har akkurat scannet pc min og legger ut loggfiler

big_dunc · 22. januar 2009

håper noenhar tid til å tat en titt på disse

combofix

Klikk for å se/fjerne innholdet nedenfor

<ComboFix 09-01-21.02 - Erlend T.Narum 2009-01-22 12:30:33.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1268 [GMT 1:00]

Kj°rer fra: c:\documents and settings\Erlend T.Narum\Desktop\ComboFix.exe

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

* Opprettet nytt gjenopprettingspunkt

.

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\system32\afilgrwe.ini

c:\windows\system32\akeuyfvc.ini

c:\windows\system32\axeswycs.ini

c:\windows\system32\aygjihof.ini

c:\windows\system32\bdnqysnf.ini

c:\windows\system32\beflpxot.ini

c:\windows\system32\begxwqyv.ini

c:\windows\system32\bgryfpus.ini

c:\windows\system32\binytafo.ini

c:\windows\system32\bjhpdbex.ini

c:\windows\system32\cknbsdlr.ini

c:\windows\system32\cosdytwn.ini

c:\windows\system32\diglesur.ini

c:\windows\system32\dkrqendg.ini

c:\windows\system32\dlwhjasc.ini

c:\windows\system32\drfopvxl.ini

c:\windows\system32\dydynoqk.ini

c:\windows\system32\ehmyufya.ini

c:\windows\system32\eqroboqo.ini

c:\windows\system32\feiilqct.ini

c:\windows\system32\fiucfqeg.ini

c:\windows\system32\fovenmna.ini

c:\windows\system32\fsiqbltb.ini

c:\windows\system32\gacpbpmk.ini

c:\windows\system32\gilrstbm.ini

c:\windows\system32\gyshwdfh.ini

c:\windows\system32\hfblnjer.ini

c:\windows\system32\hqwctuwj.ini

c:\windows\system32\hxogaqoe.ini

c:\windows\system32\iendgumc.ini

c:\windows\system32\jaqyjtaj.ini

c:\windows\system32\jfllrbgw.ini

c:\windows\system32\jqsfvgxs.ini

c:\windows\system32\jysoyylv.ini

c:\windows\system32\kigmtcsl.ini

c:\windows\system32\kjtcyonc.ini

c:\windows\system32\lngoselk.ini

c:\windows\system32\lqxofcfi.ini

c:\windows\system32\lxfsnpbu.ini

c:\windows\system32\mbrmusao.ini

c:\windows\system32\mxjeulnr.ini

c:\windows\system32\ngoytuhy.ini

c:\windows\system32\nkuswbsi.ini

c:\windows\system32\nqlclymi.ini

c:\windows\system32\oejopgse.ini

c:\windows\system32\okdksaee.ini

c:\windows\system32\ooqbggny.ini

c:\windows\system32\opjoxwbv.ini

c:\windows\system32\pnugcedb.ini

c:\windows\system32\praalics.ini

c:\windows\system32\pwcyyjsa.ini

c:\windows\system32\qbwvtwtl.ini

c:\windows\system32\qmpthvpb.ini

c:\windows\system32\qnjrhjqu.ini

c:\windows\system32\riaoarhg.ini

c:\windows\system32\rstwa.bak1

c:\windows\system32\rstwa.bak2

c:\windows\system32\rstwa.ini

c:\windows\system32\rstwa.ini2

c:\windows\system32\rstwa.tmp

c:\windows\system32\rugyngvq.ini

c:\windows\system32\rxgbfdcj.ini

c:\windows\system32\senonsop.ini

c:\windows\system32\sgwnyopg.ini

c:\windows\system32\sibquosv.ini

c:\windows\system32\sserrypj.ini

c:\windows\system32\ssiprjsn.ini

c:\windows\system32\swdsonjh.ini

c:\windows\system32\tfpjndsm.ini

c:\windows\system32\txfhyhlq.ini

c:\windows\system32\uaprdccm.ini

c:\windows\system32\ucberjco.ini

c:\windows\system32\ugdqcvsk.ini

