- Kod: Zaznacz wszystko
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-06-26 18:59:28
Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD3200BEVT-22ZCT0 rev.11.01A11
Running: x7ivxfme.exe; Driver: C:\Users\jarek\AppData\Local\Temp\kwddykog.sys
---- System - GMER 1.0.15 ----
SSDT 94E5335E ZwCreateSection
SSDT 94E53363 ZwSetContextThread
SSDT 94E532FF ZwTerminateProcess
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 83052579 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 83076F52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!RtlSidHashLookup + 340 8307E840 4 Bytes [5E, 33, E5, 94] {POP ESI; XOR ESP, EBP; XCHG ESP, EAX}
.text ntkrnlpa.exe!RtlSidHashLookup + 6E0 8307EBE0 4 Bytes [63, 33, E5, 94] {ARPL [EBX], SI; IN EAX, 0x94}
.text ntkrnlpa.exe!RtlSidHashLookup + 7B8 8307ECB8 4 Bytes [FF, 32, E5, 94] {PUSH DWORD [EDX]; IN EAX, 0x94}
.text C:\Windows\system32\DRIVERS\lirsgt.sys section is writeable [0x9D1F6300, 0x1B7E, 0xE8000020]
PAGE spsys.sys!?SPRevision@@3PADA + 4F90 AAC41000 114 Bytes [8B, FF, 55, 8B, EC, 33, C0, ...]
PAGE spsys.sys!?SPRevision@@3PADA + 5003 AAC41073 175 Bytes [AA, 32, C0, EB, 02, B0, 01, ...]
PAGE spsys.sys!?SPRevision@@3PADA + 50B3 AAC41123 32 Bytes [C5, C3, AA, FE, 05, 34, C5, ...]
PAGE spsys.sys!?SPRevision@@3PADA + 50D4 AAC41144 596 Bytes [C3, AA, A0, 34, C5, C3, AA, ...]
PAGE spsys.sys!?SPRevision@@3PADA + 5329 AAC41399 101 Bytes [6A, 28, 59, A5, 5E, C6, 03, ...]
PAGE ...
---- User IAT/EAT - GMER 1.0.15 ----
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [7494250F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [74942494] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [74925624] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [749256E2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [74938573] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [74934D27] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [749350CE] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [749351A3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP] [749366D0] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [749382CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [74938819] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [7493907A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [7493E21D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [74934C59] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2168] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2168] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2168] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2168] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[2168] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\Opera\opera.exe[3320] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\Opera\opera.exe[3320] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\Opera\opera.exe[3320] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\Opera\opera.exe[3320] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\Opera\opera.exe[3320] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\Opera\opera.exe[3320] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
IAT C:\Program Files\Opera\opera.exe[3320] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!GetProcAddress] [75C95D3D] C:\Windows\system32\apphelp.dll (Biblioteka klienta zgodności aplikacji/Microsoft Corporation)
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Aparat wykonawczy struktury sterowników trybu jądra/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Aparat wykonawczy struktury sterowników trybu jądra/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
Device \Driver\ACPI_HAL \Device\0000004c halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x04 0x9E 0xA5 0x90 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x04 0x9E 0xA5 0x90 ...
