Inactive Trojan downloader

[Inactive]Trojan downloader

Hello

Seems like i got infected by a virus trojandownloader.wigon.bs

everytime when i log into my windows (XP sp2) all seems fine but when i turn on my internet connection i get a warning from NOD32 that i am infected.

i tried using NOD32,Spybot S&D in Safe mod with System restore turned off but seems like nothing helps.i also tried to use AVG anti-rootkit and it finds always on start before i turn on my internet,it finds rootkit in C:windows/system32/drivers/...
its always with different name.
and i try to delete it and i have to restart computer but when i do another scan after rebooting i get another rootkit...

here is my HJT:


Logfile of HijackThis v1.99.1
Scan saved at 12:14:26, on 29.3.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\System Control Manager\edd.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\tsnp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HijackThis\HijackThis.exe
C:\Documents and Settings\Dean\Dean.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bsplayer-search.com/startpage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
R3 - URLSearchHook: Reganam Toolbar - {db9d7a78-a76c-4bf2-97c6-258925ee1542} - C:\Program Files\Reganam\tbReg1.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Reganam Toolbar - {db9d7a78-a76c-4bf2-97c6-258925ee1542} - C:\Program Files\Reganam\tbReg1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O3 - Toolbar: Reganam Toolbar - {db9d7a78-a76c-4bf2-97c6-258925ee1542} - C:\Program Files\Reganam\tbReg1.dll
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe "
O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe "
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe "
O4 - HKCU\..\Run: [MsgCenterExe] "C:\Program Files\Common Files\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DLD.EXE] C:\Program Files\Download Direct\DLD.exe
O4 - HKCU\..\Run: [Dean] C:\Documents and Settings\Dean\Dean.exe /i
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-us\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com.../en/x86/MuCatalogWebControl.cab?1203005336984
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1202998153906
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1203006935281
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{48D92928-C979-4CC7-9DE7-86E142BD7207}: NameServer = 195.29.150.3,195.29.150.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{9BD66CCF-9682-49FC-9A3A-D7347256F955}: NameServer = 195.29.150.3,195.29.150.4
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: SCM Driver Daemon (NishService) - Unknown owner - C:\Program Files\System Control Manager\edd.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: O2Micro Flash Memory (O2Flash) - Unknown owner - C:\WINDOWS\system32\o2flash.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe




hope you can help because i tried everything and i cant solve this problem...


Regards,


Dean

 

Hello again,I'm sorry about HJT,haven't read new rules so i did HJT log like i did like a year or more ago

anyway,here is DDS log


DDS (Ver_09-03-16.01) - NTFSx86
Run by Dean at 16:13:16,31 on ned 29.03.2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.2.1250.385.1033.18.1023.509 [GMT 2:00]

AV: ESET NOD32 antivirus system 2.70 *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\System Control Manager\edd.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\tsnp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
C:\Documents and Settings\Dean\Desktop\dds.scr
C:\Documents and Settings\Dean\Dean.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.bsplayer-search.com/startpage
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: AOLTBSearch Class: {ea756889-2338-43db-8f07-d1ca6fb9c90d} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
uURLSearchHooks: Reganam Toolbar: {db9d7a78-a76c-4bf2-97c6-258925ee1542} - c:\program files\reganam\tbReg1.dll
mURLSearchHooks: AOLTBSearch Class: {ea756889-2338-43db-8f07-d1ca6fb9c90d} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: AOL Toolbar Launcher: {7c554162-8cb7-45a4-b8f4-8ea1c75885f9} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Reganam Toolbar: {db9d7a78-a76c-4bf2-97c6-258925ee1542} - c:\program files\reganam\tbReg1.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: Hotspot Shield Class: {f9e4a054-e9b1-4bc3-83a3-76a1ae736170} - c:\program files\hotspot shield\hssie\HssIE.dll
TB: AIM Toolbar: {de9c389f-3316-41a7-809b-aa305ed9d922} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
TB: Reganam Toolbar: {db9d7a78-a76c-4bf2-97c6-258925ee1542} - c:\program files\reganam\tbReg1.dll
TB: BS.Player ControlBar: {2c688203-7eb3-4327-9995-1cb417ba23f9} - c:\program files\bs.player controlbar\BSToolbar.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe "
uRun: [Power2GoExpress]
uRun: [MsgCenterExe] "c:\program files\common files\real\update_ob\RealOneMessageCenter.exe" -osboot
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [DLD.EXE] c:\program files\download direct\DLD.exe
uRun: [Dean] c:\documents and settings\dean\Dean.exe /i
uRunOnce: [Ad-Aware] c:\program files\lavasoft\ad-aware\\Ad-Aware.exe
mRun: [AGRSMMSG] AGRSMMSG.exe
mRun: [MGSysCtrl] c:\program files\system control manager\MGSysCtrl.exe
mRun: [nod32kui] "c:\program files\eset\nod32kui.exe" /WAITSERVICE
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe "
mRun: [tsnp2std] c:\windows\tsnp2std.exe
mRun: [snp2std] c:\windows\vsnp2std.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe "
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe "
mRun: [MsmqIntCert] regsvr32 /s mqrt.dll
mRun: [Ad-Watch] c:\program files\lavasoft\ad-aware\AAWTray.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRun: [<NO NAME>] c:\documents and settings\dean\.exe /i
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ralink~1.lnk - c:\program files\ralink\common\RaUI.exe
uPolicies-explorer: MemCheckBoxInRunDlg = 0 (0x0)
uPolicies-explorer: NoStrCmpLogical = 0 (0x0)
mPolicies-explorer: NoChangeAnimation = 0 (0x0)
mPolicies-explorer: NoStrCmpLogical = 0 (0x0)
mPolicies-system: RunStartupScriptSync = 1 (0x1)
IE: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-us\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {3369AF0D-62E9-4bda-8103-B4C75499B578} - {DE9C389F-3316-41A7-809B-AA305ED9D922} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
LSP: c:\windows\system32\imon.dll
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} - hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1203005336984
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1202998153906
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1203006935281
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: {48D92928-C979-4CC7-9DE7-86E142BD7207} = 195.29.150.3,195.29.150.4
TCP: {9BD66CCF-9682-49FC-9A3A-D7347256F955} = 195.29.150.3,195.29.150.4
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: AtiExtEvent - Ati2evxx.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\dean\applic~1\mozilla\firefox\profiles\rfgmamuz.default\
FF - prefs.js: browser.startup.homepage - google.hr
FF - component: c:\program files\bs.player controlbar\firefoxdtt\components\BSToolbarFF.dll
FF - plugin: c:\documents and settings\dean\application data\mozilla\firefox\profiles\rfgmamuz.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll

============= SERVICES / DRIVERS ===============

R0 AVG Anti-Rootkit;AVG Anti-Rootkit;c:\windows\system32\drivers\avgarkt.sys [2007-1-31 5632]
R0 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [2006-2-27 34880]
R0 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [2006-2-20 29056]
R1 AvgArCln;Avg Anti-Rootkit Clean Driver;c:\windows\system32\drivers\AvgArCln.sys [2009-3-29 3968]
R1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2008-2-14 15424]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-12-23 206096]
R2 NishService;SCM Driver Daemon;c:\program files\system control manager\edd.exe [2008-1-24 40960]
R2 NOD32krn;NOD32 Kernel Service;c:\program files\eset\nod32krn.exe [2008-2-14 552064]
R2 osaio;osaio;c:\windows\system32\drivers\osaio.sys [2009-1-30 6784]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2008-6-24 24652]
R3 MGHwCtrl;MGHwCtrl;c:\windows\system32\drivers\MGHwCtrl.sys [2008-1-24 20128]
S2 ati64si;ati64si;\??\c:\windows\system32\drivers\ati64si.sys --> c:\windows\system32\drivers\ati64si.sys [?]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2009-3-9 951632]
S2 nicsk32;nicsk32;c:\windows\system32\drivers\nicsk32.sys [2009-3-29 30464]
S3 cpuz128;cpuz128;\??\e:\razno\pcw2008_v180\pcwiz32.sys --> e:\razno\pcw2008_v180\pcwiz32.sys [?]

=============== Created Last 30 ================

2009-03-29 16:11 <DIR> -cd-h--- c:\docume~1\alluse~1\applic~1\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-03-29 09:00 30,464 a------- c:\windows\system32\drivers\nicsk32.sys
2009-03-29 00:39 3,968 a------- c:\windows\system32\drivers\AvgArCln.sys
2009-03-28 23:13 20,451 ----h--- c:\documents and settings\dean\Dean.exe
2009-03-20 20:30 <DIR> --d----- c:\documents and settings\dean\Tracing
2009-03-20 20:28 <DIR> --d----- c:\program files\Microsoft
2009-03-20 20:28 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-03-20 20:26 <DIR> --d----- c:\program files\common files\Windows Live
2009-03-18 15:11 7,168 a--sh--- c:\windows\Thumbs.db
2009-03-03 17:44 50,736 a---h--- c:\windows\system32\mlfcache.dat
2009-02-28 20:39 <DIR> --d----- c:\program files\mIRC

==================== Find3M ====================

2009-03-09 06:19 410,984 a------- c:\windows\system32\deploytk.dll
2009-02-06 19:52 49,504 a------- c:\windows\system32\sirenacm.dll
2009-01-30 16:10 6,784 a------- c:\windows\system32\drivers\osaio.sys
2009-01-18 22:26 75,264 a------- c:\windows\cadkasdeinst01e.exe
2008-06-29 18:49 152 a------- c:\documents and settings\dean\brdgInst.bat
2008-03-12 18:52 87,608 a------- c:\docume~1\dean\applic~1\inst.exe
2008-03-12 18:52 47,360 a------- c:\docume~1\dean\applic~1\pcouffin.sys

============= FINISH: 16:13:46,59 ===============







and attach:



UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-03-16.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 14.2.2008 16:13:01
System Uptime: 29.3.2009 16:08:16 (0 hours ago)

Motherboard: MICRO-STAR INT'L CO.,LTD. | | MS-1039
Processor: AMD Turion(tm) 64 Mobile Technology MT-37 | CPU 1 | 1989/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 93 GiB total, 28,328 GiB free.
D: is CDROM ()
E: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

3GP Player 2008
Ad-Aware
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge 1.0
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Common File Installer
Adobe Default Language CS3
Adobe Device Central CS3
Adobe Dreamweaver CS3
Adobe ExtendScript Toolkit 2
Adobe Extension Manager CS3
Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Help Center 1.0
Adobe Help Viewer CS3
Adobe PDF Library Files
Adobe Photoshop CS2
Adobe Reader 8.1.2
Adobe Reader 8.1.2 Security Update 1 (KB403742)
Adobe Setup
Adobe Stock Photos 1.0
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Agere Systems HDA Modem v6081
AIM Toolbar 5.0
Apple Mobile Device Support
Apple Software Update
Applian FLV Player
Athlon 64 Processor Driver
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
µTorrent
AVG Anti-Rootkit Free
BlueSoleil
Brava! Reader 3.0
BS.Player ControlBar
BS.Player FREE
Canon iP3500 series
Canon iP3500 series User Registration
Canon My Printer
Canon Utilities Easy-PhotoPrint EX
Canon Utilities Solution Menu
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help English
Choice Guard
Codec Pack - All In 1 6.0.3.0
ConvertXtoDVD 3.0.0.1
CorelDRAW Graphics Suite 12
DivXLand Media Subtitler
DVD Solution
Foxit PDF Editor
Google Earth
Hardware sensors monitor 4.4
HijackThis 1.99.1
Hotfix for Windows XP (KB915865)
Hotspot Shield 1.10
Japanese Fonts Support For Adobe Reader 8
Java(TM) 6 Update 13
Java(TM) 6 Update 4
Java(TM) 6 Update 5
Java(TM) 6 Update 7
KeyGen
LimeWire PRO 4.17.1
Matroska Pack - Lazy Man's MKV 0.9.9
McAfee SiteAdvisor
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0
Microsoft Application Error Reporting
Microsoft Bootvis
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Visual C++ 2005 Redistributable
mIRC
Mozilla Firefox (3.0.8)
MSVCRT
Nero 7 Demo
NetSetMan 2.4.0
Network Stumbler 0.4.0 (remove only)
NOD32 antivirus system
NOD32 FiX
O2Micro Flash Memory Card Windows Driver V2.04
Oxford Wordpower Genie
Power2Go 4.0
PowerDirector Express
PowerDVD
PowerISO
PowerProducer
Pro Evolution Soccer 2009
Ralink Wireless LAN Card
Realtek High Definition Audio Driver
Reganam Toolbar
Rollcage Stage II
Security Update for Windows XP (KB913446)
Segoe UI
Shockwave
Skins
SopCast 2.0.4
SpeedFan (remove only)
Spybot - Search & Destroy
SpywareBlaster 4.1
System Control Manager
TeamSpeak 2 RC2
TVUPlayer 2.4.1.0
Unlocker 1.8.5
Update for Windows XP (KB898461)
USB2.0 PC Camera (SN9C201&202)
Ventrilo Client
Viewpoint Media Player
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
Windows Live Upload Tool
WinRAR archiver
World of Warcraft
XviD MPEG-4 Video Codec

==== Event Viewer Messages From Past Week ========

23.3.2009 16:56:51, error: Service Control Manager [7001] - The Message Queuing Triggers service depends on the Message Queuing service which failed to start because of the following error: The dependency service or group failed to start.
23.3.2009 16:56:51, error: Service Control Manager [7001] - The Message Queuing service depends on the Distributed Transaction Coordinator service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
23.3.2009 16:56:30, error: NETLOGON [3095] - This computer is configured as a member of a workgroup, not as a member of a domain. The Netlogon service does not need to run in this configuration.
23.3.2009 16:19:26, error: ACPIEC [1] - \Device\ACPIEC: The embedded controller (EC) hardware didn't respond within the timeout period. This may indicate an error in the EC hardware or firmware, or possibly a poorly designed BIOS which accesses the EC in an unsafe manner. The EC driver will retry the failed transaction if possible.
23.3.2009 14:54:43, error: MRxSmb [8003] - The master browser has received a server announcement from the computer CS that believes that it is the master browser for the domain on transport NetBT_Tcpip_{48D92928-C979-4CC7-9DE7. The master browser is stopping or an election is being forced.
22.3.2009 17:50:17, error: MRxSmb [8003] - The master browser has received a server announcement from the computer CS-LAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{48D92928-C979-4CC7. The master browser is stopping or an election is being forced.
27.3.2009 10:17:34, error: MRxSmb [8003] - The master browser has received a server announcement from the computer CS-BOX that believes that it is the master browser for the domain on transport NetBT_Tcpip_{48D92928-C979-4CC7-9D. The master browser is stopping or an election is being forced.
28.3.2009 23:47:57, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000243' while processing the file 'a8St0tk.exe' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
29.3.2009 0:26:59, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments " " in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
29.3.2009 0:26:59, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
29.3.2009 0:27:45, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
29.3.2009 0:27:45, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
29.3.2009 0:27:45, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
29.3.2009 0:27:45, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
29.3.2009 0:27:45, error: Service Control Manager [7001] - The ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
29.3.2009 0:27:45, error: Service Control Manager [7001] - The Hotspot Shield Service service depends on the DHCP Client service which failed to start because of the following error: The dependency service or group failed to start.
29.3.2009 0:27:45, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
29.3.2009 0:27:45, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AmdK8 AvgLdx86 AvgMfx86 AvgTdiX Fips hmonitor IPSec MRxSmb NetBIOS NetBT nod32drv RasAcd Rdbss SCDEmu Tcpip WS2IFSL
29.3.2009 7:52:12, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments " " in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

==== End Of File ===========================

 

Hi fball

Please do this.

Download ComboFix from Here to your Desktop.

It's best to disable realtime protection applications as they sometimes interfere with the tool.
Check this link for any applicable programs you may have.

• Close all open programs and windows
• Double click combofix.exe and follow the prompts.
• Vista users right click Combofix.exe and select Run As Administrator.
• When finished, it shall produce a log for you. Post the Combofix log

Note: Do not mouseclick combofix's window while its running. That may cause it to stall

**NOTE - Allow ComboFix to update if prompted.

Thanks
Geri

 

Hello Geri,thanks for helping


Here is the ComboFix log (had to post it in 2 posts because its too large for 1 post,dunno why i see its Genie scout program (its for a game) so its long sorry about that)

ComboFix 09-04-04.01 - Dean 2009-04-07 15:41:54.1 - NTFSx86
Running from: c:\documents and settings\Dean\Desktop\ComboFix.exe
* Resident AV is active


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Dean\Application Data\inst.exe

.
((((((((((((((((((((((((( Files Created from 2009-03-07 to 2009-04-07 )))))))))))))))))))))))))))))))
.

2009-04-04 23:52 . 2009-04-04 23:52 <DIR> d-------- c:\windows\RestoreSafeDeleted
2009-04-04 23:49 . 2009-04-04 23:49 123 --a------ c:\windows\rootkitno.ini
2009-04-04 23:48 . 2009-04-04 23:48 45 --a------ c:\windows\system32\Partizan.RRI
2009-04-04 23:36 . 2009-04-04 23:36 (2) -rahs-ot- c:\windows\winstart.bat
2009-04-04 23:35 . 2009-04-04 23:52 <DIR> d-------- c:\program files\UnHackMe
2009-03-31 15:30 . 2009-03-31 18:08 <DIR> d-------- c:\documents and settings\All Users\Application Data\Symantec
2009-03-31 15:30 . 2009-03-31 15:30 <DIR> d-------- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-03-31 15:30 . 2009-03-31 18:08 <DIR> d-------- c:\documents and settings\All Users\Application Data\Norton
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\documents and settings\Dean\Application Data\Malwarebytes
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-03-30 17:25 . 2009-03-26 16:49 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-30 17:25 . 2009-03-26 16:49 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-03-30 15:53 . 2009-04-05 10:56 8,704 --ahs---- c:\windows\system32\Thumbs.db
2009-03-29 16:11 . 2009-04-04 13:02 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-03-29 01:26 . 2009-03-29 09:03 <DIR> d-------- c:\documents and settings\Administrator
2009-03-29 00:39 . 2007-01-18 14:00 3,968 --a------ c:\windows\system32\drivers\AvgArCln.sys
2009-03-20 20:30 . 2009-04-04 18:42 <DIR> d-------- c:\documents and settings\Dean\Tracing
2009-03-20 20:28 . 2009-03-20 20:28 <DIR> d-------- c:\program files\Windows Live SkyDrive
2009-03-20 20:28 . 2009-03-20 20:28 <DIR> d-------- c:\program files\Microsoft
2009-03-20 20:26 . 2009-03-20 20:26 <DIR> d-------- c:\program files\Common Files\Windows Live
2009-03-18 15:11 . 2009-03-30 15:56 44,032 --ahs---- c:\windows\Thumbs.db

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-05 11:46 --------- d-----w c:\documents and settings\Dean\Application Data\mIRC
2009-04-05 08:47 --------- d-----w c:\documents and settings\Dean\Application Data\uTorrent
2009-04-05 08:40 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2009-04-01 14:44 --------- d-----w c:\program files\SpeedFan
2009-03-31 17:12 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-29 10:37 --------- d-----w c:\program files\SpywareBlaster
2009-03-29 06:53 --------- d-----w c:\program files\Unlocker
2009-03-27 12:32 --------- d-----w c:\program files\Java
2009-03-20 18:28 --------- d-----w c:\program files\Windows Live
2009-03-19 14:34 --------- d-----w c:\documents and settings\Dean\Application Data\LimeWire
2009-03-13 13:37 --------- d-----w c:\documents and settings\Dean\Application Data\BSplayer
2009-03-11 17:07 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-09 04:19 410,984 ----a-w c:\windows\system32\deploytk.dll
2009-03-08 14:33 --------- d-----w c:\program files\LimeWire
2009-02-28 18:41 --------- d-----w c:\program files\mIRC
2009-02-26 16:04 --------- d-----w c:\program files\Windows Live Safety Center
2009-02-09 14:48 --------- d-----w c:\program files\Tortun
2009-02-06 17:52 49,504 ----a-w c:\windows\system32\sirenacm.dll
2009-01-18 20:26 75,264 ----a-w c:\windows\cadkasdeinst01e.exe
2008-06-29 16:49 152 ----a-w c:\documents and settings\Dean\brdgInst.bat
2008-03-12 16:52 47,360 ----a-w c:\documents and settings\Dean\Application Data\pcouffin.sys
.

------- Sigcheck -------

2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2qfe\user32.dll
2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\SoftwareDistribution\Download\6e49db26b225c64ffbbd852b587ab944\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\SoftwareDistribution\Download\6e49db26b225c64ffbbd852b587ab944\sp2qfe\user32.dll
2005-03-02 20:09 577024 de2db164bbb35db061af0997e4499054 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\user32.dll
2005-03-02 20:19 577024 1800f293bccc8ede8a70e12b88d80036 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\user32.dll
2004-08-04 13:00 577024 c72661f8552ace7c5c85e16a3cf505c4 c:\windows\system32\user32.dll

2006-08-16 14:14 70656 7b6a08441a4f11320421599d7ecf8d41 c:\windows\SoftwareDistribution\Download\fde4a5af73d5aee9b5faba71cbff1d6c\SP1QFE\ws2_32.dll
2004-08-04 13:00 82944 2ed0b7f12a60f90092081c50fa0ec2b2 c:\windows\system32\ws2_32.dll

2004-08-04 13:00 656384 c0823fc5469663ba63e7db88f9919d70 c:\windows\ie7\wininet.dll
2007-12-07 04:21 824832 806d274c9a6c3aaea5eae8e4af841e04 c:\windows\SoftwareDistribution\Download\8befe715852785f9b4f0ded848fd9c0d\SP2GDR\wininet.dll
2007-12-07 04:01 825344 b5b411bb229ae6ead7652a32ed47bfb9 c:\windows\SoftwareDistribution\Download\8befe715852785f9b4f0ded848fd9c0d\SP2QFE\wininet.dll
2007-12-07 04:21 824832 806d274c9a6c3aaea5eae8e4af841e04 c:\windows\SoftwareDistribution\Download\9489e810bc136788bfeb9b68b0d7dfee\sp2gdr\wininet.dll
2007-12-07 04:01 825344 b5b411bb229ae6ead7652a32ed47bfb9 c:\windows\SoftwareDistribution\Download\9489e810bc136788bfeb9b68b0d7dfee\sp2qfe\wininet.dll
2007-12-07 03:07 659456 57d1b5150cf6331fac6b3e04c1fcb966 c:\windows\SoftwareDistribution\Download\b386176bfcde202f7ed536e83198267a\sp2gdr\wininet.dll
2007-12-07 02:44 666112 085a7c37f9c6ede1ba870b7dbec06399 c:\windows\SoftwareDistribution\Download\b386176bfcde202f7ed536e83198267a\sp2qfe\wininet.dll
2007-10-11 01:56 824832 30c1e0f34ad2972c72a01db5c74ab065 c:\windows\SoftwareDistribution\Download\e3709fbfd9557a7d083f543d51d38612\SP2GDR\wininet.dll
2007-10-11 01:47 825344 0e5d918f87efa7d2424d66b499c7eb04 c:\windows\SoftwareDistribution\Download\e3709fbfd9557a7d083f543d51d38612\SP2QFE\wininet.dll
2007-08-13 19:54 818688 a4a0fc92358f39538a6494c42ef99fe9 c:\windows\system32\wininet.dll

2006-01-13 19:07 360448 5562cc0a47b2aef06d3417b733f3c195 c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
2004-08-04 13:00 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB913446$\tcpip.sys
2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\SoftwareDistribution\Download\146ae5e7b51a37f45e0e5cf03d0d5e3c\sp2gdr\tcpip.sys
2007-10-30 18:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\SoftwareDistribution\Download\146ae5e7b51a37f45e0e5cf03d0d5e3c\sp2qfe\tcpip.sys
2008-10-16 14:59 359808 6af91ce5baa449eb9a72f17da063720c c:\windows\system32\drivers\TCPIP.SYS

2004-08-04 13:00 502272 01c3346c241652f43aed8e2149881bfe c:\windows\system32\winlogon.exe

2004-08-04 13:00 182912 558635d3af1c7546d26067d5d9b6959e c:\windows\system32\drivers\ndis.sys

2004-08-04 13:00 29056 4448006b6bc60e6c027932cfc38d6855 c:\windows\system32\drivers\ip6fw.sys

2007-02-28 10:38 2057600 515d30e2c90a3665a2739309334c9283 c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntkrnlpa.exe
2007-02-28 11:15 2059392 4d3dbdccbf97f5ba1e74f322b155c3ba c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntkrnlpa.exe
2005-03-02 02:34 2056832 81013f36b21c7f72cf784cc6731e0002 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\ntkrnlpa.exe
2005-03-02 02:36 2056832 d8aba3eab509627e707a3b14f00fbb6b c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\ntkrnlpa.exe
2004-08-04 13:00 2056832 947fb1d86d14afcffdb54bf837ec25d0 c:\windows\system32\ntkrnlpa.exe

2007-02-28 11:10 2180352 582a8dbaa58c3b1f176eb2817daee77c c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntoskrnl.exe
2007-02-28 11:55 2182144 5a5c8db4aa962c714c8371fbdf189fc9 c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntoskrnl.exe
2005-03-02 02:59 2179328 4d4cf2c14550a4b7718e94a6e581856e c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\ntoskrnl.exe
2005-03-02 03:04 2179456 28187802b7c368c0d3aef7d4c382aabb c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\ntoskrnl.exe
2004-08-04 13:00 2180992 ce218bc7088681faa06633e218596ca7 c:\windows\system32\ntoskrnl.exe

2004-08-04 13:00 1032192 a0732187050030ae399b241436565e64 c:\windows\explorer.exe
2007-06-13 12:23 1033216 97bd6515465659ff8f3b7be375b2ea87 c:\windows\SoftwareDistribution\Download\2a2715f6180c3bfa2a58178525f24c67\sp2gdr\explorer.exe
2007-06-13 13:26 1033216 7712df0cdde3a5ac89843e61cd5b3658 c:\windows\SoftwareDistribution\Download\2a2715f6180c3bfa2a58178525f24c67\sp2qfe\explorer.exe
2007-06-13 12:23 1033216 97bd6515465659ff8f3b7be375b2ea87 c:\windows\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2gdr\explorer.exe
2007-06-13 13:26 1033216 7712df0cdde3a5ac89843e61cd5b3658 c:\windows\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2qfe\explorer.exe

2004-08-04 13:00 108032 c6ce6eec82f187615d1002bb3bb50ed4 c:\windows\system32\services.exe

2004-08-04 13:00 13312 84885f9b82f4d55c6146ebf6065d75d2 c:\windows\system32\lsass.exe

2004-08-04 13:00 15360 24232996a38c0b0cf151c2140ae29fc8 c:\windows\system32\ctfmon.exe

2005-06-11 01:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2gdr\spoolsv.exe
2005-06-11 02:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788 c:\windows\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2qfe\spoolsv.exe
2004-08-04 13:00 57856 7435b108b935e42ea92ca94f59c8e717 c:\windows\system32\spoolsv.exe

2004-08-04 13:00 24576 39b1ffb03c2296323832acbae50d2aff c:\windows\system32\userinit.exe

2004-08-04 14:00 295424 b60c877d16d9c880b952fda04adf16e6 c:\windows\system32\termsrv.dll

2007-04-16 17:52 984576 a01f9ca902a88f7ced06884174d6419d c:\windows\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\sp2gdr\kernel32.dll
2007-04-16 18:07 986112 09f7cb3687f86edaa4ca081f7ab66c03 c:\windows\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\sp2qfe\kernel32.dll
2004-08-04 13:00 983552 888190e31455fad793312f8d087146eb c:\windows\system32\kernel32.dll

2004-08-04 13:00 17408 1b5f6923abb450692e9fe0672c897aed c:\windows\system32\powrprof.dll

2004-08-04 13:00 110080 87ca7ce6469577f059297b9d6556d66d c:\windows\system32\imm32.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{db9d7a78-a76c-4bf2-97c6-258925ee1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]
2008-11-30 13:41 1784856 --a------ c:\program files\Reganam\tbReg1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2008-11-26 23:03 204248 --a------ c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{db9d7a78-a76c-4bf2-97c6-258925ee1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{DB9D7A78-A76C-4BF2-97C6-258925EE1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE "= "c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} "= "c:\program files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-10-28 94208]
"MSMSGS "= "c:\program files\Messenger\msmsgs.exe" [2004-08-04 1667584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MGSysCtrl "= "c:\program files\System Control Manager\MGSysCtrl.exe" [2006-03-24 179200]
"nod32kui "= "c:\program files\Eset\nod32kui.exe" [2008-02-14 949376]
"NeroFilterCheck "= "c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl "= "c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-29 32768]
"tsnp2std "= "c:\windows\tsnp2std.exe" [2005-08-17 90112]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"CanonSolutionMenu "= "c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter "= "c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1603152]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"SunJavaUpdateSched "= "c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"AGRSMMSG "= "AGRSMMSG.exe" [2005-09-09 c:\windows\AGRSMMSG.exe]
"RTHDCPL "= "RTHDCPL.EXE" [2006-03-14 c:\windows\RTHDCPL.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE "= "c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoChangeAnimation "= 0 (0x0)
"NoStrCmpLogical "= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg "= 0 (0x0)
"NoStrCmpLogical "= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.clmp3enc "= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@= "Service "

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BlueSoleil.lnk]
backup=c:\windows\pss\BlueSoleil.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameXL

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BugCD Pretrazivac]
--a------ 2002-08-12 02:09 49152 c:\documents and settings\All Users\BugCD Pretrazivac\BugCD Pretrazivac.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe "=
"c:\\Program Files\\Messenger\\msmsgs.exe "=
"c:\\Program Files\\RALINK\\Common\\RaUI.exe "=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CCC.exe "=
"c:\\Program Files\\Unlocker\\UnlockerAssistant.exe "=
"c:\\Program Files\\PES 2009\\pes2009.exe "=
"c:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe "=
"c:\\WINDOWS\\tsnp2std.exe "=
"c:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe "=
"c:\\Program Files\\Java\\jre6\\bin\\jusched.exe "=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\MOM.exe "=
"c:\\WINDOWS\\system32\\userinit.exe "=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe "=
"c:\\WINDOWS\\AGRSMMSG.exe "=
"c:\\Program Files\\System Control Manager\\MGSysCtrl.exe "=
"c:\\Program Files\\Eset\\nod32kui.exe "=
"c:\\WINDOWS\\RTHDCPL.EXE "=

R0 Lbd;Lbd; [x]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; [x]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2008-12-05 206096]
R2 nicsk32;nicsk32; [x]
R3 ATE_PROCMON;ATE_PROCMON; [x]
S0 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2media.sys [2006-02-27 34880]
S0 O2SDRDR;O2SDRDR;c:\windows\system32\DRIVERS\o2sd.sys [2006-02-20 29056]
S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2008-02-14 15424]
S2 NishService;SCM Driver Daemon;c:\program files\System Control Manager\edd.exe [2006-03-22 40960]
S2 osaio;osaio;c:\windows\system32\drivers\osaio.sys [2009-01-30 6784]
S3 MGHwCtrl;MGHwCtrl;c:\windows\system32\drivers\MGHwCtrl.sys [2005-03-10 20128]


--- Other Services/Drivers In Memory ---

*Deregistered* - AegisP
*Deregistered* - AFD
*Deregistered* - AMON
*Deregistered* - Apple Mobile Device
*Deregistered* - Arp1394
*Deregistered* - Ati HotKey Poller
*Deregistered* - ATI Smart
*Deregistered* - audstub
*Deregistered* - AVG Anti-Rootkit
*Deregistered* - AvgArCln
*Deregistered* - Beep
*Deregistered* - BlueletAudio
*Deregistered* - BlueletSCOAudio
*Deregistered* - BlueSoleil Hid Service
*Deregistered* - Bonjour Service
*Deregistered* - BT
*Deregistered* - BTHidEnum
*Deregistered* - BTHidMgr
*Deregistered* - Cdfs
*Deregistered* - Compbatt
*Deregistered* - dmio
*Deregistered* - dmload
*Deregistered* - Fips
*Deregistered* - FltMgr
*Deregistered* - Ftdisk
*Deregistered* - giveio
*Deregistered* - Gpc
*Deregistered* - hmonitor
*Deregistered* - IpNat
*Deregistered* - IPSec
*Deregistered* - JavaQuickStarterService
*Deregistered* - KSecDD
*Deregistered* - MGHwCtrl
*Deregistered* - mnmdd
*Deregistered* - Modem
*Deregistered* - MountMgr
*Deregistered* - MQAC
*Deregistered* - MRxDAV
*Deregistered* - MRxSmb
*Deregistered* - Msfs
*Deregistered* - mssmbios
*Deregistered* - Mup
*Deregistered* - NDIS
*Deregistered* - NdisTapi
*Deregistered* - NdisWan
*Deregistered* - NDProxy
*Deregistered* - NetBIOS
*Deregistered* - NetBT
*Deregistered* - NishService
*Deregistered* - nod32drv
*Deregistered* - NOD32krn
*Deregistered* - Npfs
*Deregistered* - Ntfs
*Deregistered* - NtLmSsp
*Deregistered* - Null
*Deregistered* - O2Flash
*Deregistered* - osaio
*Deregistered* - PartMgr
*Deregistered* - pcouffin
*Deregistered* - PptpMiniport
*Deregistered* - PSched
*Deregistered* - RasAcd
*Deregistered* - Rasl2tp
*Deregistered* - RasPppoe
*Deregistered* - Raspti
*Deregistered* - Rdbss
*Deregistered* - RDPCDD
*Deregistered* - rdpdr
*Deregistered* - RMCAST
*Deregistered* - SCDEmu
*Deregistered* - Serenum
*Deregistered* - SMBios
*Deregistered* - speedfan
*Deregistered* - sptd
*Deregistered* - sr
*Deregistered* - swenum
*Deregistered* - tapvpn
*Deregistered* - Tcpip
*Deregistered* - TermDD
*Deregistered* - Update
*Deregistered* - VcommMgr
*Deregistered* - VgaSave
*Deregistered* - VolSnap
*Deregistered* - Wanarp
*Deregistered* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder

