Edit C:\Windows\System32\wshext.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ t??0?)?0?)?0?)? ?#?)? ?2?)?0?(??)? ?'?)? ?1?)? ?.?)? ?1?)? ?1?)?ich0?)? PE d? ?R ? " 8 T ? ? ? N) ` ? O ? ? ? h ` ? ? h9 8 ? ? p ? .text 6 8 `.data d P < @ ?.pdata ? ` F @ @.idata B p P @ @.rsrc h ? j @ @.reloc ? ? @ B ????????H?$H?$H?$ATAVAWH? 3??L??? ?? ? H?$@H?$HH?$PH? A_A^A\????????H?(??: ??? ? H?(?????$H?$WH? I??H??? L??H?H?$0H?$8H? _??????H? L??H?VWAVH?@ ?L?? ??$ ;??? ?u9? u3?\$ ? ??;?? L? ? M?t<?G ;?D?G L?$p A???D$ ?3?\$ ??$h L?$` ?? L?$p ?I??????$ ?3?\$ ??$h L?$` ??3 L?$p ?I??????$ ?3?\$ ??$h L?$` ;?? ?u~E3?3??????? ?$h L?$` ?$ E3?3??????? ?$h L?$` ?$ H?? H?t$E3?3????? ?$h L?$` ?$ ?t?unL?$p ?I??????$ ?3?\$ ??$h L?$` H?E H?t0?=? t'L?$p ?I????D$ ?3?\$ ??$h ;??H?$x H?@ A^_^?= ??????= ?? ?????< eH?%0 H???3?H?=?< ? ???< ?? H?-?< H?t1H?=?< L?L?H?H;?? H??4] H??< H??< ??< E????H?`< ?????? H? D ?d^ ?????????H?H?H?L?UH?h??H?? H?_< H3??? H?.< H?uH?? ?$0 L?$0?A? ? ??? ?t?$0? ?=?; ? H??; H?? H3?" L?$? I?I?M? I?]??????%? ???? ????? ?????????H?? H??; H3??$? ?I; ? H? ^; H? ? ?_ ??D$ ? H?$ ?s^ ?? ?$$? ??: ???H? ; ?$0u)??: ?$$?r ??: ? ?r??: H?=?: ? ? H?$? H3? H?? ??; ?: uH?f???u??? ???????????? H?H?? H?? ? ??? H? H?H? H?? H? [?????????????? ?. ?Z H?H?? H? ? H??Z ?? H? ? H??? ?? H? ? H??? ?? ? H? [?H?%0 ?H???3?H?=c9 ? ??t9 ?? H?=? L?%? ?T9 ?I;?#?? H?H?t???I;????+ H?C H? 4 ???? 9 ?u H?H??8 H9? ?- ??8 ????????(? ?9Y H??8 H??8 H??> H? 3??(? ?(??????H?$ UH?H? H??8 H? H?2?-?+ H;?? H?$HH?H?i8 H? ]??? ??* ? ?[ 3?? [?? p H??OX ????H? h H??7X ?? 3?? [????????H?L? AVAWH?HH?H?H?H??3??????A?H???D?H?H?? ?? M?? H?? ?? H?? H?$ H?D?? ? ?? A?D??? H?=? H??H??9,Gu??$ H?fD9m t;??????????H?H??!W ??* H?fD93u???# ? ??)Z ?kY D?H??? L?$0L?$8H?$@H?$pH?$hH?$`E?u A??? A?H?HA_A^????????H?$H?$H?$ WH?@H?p3??H??H?$PH?H?? H?H?$PH????? ?yY H??$0 L?$PL?H??$(?$ ?dY ?? H?$PH?? ?? ? H?$PH?t? Y ?? H?$`H?$h?H?$XH?@_??????H?$H?$H?$ WAVAWH?0L?3?3??H??}Y ???? ??? H?H?? E3?3?3???5X ???2 L?$`D?H?H?H?$ ?+X ?? M??H?? ?? ? H??? ?? H?$XH?$h?H?$PH?0A_A^_???????????H?$H?$H?$WAVAWH?@3?L?3?????H?$0H?$x?? ?xpH?$0? L? ? H? ? 3??H?$ ?? ?? H?$0L?$xD?H?I?H?$ ?P?? H?$x?? f;?/ I?H?