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers@AliveServerCount 3
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3651401562-2067241561-501985153-1000@RefCount 3
---- Files - GMER 1.0.15 ----
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\4x4.prm 1564 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Allos.ncp 71234 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Allos.prm 54244 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Amon.ncp 9186 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Amon.prm 6532 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Armour.ncp 3138 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Armour.prm 2164 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Bench.ncp 12322 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Bench.prm 9532 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Bin.ncp 6050 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Bin.prm 4708 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Cabine.ncp 14786 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Cabine.prm 11524 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Claw.ncp 1458 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Claw.prm 1096 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Dog.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Dog.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Egypi1.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Egypi2.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Egypi2.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Egypi3.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Egypi3.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Firext.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Firext.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Fish.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glas01.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glas01.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glas02.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glas02.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\glas03.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\glas03.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glas04.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glas04.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\glas05.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\glas05.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glasfish.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glasfish.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glasl.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glasr.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glasr.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\glassL.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Glassl.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Handle.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Handle.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Helmet.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Helmet.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Holder.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Holder.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\holder2.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\holder2.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\invisbox.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\invisbox.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\kickplate.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\kickplate.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Mop.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Mop.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Mummy.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\MUSE1.ca- 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\MUSE1.cam 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.col 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.fan 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.fin 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\MUSE1.fld 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.fob 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.inf 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\MUSE1.lit 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.pan 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.rim 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.taz 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.tri 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.vis 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1.w 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1a.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\muse1a.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\muse1b.BMq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1c.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\muse1c.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1d.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\muse1d.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1e.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\muse1e.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1f.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\muse1f.BMq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\museramp.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\museramp.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Pot.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Pot.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rail.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rail.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rail2.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rail2.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rail3.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rail3.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rope.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Scarab.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Scarab.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Screen.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Shield.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Shield.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sign1.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sign1.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sign2.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sign2.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sign3.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sign3.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\sign4.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\sign4.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Signgo.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Signgo.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Skull.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Skull.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Stand.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Stand.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Strut.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Strut.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sword.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Sword.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Tricer.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Tricer.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Trilo.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Trilo.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Egypi1.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\glasL.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Mummy.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Muse1b.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse1\Rope.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\eagleb.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\firext.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\firext.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\fish.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\fishglass.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\fishglass.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\glass.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\glass.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\handle.ncp 3362 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\handle.prm 2524 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\helmet.ncp 2690 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\helmet.prm 2092 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\holder.ncp 4594 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\holder.prm 3448 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\holder2.ncp 4594 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\holder2.prm 3448 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\kickplate.prm 160 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\mop.ncp 1794 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\mop.prm 6124 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\mummy.ncp 3810 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\mummy.prm 2788 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\Muse2.cam 832 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\Muse2.fan 26156 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\Muse2.fin 9148 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\MUSE2.fld 4 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\Muse2.fob 4988 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\Muse2.inf 1014 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\MUSE2.lit 6988 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\eagleb.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\muse2\kickplate.ncp 114 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\ramp1.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\ramp3.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\ramp3.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\reversed\NHood1.pan 2124 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\reversed\NHOOD1.taz 1412 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\reversed\NHood1.tri 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\seat1.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\seat2.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\skate.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\skate.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_bk.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_bk.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_bt.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_bt.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_ft.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_ft.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_lt.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_lt.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_rt.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_rt.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_tp.bmp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\sky_tp.bmq 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\start.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\startrev.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\steer.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\tree1.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\tree1.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\tree1_w.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\tree2.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\tree2.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\treeskin.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\treetest1.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\treetest1.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\whitepost.ncp 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\levels\nhood1\whitepost.prm 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\Uninst.isu 426440 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\ball.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\balldrop.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\beachball.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\bottle.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\boxslide.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\clockwrk.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\countdown.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\electro.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\electrozap.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\firebang.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\firefire.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\fuse.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\hit1.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\Hit2.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\honka.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\honkgood.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\lightflk.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\menuLeftRight.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\menuNext.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\menuPrev.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\menuUpDown.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\moto.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\oildrop.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\petrol.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\pickgen.WAV 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\pickup.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\puttbang.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\scrape.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\Servo.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\shock.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\shockfire.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\skid_normal.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\skid_rough.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\splash.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\starfire.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\turbo.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\tvstatic.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\ufo.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\wbomb.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\wbombbounce.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\wbombfire.wav 0 bytes
File C:\Program Files\Acclaim Entertainment\Re-Volt\wavs\wbombhit.wav 0 bytes
File C:\Users\jarek\AppData\Local\Opera\Opera\icons\https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2Fimages%2Ffavicon.png 191 bytes
---- EOF - GMER 1.0.15 ----
Proszę o pomoc
