GMER 2.2.19882 - http://www.gmer.net Rootkit scan 2017-06-09 19:31:45 Windows 6.2.9200 x64 Running: gmer.exe ---- Services - GMER 2.2 ---- Service C:\WINDOWS\system32\svchost.exe (*** hidden *** ) [AUTO] CDPUserSvc_7aa33 <-- ROOTKIT !!! Service C:\WINDOWS\system32\svchost.exe (*** hidden *** ) [MANUAL] MessagingService_7aa33 <-- ROOTKIT !!! Service C:\WINDOWS\system32\svchost.exe (*** hidden *** ) [AUTO] OneSyncSvc_7aa33 <-- ROOTKIT !!! Service C:\WINDOWS\system32\svchost.exe (*** hidden *** ) [MANUAL] PimIndexMaintenanceSvc_7aa33 <-- ROOTKIT !!! Service C:\WINDOWS\System32\svchost.exe (*** hidden *** ) [MANUAL] UnistoreSvc_7aa33 <-- ROOTKIT !!! Service C:\WINDOWS\system32\svchost.exe (*** hidden *** ) [MANUAL] UserDataSvc_7aa33 <-- ROOTKIT !!! Service C:\WINDOWS\system32\svchost.exe (*** hidden *** ) [MANUAL] WpnUserService_7aa33 <-- ROOTKIT !!! ---- Registry - GMER 2.2 ---- Reg HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData@SystemStartTime 0x9E 0x86 0xC9 0x8E ... Reg HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData@SystemLastStartTime 0x17 0xEE 0xC3 0xBD ... Reg HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData@CMFStartTime 0x9E 0x86 0xC9 0x8E ... Reg HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData@CMFLastStartTime 0x17 0xEE 0xC3 0xBD ... Reg HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData\BootLanguages@pl-PL 37 Reg HKLM\SYSTEM\CurrentControlSet\Control\Diagnostics\Performance@ActiveShutdownDCL C:\WINDOWS\System32\WDI\LogFiles\WdiContextLog.etl.001 Reg HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\Configuration\HSD8991651GH3CY11649_33_07D6_50^B3B647F3F4116BD2511EB700BD2D35B6@Timestamp 0x40 0xF3 0x98 0x8F ... Reg HKLM\SYSTEM\CurrentControlSet\Control\Lsa@LsaPid 812 Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{0BA879C4-D484-402B-AAFA-8175FB407423}\Connection@Name Reusable ISATAP Interface {0BA879C4-D484-402B-AAFA-8175FB407423} Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{EEF2A68B-903D-409A-A25C-B168F342C7D6}\Connection@Name isatap.home Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\kernel\RNG@RNGAuxiliarySeed -1289048197 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@POSTTime 21010 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@TotalResumeTime 27111 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeBootMgrTime 560 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeAppTime 674 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeAppStartTimestamp 21575 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeHiberFileTime 384 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeRestoreImageStartTimestamp 21860 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeIoTime 181 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeDecompressTime 195 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeKernelSwitchTimestamp 22250 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelReturnFromHandlerTimestamp 22346 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@SleeperThreadEndTimestamp 26580 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@TimeStampCounterAtSwitchTime 22297 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelReturnSystemPowerState 27095 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@HiberHiberFileTime 2920 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@HiberSharedBufferTime 5 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@TotalHibernateTime 9210 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelResumeHiberFileTime 2577 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelResumeSharedBufferTime 49 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@DeviceResumeTime 477 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelAnimationTime 55 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelPagesProcessed 324162 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelPagesWritten 0x3C 0x01 0x02 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@BootPagesProcessed 17301 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@BootPagesWritten 0xD6 0x1C 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@HiberChecksumTime 259 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelChecksumTime 272 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelChecksumIoTime 22 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@KernelResumeIoCpuTime 1611 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@HiberIoCpuTime 283 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@HybridBootAnimationTime 4269 Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@ResumeCompleteTimestamp 0xC8 0x94 0x44 0x02 ... Reg HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server@InstanceID 2326c9f1-0b83-4f78-98af-cb8ecf8 Reg HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server@GlassSessionId 1 Reg HKLM\SYSTEM\CurrentControlSet\Control\WDI\Config@ServerName \BaseNamedObjects\WDI_{50cd00e7-8107-4782-8ad2-dbcd3973cd4e} Reg HKLM\SYSTEM\CurrentControlSet\Services\AswRvrt\Parameters\Instup_14944101168282294@SetupOperations ???@?????@?@?@?A?A?A?????????????????????????????????????????????????@??????Reverted?????I?????????????????t?????{?????????????????????t?????????@???????????????????????????{???m???????C??? ???????@???????????@???????? ??????????????????????????@??????Commited?8???@?@?@?@?@?@?????????????7?????????????????????????t&????????@???????????s??m???????????????????????????????????????????????? ???????@???????????@???????? ??????????????????????????@??????Reverted?????@?@?@?@?@?@?????????????-?????t43???????????0?????t-3???????@???0??????Pk???????N??????????????????????????????????????????? ???????@???????????@???????? ??????????????????????????@??????Reverted?????@?@?@?@?@?@?????????????????????????????????2???????????????@???????????2???????N??????????????????????????????????????????? ???????@???????????@???????? ??????????????????????????@??????Reverted?:???@?@?@?@?@?@?????????????P??????-1???????????1?????t42???????@???S??????m3??????? ??????????????????????????????????????????? ???????@???????????@???????? ???? Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33@Type 224 Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33@Start 2 Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33@ErrorControl 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33@ImagePath C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33@DisplayName CDPUserSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33@FailureActions 0x80 0x51 0x01 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33@Description @%SystemRoot%\system32\cdpusersvc.dll,-101 Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33\Security Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33\Security@Security 0x01 0x00 0x14 0x80 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters\Probe\{701c1acd-6414-42f5-8f49-42b1ec2276b3}@LastProbeTime 1496771411 Reg HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{EEF2A68B-903D-409A-A25C-B168F342C7D6}@InterfaceName isatap.home Reg HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{EEF2A68B-903D-409A-A25C-B168F342C7D6}@ReusableType 