$x?H?$x?? H?$0H?tH??P?t?U ?? H?$hH?$p?H?$`H?@A_A^_????????(H?? ?9? ? H?? ?? ? H?(????????H+ ? H?? H?H+U uH?H+P H?? ? ? ?R \ ? H ? @ ? ? ? ? ? ? @^ ? g z ? ? ? ? ? ? ? WSHEXT.dll CreateIndirectData DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer GetSignedDataMsg IsFileSupportedName PutSignedDataMsg RemoveSignedDataMsg VerifyIndirectData ?. v b s ???. v b e ???. j s P ? . j s e ???. w s f ???????? K??)???2 `???)?'???? / / S I G / / B e g i n s i g n a t u r e b l o c k ????8?? K???????H+??????? ??s???H?H?q???H?? H? [? H? [??? H?=? ?????????3?3?? ?0 ?;?? 3?? _0 ;?? 3?? Q0 ? 3?? E0 ? ?? ????????H?(H? U0 H; V0 ? H? 8 H?? H? ?7 H?(H?%R ??????? I?H????? ?? ' ' S I G ' ' B e g i n s i g n a t u r e b l o c k ??????H?L?$L?$M3??$L+?B?L?% M;?fA? ?? ??E?M;???$L?$H???H?=? ???A? ????? ??1???? D?????? D?????? D????? ???? ????W ? ? ?? ?3?????. ????$(???????W ?? 3?? [? H? [????!???ZQ ???? ????;?? ?? ?e???? ???? ? ????9???H?H???? N. H??. L;? L;????L?H?L?H?????3????;?? ??Q ?S??? ???? ? ????? ?5 ? ????M?? I??p5 ???????7Q H?H??Q ?H1E?Q ?H1E?Q ?H?H1E? Q H??H3EH3?? H??? ? H? H?????? H3E H3EH#??3?-?+ H;?D??:- ??????? D?????tO H?$ D????L?H?s???L?$xL?$? A?I??k ?u?9O ????A? ?????H?u? ?? ?M??L?$P? ??r ?T??H?H?tL??????O??H?H?tL??????5??? ??oO ?G???? ?D??WO ???A? A??BO ?????x?????+O ?????O 3??(?+?????????????? H?3?/O H??O ?? ? ??H? [H?%O ??????????????H?$H?? H? ?, ?? H??- H?$HE3??$PH?$H?? H?$@H?$@ tBH?$8 H?$XH?$0H?$`H?$(H?w, H?$ L?$@L?$HH?$P3?[N ?#H??, H? H?@- H??, H?H??, H?'- H??+ H?$? H??, ?o+ ?i+ ?s+ ? Hk? H? k+ H? ? Hk?H? S+ H??* H?? Hk?H? 8+ H?I* H?? Hk? H? ]* H?h? Hk?H? * H?hH? ? ???? H?? ??????xH? Y+ ?CM H?D, H?$HE3??$PH?$H?,M H?$@H?$@ tBH?$8 H?$XH?$0H?$`H?$(H?+ H?$ L?$@L?$HH?$P3?? ?#H?v+ H? H??+ H?e+ H?H?Z+ H??+ H?$* ? * ?* ?* ? Hk? H? * H? H? ? ??????x??%I ????%? ????%? ????%? ???????LcA<E3??L??E?H?I??t?L;? ??;?A???(E;??3???????H?$WH? H?H?=,??H?? ?t"H+??H?????H?t?$????3??$0H? _??????????H??Z f9t3?HcH<H?3?9PE u? f9Q???%? ???????H?(M?8H?I?? ? H?(??????? E?H?L?A??? L?tA?McP?L?c?#?c??H??HK?t?????3??H? [?????????H?H?H?H? AVH? M?8H?M?A?H?I?H?H?I?I??????D?D?A?A?? #???DD??tL?M?H?H??? ?H?$0H?$8H?$@H?$H?H? A^??%vF ????