil32.dll
2009-11-27 16:09 . 2006-03-02 12:00 11264 ----a-w- h:\windows\system32\msrle32.dll
2009-11-27 16:09 . 2004-08-17 15:49 48128 ----a-w- h:\windows\system32\iyuv_32.dll
2009-11-21 16:03 . 2006-03-02 12:00 471552 ----a-w- h:\windows\apppatch\aclayers.dll
2009-10-21 05:40 . 2006-03-02 12:00 75776 ----a-w- h:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2006-03-02 12:00 25088 ----a-w- h:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2006-03-02 12:00 265728 ----a-w- h:\windows\system32\drivers\http.sys
2009-10-15 16:32 . 2006-03-02 12:00 81920 ----a-w- h:\windows\system32\fontsub.dll
2009-10-13 10:34 . 2006-03-02 12:00 271360 ----a-w- h:\windows\system32\oakley.dll
2009-10-12 13:40 . 2006-03-02 12:00 79872 ----a-w- h:\windows\system32\raschap.dll
2009-10-12 13:40 . 2006-03-02 12:00 150016 ----a-w- h:\windows\system32\rastls.dll
2009-09-11 14:19 . 2006-03-02 12:00 136192 ----a-w- h:\windows\system32\msv1_0.dll
2009-09-04 21:05 . 2006-03-02 12:00 58880 ----a-w- h:\windows\system32\msasn1.dll
2009-09-01 14:47 . 2006-03-02 12:00 282654 ----a-w- h:\windows\system32\msaud32.acm
2009-08-26 08:02 . 2006-03-02 12:00 247326 ----a-w- h:\windows\system32\strmdll.dll
2009-08-25 09:19 . 2006-03-02 12:00 354816 ----a-w- h:\windows\system32\winhttp.dll
2009-08-06 17:24 . 2006-03-02 12:00 96480 ----a-w- h:\windows\system32\cdm.dll
2009-08-05 09:01 . 2006-03-02 12:00 205312 ----a-w- h:\windows\system32\mswebdvd.dll
2009-07-17 19:04 . 2006-03-02 12:00 58880 ----a-w- h:\windows\system32\atl.dll
2009-07-17 16:17 . 2006-03-02 12:00 1437696 ----a-w- h:\windows\system32\query.dll
2009-07-12 10:21 . 2006-03-02 12:00 233472 ----a-w- h:\windows\system32\wmpdxm.dll
2009-06-25 08:27 . 2006-03-02 12:00 729088 ----a-w- h:\windows\system32\lsasrv.dll
2009-06-25 08:27 . 2006-03-02 12:00 56832 ----a-w- h:\windows\system32\secur32.dll
2009-06-25 08:27 . 2006-03-02 12:00 54272 ----a-w- h:\windows\system32\wdigest.dll
2009-06-25 08:27 . 2006-03-02 12:00 301568 ----a-w- h:\windows\system32\kerberos.dll
2009-06-24 11:18 . 2006-03-02 12:00 92928 ----a-w- h:\windows\system32\drivers\ksecdd.sys
2009-06-15 10:45 . 2006-03-02 12:00 78336 ----a-w- h:\windows\system32\telnet.exe
2009-06-10 06:16 . 2006-03-02 12:00 132096 ----a-w- h:\windows\system32\wkssvc.dll
2009-05-07 15:33 . 2006-03-02 12:00 346624 ----a-w- h:\windows\system32\localspl.dll
2009-04-01 21:02 . 2006-03-02 12:00 604160 ----a-w- h:\windows\system32\wmspdmod.dll
2009-03-06 14:23 . 2006-03-02 12:00 284160 ----a-w- h:\windows\system32\pdh.dll
2009-02-09 11:25 . 2006-03-02 12:00 111104 ----a-w- h:\windows\system32\services.exe
2009-02-09 10:56 . 2006-03-02 12:00 401408 ----a-w- h:\windows\system32\rpcss.dll
2009-02-09 10:56 . 2006-03-02 12:00 709632 ----a-w- h:\windows\system32\ntdll.dll
2009-02-09 10:56 . 2006-03-02 12:00 684032 ----a-w- h:\windows\system32\advapi32.dll
2009-02-06 10:39 . 2006-03-02 12:00 35328 ----a-w- h:\windows\system32\sc.exe
2008-10-23 12:42 . 2006-03-02 12:00 286720 ----a-w- h:\windows\system32\gdi32.dll
2008-08-14 10:04 . 2006-03-02 12:00 138496 ----a-w- h:\windows\system32\drivers\afd.sys
2008-07-07 20:29 . 2006-03-02 12:00 253952 ----a-w- h:\windows\system32\es.dll
2008-06-24 16:44 . 2006-03-02 12:00 74240 ----a-w- h:\windows\system32\mscms.dll
2008-06-20 17:49 . 2006-03-02 12:00 247296 ----a-w- h:\windows\system32\mswsock.dll
2008-06-20 11:51 . 2006-03-02 12:00 361600 ----a-w- h:\windows\system32\drivers\tcpip.sys
2008-06-18 03:03 . 2006-03-02 12:00 938496 ----a-w- h:\windows\system32\WMNetmgr.dll
2008-06-17 23:09 . 2006-03-02 12:00 100864 ----a-w- h:\windows\system32\logagent.exe
2008-06-12 14:24 . 2006-03-02 12:00 66560 ----a-w- h:\windows\system32\mtxclu.dll
2008-05-09 23:26 . 2006-03-02 12:00 135168 ----a-w- h:\windows\system32\wshom.ocx
2008-05-09 10:56 . 2006-03-02 12:00 90112 ----a-w- h:\windows\system32\wshext.dll
2008-05-09 10:56 . 2006-03-02 12:00 180224 ----a-w- h:\windows\system32\scrobj.dll
2008-05-09 10:56 . 2006-03-02 12:00 172032 ----a-w- h:\windows\system32\scrrun.dll
2008-05-08 14:02 . 2006-03-02 12:00 203136 ----a-w- h:\windows\system32\drivers\rmcast.sys
2008-05-08 11:24 . 2006-03-02 12:00 155648 ----a-w- h:\windows\system32\wscript.exe
2008-05-07 09:07 . 2006-03-02 12:00 135168 ----a-w- h:\windows\system32\cscript.exe
2008-04-14 06:52 . 2006-03-02 12:00 11264 ----a-w- h:\windows\system32\spnpinst.exe
2008-04-14 06:51 . 2006-03-02 12:00 991744 ----a-w- h:\windows\system32\setupapi.dll
2008-04-14 06:51 . 2006-03-02 12:00 424448 ----a-w- h:\windows\system32\licdll.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="h:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="h:\windows\system32\NvCpl.dll" [2006-07-12 7626752]
"nwiz"="nwiz.exe" [2006-07-12 1519616]
"NvMediaCenter"="h:\windows\system32\NvMcTray.dll" [2006-07-12 86016]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"RTHDCPL"="RTHDCPL.EXE" [2006-08-01 16049664]