2009-03-30 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []

2009-03-31 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-Power2GoExpress - (no file)


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.bsplayer-search.com/startpage
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-us\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
TCP: {48D92928-C979-4CC7-9DE7-86E142BD7207} = 195.29.150.3,195.29.150.4
TCP: {9BD66CCF-9682-49FC-9A3A-D7347256F955} = 195.29.150.3,195.29.150.4
FF - ProfilePath - c:\documents and settings\Dean\Application Data\Mozilla\Firefox\Profiles\rfgmamuz.default\
FF - prefs.js: browser.startup.homepage - google.hr
FF - component: c:\program files\BS.Player ControlBar\FirefoxDTT\components\BSToolbarFF.dll
FF - plugin: c:\documents and settings\Dean\Application Data\Mozilla\Firefox\Profiles\rfgmamuz.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-07 15:44:48
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008]
"ShortlistDir "=" "
"LangDB "=" "
"LastSaveGame "=" "
"Language "= "English "
"LoadLangDB "=dword:00000000
"CompressHistoryPoints "=dword:00000000
"HighlightedAttributes "=dword:00000000
"MinCondition "=dword:00000050
"SkinID "=dword:00000001
"LastUpdateCheck "=dword:00000000
"HighQualityGUI "=dword:00000001
"AutomaticallyUpdateCheck "=dword:00000001
"AdvancedGeneration "=dword:00000000
"TranslateStaffSkills "=dword:00000001
"TranslatePlayerSkills "=dword:00000001
"TranslatePositions "=dword:00000001
"ShowHistory "=dword:00000001
"WindowState "=dword:00000000
"WindowHeight "=dword:0000032c
"WindowWidth "=dword:000003fc
"WindowLeft "=dword:00000082
"WindowTop "=dword:00000000
"UseProxy "=dword:00000000
"ProxyHost "=" "
"ProxyPort "=" "
"UseAuthentication "=dword:00000000
"UserName "=" "
"UserPassword "=" "

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Clubs]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000032
"Position4 "=dword:00000004
"Visible4 "=dword:00000001
"Width4 "=dword:00000032
"Position5 "=dword:00000005
"Visible5 "=dword:00000001
"Width5 "=dword:00000050
"Position6 "=dword:00000006
"Visible6 "=dword:00000001
"Width6 "=dword:00000050
"Position7 "=dword:00000007
"Visible7 "=dword:00000001
"Width7 "=dword:00000050
"Position8 "=dword:00000008
"Visible8 "=dword:00000000
"Width8 "=dword:00000050
"Position9 "=dword:00000009
"Visible9 "=dword:00000000
"Width9 "=dword:0000002d
"Position10 "=dword:0000000a
"Visible10 "=dword:00000000
"Width10 "=dword:0000001e
"Position11 "=dword:0000000b
"Visible11 "=dword:00000000
"Width11 "=dword:0000001e
"Position12 "=dword:0000000c
"Visible12 "=dword:00000000
"Width12 "=dword:0000001e
"Position13 "=dword:0000000d
"Visible13 "=dword:00000001
"Width13 "=dword:0000003c
"Position14 "=dword:0000000e
"Visible14 "=dword:00000000
"Width14 "=dword:00000032
"Position15 "=dword:0000000f
"Visible15 "=dword:00000000
"Width15 "=dword:00000032
"Position16 "=dword:00000010
"Visible16 "=dword:00000000
"Width16 "=dword:00000032
"Position17 "=dword:00000011
"Visible17 "=dword:00000001
"Width17 "=dword:00000050
"Position18 "=dword:00000012
"Visible18 "=dword:00000001
"Width18 "=dword:00000050
"Position19 "=dword:00000013
"Visible19 "=dword:00000000
"Width19 "=dword:00000050

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Players]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000037
"Position4 "=dword:00000008
"Visible4 "=dword:00000001
"Width4 "=dword:00000023
"Position5 "=dword:00000009
"Visible5 "=dword:00000001
"Width5 "=dword:00000028
"Position6 "=dword:0000000a
"Visible6 "=dword:00000001
"Width6 "=dword:00000028
"Position7 "=dword:0000000c
"Visible7 "=dword:00000001
"Width7 "=dword:0000004b
"Position8 "=dword:0000000d
"Visible8 "=dword:00000001
"Width8 "=dword:0000004b
"Position9 "=dword:0000000e
"Visible9 "=dword:00000001
"Width9 "=dword:00000050
"Position10 "=dword:00000010
"Visible10 "=dword:00000000
"Width10 "=dword:00000050
"Position11 "=dword:00000011
"Visible11 "=dword:00000000
"Width11 "=dword:0000004b
"Position12 "=dword:00000012
"Visible12 "=dword:00000000
"Width12 "=dword:0000002d
"Position13 "=dword:00000013
"Visible13 "=dword:00000000
"Width13 "=dword:0000003c
"Position14 "=dword:00000014
"Visible14 "=dword:00000000
"Width14 "=dword:0000004b
"Position15 "=dword:00000015
"Visible15 "=dword:00000000
"Width15 "=dword:00000064
"Position16 "=dword:00000016
"Visible16 "=dword:00000000
"Width16 "=dword:00000064
"Position17 "=dword:00000017
"Visible17 "=dword:00000000
"Width17 "=dword:0000004b
"Position18 "=dword:00000018
"Visible18 "=dword:00000000
"Width18 "=dword:00000064
"Position19 "=dword:00000019
"Visible19 "=dword:00000000
"Width19 "=dword:0000003c
"Position20 "=dword:0000001a
"Visible20 "=dword:00000000
"Width20 "=dword:0000004b
"Position21 "=dword:0000001b
"Visible21 "=dword:00000000
"Width21 "=dword:00000050
"Position22 "=dword:0000001c
"Visible22 "=dword:00000000
"Width22 "=dword:00000073
"Position23 "=dword:0000001d
"Visible23 "=dword:00000000
"Width23 "=dword:00000050
"Position24 "=dword:0000001e
"Visible24 "=dword:00000000
"Width24 "=dword:0000005a
"Position25 "=dword:0000001f
"Visible25 "=dword:00000000
"Width25 "=dword:0000006e
"Position26 "=dword:00000020
"Visible26 "=dword:00000000
"Width26 "=dword:00000064
"Position27 "=dword:00000021
"Visible27 "=dword:00000000
"Width27 "=dword:00000087
"Position28 "=dword:00000022
"Visible28 "=dword:00000000
"Width28 "=dword:00000064
"Position29 "=dword:00000023
"Visible29 "=dword:00000000
"Width29 "=dword:00000064
"Position30 "=dword:00000024
"Visible30 "=dword:00000000
"Width30 "=dword:00000046
"Position31 "=dword:00000025
"Visible31 "=dword:00000000
"Width31 "=dword:0000004b
"Position32 "=dword:00000026
"Visible32 "=dword:00000000
"Width32 "=dword:00000046
"Position33 "=dword:00000027
"Visible33 "=dword:00000000
"Width33 "=dword:0000004b
"Position34 "=dword:00000028
"Visible34 "=dword:00000000
"Width34 "=dword:0000003c
"Position35 "=dword:0000002a
"Visible35 "=dword:00000000
"Width35 "=dword:00000064
"Position36 "=dword:0000002e
"Visible36 "=dword:00000000
"Width36 "=dword:00000073
"Position37 "=dword:00000030
"Visible37 "=dword:00000000
"Width37 "=dword:0000005f
"Position38 "=dword:00000033
"Visible38 "=dword:00000000
"Width38 "=dword:00000091
"Position39 "=dword:00000035
"Visible39 "=dword:00000000
"Width39 "=dword:0000003c
"Position40 "=dword:0000002c
"Visible40 "=dword:00000000
"Width40 "=dword:0000005a
"Position41 "=dword:00000036
"Visible41 "=dword:00000000
"Width41 "=dword:00000041
"Position42 "=dword:00000029
"Visible42 "=dword:00000000
"Width42 "=dword:00000050
"Position43 "=dword:0000002b
"Visible43 "=dword:00000000
"Width43 "=dword:00000055
"Position44 "=dword:0000002d
"Visible44 "=dword:00000000
"Width44 "=dword:0000005f
"Position45 "=dword:00000037
"Visible45 "=dword:00000000
"Width45 "=dword:00000050
"Position46 "=dword:00000038
"Visible46 "=dword:00000000
"Width46 "=dword:0000004b
"Position47 "=dword:00000039
"Visible47 "=dword:00000000
"Width47 "=dword:0000004b
"Position48 "=dword:0000003a
"Visible48 "=dword:00000000
"Width48 "=dword:00000046
"Position49 "=dword:0000003b
"Visible49 "=dword:00000000
"Width49 "=dword:00000032
"Position50 "=dword:0000003c
"Visible50 "=dword:00000000
"Width50 "=dword:0000003c
"Position51 "=dword:0000003d
"Visible51 "=dword:00000000
"Width51 "=dword:0000004b
"Position52 "=dword:0000003e
"Visible52 "=dword:00000000
"Width52 "=dword:0000003c
"Position53 "=dword:0000003f
"Visible53 "=dword:00000000
"Width53 "=dword:00000037
"Position54 "=dword:00000040
"Visible54 "=dword:00000000
"Width54 "=dword:00000069
"Position55 "=dword:00000041
"Visible55 "=dword:00000000
"Width55 "=dword:0000005a
"Position56 "=dword:00000044
"Visible56 "=dword:00000000
"Width56 "=dword:0000004b
"Position57 "=dword:00000045
"Visible57 "=dword:00000000
"Width57 "=dword:0000004b
"Position58 "=dword:00000046
"Visible58 "=dword:00000000
"Width58 "=dword:00000037
"Position59 "=dword:00000047
"Visible59 "=dword:00000000
"Width59 "=dword:0000003c
"Position60 "=dword:00000048
"Visible60 "=dword:00000000
"Width60 "=dword:0000003c
"Position61 "=dword:00000049
"Visible61 "=dword:00000000
"Width61 "=dword:00000041
"Position62 "=dword:0000004a
"Visible62 "=dword:00000000
"Width62 "=dword:00000055
"Position63 "=dword:0000004b
"Visible63 "=dword:00000000
"Width63 "=dword:0000003c
"Position64 "=dword:0000004c
"Visible64 "=dword:00000000
"Width64 "=dword:0000003c
"Position65 "=dword:0000004d
"Visible65 "=dword:00000000
"Width65 "=dword:0000004b
"Position66 "=dword:0000004e
"Visible66 "=dword:00000000
"Width66 "=dword:0000003c
"Position67 "=dword:0000004f
"Visible67 "=dword:00000000
"Width67 "=dword:00000046
"Position68 "=dword:00000050
"Visible68 "=dword:00000000
"Width68 "=dword:00000028
"Position69 "=dword:00000051
"Visible69 "=dword:00000000
"Width69 "=dword:00000041
"Position70 "=dword:00000052
"Visible70 "=dword:00000000
"Width70 "=dword:0000003c
"Position71 "=dword:00000053
"Visible71 "=dword:00000000
"Width71 "=dword:00000069
"Position72 "=dword:00000054
"Visible72 "=dword:00000000
"Width72 "=dword:00000041
"Position73 "=dword:00000055
"Visible73 "=dword:00000000
"Width73 "=dword:0000005f
"Position74 "=dword:00000056
"Visible74 "=dword:00000000
"Width74 "=dword:0000003c
"Position75 "=dword:00000057
"Visible75 "=dword:00000000
"Width75 "=dword:00000037
"Position76 "=dword:00000058
"Visible76 "=dword:00000000
"Width76 "=dword:0000004b
"Position77 "=dword:00000059
"Visible77 "=dword:00000000
"Width77 "=dword:00000050
"Position78 "=dword:0000005a
"Visible78 "=dword:00000000
"Width78 "=dword:00000037
"Position79 "=dword:0000005b
"Visible79 "=dword:00000000
"Width79 "=dword:00000037
"Position80 "=dword:0000005c
"Visible80 "=dword:00000000
"Width80 "=dword:0000005a
"Position81 "=dword:0000005d
"Visible81 "=dword:00000000
"Width81 "=dword:0000004b
"Position82 "=dword:0000005e
"Visible82 "=dword:00000000
"Width82 "=dword:00000055
"Position83 "=dword:0000005f
"Visible83 "=dword:00000000
"Width83 "=dword:0000002d
"Position84 "=dword:00000060
"Visible84 "=dword:00000000
"Width84 "=dword:00000037
"Position85 "=dword:00000061
"Visible85 "=dword:00000000
"Width85 "=dword:0000003c
"Position86 "=dword:00000062
"Visible86 "=dword:00000000
"Width86 "=dword:00000046
"Position87 "=dword:00000063
"Visible87 "=dword:00000000
"Width87 "=dword:0000003c
"Position88 "=dword:00000064
"Visible88 "=dword:00000000
"Width88 "=dword:0000005a
"Position89 "=dword:00000065
"Visible89 "=dword:00000000
"Width89 "=dword:0000003c
"Position90 "=dword:00000066
"Visible90 "=dword:00000000
"Width90 "=dword:00000050
"Position91 "=dword:00000067
"Visible91 "=dword:00000000
"Width91 "=dword:00000046
"Position92 "=dword:00000068
"Visible92 "=dword:00000000
"Width92 "=dword:0000005a
"Position93 "=dword:00000069
"Visible93 "=dword:00000000
"Width93 "=dword:00000037
"Position94 "=dword:0000006a
"Visible94 "=dword:00000000
"Width94 "=dword:0000003c
"Position95 "=dword:0000006b
"Visible95 "=dword:00000000
"Width95 "=dword:0000003c
"Position96 "=dword:0000006c
"Visible96 "=dword:00000000
"Width96 "=dword:00000046
"Position97 "=dword:0000006d
"Visible97 "=dword:00000000
"Width97 "=dword:00000046
"Position98 "=dword:0000006e
"Visible98 "=dword:00000000
"Width98 "=dword:00000055
"Position99 "=dword:0000006f
"Visible99 "=dword:00000000
"Width99 "=dword:00000073
"Position100 "=dword:00000042
"Visible100 "=dword:00000000
"Width100 "=dword:00000041
"Position101 "=dword:00000070
"Visible101 "=dword:00000000
"Width101 "=dword:0000003c
"Position102 "=dword:00000071
"Visible102 "=dword:00000000
"Width102 "=dword:0000003c
"Position103 "=dword:00000072
"Visible103 "=dword:00000000
"Width103 "=dword:00000046
"Position104 "=dword:00000073
"Visible104 "=dword:00000000
"Width104 "=dword:0000003c
"Position105 "=dword:00000074
"Visible105 "=dword:00000000
"Width105 "=dword:00000041
"Position106 "=dword:0000000f
"Visible106 "=dword:00000001
"Width106 "=dword:00000050
"Position107 "=dword:0000000b
"Visible107 "=dword:00000001
"Width107 "=dword:00000028
"Position108 "=dword:00000043
"Visible108 "=dword:00000000
"Width108 "=dword:00000050
"Position109 "=dword:0000002f
"Visible109 "=dword:00000000
"Width109 "=dword:00000050
"Position110 "=dword:00000031
"Visible110 "=dword:00000000
"Width110 "=dword:00000055
"Position111 "=dword:00000032
"Visible111 "=dword:00000000
"Width111 "=dword:00000082
"Position112 "=dword:00000034
"Visible112 "=dword:00000000
"Width112 "=dword:00000087
"Position113 "=dword:00000075
"Visible113 "=dword:00000000
"Width113 "=dword:00000050
"Position114 "=dword:00000076
"Visible114 "=dword:00000000
"Width114 "=dword:00000050
"Position115 "=dword:00000077
"Visible115 "=dword:00000000
"Width115 "=dword:00000050
"Position116 "=dword:00000078
"Visible116 "=dword:00000000
"Width116 "=dword:00000050
"Position117 "=dword:00000079
"Visible117 "=dword:00000000
"Width117 "=dword:00000050
"Position118 "=dword:0000007a
"Visible118 "=dword:00000000
"Width118 "=dword:00000050
"Position119 "=dword:0000007b
"Visible119 "=dword:00000000
"Width119 "=dword:00000050
"Position120 "=dword:0000007c
"Visible120 "=dword:00000000
"Width120 "=dword:00000050
"Position121 "=dword:0000007d
"Visible121 "=dword:00000000
"Width121 "=dword:00000050
"Position122 "=dword:0000007e
"Visible122 "=dword:00000000
"Width122 "=dword:00000050
"Position123 "=dword:0000007f
"Visible123 "=dword:00000000
"Width123 "=dword:00000050
"Position124 "=dword:00000080
"Visible124 "=dword:00000000
"Width124 "=dword:00000050
"Position125 "=dword:00000081
"Visible125 "=dword:00000000
"Width125 "=dword:00000050
"Position126 "=dword:00000082
"Visible126 "=dword:00000000
"Width126 "=dword:00000050
"Position127 "=dword:00000083
"Visible127 "=dword:00000000
"Width127 "=dword:00000050
"Position128 "=dword:00000084
"Visible128 "=dword:00000000
"Width128 "=dword:00000050
"Position129 "=dword:00000085
"Visible129 "=dword:00000000
"Width129 "=dword:00000050
"Position130 "=dword:00000086
"Visible130 "=dword:00000000
"Width130 "=dword:00000050
"Position131 "=dword:00000087
"Visible131 "=dword:00000000
"Width131 "=dword:00000050
"Position132 "=dword:00000088
"Visible132 "=dword:00000000
"Width132 "=dword:00000050
"Position133 "=dword:00000089
"Visible133 "=dword:00000000
"Width133 "=dword:00000050
"Position134 "=dword:0000008a
"Visible134 "=dword:00000000
"Width134 "=dword:00000050
"Position135 "=dword:0000008b
"Visible135 "=dword:00000000
"Width135 "=dword:00000050
"Position136 "=dword:0000008c
"Visible136 "=dword:00000000
"Width136 "=dword:00000050
"Position137 "=dword:0000008d
"Visible137 "=dword:00000000
"Width137 "=dword:00000050
"Position138 "=dword:0000008e
"Visible138 "=dword:00000000
"Width138 "=dword:00000050
"Position139 "=dword:0000008f
"Visible139 "=dword:00000000
"Width139 "=dword:00000050
"Position140 "=dword:00000090
"Visible140 "=dword:00000000
"Width140 "=dword:00000050
"Position141 "=dword:00000091
"Visible141 "=dword:00000000
"Width141 "=dword:00000050
"Position142 "=dword:00000092
"Visible142 "=dword:00000000
"Width142 "=dword:00000050
"Position143 "=dword:00000093
"Visible143 "=dword:00000000
"Width143 "=dword:00000050
"Position144 "=dword:00000094
"Visible144 "=dword:00000000
"Width144 "=dword:00000050
"Position145 "=dword:00000095
"Visible145 "=dword:00000000
"Width145 "=dword:00000050
"Position146 "=dword:00000004
"Visible146 "=dword:00000000
"Width146 "=dword:00000037
"Position147 "=dword:00000005
"Visible147 "=dword:00000000
"Width147 "=dword:00000028
"Position148 "=dword:00000006
"Visible148 "=dword:00000000
"Width148 "=dword:00000037
"Position149 "=dword:00000007
"Visible149 "=dword:00000001
"Width149 "=dword:00000028

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Staff]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000069
"Position4 "=dword:00000005
"Visible4 "=dword:00000001
"Width4 "=dword:00000028
"Position5 "=dword:00000006
"Visible5 "=dword:00000001
"Width5 "=dword:00000028
"Position6 "=dword:00000004
"Visible6 "=dword:00000001
"Width6 "=dword:00000028
"Position7 "=dword:00000007
"Visible7 "=dword:00000001
"Width7 "=dword:00000050
"Position8 "=dword:00000008
"Visible8 "=dword:00000000
"Width8 "=dword:00000050
"Position9 "=dword:00000009
"Visible9 "=dword:00000000
"Width9 "=dword:0000004b
"Position10 "=dword:0000000a
"Visible10 "=dword:00000000
"Width10 "=dword:0000002d
"Position11 "=dword:0000000b
"Visible11 "=dword:00000000
"Width11 "=dword:0000003c
"Position12 "=dword:0000000c
"Visible12 "=dword:00000000
"Width12 "=dword:0000004b
"Position13 "=dword:0000000d
"Visible13 "=dword:00000000
"Width13 "=dword:00000064
"Position14 "=dword:0000000e
"Visible14 "=dword:00000000
"Width14 "=dword:00000064
"Position15 "=dword:0000000f
"Visible15 "=dword:00000000
"Width15 "=dword:0000004b
"Position16 "=dword:00000010
"Visible16 "=dword:00000000
"Width16 "=dword:00000064
"Position17 "=dword:00000011
"Visible17 "=dword:00000000
"Width17 "=dword:0000003c
"Position18 "=dword:00000012
"Visible18 "=dword:00000000
"Width18 "=dword:0000004b
"Position19 "=dword:00000013
"Visible19 "=dword:00000000
"Width19 "=dword:00000050
"Position20 "=dword:00000014
"Visible20 "=dword:00000000
"Width20 "=dword:00000046
"Position21 "=dword:00000015
"Visible21 "=dword:00000000
"Width21 "=dword:0000004b
"Position22 "=dword:00000016
"Visible22 "=dword:00000000
"Width22 "=dword:00000046
"Position23 "=dword:00000017
"Visible23 "=dword:00000000
"Width23 "=dword:00000046
"Position24 "=dword:00000018
"Visible24 "=dword:00000000
"Width24 "=dword:0000003c
"Position25 "=dword:00000019
"Visible25 "=dword:00000000
"Width25 "=dword:00000041
"Position26 "=dword:0000001a
"Visible26 "=dword:00000000
"Width26 "=dword:0000003c
"Position27 "=dword:0000001b
"Visible27 "=dword:00000000
"Width27 "=dword:00000055
"Position28 "=dword:0000001c
"Visible28 "=dword:00000000
"Width28 "=dword:00000069
"Position29 "=dword:0000001d
"Visible29 "=dword:00000000
"Width29 "=dword:0000006e
"Position30 "=dword:0000001e
"Visible30 "=dword:00000000
"Width30 "=dword:00000064
"Position31 "=dword:0000001f
"Visible31 "=dword:00000000
"Width31 "=dword:00000078
"Position32 "=dword:00000020
"Visible32 "=dword:00000000
"Width32 "=dword:00000064
"Position33 "=dword:00000021
"Visible33 "=dword:00000000
"Width33 "=dword:00000087
"Position34 "=dword:00000022
"Visible34 "=dword:00000000
"Width34 "=dword:00000069
"Position35 "=dword:00000023
"Visible35 "=dword:00000000
"Width35 "=dword:0000006e
"Position36 "=dword:00000024
"Visible36 "=dword:00000000
"Width36 "=dword:00000073
"Position37 "=dword:00000025
"Visible37 "=dword:00000000
"Width37 "=dword:0000004b
"Position38 "=dword:00000026
"Visible38 "=dword:00000000
"Width38 "=dword:0000002d
"Position39 "=dword:00000027
"Visible39 "=dword:00000000
"Width39 "=dword:00000055
"Position40 "=dword:00000028
"Visible40 "=dword:00000000
"Width40 "=dword:00000046
"Position41 "=dword:00000029
"Visible41 "=dword:00000000
"Width41 "=dword:0000004b
"Position42 "=dword:0000002a
"Visible42 "=dword:00000000
"Width42 "=dword:0000003c
"Position43 "=dword:0000002b
"Visible43 "=dword:00000000
"Width43 "=dword:00000046
"Position44 "=dword:0000002c
"Visible44 "=dword:00000000
"Width44 "=dword:00000073
"Position45 "=dword:0000002d
"Visible45 "=dword:00000000
"Width45 "=dword:0000004b
"Position46 "=dword:0000002e
"Visible46 "=dword:00000000
"Width46 "=dword:00000073
"Position47 "=dword:0000002f
"Visible47 "=dword:00000000
"Width47 "=dword:0000007d
"Position48 "=dword:00000030
"Visible48 "=dword:00000000
"Width48 "=dword:0000006e
"Position49 "=dword:00000031
"Visible49 "=dword:00000000
"Width49 "=dword:00000037
"Position50 "=dword:00000032
"Visible50 "=dword:00000000
"Width50 "=dword:00000064
"Position51 "=dword:00000033
"Visible51 "=dword:00000000
"Width51 "=dword:00000037
"Position52 "=dword:00000034
"Visible52 "=dword:00000000
"Width52 "=dword:0000004b
"Position53 "=dword:00000035
"Visible53 "=dword:00000000
"Width53 "=dword:00000046
"Position54 "=dword:00000036
"Visible54 "=dword:00000000
"Width54 "=dword:00000037
"Position55 "=dword:00000037
"Visible55 "=dword:00000000
"Width55 "=dword:0000003c
"Position56 "=dword:00000038
"Visible56 "=dword:00000000
"Width56 "=dword:00000055
"Position57 "=dword:00000039
"Visible57 "=dword:00000000
"Width57 "=dword:0000003c
"Position58 "=dword:0000003a
"Visible58 "=dword:00000000
"Width58 "=dword:0000003c
"Position59 "=dword:0000003b
"Visible59 "=dword:00000000
"Width59 "=dword:00000055
"Position60 "=dword:0000003c
"Visible60 "=dword:00000000
"Width60 "=dword:00000046
"Position61 "=dword:0000003d
"Visible61 "=dword:00000000
"Width61 "=dword:0000004b
"Position62 "=dword:0000003e
"Visible62 "=dword:00000000
"Width62 "=dword:00000055
"Position63 "=dword:0000003f
"Visible63 "=dword:00000000
"Width63 "=dword:0000005a
"Position64 "=dword:00000040
"Visible64 "=dword:00000000
"Width64 "=dword:0000006e
"Position65 "=dword:00000041
"Visible65 "=dword:00000000
"Width65 "=dword:00000050
"Position66 "=dword:00000042
"Visible66 "=dword:00000000
"Width66 "=dword:00000032
"Position67 "=dword:00000043
"Visible67 "=dword:00000000
"Width67 "=dword:00000064
"Position68 "=dword:00000044
"Visible68 "=dword:00000000
"Width68 "=dword:0000004b
"Position69 "=dword:00000045
"Visible69 "=dword:00000000
"Width69 "=dword:0000002d
"Position70 "=dword:00000046
"Visible70 "=dword:00000000
"Width70 "=dword:0000004b
"Position71 "=dword:00000047
"Visible71 "=dword:00000000
"Width71 "=dword:0000005a
"Position72 "=dword:00000048
"Visible72 "=dword:00000000
"Width72 "=dword:0000005a
"Position73 "=dword:00000049
"Visible73 "=dword:00000000
"Width73 "=dword:00000050
"Position74 "=dword:0000004a
"Visible74 "=dword:00000000
"Width74 "=dword:0000004b
"Position75 "=dword:0000004b
"Visible75 "=dword:00000000
"Width75 "=dword:00000050
"Position76 "=dword:0000004c
"Visible76 "=dword:00000000
"Width76 "=dword:0000005a
"Position77 "=dword:0000004d
"Visible77 "=dword:00000000
"Width77 "=dword:00000041
"Position78 "=dword:0000004e
"Visible78 "=dword:00000000
"Width78 "=dword:00000041
"Position79 "=dword:0000004f
"Visible79 "=dword:00000000
"Width79 "=dword:00000041
"Position80 "=dword:00000050
"Visible80 "=dword:00000000
"Width80 "=dword:00000041
"Position81 "=dword:00000051
"Visible81 "=dword:00000000
"Width81 "=dword:00000041
"Position82 "=dword:00000052
"Visible82 "=dword:00000000
"Width82 "=dword:00000041
"Position83 "=dword:00000053
"Visible83 "=dword:00000000
"Width83 "=dword:00000041
"Position84 "=dword:00000054
"Visible84 "=dword:00000000
"Width84 "=dword:00000041
"Position85 "=dword:00000055
"Visible85 "=dword:00000000
"Width85 "=dword:00000041
"Position86 "=dword:00000056
"Visible86 "=dword:00000000
"Width86 "=dword:00000050

 