%rF ????%nF ????%G ???????? ???????`@???H??`H???????H??` ???H??& ??????????H??`??????A????H?(?# ??????$ ??????$ ??????# ????? ?# ??????3$ ??????#$ ??????$ ????? ?$ ??????$ ??????# ??????# ????? ?# ????3??????? 3????H??, ????? ???????? 3?????@ ?????? ?@ ???H? H?H? H???? H?? ?P?P=csm?H?? ?P????0??0 ?0H? ]??H? H?H? H???? H?? ?p?p=csm?H?? ?p????8??8 ?8H? ]??H? H?H?0 H???? H?? ?`?`=csm?H?? ?`????H??H ?HH? ]??H? H?H? H???? H?? ?? ?? =csm?H?? ?? ????$??$ ?$H? ]?UH? H?H? H???? H?? ?(?(=csm?H?? ?(????4??4 ?4H? ]??H? H?H? H???? H?? ?@?@=csm?H?? ?@????L??L ?LH? ]??H? H?H?( H???? H?? ?X?X=csm?H?? ?X????h??h ?hH? ]??H? H?H?8 H???? H?? ?x?x=csm?H?? ?x????? ? ?? ?? H? ]?UH? H??h w ??! ????H? ]??UH? H?H?3?8 ???H? ]???H+v? uH?H+q? 3? H?D???3?????=?! ? ?????) ????A? ? fA#?;??????&? H;s! uH??(D ? H????A? L?$4?A??? ?? H? 7! ? L?` D?? ?=E ?? H?$4L?` L?? H?$@?H?$ ? H? ? H?p D??ZC L?PH?$@H?p ?? ? H?PD?3?? H????H?$@D?3?xB H????H?$4H??H??< u??vqH?$4L?` L?? H?$@H??$6 H?$ ?? L?PH?$@H?p ?? H?PD?3?B H??6??H?$@D?3?? H?????? A? L?$4A#???? ??? ?? H?$4L?` L?W H?$@H?H?$ ?@ L?PH?$@H?p ?? H?PD?3?pA H????H?$@D?3?WA ???%s%s.DLL ???HDY ???H? E H?F H?HE?Q???H?? H?H?? ?????? ????????H?$H?$H?$WH? ?? I?? I?H?t?C H?H?tH? L?L???P?"L??? H?u3?H?H?H??PP?H?$0H?$8H?$@H? _????H?$H?$H?$WH?0?I?I??H??? ?LtH?t8?(t+?t=? uZH?M?H??P(?tJ? ?H??P ?H??P`?H?I??PX?H?L?$ L?H??P0?tL?$ H?3?'B ?H?L?L??H??P8?H??P3??$@H?$HH?$PH?0_?????H?$WH? ? H?;?M?u ?????"I?0? L??? H?H?H??PP?H?$0H? _??????? A?6???I?t@A?7???t'A?8???t H? [? H??Px?H??H?? H??Pp3????H??Ph?H???H??H? [?????3???????? H??(H??t ?? ? ??yA ? E3??H?H? [H?%? ?????H?%? ????????$H?$WH? H??H?H????%H??? u 9zu9rt"H?? ?u?? H?u??$0H?$8H? _???R????????$H?$H?$WH?0?I?I??H??t^?Lt7?4t*=? uH?M?H??P(?uCH?L?L??H??P8?2H??P ?(H?H?$ L?$ L?H??P0?t??$ ?H??P3??$@H?$HH?$PH?0_????H?H?H?H?H? AVH? H?A?M?I?H?H???%L???NuA9ZuA9jt.I?A??u?? H?u??$0H?$8H?$@H?$HH? A^??L??H?A?R??????H?$WH? ??H???? 3?9SuLcCH?fB?<@?CHcKH?f?HH?$0H? _?????$H?$H?$WH? 3??H?H?E?y H??H??9,Zu?Q?? 9ou'HcOH?Lc??HM?????_HcOH?f?,HH?$0H?$8H?$@H? _??????$WH? 3?H?9yu?H? ?p: H?H?? H?$0H?H? _????H?$H?$H?$WH? ?H?;Y~i? uc?????4;??? ;?L?c?;?H? H??9 ?3??u(Hc??;?H?H??9 ?3??u ? ?H??H?$0H?