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{EEF2A68B-903D-409A-A25C-B168F342C7D6}@DefunctTimestamp 0x33 0xCF 0x36 0x59 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33@Type 224 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33@ErrorControl 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33@ImagePath C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33@DisplayName Us?uga wiadomo?ci_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33@FailureActions 0x80 0x51 0x01 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33@Description @%SystemRoot%\system32\MessagingService.dll,-101 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\Security Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\Security@Security 0x01 0x00 0x14 0x80 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\TriggerInfo Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\TriggerInfo\0 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\TriggerInfo\0@Type 7 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\TriggerInfo\0@Action 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\TriggerInfo\0@Guid 0x16 0x28 0x7A 0x2D ... Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\TriggerInfo\0@Data0 0x75 0x18 0xBC 0xA3 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33\TriggerInfo\0@DataType0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\MessagingService_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33@Type 224 Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33@Start 2 Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33@ErrorControl 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33@ImagePath C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33@DisplayName Synchronizuj hosta_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33@FailureActions 0x80 0x51 0x01 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33@Description @%SystemRoot%\system32\APHostRes.dll,-10001 Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33\Security Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33\Security@Security 0x01 0x00 0x04 0x80 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33@Type 224 Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33@ErrorControl 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33@ImagePath C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33@DisplayName Dane kontaktowe_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33@FailureActions 0x80 0x51 0x01 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33@Description @%SystemRoot%\system32\UserDataAccessRes.dll,-15000 Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33\Security Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33\Security@Security 0x01 0x00 0x04 0x80 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\rdyboost\Diagnostics@ReadyBootTrainingCountSinceLastServicing 25 Reg HKLM\SYSTEM\CurrentControlSet\Services\rdyboost\Parameters@ReadyBootPlanAge 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\rdyboost\Parameters@LastBootPlanUserTime ?wt.?, ?cze ?06 ?17, 05:51:20 PM??????????????????????????????? Reg HKLM\SYSTEM\CurrentControlSet\Services\rdyboost\Parameters@EffectivePends 3 Reg HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch 2934 Reg HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch 341 Reg HKLM\SYSTEM\CurrentControlSet\Services\srvnet\Parameters@MajorSequence 37 Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{890cfe63-ffb9-468e-96ad-e45dacc04a5a}@DhcpIPAddress 192.168.1.14 Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{890cfe63-ffb9-468e-96ad-e45dacc04a5a}@LeaseObtainedTime 1496764207 Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{890cfe63-ffb9-468e-96ad-e45dacc04a5a}@T1 1496807407 Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{890cfe63-ffb9-468e-96ad-e45dacc04a5a}@T2 1496839807 Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{890cfe63-ffb9-468e-96ad-e45dacc04a5a}@LeaseTerminatesTime 1496850607 Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33@Type 224 Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33@ErrorControl 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33@ImagePath C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33@DisplayName Magazyn danych u?ytkownika_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33@FailureActions 0x80 0x51 0x01 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33@Description @%SystemRoot%\system32\UserDataAccessRes.dll,-10002 Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33\Security Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33\Security@Security 0x01 0x00 0x04 0x80 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\UnistoreSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33@Type 224 Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33@ErrorControl 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33@ImagePath C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33@DisplayName Dost?p do danych u?ytkownika_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33@FailureActions 0x80 0x51 0x01 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33@Description @%SystemRoot%\system32\UserDataAccessRes.dll,-14000 Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33\Security Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33\Security@Security 0x01 0x00 0x04 0x80 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\UserDataSvc_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeEstimated 0x16 0x4E 0xE9 0xAE ... Reg HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeHigh 0x16 0xB6 0xAD 0x10 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits@SecureTimeLow 0x16 0xE6 0x24 0x4D ... Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33@Type 224 Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33@ErrorControl 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33@ImagePath C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33@DisplayName Us?uga u?ytkownika powiadomie? WNS_7aa33 Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33@FailureActions 0x80 0x51 0x01 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33@Description @%SystemRoot%\system32\WpnUserService.dll,-2 Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33\Security Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33\Security@Security 0x01 0x00 0x04 0x80 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\WpnUserService_7aa33 Reg HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\62\0@Rw 0x64 0x62 0x03 0x00 ... Reg HKLM\SYSTEM\Setup\Upgrade\NsiMigrationRoot\62\0@RwMask 0x64 0x62 0x03 0x00 ... Reg HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Live\Roaming\RegistrarData@LastRenewCollectionsInterest 0x83 0xA9 0xC9 0x3E ... Reg HKCU\SOFTWARE\Microsoft\Windows\Windows Error Reporting@LastRateLimitedDumpGenerationTime 0xF3 0x3D 0x22 0xDC ... Reg HKCU\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug@StoreLocation C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_taskhostw.exe_12c051106599d4e6163b56dba2662230da67c562_cc710313_18a2b06d Reg HKCU\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\UIHandles@CheckingForSolutionDialog 0x9E 0x03 0x20 0x00 ... ---- EOF - GMER 2.2 ----