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Rating Coefficients]
"GKWeightCoef "=dword:00000064
"GKCurrentAbilityCoef "=dword:00000000
"GKCornersCoef "=dword:00000000
"GKCrossingCoef "=dword:00000000
"GKDribblingCoef "=dword:00000000
"GKFinishingCoef "=dword:00000000
"GKFirstTouchCoef "=dword:00000000
"GKFreeKicksCoef "=dword:00000000
"GKHeadingCoef "=dword:00000000
"GKLongShotsCoef "=dword:00000000
"GKLongThrowsCoef "=dword:00000000
"GKMarkingCoef "=dword:00000000
"GKPassingCoef "=dword:00000000
"GKPenaltiesCoef "=dword:00000000
"GKTacklingCoef "=dword:00000005
"GKTechniqueCoef "=dword:00000000
"GKLeftFootCoef "=dword:00000000
"GKRightFootCoef "=dword:00000000
"GKAggressionCoef "=dword:0000000a
"GKAnticipationCoef "=dword:00000005
"GKBraveryCoef "=dword:00000014
"GKComposureCoef "=dword:00000014
"GKConcentrationCoef "=dword:0000000a
"GKConsistencyCoef "=dword:0000000a
"GKCreativityCoef "=dword:00000000
"GKDecisionsCoef "=dword:00000014
"GKDeterminationCoef "=dword:0000000a
"GKDirtinessCoef "=dword:fffffffb
"GKFlairCoef "=dword:00000000
"GKImportantMatchesCoef "=dword:0000000a
"GKInfluenceCoef "=dword:0000000a
"GKOffTheBallCoef "=dword:00000000
"GKPositioningCoef "=dword:00000050
"GKTeamworkCoef "=dword:00000005
"GKWorkRateCoef "=dword:00000000
"GKAccelerationCoef "=dword:00000005
"GKAgilityCoef "=dword:0000000a
"GKBalanceCoef "=dword:0000000a
"GKInjuryPronenessCoef "=dword:fffffffb
"GKJumpingCoef "=dword:00000050
"GKNaturalFitnessCoef "=dword:00000005
"GKPaceCoef "=dword:00000000
"GKStaminaCoef "=dword:00000000
"GKStrengthCoef "=dword:0000000a
"GKVersatilityCoef "=dword:00000000
"GKAerialAbilityCoef "=dword:00000032
"GKCommandOfAreaCoef "=dword:00000014
"GKCommunicationCoef "=dword:00000032
"GKEccentricityCoef "=dword:ffffffec
"GKHandlingCoef "=dword:00000064
"GKKickingCoef "=dword:0000000a
"GKOneOnOnesCoef "=dword:00000032
"GKReflexesCoef "=dword:00000064
"GKRushingOutCoef "=dword:00000014
"GKTendencyToPunchCoef "=dword:fffffff6
"GKThrowingCoef "=dword:0000000a
"GKAdaptabilityCoef "=dword:00000005
"GKAmbitionCoef "=dword:0000000a
"GKControversyCoef "=dword:fffffffb
"GKLoyalityCoef "=dword:00000005
"GKPressureCoef "=dword:00000005
"GKProfessionalismCoef "=dword:00000005
"GKSportsmanshipCoef "=dword:00000005
"GKTemperamentCoef "=dword:00000005
"SWWeightCoef "=dword:00000066
"SWCurrentAbilityCoef "=dword:00000000
"SWCornersCoef "=dword:00000000
"SWCrossingCoef "=dword:00000000
"SWDribblingCoef "=dword:00000000
"SWFinishingCoef "=dword:00000000
"SWFirstTouchCoef "=dword:00000014
"SWFreeKicksCoef "=dword:0000000a
"SWHeadingCoef "=dword:00000064
"SWLongShotsCoef "=dword:0000000a
"SWLongThrowsCoef "=dword:00000000
"SWMarkingCoef "=dword:00000064
"SWPassingCoef "=dword:0000000a
"SWPenaltiesCoef "=dword:00000005
"SWTacklingCoef "=dword:00000064
"SWTechniqueCoef "=dword:0000000a
"SWLeftFootCoef "=dword:00000005
"SWRightFootCoef "=dword:00000005
"SWAggressionCoef "=dword:00000014
"SWAnticipationCoef "=dword:00000014
"SWBraveryCoef "=dword:00000028
"SWComposureCoef "=dword:00000028
"SWConcentrationCoef "=dword:0000003c
"SWConsistencyCoef "=dword:0000000a
"SWCreativityCoef "=dword:0000000a
"SWDecisionsCoef "=dword:00000014
"SWDeterminationCoef "=dword:0000000a
"SWDirtinessCoef "=dword:ffffffe7
"SWFlairCoef "=dword:00000000
"SWImportantMatchesCoef "=dword:0000000a
"SWInfluenceCoef "=dword:0000000a
"SWOffTheBallCoef "=dword:0000000a
"SWPositioningCoef "=dword:00000064
"SWTeamworkCoef "=dword:00000028
"SWWorkRateCoef "=dword:00000014
"SWAccelerationCoef "=dword:0000001e
"SWAgilityCoef "=dword:0000000a
"SWBalanceCoef "=dword:00000014
"SWInjuryPronenessCoef "=dword:fffffffb
"SWJumpingCoef "=dword:00000064
"SWNaturalFitnessCoef "=dword:00000005
"SWPaceCoef "=dword:00000014
"SWStaminaCoef "=dword:0000000a
"SWStrengthCoef "=dword:00000050
"SWVersatilityCoef "=dword:00000005
"SWAerialAbilityCoef "=dword:00000000
"SWCommandOfAreaCoef "=dword:00000000
"SWCommunicationCoef "=dword:00000000
"SWEccentricityCoef "=dword:00000000
"SWHandlingCoef "=dword:00000000
"SWKickingCoef "=dword:00000000
"SWOneOnOnesCoef "=dword:00000005
"SWReflexesCoef "=dword:00000005
"SWRushingOutCoef "=dword:00000000
"SWTendencyToPunchCoef "=dword:00000000
"SWThrowingCoef "=dword:00000000
"SWAdaptabilityCoef "=dword:00000005
"SWAmbitionCoef "=dword:0000000a
"SWControversyCoef "=dword:fffffffb
"SWLoyalityCoef "=dword:00000005
"SWPressureCoef "=dword:00000005
"SWProfessionalismCoef "=dword:00000005
"SWSportsmanshipCoef "=dword:00000005
"SWTemperamentCoef "=dword:00000005
"CBWeightCoef "=dword:00000064
"CBCurrentAbilityCoef "=dword:00000000
"CBCornersCoef "=dword:00000000
"CBCrossingCoef "=dword:00000000
"CBDribblingCoef "=dword:00000000
"CBFinishingCoef "=dword:00000000
"CBFirstTouchCoef "=dword:00000014
"CBFreeKicksCoef "=dword:0000000a
"CBHeadingCoef "=dword:00000064
"CBLongShotsCoef "=dword:0000000a
"CBLongThrowsCoef "=dword:00000000
"CBMarkingCoef "=dword:00000050
"CBPassingCoef "=dword:00000014
"CBPenaltiesCoef "=dword:00000005
"CBTacklingCoef "=dword:00000064
"CBTechniqueCoef "=dword:0000000a
"CBLeftFootCoef "=dword:00000005
"CBRightFootCoef "=dword:00000005
"CBAggressionCoef "=dword:00000014
"CBAnticipationCoef "=dword:00000014
"CBBraveryCoef "=dword:00000028
"CBComposureCoef "=dword:00000014
"CBConcentrationCoef "=dword:00000028
"CBConsistencyCoef "=dword:0000000a
"CBCreativityCoef "=dword:0000000a
"CBDecisionsCoef "=dword:00000014
"CBDeterminationCoef "=dword:0000000a
"CBDirtinessCoef "=dword:ffffffec
"CBFlairCoef "=dword:00000000
"CBImportantMatchesCoef "=dword:0000000a
"CBInfluenceCoef "=dword:0000000a
"CBOffTheBallCoef "=dword:0000000a
"CBPositioningCoef "=dword:00000050
"CBTeamworkCoef "=dword:00000028
"CBWorkRateCoef "=dword:00000014
"CBAccelerationCoef "=dword:00000028
"CBAgilityCoef "=dword:0000000a
"CBBalanceCoef "=dword:00000014
"CBInjuryPronenessCoef "=dword:fffffffb
"CBJumpingCoef "=dword:00000064
"CBNaturalFitnessCoef "=dword:00000005
"CBPaceCoef "=dword:0000001e
"CBStaminaCoef "=dword:0000000a
"CBStrengthCoef "=dword:0000003c
"CBVersatilityCoef "=dword:00000005
"CBAerialAbilityCoef "=dword:00000000
"CBCommandOfAreaCoef "=dword:00000000
"CBCommunicationCoef "=dword:00000000
"CBEccentricityCoef "=dword:00000000
"CBHandlingCoef "=dword:00000000
"CBKickingCoef "=dword:00000000
"CBOneOnOnesCoef "=dword:00000005
"CBReflexesCoef "=dword:00000005
"CBRushingOutCoef "=dword:00000000
"CBTendencyToPunchCoef "=dword:00000000
"CBThrowingCoef "=dword:00000000
"CBAdaptabilityCoef "=dword:00000005
"CBAmbitionCoef "=dword:0000000a
"CBControversyCoef "=dword:fffffffb
"CBLoyalityCoef "=dword:00000005
"CBPressureCoef "=dword:00000005
"CBProfessionalismCoef "=dword:00000005
"CBSportsmanshipCoef "=dword:00000005
"CBTemperamentCoef "=dword:00000005
"FBWeightCoef "=dword:0000006c
"FBCurrentAbilityCoef "=dword:00000000
"FBCornersCoef "=dword:0000000a
"FBCrossingCoef "=dword:0000001e
"FBDribblingCoef "=dword:00000014
"FBFinishingCoef "=dword:00000000
"FBFirstTouchCoef "=dword:00000014
"FBFreeKicksCoef "=dword:0000000a
"FBHeadingCoef "=dword:0000003c
"FBLongShotsCoef "=dword:0000000a
"FBLongThrowsCoef "=dword:0000000a
"FBMarkingCoef "=dword:0000003c
"FBPassingCoef "=dword:0000001e
"FBPenaltiesCoef "=dword:00000005
"FBTacklingCoef "=dword:00000064
"FBTechniqueCoef "=dword:00000014
"FBLeftFootCoef "=dword:00000005
"FBRightFootCoef "=dword:00000005
"FBAggressionCoef "=dword:0000000f
"FBAnticipationCoef "=dword:00000050
"FBBraveryCoef "=dword:00000014
"FBComposureCoef "=dword:0000000a
"FBConcentrationCoef "=dword:0000001e
"FBConsistencyCoef "=dword:0000000a
"FBCreativityCoef "=dword:0000000a
"FBDecisionsCoef "=dword:00000014
"FBDeterminationCoef "=dword:0000000a
"FBDirtinessCoef "=dword:fffffff6
"FBFlairCoef "=dword:00000005
"FBImportantMatchesCoef "=dword:0000000a
"FBInfluenceCoef "=dword:0000000a
"FBOffTheBallCoef "=dword:00000014
"FBPositioningCoef "=dword:00000064
"FBTeamworkCoef "=dword:00000014
"FBWorkRateCoef "=dword:00000014
"FBAccelerationCoef "=dword:0000003c
"FBAgilityCoef "=dword:0000000a
"FBBalanceCoef "=dword:00000014
"FBInjuryPronenessCoef "=dword:fffffffb
"FBJumpingCoef "=dword:0000003c
"FBNaturalFitnessCoef "=dword:00000005
"FBPaceCoef "=dword:00000050
"FBStaminaCoef "=dword:0000003c
"FBStrengthCoef "=dword:00000028
"FBVersatilityCoef "=dword:00000005
"FBAerialAbilityCoef "=dword:00000000
"FBCommandOfAreaCoef "=dword:00000000
"FBCommunicationCoef "=dword:00000000
"FBEccentricityCoef "=dword:00000000
"FBHandlingCoef "=dword:00000000
"FBKickingCoef "=dword:00000000
"FBOneOnOnesCoef "=dword:00000005
"FBReflexesCoef "=dword:00000005
"FBRushingOutCoef "=dword:00000000
"FBTendencyToPunchCoef "=dword:00000000
"FBThrowingCoef "=dword:00000000
"FBAdaptabilityCoef "=dword:00000005
"FBAmbitionCoef "=dword:0000000a
"FBControversyCoef "=dword:fffffffb
"FBLoyalityCoef "=dword:00000005
"FBPressureCoef "=dword:00000005
"FBProfessionalismCoef "=dword:00000005
"FBSportsmanshipCoef "=dword:00000005
"FBTemperamentCoef "=dword:00000005
"WBWeightCoef "=dword:0000006e
"WBCurrentAbilityCoef "=dword:00000000
"WBCornersCoef "=dword:0000000a
"WBCrossingCoef "=dword:0000003c
"WBDribblingCoef "=dword:00000028
"WBFinishingCoef "=dword:0000000a
"WBFirstTouchCoef "=dword:00000014
"WBFreeKicksCoef "=dword:0000000a
"WBHeadingCoef "=dword:00000028
"WBLongShotsCoef "=dword:00000014
"WBLongThrowsCoef "=dword:0000000a
"WBMarkingCoef "=dword:0000003c
"WBPassingCoef "=dword:00000028
"WBPenaltiesCoef "=dword:00000005
"WBTacklingCoef "=dword:00000064
"WBTechniqueCoef "=dword:00000028
"WBLeftFootCoef "=dword:00000005
"WBRightFootCoef "=dword:00000005
"WBAggressionCoef "=dword:0000000a
"WBAnticipationCoef "=dword:00000050
"WBBraveryCoef "=dword:0000000a
"WBComposureCoef "=dword:0000000a
"WBConcentrationCoef "=dword:00000014
"WBConsistencyCoef "=dword:0000000a
"WBCreativityCoef "=dword:00000014
"WBDecisionsCoef "=dword:00000014
"WBDeterminationCoef "=dword:0000000a
"WBDirtinessCoef "=dword:fffffff6
"WBFlairCoef "=dword:0000000a
"WBImportantMatchesCoef "=dword:0000000a
"WBInfluenceCoef "=dword:0000000a
"WBOffTheBallCoef "=dword:00000014
"WBPositioningCoef "=dword:00000064
"WBTeamworkCoef "=dword:00000014
"WBWorkRateCoef "=dword:00000028
"WBAccelerationCoef "=dword:00000050
"WBAgilityCoef "=dword:0000000a
"WBBalanceCoef "=dword:00000014
"WBInjuryPronenessCoef "=dword:fffffffb
"WBJumpingCoef "=dword:00000014
"WBNaturalFitnessCoef "=dword:00000005
"WBPaceCoef "=dword:00000064
"WBStaminaCoef "=dword:00000050
"WBStrengthCoef "=dword:00000028
"WBVersatilityCoef "=dword:00000005
"WBAerialAbilityCoef "=dword:00000000
"WBCommandOfAreaCoef "=dword:00000000
"WBCommunicationCoef "=dword:00000000
"WBEccentricityCoef "=dword:00000000
"WBHandlingCoef "=dword:00000000
"WBKickingCoef "=dword:00000000
"WBOneOnOnesCoef "=dword:00000005
"WBReflexesCoef "=dword:00000005
"WBRushingOutCoef "=dword:00000000
"WBTendencyToPunchCoef "=dword:00000000
"WBThrowingCoef "=dword:00000000
"WBAdaptabilityCoef "=dword:00000005
"WBAmbitionCoef "=dword:0000000a
"WBControversyCoef "=dword:fffffffb
"WBLoyalityCoef "=dword:00000005
"WBPressureCoef "=dword:00000005
"WBProfessionalismCoef "=dword:00000005
"WBSportsmanshipCoef "=dword:00000005
"WBTemperamentCoef "=dword:00000005
"DMWeightCoef "=dword:00000069
"DMCurrentAbilityCoef "=dword:00000000
"DMCornersCoef "=dword:0000000a
"DMCrossingCoef "=dword:0000001e
"DMDribblingCoef "=dword:00000014
"DMFinishingCoef "=dword:0000000a
"DMFirstTouchCoef "=dword:0000001e
"DMFreeKicksCoef "=dword:0000000a
"DMHeadingCoef "=dword:00000028
"DMLongShotsCoef "=dword:00000014
"DMLongThrowsCoef "=dword:00000005
"DMMarkingCoef "=dword:0000003c
"DMPassingCoef "=dword:00000028
"DMPenaltiesCoef "=dword:00000005
"DMTacklingCoef "=dword:00000064
"DMTechniqueCoef "=dword:0000001e
"DMLeftFootCoef "=dword:00000005
"DMRightFootCoef "=dword:00000005
"DMAggressionCoef "=dword:00000028
"DMAnticipationCoef "=dword:00000028
"DMBraveryCoef "=dword:00000014
"DMComposureCoef "=dword:0000000a
"DMConcentrationCoef "=dword:00000014
"DMConsistencyCoef "=dword:0000000a
"DMCreativityCoef "=dword:00000014
"DMDecisionsCoef "=dword:00000014
"DMDeterminationCoef "=dword:0000000a
"DMDirtinessCoef "=dword:fffffff6
"DMFlairCoef "=dword:0000000a
"DMImportantMatchesCoef "=dword:0000000a
"DMInfluenceCoef "=dword:0000000a
"DMOffTheBallCoef "=dword:0000001e
"DMPositioningCoef "=dword:00000050
"DMTeamworkCoef "=dword:00000028
"DMWorkRateCoef "=dword:00000050
"DMAccelerationCoef "=dword:00000028
"DMAgilityCoef "=dword:0000000a
"DMBalanceCoef "=dword:0000000a
"DMInjuryPronenessCoef "=dword:fffffffb
"DMJumpingCoef "=dword:00000028
"DMNaturalFitnessCoef "=dword:00000005
"DMPaceCoef "=dword:00000028
"DMStaminaCoef "=dword:0000003c
"DMStrengthCoef "=dword:00000028
"DMVersatilityCoef "=dword:00000005
"DMAerialAbilityCoef "=dword:00000000
"DMCommandOfAreaCoef "=dword:00000000
"DMCommunicationCoef "=dword:00000000
"DMEccentricityCoef "=dword:00000000
"DMHandlingCoef "=dword:00000000
"DMKickingCoef "=dword:00000000
"DMOneOnOnesCoef "=dword:00000005
"DMReflexesCoef "=dword:00000005
"DMRushingOutCoef "=dword:00000000
"DMTendencyToPunchCoef "=dword:00000000
"DMThrowingCoef "=dword:00000000
"DMAdaptabilityCoef "=dword:00000005
"DMAmbitionCoef "=dword:0000000a
"DMControversyCoef "=dword:fffffffb
"DMLoyalityCoef "=dword:00000005
"DMPressureCoef "=dword:00000005
"DMProfessionalismCoef "=dword:00000005
"DMSportsmanshipCoef "=dword:00000005
"DMTemperamentCoef "=dword:00000005
"MWeightCoef "=dword:0000006a
"MCurrentAbilityCoef "=dword:00000000
"MCornersCoef "=dword:0000000a
"MCrossingCoef "=dword:00000028
"MDribblingCoef "=dword:00000032
"MFinishingCoef "=dword:00000014
"MFirstTouchCoef "=dword:0000001e
"MFreeKicksCoef "=dword:0000000a
"MHeadingCoef "=dword:0000001e
"MLongShotsCoef "=dword:00000014
"MLongThrowsCoef "=dword:00000005
"MMarkingCoef "=dword:00000028
"MPassingCoef "=dword:00000046
"MPenaltiesCoef "=dword:00000005
"MTacklingCoef "=dword:0000003c
"MTechniqueCoef "=dword:00000032
"MLeftFootCoef "=dword:00000005
"MRightFootCoef "=dword:00000005
"MAggressionCoef "=dword:0000001e
"MAnticipationCoef "=dword:00000028
"MBraveryCoef "=dword:0000000a
"MComposureCoef "=dword:0000000a
"MConcentrationCoef "=dword:0000000a
"MConsistencyCoef "=dword:0000000a
"MCreativityCoef "=dword:0000003c
"MDecisionsCoef "=dword:0000001e
"MDeterminationCoef "=dword:0000000a
"MDirtinessCoef "=dword:fffffffb
"MFlairCoef "=dword:0000000a
"MImportantMatchesCoef "=dword:0000000a
"MInfluenceCoef "=dword:0000000a
"MOffTheBallCoef "=dword:00000028
"MPositioningCoef "=dword:00000028
"MTeamworkCoef "=dword:00000032
"MWorkRateCoef "=dword:00000032
"MAccelerationCoef "=dword:00000032
"MAgilityCoef "=dword:0000000a
"MBalanceCoef "=dword:0000000a
"MInjuryPronenessCoef "=dword:fffffffb
"MJumpingCoef "=dword:00000028
"MNaturalFitnessCoef "=dword:00000005
"MPaceCoef "=dword:00000028
"MStaminaCoef "=dword:0000003c
"MStrengthCoef "=dword:0000001e
"MVersatilityCoef "=dword:00000005
"MAerialAbilityCoef "=dword:00000000
"MCommandOfAreaCoef "=dword:00000000
"MCommunicationCoef "=dword:00000000
"MEccentricityCoef "=dword:00000000
"MHandlingCoef "=dword:00000000
"MKickingCoef "=dword:00000000
"MOneOnOnesCoef "=dword:00000005
"MReflexesCoef "=dword:00000005
"MRushingOutCoef "=dword:00000000
"MTendencyToPunchCoef "=dword:00000000
"MThrowingCoef "=dword:00000000
"MAdaptabilityCoef "=dword:00000005
"MAmbitionCoef "=dword:0000000a
"MControversyCoef "=dword:fffffffb
"MLoyalityCoef "=dword:00000005
"MPressureCoef "=dword:00000005
"MProfessionalismCoef "=dword:00000005
"MSportsmanshipCoef "=dword:00000005
"MTemperamentCoef "=dword:00000005
"AMWeightCoef "=dword:00000069
"AMCurrentAbilityCoef "=dword:00000000
"AMCornersCoef "=dword:0000000a
"AMCrossingCoef "=dword:0000003c
"AMDribblingCoef "=dword:00000050
"AMFinishingCoef "=dword:00000028
"AMFirstTouchCoef "=dword:0000001e
"AMFreeKicksCoef "=dword:0000000a
"AMHeadingCoef "=dword:00000014
"AMLongShotsCoef "=dword:00000014
"AMLongThrowsCoef "=dword:00000005
"AMMarkingCoef "=dword:0000000a
"AMPassingCoef "=dword:00000064
"AMPenaltiesCoef "=dword:00000005
"AMTacklingCoef "=dword:0000000a
"AMTechniqueCoef "=dword:00000050
"AMLeftFootCoef "=dword:00000005
"AMRightFootCoef "=dword:00000005
"AMAggressionCoef "=dword:0000000a
"AMAnticipationCoef "=dword:0000001e
"AMBraveryCoef "=dword:0000000a
"AMComposureCoef "=dword:0000000a
"AMConcentrationCoef "=dword:0000000a
"AMConsistencyCoef "=dword:0000000a
"AMCreativityCoef "=dword:00000064
"AMDecisionsCoef "=dword:00000028
"AMDeterminationCoef "=dword:0000000a
"AMDirtinessCoef "=dword:fffffffb
"AMFlairCoef "=dword:00000014
"AMImportantMatchesCoef "=dword:0000000a
"AMInfluenceCoef "=dword:0000000a
"AMOffTheBallCoef "=dword:0000003c
"AMPositioningCoef "=dword:00000014
"AMTeamworkCoef "=dword:0000003c
"AMWorkRateCoef "=dword:00000014
"AMAccelerationCoef "=dword:0000003c
"AMAgilityCoef "=dword:0000000a
"AMBalanceCoef "=dword:0000000a
"AMInjuryPronenessCoef "=dword:fffffffb
"AMJumpingCoef "=dword:00000014
"AMNaturalFitnessCoef "=dword:00000005
"AMPaceCoef "=dword:0000003c
"AMStaminaCoef "=dword:0000003c
"AMStrengthCoef "=dword:00000014
"AMVersatilityCoef "=dword:00000005
"AMAerialAbilityCoef "=dword:00000000
"AMCommandOfAreaCoef "=dword:00000000
"AMCommunicationCoef "=dword:00000000
"AMEccentricityCoef "=dword:00000000
"AMHandlingCoef "=dword:00000000
"AMKickingCoef "=dword:00000000
"AMOneOnOnesCoef "=dword:00000005
"AMReflexesCoef "=dword:00000005
"AMRushingOutCoef "=dword:00000000
"AMTendencyToPunchCoef "=dword:00000000
"AMThrowingCoef "=dword:00000000
"AMAdaptabilityCoef "=dword:00000005
"AMAmbitionCoef "=dword:0000000a
"AMControversyCoef "=dword:fffffffb
"AMLoyalityCoef "=dword:00000005
"AMPressureCoef "=dword:00000005
"AMProfessionalismCoef "=dword:00000005
"AMSportsmanshipCoef "=dword:00000005
"AMTemperamentCoef "=dword:00000005
"WWeightCoef "=dword:00000069
"WCurrentAbilityCoef "=dword:00000000
"WCornersCoef "=dword:0000000a
"WCrossingCoef "=dword:00000064
"WDribblingCoef "=dword:00000064
"WFinishingCoef "=dword:0000003c
"WFirstTouchCoef "=dword:0000001e
"WFreeKicksCoef "=dword:0000000a
"WHeadingCoef "=dword:00000014
"WLongShotsCoef "=dword:00000014
"WLongThrowsCoef "=dword:00000005
"WMarkingCoef "=dword:0000000a
"WPassingCoef "=dword:0000003c
"WPenaltiesCoef "=dword:00000005
"WTacklingCoef "=dword:0000000a
"WTechniqueCoef "=dword:00000050
"WLeftFootCoef "=dword:00000005
"WRightFootCoef "=dword:00000005
"WAggressionCoef "=dword:0000000a
"WAnticipationCoef "=dword:00000014
"WBraveryCoef "=dword:0000000a
"WComposureCoef "=dword:0000000a
"WConcentrationCoef "=dword:0000000a
"WConsistencyCoef "=dword:0000000a
"WCreativityCoef "=dword:0000003c
"WDecisionsCoef "=dword:00000014
"WDeterminationCoef "=dword:0000000a
"WDirtinessCoef "=dword:fffffffb
"WFlairCoef "=dword:0000000a
"WImportantMatchesCoef "=dword:00000014
"WInfluenceCoef "=dword:0000000a
"WOffTheBallCoef "=dword:0000003c
"WPositioningCoef "=dword:00000014
"WTeamworkCoef "=dword:0000001e
"WWorkRateCoef "=dword:0000001e
"WAccelerationCoef "=dword:00000050
"WAgilityCoef "=dword:00000014
"WBalanceCoef "=dword:0000000a
"WInjuryPronenessCoef "=dword:fffffffb
"WJumpingCoef "=dword:00000014
"WNaturalFitnessCoef "=dword:00000005
"WPaceCoef "=dword:00000064
"WStaminaCoef "=dword:0000003c
"WStrengthCoef "=dword:00000014
"WVersatilityCoef "=dword:00000005
"WAerialAbilityCoef "=dword:00000000
"WCommandOfAreaCoef "=dword:00000000
"WCommunicationCoef "=dword:00000000
"WEccentricityCoef "=dword:00000000
"WHandlingCoef "=dword:00000000
"WKickingCoef "=dword:00000000
"WOneOnOnesCoef "=dword:00000005
"WReflexesCoef "=dword:00000005
"WRushingOutCoef "=dword:00000000
"WTendencyToPunchCoef "=dword:00000000
"WThrowingCoef "=dword:00000000
"WAdaptabilityCoef "=dword:00000005
"WAmbitionCoef "=dword:0000000a
"WControversyCoef "=dword:fffffffb
"WLoyalityCoef "=dword:00000005
"WPressureCoef "=dword:00000005
"WProfessionalismCoef "=dword:00000005
"WSportsmanshipCoef "=dword:00000005
"WTemperamentCoef "=dword:00000005
"FSTWeightCoef "=dword:00000067
"FSTCurrentAbilityCoef "=dword:00000000
"FSTCornersCoef "=dword:0000000a
"FSTCrossingCoef "=dword:0000000a
"FSTDribblingCoef "=dword:00000050
"FSTFinishingCoef "=dword:00000064
"FSTFirstTouchCoef "=dword:00000028
"FSTFreeKicksCoef "=dword:0000000a
"FSTHeadingCoef "=dword:00000028
"FSTLongShotsCoef "=dword:00000014
"FSTLongThrowsCoef "=dword:00000000
"FSTMarkingCoef "=dword:00000000
"FSTPassingCoef "=dword:00000028
"FSTPenaltiesCoef "=dword:00000005
"FSTTacklingCoef "=dword:00000000
"FSTTechniqueCoef "=dword:00000050
"FSTLeftFootCoef "=dword:00000005
"FSTRightFootCoef "=dword:00000005
"FSTAggressionCoef "=dword:0000000a
"FSTAnticipationCoef "=dword:0000000a
"FSTBraveryCoef "=dword:0000000a
"FSTComposureCoef "=dword:0000000a
"FSTConcentrationCoef "=dword:0000000a
"FSTConsistencyCoef "=dword:0000000a
"FSTCreativityCoef "=dword:00000028
"FSTDecisionsCoef "=dword:0000000a
"FSTDeterminationCoef "=dword:0000000a
"FSTDirtinessCoef "=dword:fffffffb
"FSTFlairCoef "=dword:0000000a
"FSTImportantMatchesCoef "=dword:0000000a
"FSTInfluenceCoef "=dword:0000000a
"FSTOffTheBallCoef "=dword:00000050
"FSTPositioningCoef "=dword:0000000a
"FSTTeamworkCoef "=dword:0000000a
"FSTWorkRateCoef "=dword:0000000a
"FSTAccelerationCoef "=dword:00000064
"FSTAgilityCoef "=dword:00000028
"FSTBalanceCoef "=dword:0000000a
"FSTInjuryPronenessCoef "=dword:fffffffb
"FSTJumpingCoef "=dword:00000014
"FSTNaturalFitnessCoef "=dword:00000005
"FSTPaceCoef "=dword:00000064
"FSTStaminaCoef "=dword:00000028
"FSTStrengthCoef "=dword:00000014
"FSTVersatilityCoef "=dword:00000005
"FSTAerialAbilityCoef "=dword:00000000
"FSTCommandOfAreaCoef "=dword:00000000
"FSTCommunicationCoef "=dword:00000000
"FSTEccentricityCoef "=dword:00000000
"FSTHandlingCoef "=dword:00000000
"FSTKickingCoef "=dword:00000000
"FSTOneOnOnesCoef "=dword:00000005
"FSTReflexesCoef "=dword:00000005
"FSTRushingOutCoef "=dword:00000000
"FSTTendencyToPunchCoef "=dword:00000000
"FSTThrowingCoef "=dword:00000000
"FSTAdaptabilityCoef "=dword:00000005
"FSTAmbitionCoef "=dword:0000000a
"FSTControversyCoef "=dword:fffffffb
"FSTLoyalityCoef "=dword:00000005
"FSTPressureCoef "=dword:00000005
"FSTProfessionalismCoef "=dword:00000005
"FSTSportsmanshipCoef "=dword:00000005
"FSTTemperamentCoef "=dword:00000005
"TSTWeightCoef "=dword:00000068
"TSTCurrentAbilityCoef "=dword:00000000
"TSTCornersCoef "=dword:00000000
"TSTCrossingCoef "=dword:0000000a
"TSTDribblingCoef "=dword:0000003c
"TSTFinishingCoef "=dword:00000050
"TSTFirstTouchCoef "=dword:0000001e
"TSTFreeKicksCoef "=dword:0000000a
"TSTHeadingCoef "=dword:00000064
"TSTLongShotsCoef "=dword:00000014
"TSTLongThrowsCoef "=dword:00000000
"TSTMarkingCoef "=dword:00000000
"TSTPassingCoef "=dword:00000028
"TSTPenaltiesCoef "=dword:00000005
"TSTTacklingCoef "=dword:00000000
"TSTTechniqueCoef "=dword:00000028
"TSTLeftFootCoef "=dword:00000005
"TSTRightFootCoef "=dword:00000005
"TSTAggressionCoef "=dword:00000014
"TSTAnticipationCoef "=dword:0000000a
"TSTBraveryCoef "=dword:00000014
"TSTComposureCoef "=dword:0000000a
"TSTConcentrationCoef "=dword:0000000a
"TSTConsistencyCoef "=dword:0000000a
"TSTCreativityCoef "=dword:00000014
"TSTDecisionsCoef "=dword:0000000a
"TSTDeterminationCoef "=dword:0000000a
"TSTDirtinessCoef "=dword:fffffffb
"TSTFlairCoef "=dword:0000000a
"TSTImportantMatchesCoef "=dword:0000000a
"TSTInfluenceCoef "=dword:0000000a
"TSTOffTheBallCoef "=dword:00000050
"TSTPositioningCoef "=dword:00000014
"TSTTeamworkCoef "=dword:0000000a
"TSTWorkRateCoef "=dword:0000000a
"TSTAccelerationCoef "=dword:00000028
"TSTAgilityCoef "=dword:00000014
"TSTBalanceCoef "=dword:00000014
"TSTInjuryPronenessCoef "=dword:fffffffb
"TSTJumpingCoef "=dword:00000064
"TSTNaturalFitnessCoef "=dword:00000005
"TSTPaceCoef "=dword:00000028
"TSTStaminaCoef "=dword:00000014
"TSTStrengthCoef "=dword:00000050
"TSTVersatilityCoef "=dword:00000005
"TSTAerialAbilityCoef "=dword:00000000
"TSTCommandOfAreaCoef "=dword:00000000
"TSTCommunicationCoef "=dword:00000000
"TSTEccentricityCoef "=dword:00000000
"TSTHandlingCoef "=dword:00000000
"TSTKickingCoef "=dword:00000000
"TSTOneOnOnesCoef "=dword:00000005
"TSTReflexesCoef "=dword:00000005
"TSTRushingOutCoef "=dword:00000000
"TSTTendencyToPunchCoef "=dword:00000000
"TSTThrowingCoef "=dword:00000000
"TSTAdaptabilityCoef "=dword:00000005
"TSTAmbitionCoef "=dword:0000000a
"TSTControversyCoef "=dword:fffffffb
"TSTLoyalityCoef "=dword:00000005
"TSTPressureCoef "=dword:00000005
"TSTProfessionalismCoef "=dword:00000005
"TSTSportsmanshipCoef "=dword:00000005
"TSTTemperamentCoef "=dword:00000005

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2009]
"ShortlistDir "=" "
"Language "= "English "
"LoadLangDB "=dword:00000000
"CompressHistoryPoints "=dword:00000000
"HighlightedAttributes "=dword:00000000
"MinCondition "=dword:00000050
"SkinName "= "Champions League "
"LastUpdateCheck "=dword:00009b73
"HighQualityGUI "=dword:00000001
"AutomaticallyUpdateCheck "=dword:00000001
"AdvancedGeneration "=dword:00000000
"TranslateStaffSkills "=dword:00000001
"TranslatePlayerSkills "=dword:00000001
"TranslatePositions "=dword:00000001
"ShowHistory "=dword:00000001
"Version "=dword:00000062
"UniqueID "= "96-F555-0E51 "
"UseProxy "=dword:00000000
"ProxyHost "=" "
"ProxyPort "=" "
"UseAuthentication "=dword:00000000
"UserName "=" "
"UserPassword "=" "
"Currency "=dword:00000056
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1316)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2009-04-07 15:47:35
ComboFix-quarantined-files.txt 2009-04-07 13:47:01

Pre-Run: 30.433.271.808 bytes free
Post-Run: 30,425,726,976 bytes free

Current=2 Default=2 Failed=1 LastKnownGood=3 Sets=,1,2,3
1870 --- E O F --- 2008-02-14 19:12:08

 

Hi
Please do this.

Highlight and copy the contents of the code box below and paste it into a blank Notepad, then save it to your desktop as;

Filename: CFScript.txt
Save As Type: All Files (*.*)

Close all other windows and programs. Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button.
Click here to see how to use CFScript.txt
Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log.

Please do not click on the ComboFix window while it is running a scan. This can cause it to stall.

**NOTE - Allow ComboFix to update if prompted.

Code:

File::
c:\windows\system32\drivers\nicsk32.sys
RootKit::
nicsk32

Please post the Combofix log.

Geri

 

ok as i have problems with moving icons and even copying (dunno why is that but it started to happen after virus came and i tried to delete it with norton and after restart that happened,you can check in other thread in Windows XP forum)

so i couldnt drag that notepad file but i right clicked on him and did "open with combofix" and combofix ran so i hope its ok also.



ComboFix 09-04-04.01 - Dean 2009-04-08 15:31:21.2 - NTFSx86
Running from: c:\documents and settings\Dean\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Dean\Desktop\CFScript.txt
* Resident AV is active


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
c:\windows\system32\drivers\nicsk32.sys
.

((((((((((((((((((((((((( Files Created from 2009-03-08 to 2009-04-08 )))))))))))))))))))))))))))))))
.