c:\windows\system32\uuunvsbl.ini

c:\windows\system32\vhuyxqfe.ini

c:\windows\system32\viuiwvmd.ini

c:\windows\system32\voxerfhc.ini

c:\windows\system32\vprxgfvu.ini

c:\windows\system32\vqtskqay.ini

c:\windows\system32\vvyfmhcv.ini

c:\windows\system32\wflcmisn.ini

c:\windows\system32\xlcciwfk.ini

c:\windows\system32\xnaofjap.ini

c:\windows\system32\xorwpkks.ini

c:\windows\system32\xsxhiffs.ini

c:\windows\system32\xuoybmsu.ini

c:\windows\system32\yuxchsmt.ini

c:\windows\system32\yvsypjhg.ini

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2008-12-22 til 2009-01-22 )))))))))))))))))))))))))))))))))

.

2009-01-22 12:10 . 2009-01-22 12:10 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-01-22 12:10 . 2009-01-22 12:10 <DIR> d-------- c:\documents and settings\Erlend T.Narum\Application Data\Malwarebytes

2009-01-22 12:10 . 2009-01-22 12:10 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-01-22 12:10 . 2009-01-14 16:11 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys

2009-01-22 12:10 . 2009-01-14 16:11 15,504 --a------ c:\windows\system32\drivers\mbam.sys

2009-01-20 13:19 . 2004-05-14 16:53 462,848 --a------ c:\windows\system32\ltkrn13n.dll

2009-01-20 13:19 . 2004-05-14 16:53 450,560 --a------ c:\windows\system32\ltimg13n.dll

2009-01-20 13:19 . 2004-05-14 16:53 401,408 --a------ c:\windows\system32\lfcmp13n.dll

2009-01-20 13:19 . 2004-05-14 16:53 299,008 --a------ c:\windows\system32\ltdis13n.dll

2009-01-20 13:19 . 2004-01-12 02:09 206,336 --a------ c:\windows\system32\ltefx13n.dll

2009-01-20 13:19 . 2004-05-14 16:53 163,840 --a------ c:\windows\system32\ltfil13n.dll

2009-01-20 13:19 . 2003-11-04 15:10 69,632 --a------ c:\windows\system32\lfgif13n.dll

2009-01-20 13:19 . 2004-05-14 16:53 57,344 --a------ c:\windows\system32\lfbmp13n.dll

2009-01-19 23:50 . 2009-01-19 23:50 <DIR> d-------- c:\program files\Belkin

2009-01-19 23:37 . 2005-12-01 01:40 936,960 --a------ c:\windows\system32\drivers\HSX_DPV.sys

2009-01-19 23:37 . 2005-12-01 01:40 669,696 --a------ c:\windows\system32\drivers\HSX_CNXT.sys

2009-01-19 23:37 . 2005-12-01 01:40 192,512 --a------ c:\windows\system32\drivers\HSXHWAZL.sys

2009-01-19 23:37 . 2005-11-15 23:41 114,688 --a------ c:\windows\system32\Uci32103.dll

2009-01-19 23:36 . 2009-01-19 23:36 <DIR> d-------- c:\program files\Broadcom

2009-01-19 23:35 . 2009-01-19 23:35 <DIR> d-------- c:\program files\DIFX

2009-01-19 23:34 . 2009-01-19 23:34 <DIR> d-------- c:\program files\Digital Line Detect

2009-01-17 14:06 . 2009-01-17 14:06 <DIR> d-------- c:\program files\RADsoft

2009-01-17 13:45 . 2009-01-17 13:45 <DIR> d-------- c:\documents and settings\Erlend T.Narum\Application Data\BraCa_Soft

2009-01-17 13:17 . 2009-01-17 13:25 <DIR> d-------- c:\windows\SxsCaPendDel

2009-01-17 13:17 . 2009-01-17 13:18 <DIR> d-------- C:\425411f09c3be89843eae5

2009-01-17 12:48 . 2009-01-17 13:22 <DIR> d-------- c:\windows\system32\nb-NO

2009-01-17 12:46 . 2009-01-17 13:22 <DIR> d-------- c:\windows\system32\XPSViewer