$8H?$@H? _??????? H?H? H?t?u9 H?# ? ? ? H? [??????TAUAVAWH?? H?$@H?? H?? H?? H?? H3??P ?H? ?L? $ H?? E3???> E3???!L? ? H?? E3??? A??H????; D8- ? t2H?? L? i L?? H? ?H?$ ?v8 L? G ?H?0 ??f: ?u?d: ?? ? ?? H?( L?0 L?* H? H?H?$ ?8 L?? H?0 H???7 L?0 H?( L?? H?H?H?$ ??7 ?Ct~?Wt ? ?? ?$? H+??$@?H? B D?L?? ?Y; Hc?$D?,1H+??$@A??? H? D??M??? ?!; L? L???$? H+??$@??? H? ? D??L??? ??: Hc?$D?,1H+??$@A?H? ? D?M?? ??: L?L? Hc??3??,1?/?????? .uH?@ M?M?H?L?$ ? ????$8L?$0L? L?@ H? ?L?$(L?$ ? ??7 = u?3??P H3?K??H?? H?? H?? H?` A_A^A]A\]???\Command ????%SystemRoot%\System32 ?WScript.exe ??%s\%s "%%1" %%* Windows Script Host Script ???SFFile CScript.exe ??????????????I?WH?`I???I?I????3????? E3?D$( ?$ ??6 ?t~i? ???? ?E??A???tH??H??< u?3??$X??3?D$(H?H?$ ??5 H?$X??D6 ?~ ?? ??H?$pH?`_?????VWATAVAWH?$???H?` H?{ H3??P L?? H?$@H?M?M?H?H?A? E3?? ?H?$ ??5 ?t+~? ?H?P H3?N??H?` A_A^A\_^[]??$@H?$8H? H?$(H?$PE3?3?D$8 H?$ ??5 H?$@??S5 ?t~ ?? ????$8?u ?@ ???????= ? ?P H?$0H?$PA? E3?? ?H?$ ??4 ??0???H?$0H?$HH?? A? E3??$ ??4 H?$H???4 ?tH? ? H??q3 ?ucH?$0H?? H?? L?L????H?$0H?{ M?L????H?$0H?T M?L????H?$0H?% M?L????H?$0?74 3?{???????hell\Open2\Command ??Shell\Open2 ??hell\Open\Command ???criptEngine ??hell\Open ??????$H?$H?$WH?0I?I?M?u?@ ??H?$X H?$ ?@ ?H?t???H?b? H?? ?t5H?$X?4 H?$X??xH?L?$ H?H???H?t H?H??PH?$ H??H?$@H?$HH?$PH?0_??????E3?9uH?H+uH?H+BH?uD?A??????$H?$H?$ WH? I?H?H?M?u ?@ ?? H?? H?$@ H+uH?? H+AH?t???? ?1 H?H?t"H?"? ? H??C?t ?3??u? ??H?L?$@H?H??H?H???RH?$@?H?H?$0H?$8H?$HH? _????? ? ?? 3???????$H?$WH? I?H?H?M?u?@ ???H?? H?????uH?? H?????uH?' ?@ ??H?H?H??P3??$0H?$8H? _?????H?H?H?H?UATAUAVAWH????H?@ H?? H3??0 E3?H?$hE?L?$PL?$8A?L?$pL?$@L?$xL?$0L?$`L?$XL?$HA?L?$h?_0 ??? H? ? D? ??1 ? H?H?D???1 ?t D8? tL?P H?H??C/ H? L?A??3?3?D$( H?$ ?M1 ?u ?@ ?? L?$PH? A??Z/ ??? H?$PH?$pH??P8??? L?$xH?? H? ???/ A? ???~?A??? H?$pH???T/ ??? L??L?s? H??0 ? H?$hH??H??P(H?$pL?* ?D?? ?$ H??R. H?$PH??PA?D??? H?$8H?t(H?$@H?tH??? H?$8L?$@H??PL?$8H?$PL?$8?H??P ??? H?$8H?$@H??P??? H?$@?,? ?:? H?$HH?t? . L?$HH?$PL?$HE3???L?$(L?$ ?PH??? H?$@H??. ??? L???2? H??0 ?G- H?$hH????P(H?$HH?tUH?tH??8- H?$H?U- ?????, H?H?? H?$HL? ? L?? ?H?H?$ ??, H?$0H?t? . L?$0H?$xL?$0H???