2009-04-04 23:52 . 2009-04-04 23:52 <DIR> d-------- c:\windows\RestoreSafeDeleted
2009-04-04 23:49 . 2009-04-04 23:49 123 --a------ c:\windows\rootkitno.ini
2009-04-04 23:48 . 2009-04-04 23:48 45 --a------ c:\windows\system32\Partizan.RRI
2009-04-04 23:36 . 2009-04-04 23:36 (2) -rahs-ot- c:\windows\winstart.bat
2009-04-04 23:35 . 2009-04-04 23:52 <DIR> d-------- c:\program files\UnHackMe
2009-03-31 15:30 . 2009-03-31 18:08 <DIR> d-------- c:\documents and settings\All Users\Application Data\Symantec
2009-03-31 15:30 . 2009-03-31 15:30 <DIR> d-------- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-03-31 15:30 . 2009-03-31 18:08 <DIR> d-------- c:\documents and settings\All Users\Application Data\Norton
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\documents and settings\Dean\Application Data\Malwarebytes
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-03-30 17:25 . 2009-03-26 16:49 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-30 17:25 . 2009-03-26 16:49 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-03-30 15:53 . 2009-04-05 10:56 8,704 --ahs---- c:\windows\system32\Thumbs.db
2009-03-29 16:11 . 2009-04-04 13:02 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-03-29 01:26 . 2009-03-29 09:03 <DIR> d-------- c:\documents and settings\Administrator
2009-03-29 00:39 . 2007-01-18 14:00 3,968 --a------ c:\windows\system32\drivers\AvgArCln.sys
2009-03-20 20:30 . 2009-04-07 16:22 <DIR> d-------- c:\documents and settings\Dean\Tracing
2009-03-20 20:28 . 2009-03-20 20:28 <DIR> d-------- c:\program files\Windows Live SkyDrive
2009-03-20 20:28 . 2009-03-20 20:28 <DIR> d-------- c:\program files\Microsoft
2009-03-20 20:26 . 2009-03-20 20:26 <DIR> d-------- c:\program files\Common Files\Windows Live
2009-03-18 15:11 . 2009-03-30 15:56 44,032 --ahs---- c:\windows\Thumbs.db

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-05 11:46 --------- d-----w c:\documents and settings\Dean\Application Data\mIRC
2009-04-05 08:47 --------- d-----w c:\documents and settings\Dean\Application Data\uTorrent
2009-04-05 08:40 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2009-04-01 14:44 --------- d-----w c:\program files\SpeedFan
2009-03-31 17:12 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-29 10:37 --------- d-----w c:\program files\SpywareBlaster
2009-03-29 06:53 --------- d-----w c:\program files\Unlocker
2009-03-27 12:32 --------- d-----w c:\program files\Java
2009-03-20 18:28 --------- d-----w c:\program files\Windows Live
2009-03-19 14:34 --------- d-----w c:\documents and settings\Dean\Application Data\LimeWire
2009-03-13 13:37 --------- d-----w c:\documents and settings\Dean\Application Data\BSplayer
2009-03-11 17:07 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-09 04:19 410,984 ----a-w c:\windows\system32\deploytk.dll
2009-03-08 14:33 --------- d-----w c:\program files\LimeWire
2009-02-28 18:41 --------- d-----w c:\program files\mIRC
2009-02-26 16:04 --------- d-----w c:\program files\Windows Live Safety Center
2009-02-09 14:48 --------- d-----w c:\program files\Tortun
2009-02-06 17:52 49,504 ----a-w c:\windows\system32\sirenacm.dll
2009-01-18 20:26 75,264 ----a-w c:\windows\cadkasdeinst01e.exe
2008-06-29 16:49 152 ----a-w c:\documents and settings\Dean\brdgInst.bat
2008-03-12 16:52 47,360 ----a-w c:\documents and settings\Dean\Application Data\pcouffin.sys
.

------- Sigcheck -------

2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2qfe\user32.dll
2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\SoftwareDistribution\Download\6e49db26b225c64ffbbd852b587ab944\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\SoftwareDistribution\Download\6e49db26b225c64ffbbd852b587ab944\sp2qfe\user32.dll
2005-03-02 20:09 577024 de2db164bbb35db061af0997e4499054 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\user32.dll
2005-03-02 20:19 577024 1800f293bccc8ede8a70e12b88d80036 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\user32.dll
2004-08-04 13:00 577024 c72661f8552ace7c5c85e16a3cf505c4 c:\windows\system32\user32.dll

2006-08-16 14:14 70656 7b6a08441a4f11320421599d7ecf8d41 c:\windows\SoftwareDistribution\Download\fde4a5af73d5aee9b5faba71cbff1d6c\SP1QFE\ws2_32.dll
2004-08-04 13:00 82944 2ed0b7f12a60f90092081c50fa0ec2b2 c:\windows\system32\ws2_32.dll

2004-08-04 13:00 656384 c0823fc5469663ba63e7db88f9919d70 c:\windows\ie7\wininet.dll
2007-12-07 04:21 824832 806d274c9a6c3aaea5eae8e4af841e04 c:\windows\SoftwareDistribution\Download\8befe715852785f9b4f0ded848fd9c0d\SP2GDR\wininet.dll
2007-12-07 04:01 825344 b5b411bb229ae6ead7652a32ed47bfb9 c:\windows\SoftwareDistribution\Download\8befe715852785f9b4f0ded848fd9c0d\SP2QFE\wininet.dll
2007-12-07 04:21 824832 806d274c9a6c3aaea5eae8e4af841e04 c:\windows\SoftwareDistribution\Download\9489e810bc136788bfeb9b68b0d7dfee\sp2gdr\wininet.dll
2007-12-07 04:01 825344 b5b411bb229ae6ead7652a32ed47bfb9 c:\windows\SoftwareDistribution\Download\9489e810bc136788bfeb9b68b0d7dfee\sp2qfe\wininet.dll
2007-12-07 03:07 659456 57d1b5150cf6331fac6b3e04c1fcb966 c:\windows\SoftwareDistribution\Download\b386176bfcde202f7ed536e83198267a\sp2gdr\wininet.dll
2007-12-07 02:44 666112 085a7c37f9c6ede1ba870b7dbec06399 c:\windows\SoftwareDistribution\Download\b386176bfcde202f7ed536e83198267a\sp2qfe\wininet.dll
2007-10-11 01:56 824832 30c1e0f34ad2972c72a01db5c74ab065 c:\windows\SoftwareDistribution\Download\e3709fbfd9557a7d083f543d51d38612\SP2GDR\wininet.dll
2007-10-11 01:47 825344 0e5d918f87efa7d2424d66b499c7eb04 c:\windows\SoftwareDistribution\Download\e3709fbfd9557a7d083f543d51d38612\SP2QFE\wininet.dll
2007-08-13 19:54 818688 a4a0fc92358f39538a6494c42ef99fe9 c:\windows\system32\wininet.dll

2006-01-13 19:07 360448 5562cc0a47b2aef06d3417b733f3c195 c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
2004-08-04 13:00 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB913446$\tcpip.sys
2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\SoftwareDistribution\Download\146ae5e7b51a37f45e0e5cf03d0d5e3c\sp2gdr\tcpip.sys
2007-10-30 18:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\SoftwareDistribution\Download\146ae5e7b51a37f45e0e5cf03d0d5e3c\sp2qfe\tcpip.sys
2008-10-16 14:59 359808 6af91ce5baa449eb9a72f17da063720c c:\windows\system32\drivers\TCPIP.SYS

2004-08-04 13:00 502272 01c3346c241652f43aed8e2149881bfe c:\windows\system32\winlogon.exe

2004-08-04 13:00 182912 558635d3af1c7546d26067d5d9b6959e c:\windows\system32\drivers\ndis.sys

2004-08-04 13:00 29056 4448006b6bc60e6c027932cfc38d6855 c:\windows\system32\drivers\ip6fw.sys

2007-02-28 10:38 2057600 515d30e2c90a3665a2739309334c9283 c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntkrnlpa.exe
2007-02-28 11:15 2059392 4d3dbdccbf97f5ba1e74f322b155c3ba c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntkrnlpa.exe
2005-03-02 02:34 2056832 81013f36b21c7f72cf784cc6731e0002 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\ntkrnlpa.exe
2005-03-02 02:36 2056832 d8aba3eab509627e707a3b14f00fbb6b c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\ntkrnlpa.exe
2004-08-04 13:00 2056832 947fb1d86d14afcffdb54bf837ec25d0 c:\windows\system32\ntkrnlpa.exe

2007-02-28 11:10 2180352 582a8dbaa58c3b1f176eb2817daee77c c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntoskrnl.exe
2007-02-28 11:55 2182144 5a5c8db4aa962c714c8371fbdf189fc9 c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntoskrnl.exe
2005-03-02 02:59 2179328 4d4cf2c14550a4b7718e94a6e581856e c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\ntoskrnl.exe
2005-03-02 03:04 2179456 28187802b7c368c0d3aef7d4c382aabb c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\ntoskrnl.exe
2004-08-04 13:00 2180992 ce218bc7088681faa06633e218596ca7 c:\windows\system32\ntoskrnl.exe

2004-08-04 13:00 1032192 a0732187050030ae399b241436565e64 c:\windows\explorer.exe
2007-06-13 12:23 1033216 97bd6515465659ff8f3b7be375b2ea87 c:\windows\SoftwareDistribution\Download\2a2715f6180c3bfa2a58178525f24c67\sp2gdr\explorer.exe
2007-06-13 13:26 1033216 7712df0cdde3a5ac89843e61cd5b3658 c:\windows\SoftwareDistribution\Download\2a2715f6180c3bfa2a58178525f24c67\sp2qfe\explorer.exe
2007-06-13 12:23 1033216 97bd6515465659ff8f3b7be375b2ea87 c:\windows\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2gdr\explorer.exe
2007-06-13 13:26 1033216 7712df0cdde3a5ac89843e61cd5b3658 c:\windows\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2qfe\explorer.exe

2004-08-04 13:00 108032 c6ce6eec82f187615d1002bb3bb50ed4 c:\windows\system32\services.exe

2004-08-04 13:00 13312 84885f9b82f4d55c6146ebf6065d75d2 c:\windows\system32\lsass.exe

2004-08-04 13:00 15360 24232996a38c0b0cf151c2140ae29fc8 c:\windows\system32\ctfmon.exe

2005-06-11 01:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2gdr\spoolsv.exe
2005-06-11 02:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788 c:\windows\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2qfe\spoolsv.exe
2004-08-04 13:00 57856 7435b108b935e42ea92ca94f59c8e717 c:\windows\system32\spoolsv.exe

2004-08-04 13:00 24576 39b1ffb03c2296323832acbae50d2aff c:\windows\system32\userinit.exe

2004-08-04 14:00 295424 b60c877d16d9c880b952fda04adf16e6 c:\windows\system32\termsrv.dll

2007-04-16 17:52 984576 a01f9ca902a88f7ced06884174d6419d c:\windows\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\sp2gdr\kernel32.dll
2007-04-16 18:07 986112 09f7cb3687f86edaa4ca081f7ab66c03 c:\windows\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\sp2qfe\kernel32.dll
2004-08-04 13:00 983552 888190e31455fad793312f8d087146eb c:\windows\system32\kernel32.dll

2004-08-04 13:00 17408 1b5f6923abb450692e9fe0672c897aed c:\windows\system32\powrprof.dll

2004-08-04 13:00 110080 87ca7ce6469577f059297b9d6556d66d c:\windows\system32\imm32.dll
.
((((((((((((((((((((((((((((( SnapShot@2009-04-07_15.45.58,23 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-04-08 13:03:40 16,384 ----atw c:\windows\temp\Perflib_Perfdata_72c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{db9d7a78-a76c-4bf2-97c6-258925ee1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]
2008-11-30 13:41 1784856 --a------ c:\program files\Reganam\tbReg1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2008-11-26 23:03 204248 --a------ c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{db9d7a78-a76c-4bf2-97c6-258925ee1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{DB9D7A78-A76C-4BF2-97C6-258925EE1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE "= "c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} "= "c:\program files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-10-28 94208]
"MSMSGS "= "c:\program files\Messenger\msmsgs.exe" [2004-08-04 1667584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MGSysCtrl "= "c:\program files\System Control Manager\MGSysCtrl.exe" [2006-03-24 179200]
"nod32kui "= "c:\program files\Eset\nod32kui.exe" [2008-02-14 949376]
"NeroFilterCheck "= "c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl "= "c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-29 32768]
"tsnp2std "= "c:\windows\tsnp2std.exe" [2005-08-17 90112]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"CanonSolutionMenu "= "c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter "= "c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1603152]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"SunJavaUpdateSched "= "c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"AGRSMMSG "= "AGRSMMSG.exe" [2005-09-09 c:\windows\AGRSMMSG.exe]
"RTHDCPL "= "RTHDCPL.EXE" [2006-03-14 c:\windows\RTHDCPL.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE "= "c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoChangeAnimation "= 0 (0x0)
"NoStrCmpLogical "= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg "= 0 (0x0)
"NoStrCmpLogical "= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.clmp3enc "= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@= "Service "

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BlueSoleil.lnk]
backup=c:\windows\pss\BlueSoleil.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe "=
"c:\\Program Files\\Messenger\\msmsgs.exe "=
"c:\\Program Files\\RALINK\\Common\\RaUI.exe "=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CCC.exe "=
"c:\\Program Files\\Unlocker\\UnlockerAssistant.exe "=
"c:\\Program Files\\PES 2009\\pes2009.exe "=
"c:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe "=
"c:\\WINDOWS\\tsnp2std.exe "=
"c:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe "=
"c:\\Program Files\\Java\\jre6\\bin\\jusched.exe "=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\MOM.exe "=
"c:\\WINDOWS\\system32\\userinit.exe "=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe "=
"c:\\WINDOWS\\AGRSMMSG.exe "=
"c:\\Program Files\\System Control Manager\\MGSysCtrl.exe "=
"c:\\Program Files\\Eset\\nod32kui.exe "=
"c:\\WINDOWS\\RTHDCPL.EXE "=

R0 Lbd;Lbd; [x]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; [x]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2008-12-05 206096]
R2 nicsk32;nicsk32; [x]
R3 ATE_PROCMON;ATE_PROCMON; [x]
S0 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2media.sys [2006-02-27 34880]
S0 O2SDRDR;O2SDRDR;c:\windows\system32\DRIVERS\o2sd.sys [2006-02-20 29056]
S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2008-02-14 15424]
S2 NishService;SCM Driver Daemon;c:\program files\System Control Manager\edd.exe [2006-03-22 40960]
S2 osaio;osaio;c:\windows\system32\drivers\osaio.sys [2009-01-30 6784]
S3 MGHwCtrl;MGHwCtrl;c:\windows\system32\drivers\MGHwCtrl.sys [2005-03-10 20128]


--- Other Services/Drivers In Memory ---

*Deregistered* - AegisP
*Deregistered* - AFD
*Deregistered* - AMON
*Deregistered* - Apple Mobile Device
*Deregistered* - Arp1394
*Deregistered* - Ati HotKey Poller
*Deregistered* - ATI Smart
*Deregistered* - audstub
*Deregistered* - AVG Anti-Rootkit
*Deregistered* - AvgArCln
*Deregistered* - Beep
*Deregistered* - BlueletAudio
*Deregistered* - BlueletSCOAudio
*Deregistered* - BlueSoleil Hid Service
*Deregistered* - Bonjour Service
*Deregistered* - BT
*Deregistered* - BTHidEnum
*Deregistered* - BTHidMgr
*Deregistered* - Cdfs
*Deregistered* - Compbatt
*Deregistered* - dmio
*Deregistered* - dmload
*Deregistered* - Fips
*Deregistered* - FltMgr
*Deregistered* - Ftdisk
*Deregistered* - giveio
*Deregistered* - Gpc
*Deregistered* - hmonitor
*Deregistered* - IpNat
*Deregistered* - IPSec
*Deregistered* - JavaQuickStarterService
*Deregistered* - KSecDD
*Deregistered* - MGHwCtrl
*Deregistered* - mnmdd
*Deregistered* - Modem
*Deregistered* - MountMgr
*Deregistered* - MQAC
*Deregistered* - MRxDAV
*Deregistered* - MRxSmb
*Deregistered* - Msfs
*Deregistered* - mssmbios
*Deregistered* - Mup
*Deregistered* - NDIS
*Deregistered* - NdisTapi
*Deregistered* - NdisWan
*Deregistered* - NDProxy
*Deregistered* - NetBIOS
*Deregistered* - NetBT
*Deregistered* - NishService
*Deregistered* - nod32drv
*Deregistered* - NOD32krn
*Deregistered* - Npfs
*Deregistered* - Ntfs
*Deregistered* - NtLmSsp
*Deregistered* - Null
*Deregistered* - O2Flash
*Deregistered* - osaio
*Deregistered* - PartMgr
*Deregistered* - pcouffin
*Deregistered* - PptpMiniport
*Deregistered* - PSched
*Deregistered* - RasAcd
*Deregistered* - Rasl2tp
*Deregistered* - RasPppoe
*Deregistered* - Raspti
*Deregistered* - Rdbss
*Deregistered* - RDPCDD
*Deregistered* - rdpdr
*Deregistered* - RMCAST
*Deregistered* - SCDEmu
*Deregistered* - Serenum
*Deregistered* - SMBios
*Deregistered* - speedfan
*Deregistered* - sptd
*Deregistered* - sr
*Deregistered* - swenum
*Deregistered* - tapvpn
*Deregistered* - Tcpip
*Deregistered* - TermDD
*Deregistered* - Update
*Deregistered* - VcommMgr
*Deregistered* - VgaSave
*Deregistered* - VolSnap
*Deregistered* - Wanarp
*Deregistered* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder

2009-03-30 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []

2009-03-31 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-BugCD Pretrazivac - c:\documents and settings\All Users\BugCD Pretrazivac\BugCD Pretrazivac.exe


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.bsplayer-search.com/startpage
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-us\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
TCP: {48D92928-C979-4CC7-9DE7-86E142BD7207} = 195.29.150.3,195.29.150.4
TCP: {9BD66CCF-9682-49FC-9A3A-D7347256F955} = 195.29.150.3,195.29.150.4
FF - ProfilePath - c:\documents and settings\Dean\Application Data\Mozilla\Firefox\Profiles\rfgmamuz.default\
FF - prefs.js: browser.startup.homepage - google.hr
FF - component: c:\program files\BS.Player ControlBar\FirefoxDTT\components\BSToolbarFF.dll
FF - plugin: c:\documents and settings\Dean\Application Data\Mozilla\Firefox\Profiles\rfgmamuz.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-08 15:34:21
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008]
"ShortlistDir "=" "
"LangDB "=" "
"LastSaveGame "=" "
"Language "= "English "
"LoadLangDB "=dword:00000000
"CompressHistoryPoints "=dword:00000000
"HighlightedAttributes "=dword:00000000
"MinCondition "=dword:00000050
"SkinID "=dword:00000001
"LastUpdateCheck "=dword:00000000
"HighQualityGUI "=dword:00000001
"AutomaticallyUpdateCheck "=dword:00000001
"AdvancedGeneration "=dword:00000000
"TranslateStaffSkills "=dword:00000001
"TranslatePlayerSkills "=dword:00000001
"TranslatePositions "=dword:00000001
"ShowHistory "=dword:00000001
"WindowState "=dword:00000000
"WindowHeight "=dword:0000032c
"WindowWidth "=dword:000003fc
"WindowLeft "=dword:00000082
"WindowTop "=dword:00000000
"UseProxy "=dword:00000000
"ProxyHost "=" "
"ProxyPort "=" "
"UseAuthentication "=dword:00000000
"UserName "=" "
"UserPassword "=" "

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Clubs]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000032
"Position4 "=dword:00000004
"Visible4 "=dword:00000001
"Width4 "=dword:00000032
"Position5 "=dword:00000005
"Visible5 "=dword:00000001
"Width5 "=dword:00000050
"Position6 "=dword:00000006
"Visible6 "=dword:00000001
"Width6 "=dword:00000050
"Position7 "=dword:00000007
"Visible7 "=dword:00000001
"Width7 "=dword:00000050
"Position8 "=dword:00000008
"Visible8 "=dword:00000000
"Width8 "=dword:00000050
"Position9 "=dword:00000009
"Visible9 "=dword:00000000
"Width9 "=dword:0000002d
"Position10 "=dword:0000000a
"Visible10 "=dword:00000000
"Width10 "=dword:0000001e
"Position11 "=dword:0000000b
"Visible11 "=dword:00000000
"Width11 "=dword:0000001e
"Position12 "=dword:0000000c
"Visible12 "=dword:00000000
"Width12 "=dword:0000001e
"Position13 "=dword:0000000d
"Visible13 "=dword:00000001
"Width13 "=dword:0000003c
"Position14 "=dword:0000000e
"Visible14 "=dword:00000000
"Width14 "=dword:00000032
"Position15 "=dword:0000000f
"Visible15 "=dword:00000000
"Width15 "=dword:00000032
"Position16 "=dword:00000010
"Visible16 "=dword:00000000
"Width16 "=dword:00000032
"Position17 "=dword:00000011
"Visible17 "=dword:00000001
"Width17 "=dword:00000050
"Position18 "=dword:00000012
"Visible18 "=dword:00000001
"Width18 "=dword:00000050
"Position19 "=dword:00000013
"Visible19 "=dword:00000000
"Width19 "=dword:00000050

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Players]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000037
"Position4 "=dword:00000008
"Visible4 "=dword:00000001
"Width4 "=dword:00000023
"Position5 "=dword:00000009
"Visible5 "=dword:00000001
"Width5 "=dword:00000028
"Position6 "=dword:0000000a
"Visible6 "=dword:00000001
"Width6 "=dword:00000028
"Position7 "=dword:0000000c
"Visible7 "=dword:00000001
"Width7 "=dword:0000004b
"Position8 "=dword:0000000d
"Visible8 "=dword:00000001
"Width8 "=dword:0000004b
"Position9 "=dword:0000000e
"Visible9 "=dword:00000001
"Width9 "=dword:00000050
"Position10 "=dword:00000010
"Visible10 "=dword:00000000
"Width10 "=dword:00000050
"Position11 "=dword:00000011
"Visible11 "=dword:00000000
"Width11 "=dword:0000004b
"Position12 "=dword:00000012
"Visible12 "=dword:00000000
"Width12 "=dword:0000002d
"Position13 "=dword:00000013
"Visible13 "=dword:00000000
"Width13 "=dword:0000003c
"Position14 "=dword:00000014
"Visible14 "=dword:00000000
"Width14 "=dword:0000004b
"Position15 "=dword:00000015
"Visible15 "=dword:00000000
"Width15 "=dword:00000064
"Position16 "=dword:00000016
"Visible16 "=dword:00000000
"Width16 "=dword:00000064
"Position17 "=dword:00000017
"Visible17 "=dword:00000000
"Width17 "=dword:0000004b
"Position18 "=dword:00000018
"Visible18 "=dword:00000000
"Width18 "=dword:00000064
"Position19 "=dword:00000019
"Visible19 "=dword:00000000
"Width19 "=dword:0000003c
"Position20 "=dword:0000001a
"Visible20 "=dword:00000000
"Width20 "=dword:0000004b
"Position21 "=dword:0000001b
"Visible21 "=dword:00000000
"Width21 "=dword:00000050
"Position22 "=dword:0000001c
"Visible22 "=dword:00000000
"Width22 "=dword:00000073
"Position23 "=dword:0000001d
"Visible23 "=dword:00000000
"Width23 "=dword:00000050
"Position24 "=dword:0000001e
"Visible24 "=dword:00000000
"Width24 "=dword:0000005a
"Position25 "=dword:0000001f
"Visible25 "=dword:00000000
"Width25 "=dword:0000006e
"Position26 "=dword:00000020
"Visible26 "=dword:00000000
"Width26 "=dword:00000064
"Position27 "=dword:00000021
"Visible27 "=dword:00000000
"Width27 "=dword:00000087
"Position28 "=dword:00000022
"Visible28 "=dword:00000000
"Width28 "=dword:00000064
"Position29 "=dword:00000023
"Visible29 "=dword:00000000
"Width29 "=dword:00000064
"Position30 "=dword:00000024
"Visible30 "=dword:00000000
"Width30 "=dword:00000046
"Position31 "=dword:00000025
"Visible31 "=dword:00000000
"Width31 "=dword:0000004b
"Position32 "=dword:00000026
"Visible32 "=dword:00000000
"Width32 "=dword:00000046
"Position33 "=dword:00000027
"Visible33 "=dword:00000000
"Width33 "=dword:0000004b
"Position34 "=dword:00000028
"Visible34 "=dword:00000000
"Width34 "=dword:0000003c
"Position35 "=dword:0000002a
"Visible35 "=dword:00000000
"Width35 "=dword:00000064
"Position36 "=dword:0000002e
"Visible36 "=dword:00000000
"Width36 "=dword:00000073
"Position37 "=dword:00000030
"Visible37 "=dword:00000000
"Width37 "=dword:0000005f
"Position38 "=dword:00000033
"Visible38 "=dword:00000000
"Width38 "=dword:00000091
"Position39 "=dword:00000035
"Visible39 "=dword:00000000
"Width39 "=dword:0000003c
"Position40 "=dword:0000002c
"Visible40 "=dword:00000000
"Width40 "=dword:0000005a
"Position41 "=dword:00000036
"Visible41 "=dword:00000000
"Width41 "=dword:00000041
"Position42 "=dword:00000029
"Visible42 "=dword:00000000
"Width42 "=dword:00000050
"Position43 "=dword:0000002b
"Visible43 "=dword:00000000
"Width43 "=dword:00000055
"Position44 "=dword:0000002d
"Visible44 "=dword:00000000
"Width44 "=dword:0000005f
"Position45 "=dword:00000037
"Visible45 "=dword:00000000
"Width45 "=dword:00000050
"Position46 "=dword:00000038
"Visible46 "=dword:00000000
"Width46 "=dword:0000004b
"Position47 "=dword:00000039
"Visible47 "=dword:00000000
"Width47 "=dword:0000004b
"Position48 "=dword:0000003a
"Visible48 "=dword:00000000
"Width48 "=dword:00000046
"Position49 "=dword:0000003b
"Visible49 "=dword:00000000
"Width49 "=dword:00000032
"Position50 "=dword:0000003c
"Visible50 "=dword:00000000
"Width50 "=dword:0000003c
"Position51 "=dword:0000003d
"Visible51 "=dword:00000000
"Width51 "=dword:0000004b
"Position52 "=dword:0000003e
"Visible52 "=dword:00000000
"Width52 "=dword:0000003c
"Position53 "=dword:0000003f
"Visible53 "=dword:00000000
"Width53 "=dword:00000037
"Position54 "=dword:00000040
"Visible54 "=dword:00000000
"Width54 "=dword:00000069
"Position55 "=dword:00000041
"Visible55 "=dword:00000000
"Width55 "=dword:0000005a
"Position56 "=dword:00000044
"Visible56 "=dword:00000000
"Width56 "=dword:0000004b
"Position57 "=dword:00000045
"Visible57 "=dword:00000000
"Width57 "=dword:0000004b
"Position58 "=dword:00000046
"Visible58 "=dword:00000000
"Width58 "=dword:00000037
"Position59 "=dword:00000047
"Visible59 "=dword:00000000
"Width59 "=dword:0000003c
"Position60 "=dword:00000048
"Visible60 "=dword:00000000
"Width60 "=dword:0000003c
"Position61 "=dword:00000049
"Visible61 "=dword:00000000
"Width61 "=dword:00000041
"Position62 "=dword:0000004a
"Visible62 "=dword:00000000
"Width62 "=dword:00000055
"Position63 "=dword:0000004b
"Visible63 "=dword:00000000
"Width63 "=dword:0000003c
"Position64 "=dword:0000004c
"Visible64 "=dword:00000000
"Width64 "=dword:0000003c
"Position65 "=dword:0000004d
"Visible65 "=dword:00000000
"Width65 "=dword:0000004b
"Position66 "=dword:0000004e
"Visible66 "=dword:00000000
"Width66 "=dword:0000003c
"Position67 "=dword:0000004f
"Visible67 "=dword:00000000
"Width67 "=dword:00000046
"Position68 "=dword:00000050
"Visible68 "=dword:00000000
"Width68 "=dword:00000028
"Position69 "=dword:00000051
"Visible69 "=dword:00000000
"Width69 "=dword:00000041
"Position70 "=dword:00000052
"Visible70 "=dword:00000000
"Width70 "=dword:0000003c
"Position71 "=dword:00000053
"Visible71 "=dword:00000000
"Width71 "=dword:00000069
"Position72 "=dword:00000054
"Visible72 "=dword:00000000
"Width72 "=dword:00000041
"Position73 "=dword:00000055
"Visible73 "=dword:00000000
"Width73 "=dword:0000005f
"Position74 "=dword:00000056
"Visible74 "=dword:00000000
"Width74 "=dword:0000003c
"Position75 "=dword:00000057
"Visible75 "=dword:00000000
"Width75 "=dword:00000037
"Position76 "=dword:00000058
"Visible76 "=dword:00000000
"Width76 "=dword:0000004b
"Position77 "=dword:00000059
"Visible77 "=dword:00000000
"Width77 "=dword:00000050
"Position78 "=dword:0000005a
"Visible78 "=dword:00000000
"Width78 "=dword:00000037
"Position79 "=dword:0000005b
"Visible79 "=dword:00000000
"Width79 "=dword:00000037
"Position80 "=dword:0000005c
"Visible80 "=dword:00000000
"Width80 "=dword:0000005a
"Position81 "=dword:0000005d
"Visible81 "=dword:00000000
"Width81 "=dword:0000004b
"Position82 "=dword:0000005e
"Visible82 "=dword:00000000
"Width82 "=dword:00000055
"Position83 "=dword:0000005f
"Visible83 "=dword:00000000
"Width83 "=dword:0000002d
"Position84 "=dword:00000060
"Visible84 "=dword:00000000
"Width84 "=dword:00000037
"Position85 "=dword:00000061
"Visible85 "=dword:00000000
"Width85 "=dword:0000003c
"Position86 "=dword:00000062
"Visible86 "=dword:00000000
"Width86 "=dword:00000046
"Position87 "=dword:00000063
"Visible87 "=dword:00000000
"Width87 "=dword:0000003c
"Position88 "=dword:00000064
"Visible88 "=dword:00000000
"Width88 "=dword:0000005a
"Position89 "=dword:00000065
"Visible89 "=dword:00000000
"Width89 "=dword:0000003c
"Position90 "=dword:00000066
"Visible90 "=dword:00000000
"Width90 "=dword:00000050
"Position91 "=dword:00000067
"Visible91 "=dword:00000000
"Width91 "=dword:00000046
"Position92 "=dword:00000068
"Visible92 "=dword:00000000
"Width92 "=dword:0000005a
"Position93 "=dword:00000069
"Visible93 "=dword:00000000
"Width93 "=dword:00000037
"Position94 "=dword:0000006a
"Visible94 "=dword:00000000
"Width94 "=dword:0000003c
"Position95 "=dword:0000006b
"Visible95 "=dword:00000000
"Width95 "=dword:0000003c
"Position96 "=dword:0000006c
"Visible96 "=dword:00000000
"Width96 "=dword:00000046
"Position97 "=dword:0000006d
"Visible97 "=dword:00000000
"Width97 "=dword:00000046
"Position98 "=dword:0000006e
"Visible98 "=dword:00000000
"Width98 "=dword:00000055
"Position99 "=dword:0000006f
"Visible99 "=dword:00000000
"Width99 "=dword:00000073
"Position100 "=dword:00000042
"Visible100 "=dword:00000000
"Width100 "=dword:00000041
"Position101 "=dword:00000070
"Visible101 "=dword:00000000
"Width101 "=dword:0000003c
"Position102 "=dword:00000071
"Visible102 "=dword:00000000
"Width102 "=dword:0000003c
"Position103 "=dword:00000072
"Visible103 "=dword:00000000
"Width103 "=dword:00000046
"Position104 "=dword:00000073
"Visible104 "=dword:00000000
"Width104 "=dword:0000003c
"Position105 "=dword:00000074
"Visible105 "=dword:00000000
"Width105 "=dword:00000041
"Position106 "=dword:0000000f
"Visible106 "=dword:00000001
"Width106 "=dword:00000050
"Position107 "=dword:0000000b
"Visible107 "=dword:00000001
"Width107 "=dword:00000028
"Position108 "=dword:00000043
"Visible108 "=dword:00000000
"Width108 "=dword:00000050
"Position109 "=dword:0000002f
"Visible109 "=dword:00000000
"Width109 "=dword:00000050
"Position110 "=dword:00000031
"Visible110 "=dword:00000000
"Width110 "=dword:00000055
"Position111 "=dword:00000032
"Visible111 "=dword:00000000
"Width111 "=dword:00000082
"Position112 "=dword:00000034
"Visible112 "=dword:00000000
"Width112 "=dword:00000087
"Position113 "=dword:00000075
"Visible113 "=dword:00000000
"Width113 "=dword:00000050
"Position114 "=dword:00000076
"Visible114 "=dword:00000000
"Width114 "=dword:00000050
"Position115 "=dword:00000077
"Visible115 "=dword:00000000
"Width115 "=dword:00000050
"Position116 "=dword:00000078
"Visible116 "=dword:00000000
"Width116 "=dword:00000050
"Position117 "=dword:00000079
"Visible117 "=dword:00000000
"Width117 "=dword:00000050
"Position118 "=dword:0000007a
"Visible118 "=dword:00000000
"Width118 "=dword:00000050
"Position119 "=dword:0000007b
"Visible119 "=dword:00000000
"Width119 "=dword:00000050
"Position120 "=dword:0000007c
"Visible120 "=dword:00000000
"Width120 "=dword:00000050
"Position121 "=dword:0000007d
"Visible121 "=dword:00000000
"Width121 "=dword:00000050
"Position122 "=dword:0000007e
"Visible122 "=dword:00000000
"Width122 "=dword:00000050
"Position123 "=dword:0000007f
"Visible123 "=dword:00000000
"Width123 "=dword:00000050
"Position124 "=dword:00000080
"Visible124 "=dword:00000000
"Width124 "=dword:00000050
"Position125 "=dword:00000081
"Visible125 "=dword:00000000
"Width125 "=dword:00000050
"Position126 "=dword:00000082
"Visible126 "=dword:00000000
"Width126 "=dword:00000050
"Position127 "=dword:00000083
"Visible127 "=dword:00000000
"Width127 "=dword:00000050
"Position128 "=dword:00000084
"Visible128 "=dword:00000000
"Width128 "=dword:00000050
"Position129 "=dword:00000085
"Visible129 "=dword:00000000
"Width129 "=dword:00000050
"Position130 "=dword:00000086
"Visible130 "=dword:00000000
"Width130 "=dword:00000050
"Position131 "=dword:00000087
"Visible131 "=dword:00000000
"Width131 "=dword:00000050
"Position132 "=dword:00000088
"Visible132 "=dword:00000000
"Width132 "=dword:00000050
"Position133 "=dword:00000089
"Visible133 "=dword:00000000
"Width133 "=dword:00000050
"Position134 "=dword:0000008a
"Visible134 "=dword:00000000
"Width134 "=dword:00000050
"Position135 "=dword:0000008b
"Visible135 "=dword:00000000
"Width135 "=dword:00000050
"Position136 "=dword:0000008c
"Visible136 "=dword:00000000
"Width136 "=dword:00000050
"Position137 "=dword:0000008d
"Visible137 "=dword:00000000
"Width137 "=dword:00000050
"Position138 "=dword:0000008e
"Visible138 "=dword:00000000
"Width138 "=dword:00000050
"Position139 "=dword:0000008f
"Visible139 "=dword:00000000
"Width139 "=dword:00000050
"Position140 "=dword:00000090
"Visible140 "=dword:00000000
"Width140 "=dword:00000050
"Position141 "=dword:00000091
"Visible141 "=dword:00000000
"Width141 "=dword:00000050
"Position142 "=dword:00000092
"Visible142 "=dword:00000000
"Width142 "=dword:00000050
"Position143 "=dword:00000093
"Visible143 "=dword:00000000
"Width143 "=dword:00000050
"Position144 "=dword:00000094
"Visible144 "=dword:00000000
"Width144 "=dword:00000050
"Position145 "=dword:00000095
"Visible145 "=dword:00000000
"Width145 "=dword:00000050
"Position146 "=dword:00000004
"Visible146 "=dword:00000000
"Width146 "=dword:00000037
"Position147 "=dword:00000005
"Visible147 "=dword:00000000
"Width147 "=dword:00000028
"Position148 "=dword:00000006
"Visible148 "=dword:00000000
"Width148 "=dword:00000037
"Position149 "=dword:00000007
"Visible149 "=dword:00000001
"Width149 "=dword:00000028