2009-01-17 12:46 . 2009-01-17 12:46 <DIR> d-------- c:\program files\Reference Assemblies

2009-01-17 12:45 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll

2009-01-15 18:01 . 2009-01-15 18:01 <DIR> d-------- c:\program files\FM Modifier 2.2

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-01-21 12:19 --------- d---a-w c:\documents and settings\All Users\Application Data\Sports Interactive

2009-01-19 22:50 --------- d--h--w c:\program files\InstallShield Installation Information

2009-01-17 12:33 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy

2009-01-15 02:03 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help

2008-12-18 13:26 --------- d-----w c:\program files\FLV Player

2008-12-13 10:22 --------- d-----w c:\program files\Microsoft Works

2008-12-13 10:21 --------- d-----w c:\program files\Sports Interactive

2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys

2008-12-05 13:00 --------- d-----w c:\program files\Java

2007-12-12 20:10 22,328 ----a-w c:\documents and settings\Erlend T.Narum\Application Data\PnkBstrK.sys

2006-06-17 21:12 251 ----a-w c:\program files\wt3d.ini

2007-07-10 16:40 88 --sh--r c:\windows\system32\5A1B3C113A.sys

.

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-29 761947]

"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 45056]

"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-28 667718]

"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-12-28 602182]

"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]

"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]

"MaxtorOneTouch"="c:\progra~1\Maxtor\OneTouch\Utils\OneTouch.exe" [2004-08-31 823296]

"MSKDetectorExe"="c:\program files\McAfee\SpamKiller\MSKDetct.exe" [2005-08-12 1121792]

"IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2005-06-10 217088]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-05 136600]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2007-11-14 286720]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2007-11-15 267048]

"dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-05-31 122941]

"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2008-11-27 1261336]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]

"SigmatelSysTrayApp"="stsystra.exe" [2005-11-16 c:\windows\stsystra.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2009-01-19 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ModemOnHold]

--------- 2003-09-10 02:24 20480 c:\program files\NetWaiting\netwaiting.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"=dword:00000001

"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\Ubisoft\\Red Storm Entertainment\\Rainbow Six Lockdown\\Lockdown.exe"=

"c:\\Program Files\\BitLord\\BitLord.exe"=

"c:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"=

"c:\\Program Files\\LimeWire\\LimeWire.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"c:\\WINDOWS\\system32\\PnkBstrA.exe"=

"c:\\WINDOWS\\system32\\PnkBstrB.exe"=

"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=

"c:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=

"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=

"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=

"c:\\Program Files\\MSN Messenger\\livecall.exe"=

"c:\\Program Files\\Sports Interactive\\Football Manager 2009\\fm.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

R0 ps6akt6c;Cycling Manager 2007 Synchronization Driver (ps6akt6c);c:\windows\system32\drivers\ps6akt6c.sys [2007-06-14 55704]

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-11-08 97928]

R4 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2008-11-08 875288]

R4 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-11-08 231704]

R4 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2008-11-08 76040]

R4 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [2008-02-25 2560]

S3 Belkin Belkin 11Mbps Wireless USB Network Adapter®;Belkin Belkin 11Mbps Wireless USB Network Adapter® Service for Belkin 11Mbps Wireless USB Network Adapter;c:\windows\system32\drivers\bkusbxp.sys [2008-07-10 101099]

S4 pr2akt6c;Cycling Manager 2007 Drivers Auto Removal (pr2akt6c);c:\windows\system32\pr2akt6c.exe svc --> c:\windows\system32\pr2akt6c.exe svc [?]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{76bc8224-e8fb-11db-89e7-0015c51408e2}]

\Shell\AutoRun\command - h:\wd_windows_tools\setup.exe

.

Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)

2009-01-15 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]

2009-01-22 c:\windows\Tasks\Se etter oppdateringer for Windows Live Toolbar.job

- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]

.

