Edit C:\Windows\System32\MuxInst.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ CQ?0?0?0??h?0?0?0??m?0??i?0??j?0??o?0?Rich0? PE d? z?R ? " J $ ? ? ? ` @ 4 8@ ( P ? 0 ? P ? @ 8 .text t `.data @ ?.pdata 0 @ @.idata 2 @ @ @.rsrc ? P B @ @.reloc x ? P @ B ( ? z?R $ ? ? ? ? ? RSDS???J?s??_ MuxInst.pdb H?(?u??. ? ? H?(?????$ UH?H? ? 3??2?-?+ ?H?? H?tH;?H?H?} ? H? ??. H? H??h. ?H1E?d. ?H1E?h. ?H?H1E?X. H??H3EH3??H??. ?H? H?????? H3EH3EH#?E??? H?H?? H?$HH? ]?????? ? B 4 2P ?R h MuxInst.dll ? ???2?-?+ $ B , H 4 ? ? ? ? A ? `@ $A @ ? ? ? ? A ? DisableThreadLibraryCalls 0QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId ?GetSystemTimeAsFileTime ?GetTickCount KERNEL32.dll ?( ?? ?@ ? X ? p ? ? ? ? ? ? ? ? ? ? ? ?: Q ? W E V T _ T E M P L A T E M U I ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n v ' F i l e D e s c r i p t i o n M i c r o s o f t ? M a n a g e m e n t I n s t r u m e n t a t i o n r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 8 I n t e r n a l N a m e M u x I n s t . d l l ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . @ O r i g i n a l F i l e n a m e M u x I n s t . d l l j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? CRIM?: ?o??B???r$ WEVT?: ???? ? d , ? ?% &