- ??~?A??? H?$XH?t??- L?$XH?$0L?$XH?? ??- ??~?A??? H?H??H??8<u??$XL?E?3?D$ ?k- ??~?A??? H?$XH?? H?? E?E3?D$( H?$ ??, ??~?A??? H????H??8<u??$0L???? E??$ ??, ??~?A??? H????H??8<u??$0L???d? E??$ ??, ??~?A??? H?? H??H??8<u??$0L?E?3?D$ ?f, ??~?A??? H??H??8<u??$0H?? L?E??$ ?), ??~?A??? H?$`H?t? , L?$`L?$`H?H? ???+ ??~?A??QH????H??8<u??$`L???V? E??$ ??+ ??~?A??A?;?? ???? ?H?$hH?tH??PL?$hH?$PH?tH?$pH?tH??P`H?$PH??PH?$8H?t(H?$@H?tH??? H?$8L?$@H??PL?$8H?$`H?t?+ L?$`H?$XH?t?+ L?$XH?$0H?t??* L?$0H?$xH?t??* L?$xH?$H??) H?t H???) ?H?0 H3?P??L?$@ I?0I?8I?@I?A_A^A]A\]??%d.%d ?%S.%S ???S c r i p t i n g ??wshext.dll ??????(?I?uH?? H?? ? ?9( 3??(?????$L?$ SVWH? 3?H??H?H=??? ?G??x5H??L?$XH?H?3??q( ?xH?;?u@?<3?@?<3? ??H?t? ?H? _^[?????H?H?H?H?L? UAVAWH??? H?? H3??E3?H?$`A?L?$@A?L?$0L?$HL?$PL?$xL?$`L?$XL?$pL?$8??( ??? H?$PA?H? ? E3?3??$ ?( ???$ H?$PH?$xH??P8??? I? ?L?$XH?W? I???( ??~ ?? ??? H?$xH????' ??? L??L?? H??0 ???H?$`H??H??P(H?$PH??PA?D??? H?$0H?t(H?$HH?tH??? H?$0L?$HH??PL?$0H?$PL?$0?H??P ???/ H?$0H?$HH??P??? H?$H?,? ?:? H?$@H?t??& L?$@H?$PL?$@E3???L?$(L?$ ?PH??? H?$HH???& ??? L???? H??0 ???H?$`H????P(H?t H??& H?$@?0& ???% H?H?? H?$@?& L?$@L?? ?H????H?$XL?$8H???& ?? H?$8L?$hL???p? ?$h ??& H?? H??r??H?$8?? H?? ??& H?$8H?$? ?n& H?$8H?? ?\& H?$8H?? ?J& H?$8?O& H?$XH??0& L?$pH?I??& ?u1H?$pH?? ? & H?$p?& H?I???% ???% ??;????E3?? ? E3???$ ??$ ??AI??$`H?tH??PL?$`H?t H???$ H?$0H?t(H?$HH?tH??? H?$0L?$HH??PL?$0H?$PH?tH?$xH?tH??P`H?$PH??PH?$XH?t?B% L?$XH?$@?J$ ?H?H3????L?$ I? I?(I?0M?8I?A_A^]? ??-????1.0 ????H?? L?? H?(H?@L? ? E3??HD??? H?8H?0?? H?? H?H?+? H?H?? H?H?E? H?H?? H? H?? H?(3?D?? L?PH??? ? 0+ ? ? ? ??????? H?K? 3??H?H?? H?H?y? H?H?? H?H?? H? H?H? H?(3?? H?PH?tH??PH?t? H?(? ? H? [????H?$WH? ?H??????t H???! H?H?$0H? _??????0H?H?`??????? H?? ??! H?3??tH????H?@H? [??????????0H?H? ???H?0H?H?`??????(L?H? H+ uH?H+ 3??uI???? I??? H? H+ ? uH?H+ ? H?uI???tI??yH? H+ ? uH?H+ ? H?u I????H? H+ g uH?H+ b H?uI???t/I??)H? H+ L uH?H+ G H?uI???tI??? H??P3?I? ?@ ?H?(??" ? F ? F? ? F? ? F?%`;?? ? ??????=? H?tH?`(H?`0?????????????? H?$ H?? H?? H?? L?? H?? H3??? H?? ?` H? ? ?$? H+??$ ??a? H? n? A? ?????# 3??Hc??493??# H?H?tS????u# H=?u?H???