- - - - TOMME PEKERE FJERNET - - - -

BHO-{CE7FEC5A-430A-45E5-B1F1-D364F74EADA4} - c:\windows\system32\awtsr.dll

.

------- Tilleggsskanning -------

.

uInternet Connection Wizard,ShellNext = hxxp://no.mcafee.com/root/campaign.asp?cid=17357

IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000

IE: E&xport to Microsoft Office Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000

IE: Åpne i ny bakgrunnsflik - c:\program files\Windows Live Toolbar\Components\nb-no\msntabres.dll.mui/229?f244d039a4df4c748300497bab27adf4

IE: Åpne i ny forgrunnsflik - c:\program files\Windows Live Toolbar\Components\nb-no\msntabres.dll.mui/230?f244d039a4df4c748300497bab27adf4

FF - ProfilePath - c:\documents and settings\Erlend T.Narum\Application Data\Mozilla\Firefox\Profiles\ybdtab7u.default\

FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-01-22 12:40:41

Windows 5.1.2600 Service Pack 3 NTFS

skanner skjulte prosesser ...

skanner skjulte autostart-oppføringer ...

skanner skjulte filer ...

skanning vellykket

skjulte filer: 0

**************************************************************************

.

--------------------- LÅSTE REGISTERNØKLER ---------------------

[HKEY_USERS\S-1-5-21-3280335825-2189611420-1378028180-1005\Software\G*e*n*i*e*"!\FM Genie Scout 2008]

"GameDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2008\\games"

"ShortlistDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2008\\shortlists"

"ScreenshotsDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2008"

"SaveDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2008\\"

"HistoryDir"="c:\\Documents and Settings\\Erlend T.Narum\\Desktop\\FM Genie Scout 2008\\History Points"

"LangDB"="c:\\Program Files\\Sports Interactive\\Football Manager 2008\\data\\db\\800\\lang_db.dat"

"LastSaveGame"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2008\\games\\EFC.fm"

"Language"="English"

"LoadLangDB"=dword:00000001

"CompressHistoryPoints"=dword:00000000

"HighlightedAttributes"=dword:00000000

"MinCondition"=dword:00000050

"SkinID"=dword:00000001

"LastUpdateCheck"=dword:00000000

"HighQualityGUI"=dword:00000001

"AutomaticallyUpdateCheck"=dword:00000001

"AdvancedGeneration"=dword:00000000

"TranslateStaffSkills"=dword:00000001

"TranslatePlayerSkills"=dword:00000001

"TranslatePositions"=dword:00000001

"ShowHistory"=dword:00000001

"WindowState"=dword:00000002

"Currency"=dword:00000056

"WindowHeight"=dword:00000271

"WindowWidth"=dword:000003fc

"WindowLeft"=dword:00000002

"WindowTop"=dword:00000048

"UseProxy"=dword:00000000

"ProxyHost"=""

"ProxyPort"=""

"UseAuthentication"=dword:00000000

"UserName"=""

"UserPassword"=""

[HKEY_USERS\S-1-5-21-3280335825-2189611420-1378028180-1005\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Columns\Clubs]

