[عبد الصمد.]

جاي من عند ختك
حطيتو في الفيبي سبيدر وهنا
هدا واش

The following file was modified:

%AppData%\Microsoft\Windows Media\9.0\WMSDKNS.XML

------------------------------------------------------------------------------------------

Registry Modifications:

• The following Registry Keys were created:
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P layer\Tasks
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P layer\Tasks\NowPlaying
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references\ProxySettings
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references\ProxySettings\HTTP
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references\ProxySettings\MMS
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references\ProxySettings\RTSP
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\H ealth
  • HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\H ealth\{71EDC6C1-F10C-4A4D-AB07-DC0D0271DB47}

• The newly created Registry Values are:
  • [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P layer\Tasks\NowPlaying]
    • InitFlags = 0x00000001
  • [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references\ProxySettings\RTSP]
    • ProxyStyle = 0x00000000
    • ProxyName = ""
    • ProxyPort = 0x0000022A
    • ProxyBypass = 0x00000000
    • ProxyExclude = ""
  • [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references\ProxySettings\MMS]
    • ProxyStyle = 0x00000000
    • ProxyName = ""
    • ProxyPort = 0x000006DB
    • ProxyBypass = 0x00000000
    • ProxyExclude = ""
  • [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\P references\ProxySettings\HTTP]
    • ProxyStyle = 0x00000001
    • ProxyName = ""
    • ProxyPort = 0x00000050
    • ProxyBypass = 0x00000000
    • ProxyExclude = ""
  • [HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General]
    • UniqueID = "{FA1B75E7-8D8C-4298-8E04-62F664EFDB14}"
    • %ComputerName% = "%ComputerName%"
    • VolumeSerialNumber = 0x00CD1A40

-----------------------------------------------------

The following files were created in the system:

%AppData%\Microsoft\Media Player\CurrentDatabase_59R.wmdb 720,896 bytes MD5: 0xA63EFB39A2FEFE9939AB83C0C0C3F481
SHA-1: 0xBC26B9B541274A9B07A3CAFC7A3163370C257180
2 %AppData%\Microsoft\Windows Media\9.0\WMSDKNSD.XML 53 bytes MD5: 0xA9B5DA9AEC61657B32393D96217165F0
SHA-1: 0x80B5C577155ACD269B450D70F6B2CBED693EDF49
3 [file and pathname of the sample #1] 3,026,944 bytes MD5: 0x4108AF419C0073708011733E52656AE7
SHA-1: 0xCB02030B1FE8E792CE4C81B61017AA003C0C1369

--------------------------------------------------------------
نزول ..الى القرص السي:

اسم الباتش لتشغيل :

C:\mmm.exe

--------------------------------------------------------------
الأيبي :


192.5.5.241
----------------------------------------------------
البورت المستخدم :

80
--------------------------------------------------------