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Staff]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000069
"Position4 "=dword:00000005
"Visible4 "=dword:00000001
"Width4 "=dword:00000028
"Position5 "=dword:00000006
"Visible5 "=dword:00000001
"Width5 "=dword:00000028
"Position6 "=dword:00000004
"Visible6 "=dword:00000001
"Width6 "=dword:00000028
"Position7 "=dword:00000007
"Visible7 "=dword:00000001
"Width7 "=dword:00000050
"Position8 "=dword:00000008
"Visible8 "=dword:00000000
"Width8 "=dword:00000050
"Position9 "=dword:00000009
"Visible9 "=dword:00000000
"Width9 "=dword:0000004b
"Position10 "=dword:0000000a
"Visible10 "=dword:00000000
"Width10 "=dword:0000002d
"Position11 "=dword:0000000b
"Visible11 "=dword:00000000
"Width11 "=dword:0000003c
"Position12 "=dword:0000000c
"Visible12 "=dword:00000000
"Width12 "=dword:0000004b
"Position13 "=dword:0000000d
"Visible13 "=dword:00000000
"Width13 "=dword:00000064
"Position14 "=dword:0000000e
"Visible14 "=dword:00000000
"Width14 "=dword:00000064
"Position15 "=dword:0000000f
"Visible15 "=dword:00000000
"Width15 "=dword:0000004b
"Position16 "=dword:00000010
"Visible16 "=dword:00000000
"Width16 "=dword:00000064
"Position17 "=dword:00000011
"Visible17 "=dword:00000000
"Width17 "=dword:0000003c
"Position18 "=dword:00000012
"Visible18 "=dword:00000000
"Width18 "=dword:0000004b
"Position19 "=dword:00000013
"Visible19 "=dword:00000000
"Width19 "=dword:00000050
"Position20 "=dword:00000014
"Visible20 "=dword:00000000
"Width20 "=dword:00000046
"Position21 "=dword:00000015
"Visible21 "=dword:00000000
"Width21 "=dword:0000004b
"Position22 "=dword:00000016
"Visible22 "=dword:00000000
"Width22 "=dword:00000046
"Position23 "=dword:00000017
"Visible23 "=dword:00000000
"Width23 "=dword:00000046
"Position24 "=dword:00000018
"Visible24 "=dword:00000000
"Width24 "=dword:0000003c
"Position25 "=dword:00000019
"Visible25 "=dword:00000000
"Width25 "=dword:00000041
"Position26 "=dword:0000001a
"Visible26 "=dword:00000000
"Width26 "=dword:0000003c
"Position27 "=dword:0000001b
"Visible27 "=dword:00000000
"Width27 "=dword:00000055
"Position28 "=dword:0000001c
"Visible28 "=dword:00000000
"Width28 "=dword:00000069
"Position29 "=dword:0000001d
"Visible29 "=dword:00000000
"Width29 "=dword:0000006e
"Position30 "=dword:0000001e
"Visible30 "=dword:00000000
"Width30 "=dword:00000064
"Position31 "=dword:0000001f
"Visible31 "=dword:00000000
"Width31 "=dword:00000078
"Position32 "=dword:00000020
"Visible32 "=dword:00000000
"Width32 "=dword:00000064
"Position33 "=dword:00000021
"Visible33 "=dword:00000000
"Width33 "=dword:00000087
"Position34 "=dword:00000022
"Visible34 "=dword:00000000
"Width34 "=dword:00000069
"Position35 "=dword:00000023
"Visible35 "=dword:00000000
"Width35 "=dword:0000006e
"Position36 "=dword:00000024
"Visible36 "=dword:00000000
"Width36 "=dword:00000073
"Position37 "=dword:00000025
"Visible37 "=dword:00000000
"Width37 "=dword:0000004b
"Position38 "=dword:00000026
"Visible38 "=dword:00000000
"Width38 "=dword:0000002d
"Position39 "=dword:00000027
"Visible39 "=dword:00000000
"Width39 "=dword:00000055
"Position40 "=dword:00000028
"Visible40 "=dword:00000000
"Width40 "=dword:00000046
"Position41 "=dword:00000029
"Visible41 "=dword:00000000
"Width41 "=dword:0000004b
"Position42 "=dword:0000002a
"Visible42 "=dword:00000000
"Width42 "=dword:0000003c
"Position43 "=dword:0000002b
"Visible43 "=dword:00000000
"Width43 "=dword:00000046
"Position44 "=dword:0000002c
"Visible44 "=dword:00000000
"Width44 "=dword:00000073
"Position45 "=dword:0000002d
"Visible45 "=dword:00000000
"Width45 "=dword:0000004b
"Position46 "=dword:0000002e
"Visible46 "=dword:00000000
"Width46 "=dword:00000073
"Position47 "=dword:0000002f
"Visible47 "=dword:00000000
"Width47 "=dword:0000007d
"Position48 "=dword:00000030
"Visible48 "=dword:00000000
"Width48 "=dword:0000006e
"Position49 "=dword:00000031
"Visible49 "=dword:00000000
"Width49 "=dword:00000037
"Position50 "=dword:00000032
"Visible50 "=dword:00000000
"Width50 "=dword:00000064
"Position51 "=dword:00000033
"Visible51 "=dword:00000000
"Width51 "=dword:00000037
"Position52 "=dword:00000034
"Visible52 "=dword:00000000
"Width52 "=dword:0000004b
"Position53 "=dword:00000035
"Visible53 "=dword:00000000
"Width53 "=dword:00000046
"Position54 "=dword:00000036
"Visible54 "=dword:00000000
"Width54 "=dword:00000037
"Position55 "=dword:00000037
"Visible55 "=dword:00000000
"Width55 "=dword:0000003c
"Position56 "=dword:00000038
"Visible56 "=dword:00000000
"Width56 "=dword:00000055
"Position57 "=dword:00000039
"Visible57 "=dword:00000000
"Width57 "=dword:0000003c
"Position58 "=dword:0000003a
"Visible58 "=dword:00000000
"Width58 "=dword:0000003c
"Position59 "=dword:0000003b
"Visible59 "=dword:00000000
"Width59 "=dword:00000055
"Position60 "=dword:0000003c
"Visible60 "=dword:00000000
"Width60 "=dword:00000046
"Position61 "=dword:0000003d
"Visible61 "=dword:00000000
"Width61 "=dword:0000004b
"Position62 "=dword:0000003e
"Visible62 "=dword:00000000
"Width62 "=dword:00000055
"Position63 "=dword:0000003f
"Visible63 "=dword:00000000
"Width63 "=dword:0000005a
"Position64 "=dword:00000040
"Visible64 "=dword:00000000
"Width64 "=dword:0000006e
"Position65 "=dword:00000041
"Visible65 "=dword:00000000
"Width65 "=dword:00000050
"Position66 "=dword:00000042
"Visible66 "=dword:00000000
"Width66 "=dword:00000032
"Position67 "=dword:00000043
"Visible67 "=dword:00000000
"Width67 "=dword:00000064
"Position68 "=dword:00000044
"Visible68 "=dword:00000000
"Width68 "=dword:0000004b
"Position69 "=dword:00000045
"Visible69 "=dword:00000000
"Width69 "=dword:0000002d
"Position70 "=dword:00000046
"Visible70 "=dword:00000000
"Width70 "=dword:0000004b
"Position71 "=dword:00000047
"Visible71 "=dword:00000000
"Width71 "=dword:0000005a
"Position72 "=dword:00000048
"Visible72 "=dword:00000000
"Width72 "=dword:0000005a
"Position73 "=dword:00000049
"Visible73 "=dword:00000000
"Width73 "=dword:00000050
"Position74 "=dword:0000004a
"Visible74 "=dword:00000000
"Width74 "=dword:0000004b
"Position75 "=dword:0000004b
"Visible75 "=dword:00000000
"Width75 "=dword:00000050
"Position76 "=dword:0000004c
"Visible76 "=dword:00000000
"Width76 "=dword:0000005a
"Position77 "=dword:0000004d
"Visible77 "=dword:00000000
"Width77 "=dword:00000041
"Position78 "=dword:0000004e
"Visible78 "=dword:00000000
"Width78 "=dword:00000041
"Position79 "=dword:0000004f
"Visible79 "=dword:00000000
"Width79 "=dword:00000041
"Position80 "=dword:00000050
"Visible80 "=dword:00000000
"Width80 "=dword:00000041
"Position81 "=dword:00000051
"Visible81 "=dword:00000000
"Width81 "=dword:00000041
"Position82 "=dword:00000052
"Visible82 "=dword:00000000
"Width82 "=dword:00000041
"Position83 "=dword:00000053
"Visible83 "=dword:00000000
"Width83 "=dword:00000041
"Position84 "=dword:00000054
"Visible84 "=dword:00000000
"Width84 "=dword:00000041
"Position85 "=dword:00000055
"Visible85 "=dword:00000000
"Width85 "=dword:00000041
"Position86 "=dword:00000056
"Visible86 "=dword:00000000
"Width86 "=dword:00000050

 

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Rating Coefficients]
"GKWeightCoef "=dword:00000064
"GKCurrentAbilityCoef "=dword:00000000
"GKCornersCoef "=dword:00000000
"GKCrossingCoef "=dword:00000000
"GKDribblingCoef "=dword:00000000
"GKFinishingCoef "=dword:00000000
"GKFirstTouchCoef "=dword:00000000
"GKFreeKicksCoef "=dword:00000000
"GKHeadingCoef "=dword:00000000
"GKLongShotsCoef "=dword:00000000
"GKLongThrowsCoef "=dword:00000000
"GKMarkingCoef "=dword:00000000
"GKPassingCoef "=dword:00000000
"GKPenaltiesCoef "=dword:00000000
"GKTacklingCoef "=dword:00000005
"GKTechniqueCoef "=dword:00000000
"GKLeftFootCoef "=dword:00000000
"GKRightFootCoef "=dword:00000000
"GKAggressionCoef "=dword:0000000a
"GKAnticipationCoef "=dword:00000005
"GKBraveryCoef "=dword:00000014
"GKComposureCoef "=dword:00000014
"GKConcentrationCoef "=dword:0000000a
"GKConsistencyCoef "=dword:0000000a
"GKCreativityCoef "=dword:00000000
"GKDecisionsCoef "=dword:00000014
"GKDeterminationCoef "=dword:0000000a
"GKDirtinessCoef "=dword:fffffffb
"GKFlairCoef "=dword:00000000
"GKImportantMatchesCoef "=dword:0000000a
"GKInfluenceCoef "=dword:0000000a
"GKOffTheBallCoef "=dword:00000000
"GKPositioningCoef "=dword:00000050
"GKTeamworkCoef "=dword:00000005
"GKWorkRateCoef "=dword:00000000
"GKAccelerationCoef "=dword:00000005
"GKAgilityCoef "=dword:0000000a
"GKBalanceCoef "=dword:0000000a
"GKInjuryPronenessCoef "=dword:fffffffb
"GKJumpingCoef "=dword:00000050
"GKNaturalFitnessCoef "=dword:00000005
"GKPaceCoef "=dword:00000000
"GKStaminaCoef "=dword:00000000
"GKStrengthCoef "=dword:0000000a
"GKVersatilityCoef "=dword:00000000
"GKAerialAbilityCoef "=dword:00000032
"GKCommandOfAreaCoef "=dword:00000014
"GKCommunicationCoef "=dword:00000032
"GKEccentricityCoef "=dword:ffffffec
"GKHandlingCoef "=dword:00000064
"GKKickingCoef "=dword:0000000a
"GKOneOnOnesCoef "=dword:00000032
"GKReflexesCoef "=dword:00000064
"GKRushingOutCoef "=dword:00000014
"GKTendencyToPunchCoef "=dword:fffffff6
"GKThrowingCoef "=dword:0000000a
"GKAdaptabilityCoef "=dword:00000005
"GKAmbitionCoef "=dword:0000000a
"GKControversyCoef "=dword:fffffffb
"GKLoyalityCoef "=dword:00000005
"GKPressureCoef "=dword:00000005
"GKProfessionalismCoef "=dword:00000005
"GKSportsmanshipCoef "=dword:00000005
"GKTemperamentCoef "=dword:00000005
"SWWeightCoef "=dword:00000066
"SWCurrentAbilityCoef "=dword:00000000
"SWCornersCoef "=dword:00000000
"SWCrossingCoef "=dword:00000000
"SWDribblingCoef "=dword:00000000
"SWFinishingCoef "=dword:00000000
"SWFirstTouchCoef "=dword:00000014
"SWFreeKicksCoef "=dword:0000000a
"SWHeadingCoef "=dword:00000064
"SWLongShotsCoef "=dword:0000000a
"SWLongThrowsCoef "=dword:00000000
"SWMarkingCoef "=dword:00000064
"SWPassingCoef "=dword:0000000a
"SWPenaltiesCoef "=dword:00000005
"SWTacklingCoef "=dword:00000064
"SWTechniqueCoef "=dword:0000000a
"SWLeftFootCoef "=dword:00000005
"SWRightFootCoef "=dword:00000005
"SWAggressionCoef "=dword:00000014
"SWAnticipationCoef "=dword:00000014
"SWBraveryCoef "=dword:00000028
"SWComposureCoef "=dword:00000028
"SWConcentrationCoef "=dword:0000003c
"SWConsistencyCoef "=dword:0000000a
"SWCreativityCoef "=dword:0000000a
"SWDecisionsCoef "=dword:00000014
"SWDeterminationCoef "=dword:0000000a
"SWDirtinessCoef "=dword:ffffffe7
"SWFlairCoef "=dword:00000000
"SWImportantMatchesCoef "=dword:0000000a
"SWInfluenceCoef "=dword:0000000a
"SWOffTheBallCoef "=dword:0000000a
"SWPositioningCoef "=dword:00000064
"SWTeamworkCoef "=dword:00000028
"SWWorkRateCoef "=dword:00000014
"SWAccelerationCoef "=dword:0000001e
"SWAgilityCoef "=dword:0000000a
"SWBalanceCoef "=dword:00000014
"SWInjuryPronenessCoef "=dword:fffffffb
"SWJumpingCoef "=dword:00000064
"SWNaturalFitnessCoef "=dword:00000005
"SWPaceCoef "=dword:00000014
"SWStaminaCoef "=dword:0000000a
"SWStrengthCoef "=dword:00000050
"SWVersatilityCoef "=dword:00000005
"SWAerialAbilityCoef "=dword:00000000
"SWCommandOfAreaCoef "=dword:00000000
"SWCommunicationCoef "=dword:00000000
"SWEccentricityCoef "=dword:00000000
"SWHandlingCoef "=dword:00000000
"SWKickingCoef "=dword:00000000
"SWOneOnOnesCoef "=dword:00000005
"SWReflexesCoef "=dword:00000005
"SWRushingOutCoef "=dword:00000000
"SWTendencyToPunchCoef "=dword:00000000
"SWThrowingCoef "=dword:00000000
"SWAdaptabilityCoef "=dword:00000005
"SWAmbitionCoef "=dword:0000000a
"SWControversyCoef "=dword:fffffffb
"SWLoyalityCoef "=dword:00000005
"SWPressureCoef "=dword:00000005
"SWProfessionalismCoef "=dword:00000005
"SWSportsmanshipCoef "=dword:00000005
"SWTemperamentCoef "=dword:00000005
"CBWeightCoef "=dword:00000064
"CBCurrentAbilityCoef "=dword:00000000
"CBCornersCoef "=dword:00000000
"CBCrossingCoef "=dword:00000000
"CBDribblingCoef "=dword:00000000
"CBFinishingCoef "=dword:00000000
"CBFirstTouchCoef "=dword:00000014
"CBFreeKicksCoef "=dword:0000000a
"CBHeadingCoef "=dword:00000064
"CBLongShotsCoef "=dword:0000000a
"CBLongThrowsCoef "=dword:00000000
"CBMarkingCoef "=dword:00000050
"CBPassingCoef "=dword:00000014
"CBPenaltiesCoef "=dword:00000005
"CBTacklingCoef "=dword:00000064
"CBTechniqueCoef "=dword:0000000a
"CBLeftFootCoef "=dword:00000005
"CBRightFootCoef "=dword:00000005
"CBAggressionCoef "=dword:00000014
"CBAnticipationCoef "=dword:00000014
"CBBraveryCoef "=dword:00000028
"CBComposureCoef "=dword:00000014
"CBConcentrationCoef "=dword:00000028
"CBConsistencyCoef "=dword:0000000a
"CBCreativityCoef "=dword:0000000a
"CBDecisionsCoef "=dword:00000014
"CBDeterminationCoef "=dword:0000000a
"CBDirtinessCoef "=dword:ffffffec
"CBFlairCoef "=dword:00000000
"CBImportantMatchesCoef "=dword:0000000a
"CBInfluenceCoef "=dword:0000000a
"CBOffTheBallCoef "=dword:0000000a
"CBPositioningCoef "=dword:00000050
"CBTeamworkCoef "=dword:00000028
"CBWorkRateCoef "=dword:00000014
"CBAccelerationCoef "=dword:00000028
"CBAgilityCoef "=dword:0000000a
"CBBalanceCoef "=dword:00000014
"CBInjuryPronenessCoef "=dword:fffffffb
"CBJumpingCoef "=dword:00000064
"CBNaturalFitnessCoef "=dword:00000005
"CBPaceCoef "=dword:0000001e
"CBStaminaCoef "=dword:0000000a
"CBStrengthCoef "=dword:0000003c
"CBVersatilityCoef "=dword:00000005
"CBAerialAbilityCoef "=dword:00000000
"CBCommandOfAreaCoef "=dword:00000000
"CBCommunicationCoef "=dword:00000000
"CBEccentricityCoef "=dword:00000000
"CBHandlingCoef "=dword:00000000
"CBKickingCoef "=dword:00000000
"CBOneOnOnesCoef "=dword:00000005
"CBReflexesCoef "=dword:00000005
"CBRushingOutCoef "=dword:00000000
"CBTendencyToPunchCoef "=dword:00000000
"CBThrowingCoef "=dword:00000000
"CBAdaptabilityCoef "=dword:00000005
"CBAmbitionCoef "=dword:0000000a
"CBControversyCoef "=dword:fffffffb
"CBLoyalityCoef "=dword:00000005
"CBPressureCoef "=dword:00000005
"CBProfessionalismCoef "=dword:00000005
"CBSportsmanshipCoef "=dword:00000005
"CBTemperamentCoef "=dword:00000005
"FBWeightCoef "=dword:0000006c
"FBCurrentAbilityCoef "=dword:00000000
"FBCornersCoef "=dword:0000000a
"FBCrossingCoef "=dword:0000001e
"FBDribblingCoef "=dword:00000014
"FBFinishingCoef "=dword:00000000
"FBFirstTouchCoef "=dword:00000014
"FBFreeKicksCoef "=dword:0000000a
"FBHeadingCoef "=dword:0000003c
"FBLongShotsCoef "=dword:0000000a
"FBLongThrowsCoef "=dword:0000000a
"FBMarkingCoef "=dword:0000003c
"FBPassingCoef "=dword:0000001e
"FBPenaltiesCoef "=dword:00000005
"FBTacklingCoef "=dword:00000064
"FBTechniqueCoef "=dword:00000014
"FBLeftFootCoef "=dword:00000005
"FBRightFootCoef "=dword:00000005
"FBAggressionCoef "=dword:0000000f
"FBAnticipationCoef "=dword:00000050
"FBBraveryCoef "=dword:00000014
"FBComposureCoef "=dword:0000000a
"FBConcentrationCoef "=dword:0000001e
"FBConsistencyCoef "=dword:0000000a
"FBCreativityCoef "=dword:0000000a
"FBDecisionsCoef "=dword:00000014
"FBDeterminationCoef "=dword:0000000a
"FBDirtinessCoef "=dword:fffffff6
"FBFlairCoef "=dword:00000005
"FBImportantMatchesCoef "=dword:0000000a
"FBInfluenceCoef "=dword:0000000a
"FBOffTheBallCoef "=dword:00000014
"FBPositioningCoef "=dword:00000064
"FBTeamworkCoef "=dword:00000014
"FBWorkRateCoef "=dword:00000014
"FBAccelerationCoef "=dword:0000003c
"FBAgilityCoef "=dword:0000000a
"FBBalanceCoef "=dword:00000014
"FBInjuryPronenessCoef "=dword:fffffffb
"FBJumpingCoef "=dword:0000003c
"FBNaturalFitnessCoef "=dword:00000005
"FBPaceCoef "=dword:00000050
"FBStaminaCoef "=dword:0000003c
"FBStrengthCoef "=dword:00000028
"FBVersatilityCoef "=dword:00000005
"FBAerialAbilityCoef "=dword:00000000
"FBCommandOfAreaCoef "=dword:00000000
"FBCommunicationCoef "=dword:00000000
"FBEccentricityCoef "=dword:00000000
"FBHandlingCoef "=dword:00000000
"FBKickingCoef "=dword:00000000
"FBOneOnOnesCoef "=dword:00000005
"FBReflexesCoef "=dword:00000005
"FBRushingOutCoef "=dword:00000000
"FBTendencyToPunchCoef "=dword:00000000
"FBThrowingCoef "=dword:00000000
"FBAdaptabilityCoef "=dword:00000005
"FBAmbitionCoef "=dword:0000000a
"FBControversyCoef "=dword:fffffffb
"FBLoyalityCoef "=dword:00000005
"FBPressureCoef "=dword:00000005
"FBProfessionalismCoef "=dword:00000005
"FBSportsmanshipCoef "=dword:00000005
"FBTemperamentCoef "=dword:00000005
"WBWeightCoef "=dword:0000006e
"WBCurrentAbilityCoef "=dword:00000000
"WBCornersCoef "=dword:0000000a
"WBCrossingCoef "=dword:0000003c
"WBDribblingCoef "=dword:00000028
"WBFinishingCoef "=dword:0000000a
"WBFirstTouchCoef "=dword:00000014
"WBFreeKicksCoef "=dword:0000000a
"WBHeadingCoef "=dword:00000028
"WBLongShotsCoef "=dword:00000014
"WBLongThrowsCoef "=dword:0000000a
"WBMarkingCoef "=dword:0000003c
"WBPassingCoef "=dword:00000028
"WBPenaltiesCoef "=dword:00000005
"WBTacklingCoef "=dword:00000064
"WBTechniqueCoef "=dword:00000028
"WBLeftFootCoef "=dword:00000005
"WBRightFootCoef "=dword:00000005
"WBAggressionCoef "=dword:0000000a
"WBAnticipationCoef "=dword:00000050
"WBBraveryCoef "=dword:0000000a
"WBComposureCoef "=dword:0000000a
"WBConcentrationCoef "=dword:00000014
"WBConsistencyCoef "=dword:0000000a
"WBCreativityCoef "=dword:00000014
"WBDecisionsCoef "=dword:00000014
"WBDeterminationCoef "=dword:0000000a
"WBDirtinessCoef "=dword:fffffff6
"WBFlairCoef "=dword:0000000a
"WBImportantMatchesCoef "=dword:0000000a
"WBInfluenceCoef "=dword:0000000a
"WBOffTheBallCoef "=dword:00000014
"WBPositioningCoef "=dword:00000064
"WBTeamworkCoef "=dword:00000014
"WBWorkRateCoef "=dword:00000028
"WBAccelerationCoef "=dword:00000050
"WBAgilityCoef "=dword:0000000a
"WBBalanceCoef "=dword:00000014
"WBInjuryPronenessCoef "=dword:fffffffb
"WBJumpingCoef "=dword:00000014
"WBNaturalFitnessCoef "=dword:00000005
"WBPaceCoef "=dword:00000064
"WBStaminaCoef "=dword:00000050
"WBStrengthCoef "=dword:00000028
"WBVersatilityCoef "=dword:00000005
"WBAerialAbilityCoef "=dword:00000000
"WBCommandOfAreaCoef "=dword:00000000
"WBCommunicationCoef "=dword:00000000
"WBEccentricityCoef "=dword:00000000
"WBHandlingCoef "=dword:00000000
"WBKickingCoef "=dword:00000000
"WBOneOnOnesCoef "=dword:00000005
"WBReflexesCoef "=dword:00000005
"WBRushingOutCoef "=dword:00000000
"WBTendencyToPunchCoef "=dword:00000000
"WBThrowingCoef "=dword:00000000
"WBAdaptabilityCoef "=dword:00000005
"WBAmbitionCoef "=dword:0000000a
"WBControversyCoef "=dword:fffffffb
"WBLoyalityCoef "=dword:00000005
"WBPressureCoef "=dword:00000005
"WBProfessionalismCoef "=dword:00000005
"WBSportsmanshipCoef "=dword:00000005
"WBTemperamentCoef "=dword:00000005
"DMWeightCoef "=dword:00000069
"DMCurrentAbilityCoef "=dword:00000000
"DMCornersCoef "=dword:0000000a
"DMCrossingCoef "=dword:0000001e
"DMDribblingCoef "=dword:00000014
"DMFinishingCoef "=dword:0000000a
"DMFirstTouchCoef "=dword:0000001e
"DMFreeKicksCoef "=dword:0000000a
"DMHeadingCoef "=dword:00000028
"DMLongShotsCoef "=dword:00000014
"DMLongThrowsCoef "=dword:00000005
"DMMarkingCoef "=dword:0000003c
"DMPassingCoef "=dword:00000028
"DMPenaltiesCoef "=dword:00000005
"DMTacklingCoef "=dword:00000064
"DMTechniqueCoef "=dword:0000001e
"DMLeftFootCoef "=dword:00000005
"DMRightFootCoef "=dword:00000005
"DMAggressionCoef "=dword:00000028
"DMAnticipationCoef "=dword:00000028
"DMBraveryCoef "=dword:00000014
"DMComposureCoef "=dword:0000000a
"DMConcentrationCoef "=dword:00000014
"DMConsistencyCoef "=dword:0000000a
"DMCreativityCoef "=dword:00000014
"DMDecisionsCoef "=dword:00000014
"DMDeterminationCoef "=dword:0000000a
"DMDirtinessCoef "=dword:fffffff6
"DMFlairCoef "=dword:0000000a
"DMImportantMatchesCoef "=dword:0000000a
"DMInfluenceCoef "=dword:0000000a
"DMOffTheBallCoef "=dword:0000001e
"DMPositioningCoef "=dword:00000050
"DMTeamworkCoef "=dword:00000028
"DMWorkRateCoef "=dword:00000050
"DMAccelerationCoef "=dword:00000028
"DMAgilityCoef "=dword:0000000a
"DMBalanceCoef "=dword:0000000a
"DMInjuryPronenessCoef "=dword:fffffffb
"DMJumpingCoef "=dword:00000028
"DMNaturalFitnessCoef "=dword:00000005
"DMPaceCoef "=dword:00000028
"DMStaminaCoef "=dword:0000003c
"DMStrengthCoef "=dword:00000028
"DMVersatilityCoef "=dword:00000005
"DMAerialAbilityCoef "=dword:00000000
"DMCommandOfAreaCoef "=dword:00000000
"DMCommunicationCoef "=dword:00000000
"DMEccentricityCoef "=dword:00000000
"DMHandlingCoef "=dword:00000000
"DMKickingCoef "=dword:00000000
"DMOneOnOnesCoef "=dword:00000005
"DMReflexesCoef "=dword:00000005
"DMRushingOutCoef "=dword:00000000
"DMTendencyToPunchCoef "=dword:00000000
"DMThrowingCoef "=dword:00000000
"DMAdaptabilityCoef "=dword:00000005
"DMAmbitionCoef "=dword:0000000a
"DMControversyCoef "=dword:fffffffb
"DMLoyalityCoef "=dword:00000005
"DMPressureCoef "=dword:00000005
"DMProfessionalismCoef "=dword:00000005
"DMSportsmanshipCoef "=dword:00000005
"DMTemperamentCoef "=dword:00000005
"MWeightCoef "=dword:0000006a
"MCurrentAbilityCoef "=dword:00000000
"MCornersCoef "=dword:0000000a
"MCrossingCoef "=dword:00000028
"MDribblingCoef "=dword:00000032
"MFinishingCoef "=dword:00000014
"MFirstTouchCoef "=dword:0000001e
"MFreeKicksCoef "=dword:0000000a
"MHeadingCoef "=dword:0000001e
"MLongShotsCoef "=dword:00000014
"MLongThrowsCoef "=dword:00000005
"MMarkingCoef "=dword:00000028
"MPassingCoef "=dword:00000046
"MPenaltiesCoef "=dword:00000005
"MTacklingCoef "=dword:0000003c
"MTechniqueCoef "=dword:00000032
"MLeftFootCoef "=dword:00000005
"MRightFootCoef "=dword:00000005
"MAggressionCoef "=dword:0000001e
"MAnticipationCoef "=dword:00000028
"MBraveryCoef "=dword:0000000a
"MComposureCoef "=dword:0000000a
"MConcentrationCoef "=dword:0000000a
"MConsistencyCoef "=dword:0000000a
"MCreativityCoef "=dword:0000003c
"MDecisionsCoef "=dword:0000001e
"MDeterminationCoef "=dword:0000000a
"MDirtinessCoef "=dword:fffffffb
"MFlairCoef "=dword:0000000a
"MImportantMatchesCoef "=dword:0000000a
"MInfluenceCoef "=dword:0000000a
"MOffTheBallCoef "=dword:00000028
"MPositioningCoef "=dword:00000028
"MTeamworkCoef "=dword:00000032
"MWorkRateCoef "=dword:00000032
"MAccelerationCoef "=dword:00000032
"MAgilityCoef "=dword:0000000a
"MBalanceCoef "=dword:0000000a
"MInjuryPronenessCoef "=dword:fffffffb
"MJumpingCoef "=dword:00000028
"MNaturalFitnessCoef "=dword:00000005
"MPaceCoef "=dword:00000028
"MStaminaCoef "=dword:0000003c
"MStrengthCoef "=dword:0000001e
"MVersatilityCoef "=dword:00000005
"MAerialAbilityCoef "=dword:00000000
"MCommandOfAreaCoef "=dword:00000000
"MCommunicationCoef "=dword:00000000
"MEccentricityCoef "=dword:00000000
"MHandlingCoef "=dword:00000000
"MKickingCoef "=dword:00000000
"MOneOnOnesCoef "=dword:00000005
"MReflexesCoef "=dword:00000005
"MRushingOutCoef "=dword:00000000
"MTendencyToPunchCoef "=dword:00000000
"MThrowingCoef "=dword:00000000
"MAdaptabilityCoef "=dword:00000005
"MAmbitionCoef "=dword:0000000a
"MControversyCoef "=dword:fffffffb
"MLoyalityCoef "=dword:00000005
"MPressureCoef "=dword:00000005
"MProfessionalismCoef "=dword:00000005
"MSportsmanshipCoef "=dword:00000005
"MTemperamentCoef "=dword:00000005
"AMWeightCoef "=dword:00000069
"AMCurrentAbilityCoef "=dword:00000000
"AMCornersCoef "=dword:0000000a
"AMCrossingCoef "=dword:0000003c
"AMDribblingCoef "=dword:00000050
"AMFinishingCoef "=dword:00000028
"AMFirstTouchCoef "=dword:0000001e
"AMFreeKicksCoef "=dword:0000000a
"AMHeadingCoef "=dword:00000014
"AMLongShotsCoef "=dword:00000014
"AMLongThrowsCoef "=dword:00000005
"AMMarkingCoef "=dword:0000000a
"AMPassingCoef "=dword:00000064
"AMPenaltiesCoef "=dword:00000005
"AMTacklingCoef "=dword:0000000a
"AMTechniqueCoef "=dword:00000050
"AMLeftFootCoef "=dword:00000005
"AMRightFootCoef "=dword:00000005
"AMAggressionCoef "=dword:0000000a
"AMAnticipationCoef "=dword:0000001e
"AMBraveryCoef "=dword:0000000a
"AMComposureCoef "=dword:0000000a
"AMConcentrationCoef "=dword:0000000a
"AMConsistencyCoef "=dword:0000000a
"AMCreativityCoef "=dword:00000064
"AMDecisionsCoef "=dword:00000028
"AMDeterminationCoef "=dword:0000000a
"AMDirtinessCoef "=dword:fffffffb
"AMFlairCoef "=dword:00000014
"AMImportantMatchesCoef "=dword:0000000a
"AMInfluenceCoef "=dword:0000000a
"AMOffTheBallCoef "=dword:0000003c
"AMPositioningCoef "=dword:00000014
"AMTeamworkCoef "=dword:0000003c
"AMWorkRateCoef "=dword:00000014
"AMAccelerationCoef "=dword:0000003c
"AMAgilityCoef "=dword:0000000a
"AMBalanceCoef "=dword:0000000a
"AMInjuryPronenessCoef "=dword:fffffffb
"AMJumpingCoef "=dword:00000014
"AMNaturalFitnessCoef "=dword:00000005
"AMPaceCoef "=dword:0000003c
"AMStaminaCoef "=dword:0000003c
"AMStrengthCoef "=dword:00000014
"AMVersatilityCoef "=dword:00000005
"AMAerialAbilityCoef "=dword:00000000
"AMCommandOfAreaCoef "=dword:00000000
"AMCommunicationCoef "=dword:00000000
"AMEccentricityCoef "=dword:00000000
"AMHandlingCoef "=dword:00000000
"AMKickingCoef "=dword:00000000
"AMOneOnOnesCoef "=dword:00000005
"AMReflexesCoef "=dword:00000005
"AMRushingOutCoef "=dword:00000000
"AMTendencyToPunchCoef "=dword:00000000
"AMThrowingCoef "=dword:00000000
"AMAdaptabilityCoef "=dword:00000005
"AMAmbitionCoef "=dword:0000000a
"AMControversyCoef "=dword:fffffffb
"AMLoyalityCoef "=dword:00000005
"AMPressureCoef "=dword:00000005
"AMProfessionalismCoef "=dword:00000005
"AMSportsmanshipCoef "=dword:00000005
"AMTemperamentCoef "=dword:00000005
"WWeightCoef "=dword:00000069
"WCurrentAbilityCoef "=dword:00000000
"WCornersCoef "=dword:0000000a
"WCrossingCoef "=dword:00000064
"WDribblingCoef "=dword:00000064
"WFinishingCoef "=dword:0000003c
"WFirstTouchCoef "=dword:0000001e
"WFreeKicksCoef "=dword:0000000a
"WHeadingCoef "=dword:00000014
"WLongShotsCoef "=dword:00000014
"WLongThrowsCoef "=dword:00000005
"WMarkingCoef "=dword:0000000a
"WPassingCoef "=dword:0000003c
"WPenaltiesCoef "=dword:00000005
"WTacklingCoef "=dword:0000000a
"WTechniqueCoef "=dword:00000050
"WLeftFootCoef "=dword:00000005
"WRightFootCoef "=dword:00000005
"WAggressionCoef "=dword:0000000a
"WAnticipationCoef "=dword:00000014
"WBraveryCoef "=dword:0000000a
"WComposureCoef "=dword:0000000a
"WConcentrationCoef "=dword:0000000a
"WConsistencyCoef "=dword:0000000a
"WCreativityCoef "=dword:0000003c
"WDecisionsCoef "=dword:00000014
"WDeterminationCoef "=dword:0000000a
"WDirtinessCoef "=dword:fffffffb
"WFlairCoef "=dword:0000000a
"WImportantMatchesCoef "=dword:00000014
"WInfluenceCoef "=dword:0000000a
"WOffTheBallCoef "=dword:0000003c
"WPositioningCoef "=dword:00000014
"WTeamworkCoef "=dword:0000001e
"WWorkRateCoef "=dword:0000001e
"WAccelerationCoef "=dword:00000050
"WAgilityCoef "=dword:00000014
"WBalanceCoef "=dword:0000000a
"WInjuryPronenessCoef "=dword:fffffffb
"WJumpingCoef "=dword:00000014
"WNaturalFitnessCoef "=dword:00000005
"WPaceCoef "=dword:00000064
"WStaminaCoef "=dword:0000003c
"WStrengthCoef "=dword:00000014
"WVersatilityCoef "=dword:00000005
"WAerialAbilityCoef "=dword:00000000
"WCommandOfAreaCoef "=dword:00000000
"WCommunicationCoef "=dword:00000000
"WEccentricityCoef "=dword:00000000
"WHandlingCoef "=dword:00000000
"WKickingCoef "=dword:00000000
"WOneOnOnesCoef "=dword:00000005
"WReflexesCoef "=dword:00000005
"WRushingOutCoef "=dword:00000000
"WTendencyToPunchCoef "=dword:00000000
"WThrowingCoef "=dword:00000000
"WAdaptabilityCoef "=dword:00000005
"WAmbitionCoef "=dword:0000000a
"WControversyCoef "=dword:fffffffb
"WLoyalityCoef "=dword:00000005
"WPressureCoef "=dword:00000005
"WProfessionalismCoef "=dword:00000005
"WSportsmanshipCoef "=dword:00000005
"WTemperamentCoef "=dword:00000005
"FSTWeightCoef "=dword:00000067
"FSTCurrentAbilityCoef "=dword:00000000
"FSTCornersCoef "=dword:0000000a
"FSTCrossingCoef "=dword:0000000a
"FSTDribblingCoef "=dword:00000050
"FSTFinishingCoef "=dword:00000064
"FSTFirstTouchCoef "=dword:00000028
"FSTFreeKicksCoef "=dword:0000000a
"FSTHeadingCoef "=dword:00000028
"FSTLongShotsCoef "=dword:00000014
"FSTLongThrowsCoef "=dword:00000000
"FSTMarkingCoef "=dword:00000000
"FSTPassingCoef "=dword:00000028
"FSTPenaltiesCoef "=dword:00000005
"FSTTacklingCoef "=dword:00000000
"FSTTechniqueCoef "=dword:00000050
"FSTLeftFootCoef "=dword:00000005
"FSTRightFootCoef "=dword:00000005
"FSTAggressionCoef "=dword:0000000a
"FSTAnticipationCoef "=dword:0000000a
"FSTBraveryCoef "=dword:0000000a
"FSTComposureCoef "=dword:0000000a
"FSTConcentrationCoef "=dword:0000000a
"FSTConsistencyCoef "=dword:0000000a
"FSTCreativityCoef "=dword:00000028
"FSTDecisionsCoef "=dword:0000000a
"FSTDeterminationCoef "=dword:0000000a
"FSTDirtinessCoef "=dword:fffffffb
"FSTFlairCoef "=dword:0000000a
"FSTImportantMatchesCoef "=dword:0000000a
"FSTInfluenceCoef "=dword:0000000a
"FSTOffTheBallCoef "=dword:00000050
"FSTPositioningCoef "=dword:0000000a
"FSTTeamworkCoef "=dword:0000000a
"FSTWorkRateCoef "=dword:0000000a
"FSTAccelerationCoef "=dword:00000064
"FSTAgilityCoef "=dword:00000028
"FSTBalanceCoef "=dword:0000000a
"FSTInjuryPronenessCoef "=dword:fffffffb
"FSTJumpingCoef "=dword:00000014
"FSTNaturalFitnessCoef "=dword:00000005
"FSTPaceCoef "=dword:00000064
"FSTStaminaCoef "=dword:00000028
"FSTStrengthCoef "=dword:00000014
"FSTVersatilityCoef "=dword:00000005
"FSTAerialAbilityCoef "=dword:00000000
"FSTCommandOfAreaCoef "=dword:00000000
"FSTCommunicationCoef "=dword:00000000
"FSTEccentricityCoef "=dword:00000000
"FSTHandlingCoef "=dword:00000000
"FSTKickingCoef "=dword:00000000
"FSTOneOnOnesCoef "=dword:00000005
"FSTReflexesCoef "=dword:00000005
"FSTRushingOutCoef "=dword:00000000
"FSTTendencyToPunchCoef "=dword:00000000
"FSTThrowingCoef "=dword:00000000
"FSTAdaptabilityCoef "=dword:00000005
"FSTAmbitionCoef "=dword:0000000a
"FSTControversyCoef "=dword:fffffffb
"FSTLoyalityCoef "=dword:00000005
"FSTPressureCoef "=dword:00000005
"FSTProfessionalismCoef "=dword:00000005
"FSTSportsmanshipCoef "=dword:00000005
"FSTTemperamentCoef "=dword:00000005
"TSTWeightCoef "=dword:00000068
"TSTCurrentAbilityCoef "=dword:00000000
"TSTCornersCoef "=dword:00000000
"TSTCrossingCoef "=dword:0000000a
"TSTDribblingCoef "=dword:0000003c
"TSTFinishingCoef "=dword:00000050
"TSTFirstTouchCoef "=dword:0000001e
"TSTFreeKicksCoef "=dword:0000000a
"TSTHeadingCoef "=dword:00000064
"TSTLongShotsCoef "=dword:00000014
"TSTLongThrowsCoef "=dword:00000000
"TSTMarkingCoef "=dword:00000000
"TSTPassingCoef "=dword:00000028
"TSTPenaltiesCoef "=dword:00000005
"TSTTacklingCoef "=dword:00000000
"TSTTechniqueCoef "=dword:00000028
"TSTLeftFootCoef "=dword:00000005
"TSTRightFootCoef "=dword:00000005
"TSTAggressionCoef "=dword:00000014
"TSTAnticipationCoef "=dword:0000000a
"TSTBraveryCoef "=dword:00000014
"TSTComposureCoef "=dword:0000000a
"TSTConcentrationCoef "=dword:0000000a
"TSTConsistencyCoef "=dword:0000000a
"TSTCreativityCoef "=dword:00000014
"TSTDecisionsCoef "=dword:0000000a
"TSTDeterminationCoef "=dword:0000000a
"TSTDirtinessCoef "=dword:fffffffb
"TSTFlairCoef "=dword:0000000a
"TSTImportantMatchesCoef "=dword:0000000a
"TSTInfluenceCoef "=dword:0000000a
"TSTOffTheBallCoef "=dword:00000050
"TSTPositioningCoef "=dword:00000014
"TSTTeamworkCoef "=dword:0000000a
"TSTWorkRateCoef "=dword:0000000a
"TSTAccelerationCoef "=dword:00000028
"TSTAgilityCoef "=dword:00000014
"TSTBalanceCoef "=dword:00000014
"TSTInjuryPronenessCoef "=dword:fffffffb
"TSTJumpingCoef "=dword:00000064
"TSTNaturalFitnessCoef "=dword:00000005
"TSTPaceCoef "=dword:00000028
"TSTStaminaCoef "=dword:00000014
"TSTStrengthCoef "=dword:00000050
"TSTVersatilityCoef "=dword:00000005
"TSTAerialAbilityCoef "=dword:00000000
"TSTCommandOfAreaCoef "=dword:00000000
"TSTCommunicationCoef "=dword:00000000
"TSTEccentricityCoef "=dword:00000000
"TSTHandlingCoef "=dword:00000000
"TSTKickingCoef "=dword:00000000
"TSTOneOnOnesCoef "=dword:00000005
"TSTReflexesCoef "=dword:00000005
"TSTRushingOutCoef "=dword:00000000
"TSTTendencyToPunchCoef "=dword:00000000
"TSTThrowingCoef "=dword:00000000
"TSTAdaptabilityCoef "=dword:00000005
"TSTAmbitionCoef "=dword:0000000a
"TSTControversyCoef "=dword:fffffffb
"TSTLoyalityCoef "=dword:00000005
"TSTPressureCoef "=dword:00000005
"TSTProfessionalismCoef "=dword:00000005
"TSTSportsmanshipCoef "=dword:00000005
"TSTTemperamentCoef "=dword:00000005