"TV Card Remote Control Device Monitor"="h:\windows\713xRMTMon.exe" [2005-07-20 352256]
"HP Software Update"="h:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"Adobe Reader Speed Launcher"="h:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="h:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"DivXUpdate"="h:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]
"MSSE"="h:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="h:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="h:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
h:\documents and settings\Jirka\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - h:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
h:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
HP Digital Imaging Monitor.lnk - h:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]
Microsoft Office.lnk - h:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
Scheduler for OEM.lnk - h:\program files\honestech\honestech TVR\scheduleTV.exe [2010-8-19 307200]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"h:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"h:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"h:\\Program Files\\Microsoft ActiveSync\\WCESMGR.EXE"=
"h:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"=
"h:\\Program Files\\ICQ7.2\\ICQ.exe"=
"h:\\Program Files\\ICQ7.2\\aolload.exe"=
"h:\\Program Files\\Steam\\Steam.exe"=
"h:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"h:\\Documents and Settings\\Jirka\\Plocha\\C&C Red Alert 2\\GAME.EXE"=
"h:\\Program Files\\Skype\\Phone\\Skype.exe"=
"h:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"h:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"h:\\Program Files\\VALVe\\Counter-Strike Source\\hl2.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
R0 sptd;sptd;h:\windows\system32\drivers\sptd.sys [27.8.2010 7:51 691696]
R2 713xTVCard;SAA7134 TV Card;h:\windows\system32\drivers\SAA713x.sys [19.8.2010 18:32 289280]
R2 WDMTVTuner;Universal WDM TV Tuner;h:\windows\system32\drivers\WDMTuner.sys [19.8.2010 18:33 26880]
S2 gupdate;Google Update Service (gupdate);h:\program files\Google\Update\GoogleUpdate.exe [16.11.2010 19:58 136176]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
2006-09-28 h:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- h:\program files\Google\Update\GoogleUpdate.exe [2010-11-16 17:57]
2011-01-17 h:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- h:\program files\Google\Update\GoogleUpdate.exe [2010-11-16 17:57]
2006-09-28 h:\windows\Tasks\MP Scheduled Scan.job
- h:\program files\Microsoft Security Essentials\MpCmdRun.exe [2010-03-25 20:40]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyServer = http=
IE: E&xportovat do aplikace Microsoft Excel - h:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
FF - ProfilePath - h:\documents and settings\Jirka\Data aplikací\Mozilla\Firefox\Profiles\xovrrjtd.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - h:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Illimitux:
illimitux@illimitux.net - %profile%\extensions\illimitux@illimitux.net
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - h:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
HKCU-Run-ClocX - c:\- = [ b a c k u p ] = -\zaloha C\Program Files\ClocX\ClocX.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2006-09-28 07:22
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
TV Card Remote Control Device Monitor = h:\windows\713xRMTMon.exe?????6~ ?????6~ ?7~????????????????????????????????~?7~???????? ??|????????(??|???|???|???|????(?7~??6~ ?7~????????????P???????????????????~?7~????~?7~????????~?7~????????????????4???(?7~????????????P???????|?????7~??????????????A????
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'explorer.exe'(2596)
h:\windows\system32\WPDShServiceObj.dll
h:\windows\system32\PortableDeviceTypes.dll
h:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
h:\program files\Microsoft Security Essentials\MsMpEng.exe
h:\program files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
h:\windows\system32\RUNDLL32.EXE
h:\windows\RTHDCPL.EXE
h:\program files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
h:\program files\Microsoft ActiveSync\WCESCOMM.EXE
h:\windows\system32\nvsvc32.exe
h:\windows\713xRMT.exe
h:\program files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
h:\program files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
h:\windows\system32\wscntfy.exe
h:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
.
**************************************************************************
.
Celkový čas: 2006-09-28 07:25:50 - počítač byl restartován
ComboFix-quarantined-files.txt 2006-09-28 05:25
Před spuštěním: 1 372 749 824
Po spuštění: 1 488 621 568
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
- - End Of File - - 3CE6BF333868B18CCF2118856536690B