# ?t H???# ?u??! ??? ?? ?? ?? H?? ?a ??? H?? H?D ? H?@?1 L?D H??? D?|?ua?((J)(B )I(J0)A (B@)I0(JP)A@(B`)IP(JpI?)A`I?)I????((J? ))I? ?A?$ I?I????H?? H?h L?h H?L?? H??u_((J)(B )I(J0)A (B@)I0(JP)A@(B`)IP(JpI?)A`I?)I????((J? ))I? ?A?$ I?I?????? @?2 f?4 ?f?< ?`h ?H?k? ? ` H?hH? ??p?H? H?? H?????H?? ?Md% ????! H? H?H? ? H? H?H?`?( H?8??! ?@ ?H?I???? H3?$??H?? H?? H?? L?? H?? ]???????? H?$ H?? H?? H?? L?? H?? H3??? H?? ?-] H? ? ? ????1? H? >? H+?? ???$ L??? 3??Hc??4O3?? H?H?tS????= H=?u?H??? ?t H??? ?u?M ??? ?? ?? ?? H?? ?] ??? H?? H?D ? H?@?1 L?D H??? D?|?ua?((J)(B )I(J0)A (B@)I0(JP)A@(B`)IP(JpI?)A`I?)I????((J? ))I? ?A?$ I?I????H?? H?h L?h H?L?? H??u_((J)(B )I(J0)A (B@)I0(JP)A@(B`)IP(JpI?)A`I?)I????((J? ))I? ?A?$ I?I?????n @?2 f?4 ?f?< ?`h ?H?3? ? ` H?hH? ??p?H? H?? H?_???H?? ?Md% ???? H? H?H?? H? H?H?`?( H?8?? ?@ ?H?I???? H3????H?? H?? H?? L?? H?? ]????L?SH?`3??I??? 3???????????$L?? L?$ f?$8H?H?$8H??$P ?$H ?P?H?$? y ? ?@ ??? 3??`[?????WATAUAVAWH?? H?$ H? H?? H3??? 3??H?H? D? 3??H?H?????4?? ?8?0? f? H?L?H? H??PE3??? H?H?? H? ?v ?y ?@ ?? E3?3??H??> H? L?D?i? ?A?PH?H?uH? H??P? ?? L?3?????E?E?~SL?? A? A?H??? H?? ?Y L?? H?H?? L? H?H??? A??;????? ?@p ?D ? H?`I?@H?HH?? H?@H?XL?h?p H?P?w H? H??PH?xuz?$? H+??$ ?D?H? ? L?? ?4 Hc??$?? A? L?H?H??R ? ?H?? H3?&??H? H?? A_A^A]A\_^]??x ?@ ?AO???? ?open ?????H?HH?? H?? H?8?? L?H??3???3?? 3??H??????$E3???L?H=??? ?I?DG??E?x(E3??M?tD8 tH??????tM?L+?D?E3??xOI?K?A? I+?1H?I+????L?+??t??t ?I????????u H??? ?? H?$A?????H?$UH?$??? H?? H3??G?=Y? ? H?? L?w H??P ?? L???? H? ??? ?? H??H???H??< u?????? ?$(H??? E3??$ ?C ?? H?????t A? E3?D$( H?$ ?? ? ?? H???t?R H?? L???: H? ?? ?ulH????< u???????? A? E3?\$(H?$ ?? ?u2H?????? A? E3?D$( H?$ ?? ?e H???t?? H?GH3?R??H?$? H?? ]?%SystemRoot%\System32\wshext.dll ????YSTEM\CurrentControlSet\Services\EventLog\Application\WSH ???ventMessageFile ????ypesSupported ?YSTEM\CurrentControlSet\Services\EventLog\System\Windows Script Host ???H?H?H?H?H? AVH??L?H?tL?I???< u?E3??tH??< u?3?+?c?3??3?c??HI?H+??~"H?L?L?4H?A?C8uI???H;??;?/H?B?<;t$H????;??3??$H?$H?$ H?$(A^? ???????$H?$WH? I?H?H????=?uL?H?H??J H?$0H?$8H? _?????VWATAUAVAWH?H?hE3??????`A?A?E??>