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2009]
"ShortlistDir "=" "
"Language "= "English "
"LoadLangDB "=dword:00000000
"CompressHistoryPoints "=dword:00000000
"HighlightedAttributes "=dword:00000000
"MinCondition "=dword:00000050
"SkinName "= "Champions League "
"LastUpdateCheck "=dword:00009b73
"HighQualityGUI "=dword:00000001
"AutomaticallyUpdateCheck "=dword:00000001
"AdvancedGeneration "=dword:00000000
"TranslateStaffSkills "=dword:00000001
"TranslatePlayerSkills "=dword:00000001
"TranslatePositions "=dword:00000001
"ShowHistory "=dword:00000001
"Version "=dword:00000062
"UniqueID "= "96-F555-0E51 "
"UseProxy "=dword:00000000
"ProxyHost "=" "
"ProxyPort "=" "
"UseAuthentication "=dword:00000000
"UserName "=" "
"UserPassword "=" "
"Currency "=dword:00000056
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1312)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2009-04-08 15:36:54
ComboFix-quarantined-files.txt 2009-04-08 13:36:35
ComboFix2.txt 2009-04-07 13:47:36

Pre-Run: 30.457.888.768 bytes free
Post-Run: 30,442,823,680 bytes free

Current=2 Default=2 Failed=1 LastKnownGood=3 Sets=,1,2,3
1870 --- E O F --- 2008-02-14 19:12:08

 

Hi
OK Now please do this.

Delete the CFScript you have and run this one as you did the other oine.

Code:

KillAll::
Driver::
nicsk32

Please post the Combofix log.

Geri

 

Hi Geri,

here is the ComboFix log:

ComboFix 09-04-04.01 - Dean 2009-04-09 8:01:29.3 - NTFSx86
Running from: c:\documents and settings\Dean\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Dean\Desktop\CFScript.txt
* Resident AV is active


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NICSK32
-------\Service_nicsk32


((((((((((((((((((((((((( Files Created from 2009-03-09 to 2009-04-09 )))))))))))))))))))))))))))))))
.

2009-04-04 23:52 . 2009-04-04 23:52 <DIR> d-------- c:\windows\RestoreSafeDeleted
2009-04-04 23:49 . 2009-04-04 23:49 123 --a------ c:\windows\rootkitno.ini
2009-04-04 23:48 . 2009-04-04 23:48 45 --a------ c:\windows\system32\Partizan.RRI
2009-04-04 23:36 . 2009-04-04 23:36 (2) -rahs-ot- c:\windows\winstart.bat
2009-04-04 23:35 . 2009-04-04 23:52 <DIR> d-------- c:\program files\UnHackMe
2009-03-31 15:30 . 2009-03-31 18:08 <DIR> d-------- c:\documents and settings\All Users\Application Data\Symantec
2009-03-31 15:30 . 2009-03-31 15:30 <DIR> d-------- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-03-31 15:30 . 2009-03-31 18:08 <DIR> d-------- c:\documents and settings\All Users\Application Data\Norton
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\documents and settings\Dean\Application Data\Malwarebytes
2009-03-30 17:25 . 2009-03-30 17:25 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-03-30 17:25 . 2009-03-26 16:49 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-30 17:25 . 2009-03-26 16:49 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-03-30 15:53 . 2009-04-05 10:56 8,704 --ahs---- c:\windows\system32\Thumbs.db
2009-03-29 16:11 . 2009-04-04 13:02 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-03-29 01:26 . 2009-03-29 09:03 <DIR> d-------- c:\documents and settings\Administrator
2009-03-29 00:39 . 2007-01-18 14:00 3,968 --a------ c:\windows\system32\drivers\AvgArCln.sys
2009-03-20 20:30 . 2009-04-07 16:22 <DIR> d-------- c:\documents and settings\Dean\Tracing
2009-03-20 20:28 . 2009-03-20 20:28 <DIR> d-------- c:\program files\Windows Live SkyDrive
2009-03-20 20:28 . 2009-03-20 20:28 <DIR> d-------- c:\program files\Microsoft
2009-03-20 20:26 . 2009-03-20 20:26 <DIR> d-------- c:\program files\Common Files\Windows Live
2009-03-18 15:11 . 2009-03-30 15:56 44,032 --ahs---- c:\windows\Thumbs.db

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-05 11:46 --------- d-----w c:\documents and settings\Dean\Application Data\mIRC
2009-04-05 08:47 --------- d-----w c:\documents and settings\Dean\Application Data\uTorrent
2009-04-01 14:44 --------- d-----w c:\program files\SpeedFan
2009-03-31 17:12 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-29 10:37 --------- d-----w c:\program files\SpywareBlaster
2009-03-29 06:53 --------- d-----w c:\program files\Unlocker
2009-03-27 12:32 --------- d-----w c:\program files\Java
2009-03-20 18:28 --------- d-----w c:\program files\Windows Live
2009-03-19 14:34 --------- d-----w c:\documents and settings\Dean\Application Data\LimeWire
2009-03-13 13:37 --------- d-----w c:\documents and settings\Dean\Application Data\BSplayer
2009-03-11 17:07 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-08 14:33 --------- d-----w c:\program files\LimeWire
2009-02-28 18:41 --------- d-----w c:\program files\mIRC
2009-02-26 16:04 --------- d-----w c:\program files\Windows Live Safety Center
2009-02-09 14:48 --------- d-----w c:\program files\Tortun
2009-01-18 20:26 75,264 ----a-w c:\windows\cadkasdeinst01e.exe
2008-06-29 16:49 152 ----a-w c:\documents and settings\Dean\brdgInst.bat
2008-03-12 16:52 47,360 ----a-w c:\documents and settings\Dean\Application Data\pcouffin.sys
.

------- Sigcheck -------

2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\SoftwareDistribution\Download\4d9d678c0d8af22c04a4a7fc7f1ff86c\sp2qfe\user32.dll
2007-03-08 17:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\SoftwareDistribution\Download\6e49db26b225c64ffbbd852b587ab944\sp2gdr\user32.dll
2007-03-08 17:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\SoftwareDistribution\Download\6e49db26b225c64ffbbd852b587ab944\sp2qfe\user32.dll
2005-03-02 20:09 577024 de2db164bbb35db061af0997e4499054 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\user32.dll
2005-03-02 20:19 577024 1800f293bccc8ede8a70e12b88d80036 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\user32.dll
2004-08-04 13:00 577024 c72661f8552ace7c5c85e16a3cf505c4 c:\windows\system32\user32.dll

2006-08-16 14:14 70656 7b6a08441a4f11320421599d7ecf8d41 c:\windows\SoftwareDistribution\Download\fde4a5af73d5aee9b5faba71cbff1d6c\SP1QFE\ws2_32.dll
2004-08-04 13:00 82944 2ed0b7f12a60f90092081c50fa0ec2b2 c:\windows\system32\ws2_32.dll

2004-08-04 13:00 656384 c0823fc5469663ba63e7db88f9919d70 c:\windows\ie7\wininet.dll
2007-12-07 04:21 824832 806d274c9a6c3aaea5eae8e4af841e04 c:\windows\SoftwareDistribution\Download\8befe715852785f9b4f0ded848fd9c0d\SP2GDR\wininet.dll
2007-12-07 04:01 825344 b5b411bb229ae6ead7652a32ed47bfb9 c:\windows\SoftwareDistribution\Download\8befe715852785f9b4f0ded848fd9c0d\SP2QFE\wininet.dll
2007-12-07 04:21 824832 806d274c9a6c3aaea5eae8e4af841e04 c:\windows\SoftwareDistribution\Download\9489e810bc136788bfeb9b68b0d7dfee\sp2gdr\wininet.dll
2007-12-07 04:01 825344 b5b411bb229ae6ead7652a32ed47bfb9 c:\windows\SoftwareDistribution\Download\9489e810bc136788bfeb9b68b0d7dfee\sp2qfe\wininet.dll
2007-12-07 03:07 659456 57d1b5150cf6331fac6b3e04c1fcb966 c:\windows\SoftwareDistribution\Download\b386176bfcde202f7ed536e83198267a\sp2gdr\wininet.dll
2007-12-07 02:44 666112 085a7c37f9c6ede1ba870b7dbec06399 c:\windows\SoftwareDistribution\Download\b386176bfcde202f7ed536e83198267a\sp2qfe\wininet.dll
2007-10-11 01:56 824832 30c1e0f34ad2972c72a01db5c74ab065 c:\windows\SoftwareDistribution\Download\e3709fbfd9557a7d083f543d51d38612\SP2GDR\wininet.dll
2007-10-11 01:47 825344 0e5d918f87efa7d2424d66b499c7eb04 c:\windows\SoftwareDistribution\Download\e3709fbfd9557a7d083f543d51d38612\SP2QFE\wininet.dll
2007-08-13 19:54 818688 a4a0fc92358f39538a6494c42ef99fe9 c:\windows\system32\wininet.dll

2006-01-13 19:07 360448 5562cc0a47b2aef06d3417b733f3c195 c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
2004-08-04 13:00 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB913446$\tcpip.sys
2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\SoftwareDistribution\Download\146ae5e7b51a37f45e0e5cf03d0d5e3c\sp2gdr\tcpip.sys
2007-10-30 18:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\SoftwareDistribution\Download\146ae5e7b51a37f45e0e5cf03d0d5e3c\sp2qfe\tcpip.sys
2008-10-16 14:59 359808 6af91ce5baa449eb9a72f17da063720c c:\windows\system32\drivers\TCPIP.SYS

2004-08-04 13:00 502272 01c3346c241652f43aed8e2149881bfe c:\windows\system32\winlogon.exe

2004-08-04 13:00 182912 558635d3af1c7546d26067d5d9b6959e c:\windows\system32\drivers\ndis.sys

2004-08-04 13:00 29056 4448006b6bc60e6c027932cfc38d6855 c:\windows\system32\drivers\ip6fw.sys

2007-02-28 10:38 2057600 515d30e2c90a3665a2739309334c9283 c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntkrnlpa.exe
2007-02-28 11:15 2059392 4d3dbdccbf97f5ba1e74f322b155c3ba c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntkrnlpa.exe
2005-03-02 02:34 2056832 81013f36b21c7f72cf784cc6731e0002 c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\ntkrnlpa.exe
2005-03-02 02:36 2056832 d8aba3eab509627e707a3b14f00fbb6b c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\ntkrnlpa.exe
2004-08-04 13:00 2056832 947fb1d86d14afcffdb54bf837ec25d0 c:\windows\system32\ntkrnlpa.exe

2007-02-28 11:10 2180352 582a8dbaa58c3b1f176eb2817daee77c c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2gdr\ntoskrnl.exe
2007-02-28 11:55 2182144 5a5c8db4aa962c714c8371fbdf189fc9 c:\windows\SoftwareDistribution\Download\10e16e65c532d077de7c89a212bd8df8\sp2qfe\ntoskrnl.exe
2005-03-02 02:59 2179328 4d4cf2c14550a4b7718e94a6e581856e c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2gdr\ntoskrnl.exe
2005-03-02 03:04 2179456 28187802b7c368c0d3aef7d4c382aabb c:\windows\SoftwareDistribution\Download\dc3b8fb011c281dea1cb7a45f880da78\sp2qfe\ntoskrnl.exe
2004-08-04 13:00 2180992 ce218bc7088681faa06633e218596ca7 c:\windows\system32\ntoskrnl.exe

2004-08-04 13:00 1032192 a0732187050030ae399b241436565e64 c:\windows\explorer.exe
2007-06-13 12:23 1033216 97bd6515465659ff8f3b7be375b2ea87 c:\windows\SoftwareDistribution\Download\2a2715f6180c3bfa2a58178525f24c67\sp2gdr\explorer.exe
2007-06-13 13:26 1033216 7712df0cdde3a5ac89843e61cd5b3658 c:\windows\SoftwareDistribution\Download\2a2715f6180c3bfa2a58178525f24c67\sp2qfe\explorer.exe
2007-06-13 12:23 1033216 97bd6515465659ff8f3b7be375b2ea87 c:\windows\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2gdr\explorer.exe
2007-06-13 13:26 1033216 7712df0cdde3a5ac89843e61cd5b3658 c:\windows\SoftwareDistribution\Download\44d74c37f0595a363bcec5e9229d8564\sp2qfe\explorer.exe

2004-08-04 13:00 108032 c6ce6eec82f187615d1002bb3bb50ed4 c:\windows\system32\services.exe

2004-08-04 13:00 13312 84885f9b82f4d55c6146ebf6065d75d2 c:\windows\system32\lsass.exe

2004-08-04 13:00 15360 24232996a38c0b0cf151c2140ae29fc8 c:\windows\system32\ctfmon.exe

2005-06-11 01:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2gdr\spoolsv.exe
2005-06-11 02:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788 c:\windows\SoftwareDistribution\Download\0fd33c77398fa2b50df56456525ef5c3\sp2qfe\spoolsv.exe
2004-08-04 13:00 57856 7435b108b935e42ea92ca94f59c8e717 c:\windows\system32\spoolsv.exe

2004-08-04 13:00 24576 39b1ffb03c2296323832acbae50d2aff c:\windows\system32\userinit.exe

2004-08-04 14:00 295424 b60c877d16d9c880b952fda04adf16e6 c:\windows\system32\termsrv.dll

2007-04-16 17:52 984576 a01f9ca902a88f7ced06884174d6419d c:\windows\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\sp2gdr\kernel32.dll
2007-04-16 18:07 986112 09f7cb3687f86edaa4ca081f7ab66c03 c:\windows\SoftwareDistribution\Download\c1835c8cb0bb13f938a8a983ca5edea4\sp2qfe\kernel32.dll
2004-08-04 13:00 983552 888190e31455fad793312f8d087146eb c:\windows\system32\kernel32.dll

2004-08-04 13:00 17408 1b5f6923abb450692e9fe0672c897aed c:\windows\system32\powrprof.dll

2004-08-04 13:00 110080 87ca7ce6469577f059297b9d6556d66d c:\windows\system32\imm32.dll
.
((((((((((((((((((((((((((((( SnapShot@2009-04-07_15.45.58,23 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-20 18:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE
+ 2009-04-09 06:06:29 16,384 ----atw c:\windows\temp\Perflib_Perfdata_74c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{db9d7a78-a76c-4bf2-97c6-258925ee1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]
2008-11-30 13:41 1784856 --a------ c:\program files\Reganam\tbReg1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2008-11-26 23:03 204248 --a------ c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{db9d7a78-a76c-4bf2-97c6-258925ee1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{DB9D7A78-A76C-4BF2-97C6-258925EE1542} "= "c:\program files\Reganam\tbReg1.dll" [2008-11-30 1784856]

[HKEY_CLASSES_ROOT\clsid\{db9d7a78-a76c-4bf2-97c6-258925ee1542}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE "= "c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} "= "c:\program files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-10-28 94208]
"MSMSGS "= "c:\program files\Messenger\msmsgs.exe" [2004-08-04 1667584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MGSysCtrl "= "c:\program files\System Control Manager\MGSysCtrl.exe" [2006-03-24 179200]
"nod32kui "= "c:\program files\Eset\nod32kui.exe" [2008-02-14 949376]
"NeroFilterCheck "= "c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl "= "c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-29 32768]
"tsnp2std "= "c:\windows\tsnp2std.exe" [2005-08-17 90112]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"CanonSolutionMenu "= "c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter "= "c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1603152]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"SunJavaUpdateSched "= "c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"AGRSMMSG "= "AGRSMMSG.exe" [2005-09-09 c:\windows\AGRSMMSG.exe]
"RTHDCPL "= "RTHDCPL.EXE" [2006-03-14 c:\windows\RTHDCPL.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE "= "c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoChangeAnimation "= 0 (0x0)
"NoStrCmpLogical "= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg "= 0 (0x0)
"NoStrCmpLogical "= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.clmp3enc "= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@= "Service "

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BlueSoleil.lnk]
backup=c:\windows\pss\BlueSoleil.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe "=
"c:\\Program Files\\Messenger\\msmsgs.exe "=
"c:\\Program Files\\RALINK\\Common\\RaUI.exe "=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CCC.exe "=
"c:\\Program Files\\Unlocker\\UnlockerAssistant.exe "=
"c:\\Program Files\\PES 2009\\pes2009.exe "=
"c:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe "=
"c:\\WINDOWS\\tsnp2std.exe "=
"c:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe "=
"c:\\Program Files\\Java\\jre6\\bin\\jusched.exe "=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\MOM.exe "=
"c:\\WINDOWS\\system32\\userinit.exe "=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe "=
"c:\\WINDOWS\\AGRSMMSG.exe "=
"c:\\Program Files\\System Control Manager\\MGSysCtrl.exe "=
"c:\\Program Files\\Eset\\nod32kui.exe "=
"c:\\WINDOWS\\RTHDCPL.EXE "=

R0 Lbd;Lbd; [x]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; [x]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2008-12-05 206096]
R3 ATE_PROCMON;ATE_PROCMON; [x]
S0 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2media.sys [2006-02-27 34880]
S0 O2SDRDR;O2SDRDR;c:\windows\system32\DRIVERS\o2sd.sys [2006-02-20 29056]
S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2008-02-14 15424]
S2 NishService;SCM Driver Daemon;c:\program files\System Control Manager\edd.exe [2006-03-22 40960]
S2 osaio;osaio;c:\windows\system32\drivers\osaio.sys [2009-01-30 6784]
S3 MGHwCtrl;MGHwCtrl;c:\windows\system32\drivers\MGHwCtrl.sys [2005-03-10 20128]


--- Other Services/Drivers In Memory ---

*Deregistered* - AegisP
*Deregistered* - AFD
*Deregistered* - AMON
*Deregistered* - Apple Mobile Device
*Deregistered* - Arp1394
*Deregistered* - Ati HotKey Poller
*Deregistered* - ATI Smart
*Deregistered* - audstub
*Deregistered* - AVG Anti-Rootkit
*Deregistered* - AvgArCln
*Deregistered* - Beep
*Deregistered* - BlueletAudio
*Deregistered* - BlueletSCOAudio
*Deregistered* - BlueSoleil Hid Service
*Deregistered* - Bonjour Service
*Deregistered* - BT
*Deregistered* - BTHidEnum
*Deregistered* - BTHidMgr
*Deregistered* - Cdfs
*Deregistered* - Compbatt
*Deregistered* - dmio
*Deregistered* - dmload
*Deregistered* - Fips
*Deregistered* - FltMgr
*Deregistered* - Ftdisk
*Deregistered* - giveio
*Deregistered* - Gpc
*Deregistered* - hmonitor
*Deregistered* - IpNat
*Deregistered* - IPSec
*Deregistered* - JavaQuickStarterService
*Deregistered* - KSecDD
*Deregistered* - MGHwCtrl
*Deregistered* - mnmdd
*Deregistered* - Modem
*Deregistered* - MountMgr
*Deregistered* - MQAC
*Deregistered* - MRxDAV
*Deregistered* - MRxSmb
*Deregistered* - Msfs
*Deregistered* - mssmbios
*Deregistered* - Mup
*Deregistered* - NDIS
*Deregistered* - NdisTapi
*Deregistered* - NdisWan
*Deregistered* - NDProxy
*Deregistered* - NetBIOS
*Deregistered* - NetBT
*Deregistered* - NishService
*Deregistered* - nod32drv
*Deregistered* - NOD32krn
*Deregistered* - Npfs
*Deregistered* - Ntfs
*Deregistered* - NtLmSsp
*Deregistered* - Null
*Deregistered* - O2Flash
*Deregistered* - osaio
*Deregistered* - PartMgr
*Deregistered* - pcouffin
*Deregistered* - PptpMiniport
*Deregistered* - PSched
*Deregistered* - RasAcd
*Deregistered* - Rasl2tp
*Deregistered* - RasPppoe
*Deregistered* - Raspti
*Deregistered* - Rdbss
*Deregistered* - RDPCDD
*Deregistered* - rdpdr
*Deregistered* - RMCAST
*Deregistered* - SCDEmu
*Deregistered* - Serenum
*Deregistered* - SMBios
*Deregistered* - speedfan
*Deregistered* - sptd
*Deregistered* - sr
*Deregistered* - swenum
*Deregistered* - tapvpn
*Deregistered* - Tcpip
*Deregistered* - TermDD
*Deregistered* - Update
*Deregistered* - VcommMgr
*Deregistered* - VgaSave
*Deregistered* - VolSnap
*Deregistered* - Wanarp
*Deregistered* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder

2009-03-30 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []

2009-03-31 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.bsplayer-search.com/startpage
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-us\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
TCP: {48D92928-C979-4CC7-9DE7-86E142BD7207} = 195.29.150.3,195.29.150.4
TCP: {9BD66CCF-9682-49FC-9A3A-D7347256F955} = 195.29.150.3,195.29.150.4
FF - ProfilePath - c:\documents and settings\Dean\Application Data\Mozilla\Firefox\Profiles\rfgmamuz.default\
FF - prefs.js: browser.startup.homepage - google.hr
FF - component: c:\program files\BS.Player ControlBar\FirefoxDTT\components\BSToolbarFF.dll
FF - plugin: c:\documents and settings\Dean\Application Data\Mozilla\Firefox\Profiles\rfgmamuz.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-09 08:07:46
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008]
"ShortlistDir "=" "
"LangDB "=" "
"LastSaveGame "=" "
"Language "= "English "
"LoadLangDB "=dword:00000000
"CompressHistoryPoints "=dword:00000000
"HighlightedAttributes "=dword:00000000
"MinCondition "=dword:00000050
"SkinID "=dword:00000001
"LastUpdateCheck "=dword:00000000
"HighQualityGUI "=dword:00000001
"AutomaticallyUpdateCheck "=dword:00000001
"AdvancedGeneration "=dword:00000000
"TranslateStaffSkills "=dword:00000001
"TranslatePlayerSkills "=dword:00000001
"TranslatePositions "=dword:00000001
"ShowHistory "=dword:00000001
"WindowState "=dword:00000000
"WindowHeight "=dword:0000032c
"WindowWidth "=dword:000003fc
"WindowLeft "=dword:00000082
"WindowTop "=dword:00000000
"UseProxy "=dword:00000000
"ProxyHost "=" "
"ProxyPort "=" "
"UseAuthentication "=dword:00000000
"UserName "=" "
"UserPassword "=" "

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Clubs]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000032
"Position4 "=dword:00000004
"Visible4 "=dword:00000001
"Width4 "=dword:00000032
"Position5 "=dword:00000005
"Visible5 "=dword:00000001
"Width5 "=dword:00000050
"Position6 "=dword:00000006
"Visible6 "=dword:00000001
"Width6 "=dword:00000050
"Position7 "=dword:00000007
"Visible7 "=dword:00000001
"Width7 "=dword:00000050
"Position8 "=dword:00000008
"Visible8 "=dword:00000000
"Width8 "=dword:00000050
"Position9 "=dword:00000009
"Visible9 "=dword:00000000
"Width9 "=dword:0000002d
"Position10 "=dword:0000000a
"Visible10 "=dword:00000000
"Width10 "=dword:0000001e
"Position11 "=dword:0000000b
"Visible11 "=dword:00000000
"Width11 "=dword:0000001e
"Position12 "=dword:0000000c
"Visible12 "=dword:00000000
"Width12 "=dword:0000001e
"Position13 "=dword:0000000d
"Visible13 "=dword:00000001
"Width13 "=dword:0000003c
"Position14 "=dword:0000000e
"Visible14 "=dword:00000000
"Width14 "=dword:00000032
"Position15 "=dword:0000000f
"Visible15 "=dword:00000000
"Width15 "=dword:00000032
"Position16 "=dword:00000010
"Visible16 "=dword:00000000
"Width16 "=dword:00000032
"Position17 "=dword:00000011
"Visible17 "=dword:00000001
"Width17 "=dword:00000050
"Position18 "=dword:00000012
"Visible18 "=dword:00000001
"Width18 "=dword:00000050
"Position19 "=dword:00000013
"Visible19 "=dword:00000000
"Width19 "=dword:00000050

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Players]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000037
"Position4 "=dword:00000008
"Visible4 "=dword:00000001
"Width4 "=dword:00000023
"Position5 "=dword:00000009
"Visible5 "=dword:00000001
"Width5 "=dword:00000028
"Position6 "=dword:0000000a
"Visible6 "=dword:00000001
"Width6 "=dword:00000028
"Position7 "=dword:0000000c
"Visible7 "=dword:00000001
"Width7 "=dword:0000004b
"Position8 "=dword:0000000d
"Visible8 "=dword:00000001
"Width8 "=dword:0000004b
"Position9 "=dword:0000000e
"Visible9 "=dword:00000001
"Width9 "=dword:00000050
"Position10 "=dword:00000010
"Visible10 "=dword:00000000
"Width10 "=dword:00000050
"Position11 "=dword:00000011
"Visible11 "=dword:00000000
"Width11 "=dword:0000004b
"Position12 "=dword:00000012
"Visible12 "=dword:00000000
"Width12 "=dword:0000002d
"Position13 "=dword:00000013
"Visible13 "=dword:00000000
"Width13 "=dword:0000003c
"Position14 "=dword:00000014
"Visible14 "=dword:00000000
"Width14 "=dword:0000004b
"Position15 "=dword:00000015
"Visible15 "=dword:00000000
"Width15 "=dword:00000064
"Position16 "=dword:00000016
"Visible16 "=dword:00000000
"Width16 "=dword:00000064
"Position17 "=dword:00000017
"Visible17 "=dword:00000000
"Width17 "=dword:0000004b
"Position18 "=dword:00000018
"Visible18 "=dword:00000000
"Width18 "=dword:00000064
"Position19 "=dword:00000019
"Visible19 "=dword:00000000
"Width19 "=dword:0000003c
"Position20 "=dword:0000001a
"Visible20 "=dword:00000000
"Width20 "=dword:0000004b
"Position21 "=dword:0000001b
"Visible21 "=dword:00000000
"Width21 "=dword:00000050
"Position22 "=dword:0000001c
"Visible22 "=dword:00000000
"Width22 "=dword:00000073
"Position23 "=dword:0000001d
"Visible23 "=dword:00000000
"Width23 "=dword:00000050
"Position24 "=dword:0000001e
"Visible24 "=dword:00000000
"Width24 "=dword:0000005a
"Position25 "=dword:0000001f
"Visible25 "=dword:00000000
"Width25 "=dword:0000006e
"Position26 "=dword:00000020
"Visible26 "=dword:00000000
"Width26 "=dword:00000064
"Position27 "=dword:00000021
"Visible27 "=dword:00000000
"Width27 "=dword:00000087
"Position28 "=dword:00000022
"Visible28 "=dword:00000000
"Width28 "=dword:00000064
"Position29 "=dword:00000023
"Visible29 "=dword:00000000
"Width29 "=dword:00000064
"Position30 "=dword:00000024
"Visible30 "=dword:00000000
"Width30 "=dword:00000046
"Position31 "=dword:00000025
"Visible31 "=dword:00000000
"Width31 "=dword:0000004b
"Position32 "=dword:00000026
"Visible32 "=dword:00000000
"Width32 "=dword:00000046
"Position33 "=dword:00000027
"Visible33 "=dword:00000000
"Width33 "=dword:0000004b
"Position34 "=dword:00000028
"Visible34 "=dword:00000000
"Width34 "=dword:0000003c
"Position35 "=dword:0000002a
"Visible35 "=dword:00000000
"Width35 "=dword:00000064
"Position36 "=dword:0000002e
"Visible36 "=dword:00000000
"Width36 "=dword:00000073
"Position37 "=dword:00000030
"Visible37 "=dword:00000000
"Width37 "=dword:0000005f
"Position38 "=dword:00000033
"Visible38 "=dword:00000000
"Width38 "=dword:00000091
"Position39 "=dword:00000035
"Visible39 "=dword:00000000
"Width39 "=dword:0000003c
"Position40 "=dword:0000002c
"Visible40 "=dword:00000000
"Width40 "=dword:0000005a
"Position41 "=dword:00000036
"Visible41 "=dword:00000000
"Width41 "=dword:00000041
"Position42 "=dword:00000029
"Visible42 "=dword:00000000
"Width42 "=dword:00000050
"Position43 "=dword:0000002b
"Visible43 "=dword:00000000
"Width43 "=dword:00000055
"Position44 "=dword:0000002d
"Visible44 "=dword:00000000
"Width44 "=dword:0000005f
"Position45 "=dword:00000037
"Visible45 "=dword:00000000
"Width45 "=dword:00000050
"Position46 "=dword:00000038
"Visible46 "=dword:00000000
"Width46 "=dword:0000004b
"Position47 "=dword:00000039
"Visible47 "=dword:00000000
"Width47 "=dword:0000004b
"Position48 "=dword:0000003a
"Visible48 "=dword:00000000
"Width48 "=dword:00000046
"Position49 "=dword:0000003b
"Visible49 "=dword:00000000
"Width49 "=dword:00000032
"Position50 "=dword:0000003c
"Visible50 "=dword:00000000
"Width50 "=dword:0000003c
"Position51 "=dword:0000003d
"Visible51 "=dword:00000000
"Width51 "=dword:0000004b
"Position52 "=dword:0000003e
"Visible52 "=dword:00000000
"Width52 "=dword:0000003c
"Position53 "=dword:0000003f
"Visible53 "=dword:00000000
"Width53 "=dword:00000037
"Position54 "=dword:00000040
"Visible54 "=dword:00000000
"Width54 "=dword:00000069
"Position55 "=dword:00000041
"Visible55 "=dword:00000000
"Width55 "=dword:0000005a
"Position56 "=dword:00000044
"Visible56 "=dword:00000000
"Width56 "=dword:0000004b
"Position57 "=dword:00000045
"Visible57 "=dword:00000000
"Width57 "=dword:0000004b
"Position58 "=dword:00000046
"Visible58 "=dword:00000000
"Width58 "=dword:00000037
"Position59 "=dword:00000047
"Visible59 "=dword:00000000
"Width59 "=dword:0000003c
"Position60 "=dword:00000048
"Visible60 "=dword:00000000
"Width60 "=dword:0000003c
"Position61 "=dword:00000049
"Visible61 "=dword:00000000
"Width61 "=dword:00000041
"Position62 "=dword:0000004a
"Visible62 "=dword:00000000
"Width62 "=dword:00000055
"Position63 "=dword:0000004b
"Visible63 "=dword:00000000
"Width63 "=dword:0000003c
"Position64 "=dword:0000004c
"Visible64 "=dword:00000000
"Width64 "=dword:0000003c
"Position65 "=dword:0000004d
"Visible65 "=dword:00000000
"Width65 "=dword:0000004b
"Position66 "=dword:0000004e
"Visible66 "=dword:00000000
"Width66 "=dword:0000003c
"Position67 "=dword:0000004f
"Visible67 "=dword:00000000
"Width67 "=dword:00000046
"Position68 "=dword:00000050
"Visible68 "=dword:00000000
"Width68 "=dword:00000028
"Position69 "=dword:00000051
"Visible69 "=dword:00000000
"Width69 "=dword:00000041
"Position70 "=dword:00000052
"Visible70 "=dword:00000000
"Width70 "=dword:0000003c
"Position71 "=dword:00000053
"Visible71 "=dword:00000000
"Width71 "=dword:00000069
"Position72 "=dword:00000054
"Visible72 "=dword:00000000
"Width72 "=dword:00000041
"Position73 "=dword:00000055
"Visible73 "=dword:00000000
"Width73 "=dword:0000005f
"Position74 "=dword:00000056
"Visible74 "=dword:00000000
"Width74 "=dword:0000003c
"Position75 "=dword:00000057
"Visible75 "=dword:00000000
"Width75 "=dword:00000037
"Position76 "=dword:00000058
"Visible76 "=dword:00000000
"Width76 "=dword:0000004b
"Position77 "=dword:00000059
"Visible77 "=dword:00000000
"Width77 "=dword:00000050
"Position78 "=dword:0000005a
"Visible78 "=dword:00000000
"Width78 "=dword:00000037
"Position79 "=dword:0000005b
"Visible79 "=dword:00000000
"Width79 "=dword:00000037
"Position80 "=dword:0000005c
"Visible80 "=dword:00000000
"Width80 "=dword:0000005a
"Position81 "=dword:0000005d
"Visible81 "=dword:00000000
"Width81 "=dword:0000004b
"Position82 "=dword:0000005e
"Visible82 "=dword:00000000
"Width82 "=dword:00000055
"Position83 "=dword:0000005f
"Visible83 "=dword:00000000
"Width83 "=dword:0000002d
"Position84 "=dword:00000060
"Visible84 "=dword:00000000
"Width84 "=dword:00000037
"Position85 "=dword:00000061
"Visible85 "=dword:00000000
"Width85 "=dword:0000003c
"Position86 "=dword:00000062
"Visible86 "=dword:00000000
"Width86 "=dword:00000046
"Position87 "=dword:00000063
"Visible87 "=dword:00000000
"Width87 "=dword:0000003c
"Position88 "=dword:00000064
"Visible88 "=dword:00000000
"Width88 "=dword:0000005a
"Position89 "=dword:00000065
"Visible89 "=dword:00000000
"Width89 "=dword:0000003c
"Position90 "=dword:00000066
"Visible90 "=dword:00000000
"Width90 "=dword:00000050
"Position91 "=dword:00000067
"Visible91 "=dword:00000000
"Width91 "=dword:00000046
"Position92 "=dword:00000068
"Visible92 "=dword:00000000
"Width92 "=dword:0000005a
"Position93 "=dword:00000069
"Visible93 "=dword:00000000
"Width93 "=dword:00000037
"Position94 "=dword:0000006a
"Visible94 "=dword:00000000
"Width94 "=dword:0000003c
"Position95 "=dword:0000006b
"Visible95 "=dword:00000000
"Width95 "=dword:0000003c
"Position96 "=dword:0000006c
"Visible96 "=dword:00000000
"Width96 "=dword:00000046
"Position97 "=dword:0000006d
"Visible97 "=dword:00000000
"Width97 "=dword:00000046
"Position98 "=dword:0000006e
"Visible98 "=dword:00000000
"Width98 "=dword:00000055
"Position99 "=dword:0000006f
"Visible99 "=dword:00000000
"Width99 "=dword:00000073
"Position100 "=dword:00000042
"Visible100 "=dword:00000000
"Width100 "=dword:00000041
"Position101 "=dword:00000070
"Visible101 "=dword:00000000
"Width101 "=dword:0000003c
"Position102 "=dword:00000071
"Visible102 "=dword:00000000
"Width102 "=dword:0000003c
"Position103 "=dword:00000072
"Visible103 "=dword:00000000
"Width103 "=dword:00000046
"Position104 "=dword:00000073
"Visible104 "=dword:00000000
"Width104 "=dword:0000003c
"Position105 "=dword:00000074
"Visible105 "=dword:00000000
"Width105 "=dword:00000041
"Position106 "=dword:0000000f
"Visible106 "=dword:00000001
"Width106 "=dword:00000050
"Position107 "=dword:0000000b
"Visible107 "=dword:00000001
"Width107 "=dword:00000028
"Position108 "=dword:00000043
"Visible108 "=dword:00000000
"Width108 "=dword:00000050
"Position109 "=dword:0000002f
"Visible109 "=dword:00000000
"Width109 "=dword:00000050
"Position110 "=dword:00000031
"Visible110 "=dword:00000000
"Width110 "=dword:00000055
"Position111 "=dword:00000032
"Visible111 "=dword:00000000
"Width111 "=dword:00000082
"Position112 "=dword:00000034
"Visible112 "=dword:00000000
"Width112 "=dword:00000087
"Position113 "=dword:00000075
"Visible113 "=dword:00000000
"Width113 "=dword:00000050
"Position114 "=dword:00000076
"Visible114 "=dword:00000000
"Width114 "=dword:00000050
"Position115 "=dword:00000077
"Visible115 "=dword:00000000
"Width115 "=dword:00000050
"Position116 "=dword:00000078
"Visible116 "=dword:00000000
"Width116 "=dword:00000050
"Position117 "=dword:00000079
"Visible117 "=dword:00000000
"Width117 "=dword:00000050
"Position118 "=dword:0000007a
"Visible118 "=dword:00000000
"Width118 "=dword:00000050
"Position119 "=dword:0000007b
"Visible119 "=dword:00000000
"Width119 "=dword:00000050
"Position120 "=dword:0000007c
"Visible120 "=dword:00000000
"Width120 "=dword:00000050
"Position121 "=dword:0000007d
"Visible121 "=dword:00000000
"Width121 "=dword:00000050
"Position122 "=dword:0000007e
"Visible122 "=dword:00000000
"Width122 "=dword:00000050
"Position123 "=dword:0000007f
"Visible123 "=dword:00000000
"Width123 "=dword:00000050
"Position124 "=dword:00000080
"Visible124 "=dword:00000000
"Width124 "=dword:00000050
"Position125 "=dword:00000081
"Visible125 "=dword:00000000
"Width125 "=dword:00000050
"Position126 "=dword:00000082
"Visible126 "=dword:00000000
"Width126 "=dword:00000050
"Position127 "=dword:00000083
"Visible127 "=dword:00000000
"Width127 "=dword:00000050
"Position128 "=dword:00000084
"Visible128 "=dword:00000000
"Width128 "=dword:00000050
"Position129 "=dword:00000085
"Visible129 "=dword:00000000
"Width129 "=dword:00000050
"Position130 "=dword:00000086
"Visible130 "=dword:00000000
"Width130 "=dword:00000050
"Position131 "=dword:00000087
"Visible131 "=dword:00000000
"Width131 "=dword:00000050
"Position132 "=dword:00000088
"Visible132 "=dword:00000000
"Width132 "=dword:00000050
"Position133 "=dword:00000089
"Visible133 "=dword:00000000
"Width133 "=dword:00000050
"Position134 "=dword:0000008a
"Visible134 "=dword:00000000
"Width134 "=dword:00000050
"Position135 "=dword:0000008b
"Visible135 "=dword:00000000
"Width135 "=dword:00000050
"Position136 "=dword:0000008c
"Visible136 "=dword:00000000
"Width136 "=dword:00000050
"Position137 "=dword:0000008d
"Visible137 "=dword:00000000
"Width137 "=dword:00000050
"Position138 "=dword:0000008e
"Visible138 "=dword:00000000
"Width138 "=dword:00000050
"Position139 "=dword:0000008f
"Visible139 "=dword:00000000
"Width139 "=dword:00000050
"Position140 "=dword:00000090
"Visible140 "=dword:00000000
"Width140 "=dword:00000050
"Position141 "=dword:00000091
"Visible141 "=dword:00000000
"Width141 "=dword:00000050
"Position142 "=dword:00000092
"Visible142 "=dword:00000000
"Width142 "=dword:00000050
"Position143 "=dword:00000093
"Visible143 "=dword:00000000
"Width143 "=dword:00000050
"Position144 "=dword:00000094
"Visible144 "=dword:00000000
"Width144 "=dword:00000050
"Position145 "=dword:00000095
"Visible145 "=dword:00000000
"Width145 "=dword:00000050
"Position146 "=dword:00000004
"Visible146 "=dword:00000000
"Width146 "=dword:00000037
"Position147 "=dword:00000005
"Visible147 "=dword:00000000
"Width147 "=dword:00000028
"Position148 "=dword:00000006
"Visible148 "=dword:00000000
"Width148 "=dword:00000037
"Position149 "=dword:00000007
"Visible149 "=dword:00000001
"Width149 "=dword:00000028

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Columns\Staff]
"Position0 "=dword:00000000
"Visible0 "=dword:00000001
"Width0 "=dword:0000007d
"Position1 "=dword:00000001
"Visible1 "=dword:00000001
"Width1 "=dword:00000064
"Position2 "=dword:00000002
"Visible2 "=dword:00000001
"Width2 "=dword:00000064
"Position3 "=dword:00000003
"Visible3 "=dword:00000001
"Width3 "=dword:00000069
"Position4 "=dword:00000005
"Visible4 "=dword:00000001
"Width4 "=dword:00000028
"Position5 "=dword:00000006
"Visible5 "=dword:00000001
"Width5 "=dword:00000028
"Position6 "=dword:00000004
"Visible6 "=dword:00000001
"Width6 "=dword:00000028
"Position7 "=dword:00000007
"Visible7 "=dword:00000001
"Width7 "=dword:00000050
"Position8 "=dword:00000008
"Visible8 "=dword:00000000
"Width8 "=dword:00000050
"Position9 "=dword:00000009
"Visible9 "=dword:00000000
"Width9 "=dword:0000004b
"Position10 "=dword:0000000a
"Visible10 "=dword:00000000
"Width10 "=dword:0000002d
"Position11 "=dword:0000000b
"Visible11 "=dword:00000000
"Width11 "=dword:0000003c
"Position12 "=dword:0000000c
"Visible12 "=dword:00000000
"Width12 "=dword:0000004b
"Position13 "=dword:0000000d
"Visible13 "=dword:00000000
"Width13 "=dword:00000064
"Position14 "=dword:0000000e
"Visible14 "=dword:00000000
"Width14 "=dword:00000064
"Position15 "=dword:0000000f
"Visible15 "=dword:00000000
"Width15 "=dword:0000004b
"Position16 "=dword:00000010
"Visible16 "=dword:00000000
"Width16 "=dword:00000064
"Position17 "=dword:00000011
"Visible17 "=dword:00000000
"Width17 "=dword:0000003c
"Position18 "=dword:00000012
"Visible18 "=dword:00000000
"Width18 "=dword:0000004b
"Position19 "=dword:00000013
"Visible19 "=dword:00000000
"Width19 "=dword:00000050
"Position20 "=dword:00000014
"Visible20 "=dword:00000000
"Width20 "=dword:00000046
"Position21 "=dword:00000015
"Visible21 "=dword:00000000
"Width21 "=dword:0000004b
"Position22 "=dword:00000016
"Visible22 "=dword:00000000
"Width22 "=dword:00000046
"Position23 "=dword:00000017
"Visible23 "=dword:00000000
"Width23 "=dword:00000046
"Position24 "=dword:00000018
"Visible24 "=dword:00000000
"Width24 "=dword:0000003c
"Position25 "=dword:00000019
"Visible25 "=dword:00000000
"Width25 "=dword:00000041
"Position26 "=dword:0000001a
"Visible26 "=dword:00000000
"Width26 "=dword:0000003c
"Position27 "=dword:0000001b
"Visible27 "=dword:00000000
"Width27 "=dword:00000055
"Position28 "=dword:0000001c
"Visible28 "=dword:00000000
"Width28 "=dword:00000069
"Position29 "=dword:0000001d
"Visible29 "=dword:00000000
"Width29 "=dword:0000006e
"Position30 "=dword:0000001e
"Visible30 "=dword:00000000
"Width30 "=dword:00000064
"Position31 "=dword:0000001f
"Visible31 "=dword:00000000
"Width31 "=dword:00000078
"Position32 "=dword:00000020
"Visible32 "=dword:00000000
"Width32 "=dword:00000064
"Position33 "=dword:00000021
"Visible33 "=dword:00000000
"Width33 "=dword:00000087
"Position34 "=dword:00000022
"Visible34 "=dword:00000000
"Width34 "=dword:00000069
"Position35 "=dword:00000023
"Visible35 "=dword:00000000
"Width35 "=dword:0000006e
"Position36 "=dword:00000024
"Visible36 "=dword:00000000
"Width36 "=dword:00000073
"Position37 "=dword:00000025
"Visible37 "=dword:00000000
"Width37 "=dword:0000004b
"Position38 "=dword:00000026
"Visible38 "=dword:00000000
"Width38 "=dword:0000002d
"Position39 "=dword:00000027
"Visible39 "=dword:00000000
"Width39 "=dword:00000055
"Position40 "=dword:00000028
"Visible40 "=dword:00000000
"Width40 "=dword:00000046
"Position41 "=dword:00000029
"Visible41 "=dword:00000000
"Width41 "=dword:0000004b
"Position42 "=dword:0000002a
"Visible42 "=dword:00000000
"Width42 "=dword:0000003c
"Position43 "=dword:0000002b
"Visible43 "=dword:00000000
"Width43 "=dword:00000046
"Position44 "=dword:0000002c
"Visible44 "=dword:00000000
"Width44 "=dword:00000073
"Position45 "=dword:0000002d
"Visible45 "=dword:00000000
"Width45 "=dword:0000004b
"Position46 "=dword:0000002e
"Visible46 "=dword:00000000
"Width46 "=dword:00000073
"Position47 "=dword:0000002f
"Visible47 "=dword:00000000
"Width47 "=dword:0000007d
"Position48 "=dword:00000030
"Visible48 "=dword:00000000
"Width48 "=dword:0000006e
"Position49 "=dword:00000031
"Visible49 "=dword:00000000
"Width49 "=dword:00000037
"Position50 "=dword:00000032
"Visible50 "=dword:00000000
"Width50 "=dword:00000064
"Position51 "=dword:00000033
"Visible51 "=dword:00000000
"Width51 "=dword:00000037
"Position52 "=dword:00000034
"Visible52 "=dword:00000000
"Width52 "=dword:0000004b
"Position53 "=dword:00000035
"Visible53 "=dword:00000000
"Width53 "=dword:00000046
"Position54 "=dword:00000036
"Visible54 "=dword:00000000
"Width54 "=dword:00000037
"Position55 "=dword:00000037
"Visible55 "=dword:00000000
"Width55 "=dword:0000003c
"Position56 "=dword:00000038
"Visible56 "=dword:00000000
"Width56 "=dword:00000055
"Position57 "=dword:00000039
"Visible57 "=dword:00000000
"Width57 "=dword:0000003c
"Position58 "=dword:0000003a
"Visible58 "=dword:00000000
"Width58 "=dword:0000003c
"Position59 "=dword:0000003b
"Visible59 "=dword:00000000
"Width59 "=dword:00000055
"Position60 "=dword:0000003c
"Visible60 "=dword:00000000
"Width60 "=dword:00000046
"Position61 "=dword:0000003d
"Visible61 "=dword:00000000
"Width61 "=dword:0000004b
"Position62 "=dword:0000003e
"Visible62 "=dword:00000000
"Width62 "=dword:00000055
"Position63 "=dword:0000003f
"Visible63 "=dword:00000000
"Width63 "=dword:0000005a
"Position64 "=dword:00000040
"Visible64 "=dword:00000000
"Width64 "=dword:0000006e
"Position65 "=dword:00000041
"Visible65 "=dword:00000000
"Width65 "=dword:00000050
"Position66 "=dword:00000042
"Visible66 "=dword:00000000
"Width66 "=dword:00000032
"Position67 "=dword:00000043
"Visible67 "=dword:00000000
"Width67 "=dword:00000064
"Position68 "=dword:00000044
"Visible68 "=dword:00000000
"Width68 "=dword:0000004b
"Position69 "=dword:00000045
"Visible69 "=dword:00000000
"Width69 "=dword:0000002d
"Position70 "=dword:00000046
"Visible70 "=dword:00000000
"Width70 "=dword:0000004b
"Position71 "=dword:00000047
"Visible71 "=dword:00000000
"Width71 "=dword:0000005a
"Position72 "=dword:00000048
"Visible72 "=dword:00000000
"Width72 "=dword:0000005a
"Position73 "=dword:00000049
"Visible73 "=dword:00000000
"Width73 "=dword:00000050
"Position74 "=dword:0000004a
"Visible74 "=dword:00000000
"Width74 "=dword:0000004b
"Position75 "=dword:0000004b
"Visible75 "=dword:00000000
"Width75 "=dword:00000050
"Position76 "=dword:0000004c
"Visible76 "=dword:00000000
"Width76 "=dword:0000005a
"Position77 "=dword:0000004d
"Visible77 "=dword:00000000
"Width77 "=dword:00000041
"Position78 "=dword:0000004e
"Visible78 "=dword:00000000
"Width78 "=dword:00000041
"Position79 "=dword:0000004f
"Visible79 "=dword:00000000
"Width79 "=dword:00000041
"Position80 "=dword:00000050
"Visible80 "=dword:00000000
"Width80 "=dword:00000041
"Position81 "=dword:00000051
"Visible81 "=dword:00000000
"Width81 "=dword:00000041
"Position82 "=dword:00000052
"Visible82 "=dword:00000000
"Width82 "=dword:00000041
"Position83 "=dword:00000053
"Visible83 "=dword:00000000
"Width83 "=dword:00000041
"Position84 "=dword:00000054
"Visible84 "=dword:00000000
"Width84 "=dword:00000041
"Position85 "=dword:00000055
"Visible85 "=dword:00000000
"Width85 "=dword:00000041
"Position86 "=dword:00000056
"Visible86 "=dword:00000000
"Width86 "=dword:00000050

 

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2008\Rating Coefficients]
"GKWeightCoef "=dword:00000064
"GKCurrentAbilityCoef "=dword:00000000
"GKCornersCoef "=dword:00000000
"GKCrossingCoef "=dword:00000000
"GKDribblingCoef "=dword:00000000
"GKFinishingCoef "=dword:00000000
"GKFirstTouchCoef "=dword:00000000
"GKFreeKicksCoef "=dword:00000000
"GKHeadingCoef "=dword:00000000
"GKLongShotsCoef "=dword:00000000
"GKLongThrowsCoef "=dword:00000000
"GKMarkingCoef "=dword:00000000
"GKPassingCoef "=dword:00000000
"GKPenaltiesCoef "=dword:00000000
"GKTacklingCoef "=dword:00000005
"GKTechniqueCoef "=dword:00000000
"GKLeftFootCoef "=dword:00000000
"GKRightFootCoef "=dword:00000000
"GKAggressionCoef "=dword:0000000a
"GKAnticipationCoef "=dword:00000005
"GKBraveryCoef "=dword:00000014
"GKComposureCoef "=dword:00000014
"GKConcentrationCoef "=dword:0000000a
"GKConsistencyCoef "=dword:0000000a
"GKCreativityCoef "=dword:00000000
"GKDecisionsCoef "=dword:00000014
"GKDeterminationCoef "=dword:0000000a
"GKDirtinessCoef "=dword:fffffffb
"GKFlairCoef "=dword:00000000
"GKImportantMatchesCoef "=dword:0000000a
"GKInfluenceCoef "=dword:0000000a
"GKOffTheBallCoef "=dword:00000000
"GKPositioningCoef "=dword:00000050
"GKTeamworkCoef "=dword:00000005
"GKWorkRateCoef "=dword:00000000
"GKAccelerationCoef "=dword:00000005
"GKAgilityCoef "=dword:0000000a
"GKBalanceCoef "=dword:0000000a
"GKInjuryPronenessCoef "=dword:fffffffb
"GKJumpingCoef "=dword:00000050
"GKNaturalFitnessCoef "=dword:00000005
"GKPaceCoef "=dword:00000000
"GKStaminaCoef "=dword:00000000
"GKStrengthCoef "=dword:0000000a
"GKVersatilityCoef "=dword:00000000
"GKAerialAbilityCoef "=dword:00000032
"GKCommandOfAreaCoef "=dword:00000014
"GKCommunicationCoef "=dword:00000032
"GKEccentricityCoef "=dword:ffffffec
"GKHandlingCoef "=dword:00000064
"GKKickingCoef "=dword:0000000a
"GKOneOnOnesCoef "=dword:00000032
"GKReflexesCoef "=dword:00000064
"GKRushingOutCoef "=dword:00000014
"GKTendencyToPunchCoef "=dword:fffffff6
"GKThrowingCoef "=dword:0000000a
"GKAdaptabilityCoef "=dword:00000005
"GKAmbitionCoef "=dword:0000000a
"GKControversyCoef "=dword:fffffffb
"GKLoyalityCoef "=dword:00000005
"GKPressureCoef "=dword:00000005
"GKProfessionalismCoef "=dword:00000005
"GKSportsmanshipCoef "=dword:00000005
"GKTemperamentCoef "=dword:00000005
"SWWeightCoef "=dword:00000066
"SWCurrentAbilityCoef "=dword:00000000
"SWCornersCoef "=dword:00000000
"SWCrossingCoef "=dword:00000000
"SWDribblingCoef "=dword:00000000
"SWFinishingCoef "=dword:00000000
"SWFirstTouchCoef "=dword:00000014
"SWFreeKicksCoef "=dword:0000000a
"SWHeadingCoef "=dword:00000064
"SWLongShotsCoef "=dword:0000000a
"SWLongThrowsCoef "=dword:00000000
"SWMarkingCoef "=dword:00000064
"SWPassingCoef "=dword:0000000a
"SWPenaltiesCoef "=dword:00000005
"SWTacklingCoef "=dword:00000064
"SWTechniqueCoef "=dword:0000000a
"SWLeftFootCoef "=dword:00000005
"SWRightFootCoef "=dword:00000005
"SWAggressionCoef "=dword:00000014
"SWAnticipationCoef "=dword:00000014
"SWBraveryCoef "=dword:00000028
"SWComposureCoef "=dword:00000028
"SWConcentrationCoef "=dword:0000003c
"SWConsistencyCoef "=dword:0000000a
"SWCreativityCoef "=dword:0000000a
"SWDecisionsCoef "=dword:00000014
"SWDeterminationCoef "=dword:0000000a
"SWDirtinessCoef "=dword:ffffffe7
"SWFlairCoef "=dword:00000000
"SWImportantMatchesCoef "=dword:0000000a
"SWInfluenceCoef "=dword:0000000a
"SWOffTheBallCoef "=dword:0000000a
"SWPositioningCoef "=dword:00000064
"SWTeamworkCoef "=dword:00000028
"SWWorkRateCoef "=dword:00000014
"SWAccelerationCoef "=dword:0000001e
"SWAgilityCoef "=dword:0000000a
"SWBalanceCoef "=dword:00000014
"SWInjuryPronenessCoef "=dword:fffffffb
"SWJumpingCoef "=dword:00000064
"SWNaturalFitnessCoef "=dword:00000005
"SWPaceCoef "=dword:00000014
"SWStaminaCoef "=dword:0000000a
"SWStrengthCoef "=dword:00000050
"SWVersatilityCoef "=dword:00000005
"SWAerialAbilityCoef "=dword:00000000
"SWCommandOfAreaCoef "=dword:00000000
"SWCommunicationCoef "=dword:00000000
"SWEccentricityCoef "=dword:00000000
"SWHandlingCoef "=dword:00000000
"SWKickingCoef "=dword:00000000
"SWOneOnOnesCoef "=dword:00000005
"SWReflexesCoef "=dword:00000005
"SWRushingOutCoef "=dword:00000000
"SWTendencyToPunchCoef "=dword:00000000
"SWThrowingCoef "=dword:00000000
"SWAdaptabilityCoef "=dword:00000005
"SWAmbitionCoef "=dword:0000000a
"SWControversyCoef "=dword:fffffffb
"SWLoyalityCoef "=dword:00000005
"SWPressureCoef "=dword:00000005
"SWProfessionalismCoef "=dword:00000005
"SWSportsmanshipCoef "=dword:00000005
"SWTemperamentCoef "=dword:00000005
"CBWeightCoef "=dword:00000064
"CBCurrentAbilityCoef "=dword:00000000
"CBCornersCoef "=dword:00000000
"CBCrossingCoef "=dword:00000000
"CBDribblingCoef "=dword:00000000
"CBFinishingCoef "=dword:00000000
"CBFirstTouchCoef "=dword:00000014
"CBFreeKicksCoef "=dword:0000000a
"CBHeadingCoef "=dword:00000064
"CBLongShotsCoef "=dword:0000000a
"CBLongThrowsCoef "=dword:00000000
"CBMarkingCoef "=dword:00000050
"CBPassingCoef "=dword:00000014
"CBPenaltiesCoef "=dword:00000005
"CBTacklingCoef "=dword:00000064
"CBTechniqueCoef "=dword:0000000a
"CBLeftFootCoef "=dword:00000005
"CBRightFootCoef "=dword:00000005
"CBAggressionCoef "=dword:00000014
"CBAnticipationCoef "=dword:00000014
"CBBraveryCoef "=dword:00000028
"CBComposureCoef "=dword:00000014
"CBConcentrationCoef "=dword:00000028
"CBConsistencyCoef "=dword:0000000a
"CBCreativityCoef "=dword:0000000a
"CBDecisionsCoef "=dword:00000014
"CBDeterminationCoef "=dword:0000000a
"CBDirtinessCoef "=dword:ffffffec
"CBFlairCoef "=dword:00000000
"CBImportantMatchesCoef "=dword:0000000a
"CBInfluenceCoef "=dword:0000000a
"CBOffTheBallCoef "=dword:0000000a
"CBPositioningCoef "=dword:00000050
"CBTeamworkCoef "=dword:00000028
"CBWorkRateCoef "=dword:00000014
"CBAccelerationCoef "=dword:00000028
"CBAgilityCoef "=dword:0000000a
"CBBalanceCoef "=dword:00000014
"CBInjuryPronenessCoef "=dword:fffffffb
"CBJumpingCoef "=dword:00000064
"CBNaturalFitnessCoef "=dword:00000005
"CBPaceCoef "=dword:0000001e
"CBStaminaCoef "=dword:0000000a
"CBStrengthCoef "=dword:0000003c
"CBVersatilityCoef "=dword:00000005
"CBAerialAbilityCoef "=dword:00000000
"CBCommandOfAreaCoef "=dword:00000000
"CBCommunicationCoef "=dword:00000000
"CBEccentricityCoef "=dword:00000000
"CBHandlingCoef "=dword:00000000
"CBKickingCoef "=dword:00000000
"CBOneOnOnesCoef "=dword:00000005
"CBReflexesCoef "=dword:00000005
"CBRushingOutCoef "=dword:00000000
"CBTendencyToPunchCoef "=dword:00000000
"CBThrowingCoef "=dword:00000000
"CBAdaptabilityCoef "=dword:00000005
"CBAmbitionCoef "=dword:0000000a
"CBControversyCoef "=dword:fffffffb
"CBLoyalityCoef "=dword:00000005
"CBPressureCoef "=dword:00000005
"CBProfessionalismCoef "=dword:00000005
"CBSportsmanshipCoef "=dword:00000005
"CBTemperamentCoef "=dword:00000005
"FBWeightCoef "=dword:0000006c
"FBCurrentAbilityCoef "=dword:00000000
"FBCornersCoef "=dword:0000000a
"FBCrossingCoef "=dword:0000001e
"FBDribblingCoef "=dword:00000014
"FBFinishingCoef "=dword:00000000
"FBFirstTouchCoef "=dword:00000014
"FBFreeKicksCoef "=dword:0000000a
"FBHeadingCoef "=dword:0000003c
"FBLongShotsCoef "=dword:0000000a
"FBLongThrowsCoef "=dword:0000000a
"FBMarkingCoef "=dword:0000003c
"FBPassingCoef "=dword:0000001e
"FBPenaltiesCoef "=dword:00000005
"FBTacklingCoef "=dword:00000064
"FBTechniqueCoef "=dword:00000014
"FBLeftFootCoef "=dword:00000005
"FBRightFootCoef "=dword:00000005
"FBAggressionCoef "=dword:0000000f
"FBAnticipationCoef "=dword:00000050
"FBBraveryCoef "=dword:00000014
"FBComposureCoef "=dword:0000000a
"FBConcentrationCoef "=dword:0000001e
"FBConsistencyCoef "=dword:0000000a
"FBCreativityCoef "=dword:0000000a
"FBDecisionsCoef "=dword:00000014
"FBDeterminationCoef "=dword:0000000a
"FBDirtinessCoef "=dword:fffffff6
"FBFlairCoef "=dword:00000005
"FBImportantMatchesCoef "=dword:0000000a
"FBInfluenceCoef "=dword:0000000a
"FBOffTheBallCoef "=dword:00000014
"FBPositioningCoef "=dword:00000064
"FBTeamworkCoef "=dword:00000014
"FBWorkRateCoef "=dword:00000014
"FBAccelerationCoef "=dword:0000003c
"FBAgilityCoef "=dword:0000000a
"FBBalanceCoef "=dword:00000014
"FBInjuryPronenessCoef "=dword:fffffffb
"FBJumpingCoef "=dword:0000003c
"FBNaturalFitnessCoef "=dword:00000005
"FBPaceCoef "=dword:00000050
"FBStaminaCoef "=dword:0000003c
"FBStrengthCoef "=dword:00000028
"FBVersatilityCoef "=dword:00000005
"FBAerialAbilityCoef "=dword:00000000
"FBCommandOfAreaCoef "=dword:00000000
"FBCommunicationCoef "=dword:00000000
"FBEccentricityCoef "=dword:00000000
"FBHandlingCoef "=dword:00000000
"FBKickingCoef "=dword:00000000
"FBOneOnOnesCoef "=dword:00000005
"FBReflexesCoef "=dword:00000005
"FBRushingOutCoef "=dword:00000000
"FBTendencyToPunchCoef "=dword:00000000
"FBThrowingCoef "=dword:00000000
"FBAdaptabilityCoef "=dword:00000005
"FBAmbitionCoef "=dword:0000000a
"FBControversyCoef "=dword:fffffffb
"FBLoyalityCoef "=dword:00000005
"FBPressureCoef "=dword:00000005
"FBProfessionalismCoef "=dword:00000005
"FBSportsmanshipCoef "=dword:00000005
"FBTemperamentCoef "=dword:00000005
"WBWeightCoef "=dword:0000006e
"WBCurrentAbilityCoef "=dword:00000000
"WBCornersCoef "=dword:0000000a
"WBCrossingCoef "=dword:0000003c
"WBDribblingCoef "=dword:00000028
"WBFinishingCoef "=dword:0000000a
"WBFirstTouchCoef "=dword:00000014
"WBFreeKicksCoef "=dword:0000000a
"WBHeadingCoef "=dword:00000028
"WBLongShotsCoef "=dword:00000014
"WBLongThrowsCoef "=dword:0000000a
"WBMarkingCoef "=dword:0000003c
"WBPassingCoef "=dword:00000028
"WBPenaltiesCoef "=dword:00000005
"WBTacklingCoef "=dword:00000064
"WBTechniqueCoef "=dword:00000028
"WBLeftFootCoef "=dword:00000005
"WBRightFootCoef "=dword:00000005
"WBAggressionCoef "=dword:0000000a
"WBAnticipationCoef "=dword:00000050
"WBBraveryCoef "=dword:0000000a
"WBComposureCoef "=dword:0000000a
"WBConcentrationCoef "=dword:00000014
"WBConsistencyCoef "=dword:0000000a
"WBCreativityCoef "=dword:00000014
"WBDecisionsCoef "=dword:00000014
"WBDeterminationCoef "=dword:0000000a
"WBDirtinessCoef "=dword:fffffff6
"WBFlairCoef "=dword:0000000a
"WBImportantMatchesCoef "=dword:0000000a
"WBInfluenceCoef "=dword:0000000a
"WBOffTheBallCoef "=dword:00000014
"WBPositioningCoef "=dword:00000064
"WBTeamworkCoef "=dword:00000014
"WBWorkRateCoef "=dword:00000028
"WBAccelerationCoef "=dword:00000050
"WBAgilityCoef "=dword:0000000a
"WBBalanceCoef "=dword:00000014
"WBInjuryPronenessCoef "=dword:fffffffb
"WBJumpingCoef "=dword:00000014
"WBNaturalFitnessCoef "=dword:00000005
"WBPaceCoef "=dword:00000064
"WBStaminaCoef "=dword:00000050
"WBStrengthCoef "=dword:00000028
"WBVersatilityCoef "=dword:00000005
"WBAerialAbilityCoef "=dword:00000000
"WBCommandOfAreaCoef "=dword:00000000
"WBCommunicationCoef "=dword:00000000
"WBEccentricityCoef "=dword:00000000
"WBHandlingCoef "=dword:00000000
"WBKickingCoef "=dword:00000000
"WBOneOnOnesCoef "=dword:00000005
"WBReflexesCoef "=dword:00000005
"WBRushingOutCoef "=dword:00000000
"WBTendencyToPunchCoef "=dword:00000000
"WBThrowingCoef "=dword:00000000
"WBAdaptabilityCoef "=dword:00000005
"WBAmbitionCoef "=dword:0000000a
"WBControversyCoef "=dword:fffffffb
"WBLoyalityCoef "=dword:00000005
"WBPressureCoef "=dword:00000005
"WBProfessionalismCoef "=dword:00000005
"WBSportsmanshipCoef "=dword:00000005
"WBTemperamentCoef "=dword:00000005
"DMWeightCoef "=dword:00000069
"DMCurrentAbilityCoef "=dword:00000000
"DMCornersCoef "=dword:0000000a
"DMCrossingCoef "=dword:0000001e
"DMDribblingCoef "=dword:00000014
"DMFinishingCoef "=dword:0000000a
"DMFirstTouchCoef "=dword:0000001e
"DMFreeKicksCoef "=dword:0000000a
"DMHeadingCoef "=dword:00000028
"DMLongShotsCoef "=dword:00000014
"DMLongThrowsCoef "=dword:00000005
"DMMarkingCoef "=dword:0000003c
"DMPassingCoef "=dword:00000028
"DMPenaltiesCoef "=dword:00000005
"DMTacklingCoef "=dword:00000064
"DMTechniqueCoef "=dword:0000001e
"DMLeftFootCoef "=dword:00000005
"DMRightFootCoef "=dword:00000005
"DMAggressionCoef "=dword:00000028
"DMAnticipationCoef "=dword:00000028
"DMBraveryCoef "=dword:00000014
"DMComposureCoef "=dword:0000000a
"DMConcentrationCoef "=dword:00000014
"DMConsistencyCoef "=dword:0000000a
"DMCreativityCoef "=dword:00000014
"DMDecisionsCoef "=dword:00000014
"DMDeterminationCoef "=dword:0000000a
"DMDirtinessCoef "=dword:fffffff6
"DMFlairCoef "=dword:0000000a
"DMImportantMatchesCoef "=dword:0000000a
"DMInfluenceCoef "=dword:0000000a
"DMOffTheBallCoef "=dword:0000001e
"DMPositioningCoef "=dword:00000050
"DMTeamworkCoef "=dword:00000028
"DMWorkRateCoef "=dword:00000050
"DMAccelerationCoef "=dword:00000028
"DMAgilityCoef "=dword:0000000a
"DMBalanceCoef "=dword:0000000a
"DMInjuryPronenessCoef "=dword:fffffffb
"DMJumpingCoef "=dword:00000028
"DMNaturalFitnessCoef "=dword:00000005
"DMPaceCoef "=dword:00000028
"DMStaminaCoef "=dword:0000003c
"DMStrengthCoef "=dword:00000028
"DMVersatilityCoef "=dword:00000005
"DMAerialAbilityCoef "=dword:00000000
"DMCommandOfAreaCoef "=dword:00000000
"DMCommunicationCoef "=dword:00000000
"DMEccentricityCoef "=dword:00000000
"DMHandlingCoef "=dword:00000000
"DMKickingCoef "=dword:00000000
"DMOneOnOnesCoef "=dword:00000005
"DMReflexesCoef "=dword:00000005
"DMRushingOutCoef "=dword:00000000
"DMTendencyToPunchCoef "=dword:00000000
"DMThrowingCoef "=dword:00000000
"DMAdaptabilityCoef "=dword:00000005
"DMAmbitionCoef "=dword:0000000a
"DMControversyCoef "=dword:fffffffb
"DMLoyalityCoef "=dword:00000005
"DMPressureCoef "=dword:00000005
"DMProfessionalismCoef "=dword:00000005
"DMSportsmanshipCoef "=dword:00000005
"DMTemperamentCoef "=dword:00000005
"MWeightCoef "=dword:0000006a
"MCurrentAbilityCoef "=dword:00000000
"MCornersCoef "=dword:0000000a
"MCrossingCoef "=dword:00000028
"MDribblingCoef "=dword:00000032
"MFinishingCoef "=dword:00000014
"MFirstTouchCoef "=dword:0000001e
"MFreeKicksCoef "=dword:0000000a
"MHeadingCoef "=dword:0000001e
"MLongShotsCoef "=dword:00000014
"MLongThrowsCoef "=dword:00000005
"MMarkingCoef "=dword:00000028
"MPassingCoef "=dword:00000046
"MPenaltiesCoef "=dword:00000005
"MTacklingCoef "=dword:0000003c
"MTechniqueCoef "=dword:00000032
"MLeftFootCoef "=dword:00000005
"MRightFootCoef "=dword:00000005
"MAggressionCoef "=dword:0000001e
"MAnticipationCoef "=dword:00000028
"MBraveryCoef "=dword:0000000a
"MComposureCoef "=dword:0000000a
"MConcentrationCoef "=dword:0000000a
"MConsistencyCoef "=dword:0000000a
"MCreativityCoef "=dword:0000003c
"MDecisionsCoef "=dword:0000001e
"MDeterminationCoef "=dword:0000000a
"MDirtinessCoef "=dword:fffffffb
"MFlairCoef "=dword:0000000a
"MImportantMatchesCoef "=dword:0000000a
"MInfluenceCoef "=dword:0000000a
"MOffTheBallCoef "=dword:00000028
"MPositioningCoef "=dword:00000028
"MTeamworkCoef "=dword:00000032
"MWorkRateCoef "=dword:00000032
"MAccelerationCoef "=dword:00000032
"MAgilityCoef "=dword:0000000a
"MBalanceCoef "=dword:0000000a
"MInjuryPronenessCoef "=dword:fffffffb
"MJumpingCoef "=dword:00000028
"MNaturalFitnessCoef "=dword:00000005
"MPaceCoef "=dword:00000028
"MStaminaCoef "=dword:0000003c
"MStrengthCoef "=dword:0000001e
"MVersatilityCoef "=dword:00000005
"MAerialAbilityCoef "=dword:00000000
"MCommandOfAreaCoef "=dword:00000000
"MCommunicationCoef "=dword:00000000
"MEccentricityCoef "=dword:00000000
"MHandlingCoef "=dword:00000000
"MKickingCoef "=dword:00000000
"MOneOnOnesCoef "=dword:00000005
"MReflexesCoef "=dword:00000005
"MRushingOutCoef "=dword:00000000
"MTendencyToPunchCoef "=dword:00000000
"MThrowingCoef "=dword:00000000
"MAdaptabilityCoef "=dword:00000005
"MAmbitionCoef "=dword:0000000a
"MControversyCoef "=dword:fffffffb
"MLoyalityCoef "=dword:00000005
"MPressureCoef "=dword:00000005
"MProfessionalismCoef "=dword:00000005
"MSportsmanshipCoef "=dword:00000005
"MTemperamentCoef "=dword:00000005
"AMWeightCoef "=dword:00000069
"AMCurrentAbilityCoef "=dword:00000000
"AMCornersCoef "=dword:0000000a
"AMCrossingCoef "=dword:0000003c
"AMDribblingCoef "=dword:00000050
"AMFinishingCoef "=dword:00000028
"AMFirstTouchCoef "=dword:0000001e
"AMFreeKicksCoef "=dword:0000000a
"AMHeadingCoef "=dword:00000014
"AMLongShotsCoef "=dword:00000014
"AMLongThrowsCoef "=dword:00000005
"AMMarkingCoef "=dword:0000000a
"AMPassingCoef "=dword:00000064
"AMPenaltiesCoef "=dword:00000005
"AMTacklingCoef "=dword:0000000a
"AMTechniqueCoef "=dword:00000050
"AMLeftFootCoef "=dword:00000005
"AMRightFootCoef "=dword:00000005
"AMAggressionCoef "=dword:0000000a
"AMAnticipationCoef "=dword:0000001e
"AMBraveryCoef "=dword:0000000a
"AMComposureCoef "=dword:0000000a
"AMConcentrationCoef "=dword:0000000a
"AMConsistencyCoef "=dword:0000000a
"AMCreativityCoef "=dword:00000064
"AMDecisionsCoef "=dword:00000028
"AMDeterminationCoef "=dword:0000000a
"AMDirtinessCoef "=dword:fffffffb
"AMFlairCoef "=dword:00000014
"AMImportantMatchesCoef "=dword:0000000a
"AMInfluenceCoef "=dword:0000000a
"AMOffTheBallCoef "=dword:0000003c
"AMPositioningCoef "=dword:00000014
"AMTeamworkCoef "=dword:0000003c
"AMWorkRateCoef "=dword:00000014
"AMAccelerationCoef "=dword:0000003c
"AMAgilityCoef "=dword:0000000a
"AMBalanceCoef "=dword:0000000a
"AMInjuryPronenessCoef "=dword:fffffffb
"AMJumpingCoef "=dword:00000014
"AMNaturalFitnessCoef "=dword:00000005
"AMPaceCoef "=dword:0000003c
"AMStaminaCoef "=dword:0000003c
"AMStrengthCoef "=dword:00000014
"AMVersatilityCoef "=dword:00000005
"AMAerialAbilityCoef "=dword:00000000
"AMCommandOfAreaCoef "=dword:00000000
"AMCommunicationCoef "=dword:00000000
"AMEccentricityCoef "=dword:00000000
"AMHandlingCoef "=dword:00000000
"AMKickingCoef "=dword:00000000
"AMOneOnOnesCoef "=dword:00000005
"AMReflexesCoef "=dword:00000005
"AMRushingOutCoef "=dword:00000000
"AMTendencyToPunchCoef "=dword:00000000
"AMThrowingCoef "=dword:00000000
"AMAdaptabilityCoef "=dword:00000005
"AMAmbitionCoef "=dword:0000000a
"AMControversyCoef "=dword:fffffffb
"AMLoyalityCoef "=dword:00000005
"AMPressureCoef "=dword:00000005
"AMProfessionalismCoef "=dword:00000005
"AMSportsmanshipCoef "=dword:00000005
"AMTemperamentCoef "=dword:00000005
"WWeightCoef "=dword:00000069
"WCurrentAbilityCoef "=dword:00000000
"WCornersCoef "=dword:0000000a
"WCrossingCoef "=dword:00000064
"WDribblingCoef "=dword:00000064
"WFinishingCoef "=dword:0000003c
"WFirstTouchCoef "=dword:0000001e
"WFreeKicksCoef "=dword:0000000a
"WHeadingCoef "=dword:00000014
"WLongShotsCoef "=dword:00000014
"WLongThrowsCoef "=dword:00000005
"WMarkingCoef "=dword:0000000a
"WPassingCoef "=dword:0000003c
"WPenaltiesCoef "=dword:00000005
"WTacklingCoef "=dword:0000000a
"WTechniqueCoef "=dword:00000050
"WLeftFootCoef "=dword:00000005
"WRightFootCoef "=dword:00000005
"WAggressionCoef "=dword:0000000a
"WAnticipationCoef "=dword:00000014
"WBraveryCoef "=dword:0000000a
"WComposureCoef "=dword:0000000a
"WConcentrationCoef "=dword:0000000a
"WConsistencyCoef "=dword:0000000a
"WCreativityCoef "=dword:0000003c
"WDecisionsCoef "=dword:00000014
"WDeterminationCoef "=dword:0000000a
"WDirtinessCoef "=dword:fffffffb
"WFlairCoef "=dword:0000000a
"WImportantMatchesCoef "=dword:00000014
"WInfluenceCoef "=dword:0000000a
"WOffTheBallCoef "=dword:0000003c
"WPositioningCoef "=dword:00000014
"WTeamworkCoef "=dword:0000001e
"WWorkRateCoef "=dword:0000001e
"WAccelerationCoef "=dword:00000050
"WAgilityCoef "=dword:00000014
"WBalanceCoef "=dword:0000000a
"WInjuryPronenessCoef "=dword:fffffffb
"WJumpingCoef "=dword:00000014
"WNaturalFitnessCoef "=dword:00000005
"WPaceCoef "=dword:00000064
"WStaminaCoef "=dword:0000003c
"WStrengthCoef "=dword:00000014
"WVersatilityCoef "=dword:00000005
"WAerialAbilityCoef "=dword:00000000
"WCommandOfAreaCoef "=dword:00000000
"WCommunicationCoef "=dword:00000000
"WEccentricityCoef "=dword:00000000
"WHandlingCoef "=dword:00000000
"WKickingCoef "=dword:00000000
"WOneOnOnesCoef "=dword:00000005
"WReflexesCoef "=dword:00000005
"WRushingOutCoef "=dword:00000000
"WTendencyToPunchCoef "=dword:00000000
"WThrowingCoef "=dword:00000000
"WAdaptabilityCoef "=dword:00000005
"WAmbitionCoef "=dword:0000000a
"WControversyCoef "=dword:fffffffb
"WLoyalityCoef "=dword:00000005
"WPressureCoef "=dword:00000005
"WProfessionalismCoef "=dword:00000005
"WSportsmanshipCoef "=dword:00000005
"WTemperamentCoef "=dword:00000005
"FSTWeightCoef "=dword:00000067
"FSTCurrentAbilityCoef "=dword:00000000
"FSTCornersCoef "=dword:0000000a
"FSTCrossingCoef "=dword:0000000a
"FSTDribblingCoef "=dword:00000050
"FSTFinishingCoef "=dword:00000064
"FSTFirstTouchCoef "=dword:00000028
"FSTFreeKicksCoef "=dword:0000000a
"FSTHeadingCoef "=dword:00000028
"FSTLongShotsCoef "=dword:00000014
"FSTLongThrowsCoef "=dword:00000000
"FSTMarkingCoef "=dword:00000000
"FSTPassingCoef "=dword:00000028
"FSTPenaltiesCoef "=dword:00000005
"FSTTacklingCoef "=dword:00000000
"FSTTechniqueCoef "=dword:00000050
"FSTLeftFootCoef "=dword:00000005
"FSTRightFootCoef "=dword:00000005
"FSTAggressionCoef "=dword:0000000a
"FSTAnticipationCoef "=dword:0000000a
"FSTBraveryCoef "=dword:0000000a
"FSTComposureCoef "=dword:0000000a
"FSTConcentrationCoef "=dword:0000000a
"FSTConsistencyCoef "=dword:0000000a
"FSTCreativityCoef "=dword:00000028
"FSTDecisionsCoef "=dword:0000000a
"FSTDeterminationCoef "=dword:0000000a
"FSTDirtinessCoef "=dword:fffffffb
"FSTFlairCoef "=dword:0000000a
"FSTImportantMatchesCoef "=dword:0000000a
"FSTInfluenceCoef "=dword:0000000a
"FSTOffTheBallCoef "=dword:00000050
"FSTPositioningCoef "=dword:0000000a
"FSTTeamworkCoef "=dword:0000000a
"FSTWorkRateCoef "=dword:0000000a
"FSTAccelerationCoef "=dword:00000064
"FSTAgilityCoef "=dword:00000028
"FSTBalanceCoef "=dword:0000000a
"FSTInjuryPronenessCoef "=dword:fffffffb
"FSTJumpingCoef "=dword:00000014
"FSTNaturalFitnessCoef "=dword:00000005
"FSTPaceCoef "=dword:00000064
"FSTStaminaCoef "=dword:00000028
"FSTStrengthCoef "=dword:00000014
"FSTVersatilityCoef "=dword:00000005
"FSTAerialAbilityCoef "=dword:00000000
"FSTCommandOfAreaCoef "=dword:00000000
"FSTCommunicationCoef "=dword:00000000
"FSTEccentricityCoef "=dword:00000000
"FSTHandlingCoef "=dword:00000000
"FSTKickingCoef "=dword:00000000
"FSTOneOnOnesCoef "=dword:00000005
"FSTReflexesCoef "=dword:00000005
"FSTRushingOutCoef "=dword:00000000
"FSTTendencyToPunchCoef "=dword:00000000
"FSTThrowingCoef "=dword:00000000
"FSTAdaptabilityCoef "=dword:00000005
"FSTAmbitionCoef "=dword:0000000a
"FSTControversyCoef "=dword:fffffffb
"FSTLoyalityCoef "=dword:00000005
"FSTPressureCoef "=dword:00000005
"FSTProfessionalismCoef "=dword:00000005
"FSTSportsmanshipCoef "=dword:00000005
"FSTTemperamentCoef "=dword:00000005
"TSTWeightCoef "=dword:00000068
"TSTCurrentAbilityCoef "=dword:00000000
"TSTCornersCoef "=dword:00000000
"TSTCrossingCoef "=dword:0000000a
"TSTDribblingCoef "=dword:0000003c
"TSTFinishingCoef "=dword:00000050
"TSTFirstTouchCoef "=dword:0000001e
"TSTFreeKicksCoef "=dword:0000000a
"TSTHeadingCoef "=dword:00000064
"TSTLongShotsCoef "=dword:00000014
"TSTLongThrowsCoef "=dword:00000000
"TSTMarkingCoef "=dword:00000000
"TSTPassingCoef "=dword:00000028
"TSTPenaltiesCoef "=dword:00000005
"TSTTacklingCoef "=dword:00000000
"TSTTechniqueCoef "=dword:00000028
"TSTLeftFootCoef "=dword:00000005
"TSTRightFootCoef "=dword:00000005
"TSTAggressionCoef "=dword:00000014
"TSTAnticipationCoef "=dword:0000000a
"TSTBraveryCoef "=dword:00000014
"TSTComposureCoef "=dword:0000000a
"TSTConcentrationCoef "=dword:0000000a
"TSTConsistencyCoef "=dword:0000000a
"TSTCreativityCoef "=dword:00000014
"TSTDecisionsCoef "=dword:0000000a
"TSTDeterminationCoef "=dword:0000000a
"TSTDirtinessCoef "=dword:fffffffb
"TSTFlairCoef "=dword:0000000a
"TSTImportantMatchesCoef "=dword:0000000a
"TSTInfluenceCoef "=dword:0000000a
"TSTOffTheBallCoef "=dword:00000050
"TSTPositioningCoef "=dword:00000014
"TSTTeamworkCoef "=dword:0000000a
"TSTWorkRateCoef "=dword:0000000a
"TSTAccelerationCoef "=dword:00000028
"TSTAgilityCoef "=dword:00000014
"TSTBalanceCoef "=dword:00000014
"TSTInjuryPronenessCoef "=dword:fffffffb
"TSTJumpingCoef "=dword:00000064
"TSTNaturalFitnessCoef "=dword:00000005
"TSTPaceCoef "=dword:00000028
"TSTStaminaCoef "=dword:00000014
"TSTStrengthCoef "=dword:00000050
"TSTVersatilityCoef "=dword:00000005
"TSTAerialAbilityCoef "=dword:00000000
"TSTCommandOfAreaCoef "=dword:00000000
"TSTCommunicationCoef "=dword:00000000
"TSTEccentricityCoef "=dword:00000000
"TSTHandlingCoef "=dword:00000000
"TSTKickingCoef "=dword:00000000
"TSTOneOnOnesCoef "=dword:00000005
"TSTReflexesCoef "=dword:00000005
"TSTRushingOutCoef "=dword:00000000
"TSTTendencyToPunchCoef "=dword:00000000
"TSTThrowingCoef "=dword:00000000
"TSTAdaptabilityCoef "=dword:00000005
"TSTAmbitionCoef "=dword:0000000a
"TSTControversyCoef "=dword:fffffffb
"TSTLoyalityCoef "=dword:00000005
"TSTPressureCoef "=dword:00000005
"TSTProfessionalismCoef "=dword:00000005
"TSTSportsmanshipCoef "=dword:00000005
"TSTTemperamentCoef "=dword:00000005

[HKEY_USERS\S-1-5-21-57989841-179605362-725345543-1003\Software\G*e*n*i*e* "!\FM Genie Scout 2009]
"ShortlistDir "=" "
"Language "= "English "
"LoadLangDB "=dword:00000000
"CompressHistoryPoints "=dword:00000000
"HighlightedAttributes "=dword:00000000
"MinCondition "=dword:00000050
"SkinName "= "Champions League "
"LastUpdateCheck "=dword:00009b73
"HighQualityGUI "=dword:00000001
"AutomaticallyUpdateCheck "=dword:00000001
"AdvancedGeneration "=dword:00000000
"TranslateStaffSkills "=dword:00000001
"TranslatePlayerSkills "=dword:00000001
"TranslatePositions "=dword:00000001
"ShowHistory "=dword:00000001
"Version "=dword:00000062
"UniqueID "= "96-F555-0E51 "
"UseProxy "=dword:00000000
"ProxyHost "=" "
"ProxyPort "=" "
"UseAuthentication "=dword:00000000
"UserName "=" "
"UserPassword "=" "
"Currency "=dword:00000056
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1336)
c:\windows\system32\Ati2evxx.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\ESET\nod32krn.exe
c:\windows\system32\o2flash.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
.
**************************************************************************
.
Completion time: 2009-04-09 8:11:14 - machine was rebooted [Dean]
ComboFix-quarantined-files.txt 2009-04-09 06:11:12
ComboFix2.txt 2009-04-08 13:36:55
ComboFix3.txt 2009-04-07 13:47:36

Pre-Run: 30.450.343.936 bytes free
Post-Run: 30,343,958,528 bytes free

Current=2 Default=2 Failed=1 LastKnownGood=3 Sets=,1,2,3
1886 --- E O F --- 2008-02-14 19:12:08

 

Hi
Are you still getting the trojan message from NOD32?

Geri

 

Hi,

No i'm not getting NOD32 msg anymore but i got other issue as my windows looks kinda old,and i cant even drag icons from desktop or copy,i dont see anything on my taskbar so i have to use alt + tab.and seems like all drivers are gonne.for example i get sound error message that sound isnt installed.

i dont know why is that but it happened when i tried to scan with norton and it found virus i think trojan.pandex or something like that and i had to restart computer.when i logged into windows again all was messed up.


any idea about that problem?

 

Hi
Do you have the WindowsXP CD?

Geri

 

yes i do

 

Hi
Have you done a System file check? You may need the CD if corrupt files are found.

Click Start > Run
Type or paste in sfc /scannow
Click OK

Geri