"Position0"=dword:00000000

"Visible0"=dword:00000001

"Width0"=dword:0000007d

"Position1"=dword:00000001

"Visible1"=dword:00000001

"Width1"=dword:00000064

"Position2"=dword:00000002

"Visible2"=dword:00000001

"Width2"=dword:00000064

"Position3"=dword:00000003

"Visible3"=dword:00000001

"Width3"=dword:00000032

"Position4"=dword:00000004

"Visible4"=dword:00000001

"Width4"=dword:00000032

"Position5"=dword:00000005

"Visible5"=dword:00000001

"Width5"=dword:00000050

"Position6"=dword:00000006

"Visible6"=dword:00000001

"Width6"=dword:00000050

"Position7"=dword:00000007

"Visible7"=dword:00000001

"Width7"=dword:00000050

"Position8"=dword:00000008

"Visible8"=dword:00000000

"Width8"=dword:00000050

"Position9"=dword:00000009

"Visible9"=dword:00000000

"Width9"=dword:0000002d

"Position10"=dword:0000000a

"Visible10"=dword:00000000

"Width10"=dword:0000001e

"Position11"=dword:0000000b

"Visible11"=dword:00000000

"Width11"=dword:0000001e

"Position12"=dword:0000000c

"Visible12"=dword:00000000

"Width12"=dword:0000001e

"Position13"=dword:0000000d

"Visible13"=dword:00000001

"Width13"=dword:0000003c

"Position14"=dword:0000000e

"Visible14"=dword:00000000

"Width14"=dword:00000032

"Position15"=dword:0000000f

"Visible15"=dword:00000000

"Width15"=dword:00000032

"Position16"=dword:00000010

"Visible16"=dword:00000000

"Width16"=dword:00000032

"Position17"=dword:00000011

"Visible17"=dword:00000001

"Width17"=dword:00000050

"Position18"=dword:00000012

"Visible18"=dword:00000001

"Width18"=dword:00000050

"Position19"=dword:00000013

"Visible19"=dword:00000000

"Width19"=dword:00000050

[HKEY_USERS\S-1-5-21-3280335825-2189611420-1378028180-1005\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Columns\Players]

"Position0"=dword:00000000

"Visible0"=dword:00000001

"Width0"=dword:0000007d

"Position1"=dword:00000001

"Visible1"=dword:00000001

"Width1"=dword:00000064

"Position2"=dword:00000002

"Visible2"=dword:00000001

"Width2"=dword:00000064

"Position3"=dword:00000003

"Visible3"=dword:00000001

"Width3"=dword:00000037

"Position4"=dword:00000008

"Visible4"=dword:00000001

"Width4"=dword:00000023

"Position5"=dword:00000009

"Visible5"=dword:00000001

"Width5"=dword:00000028

"Position6"=dword:0000000a

"Visible6"=dword:00000001

"Width6"=dword:00000028

"Position7"=dword:0000000c

"Visible7"=dword:00000001

"Width7"=dword:0000004b

"Position8"=dword:0000000d

"Visible8"=dword:00000001

"Width8"=dword:0000004b

"Position9"=dword:0000000e

"Visible9"=dword:00000001

"Width9"=dword:00000050

"Position10"=dword:00000010

"Visible10"=dword:00000000

"Width10"=dword:00000050

"Position11"=dword:00000011

"Visible11"=dword:00000000

"Width11"=dword:0000004b

"Position12"=dword:00000012

"Visible12"=dword:00000000

"Width12"=dword:0000002d

"Position13"=dword:00000013

"Visible13"=dword:00000000

"Width13"=dword:0000003c

"Position14"=dword:00000014

"Visible14"=dword:00000000

"Width14"=dword:0000004b

"Position15"=dword:00000015

"Visible15"=dword:00000000

"Width15"=dword:00000064

"Position16"=dword:00000016

"Visible16"=dword:00000000

"Width16"=dword:00000064

"Position17"=dword:00000017

"Visible17"=dword:00000000

"Width17"=dword:0000004b

"Position18"=dword:00000018

"Visible18"=dword:00000000

"Width18"=dword:00000064

"Position19"=dword:00000019

"Visible19"=dword:00000000

"Width19"=dword:0000003c

"Position20"=dword:0000001a

"Visible20"=dword:00000000

"Width20"=dword:0000004b

"Position21"=dword:0000001b

"Visible21"=dword:00000000

"Width21"=dword:00000050

"Position22"=dword:0000001c

"Visible22"=dword:00000000

"Width22"=dword:00000073

"Position23"=dword:0000001d

"Visible23"=dword:00000000

"Width23"=dword:00000050

"Position24"=dword:0000001e

"Visible24"=dword:00000000

"Width24"=dword:0000005a

"Position25"=dword:0000001f

"Visible25"=dword:00000000

"Width25"=dword:0000006e

"Position26"=dword:00000020

"Visible26"=dword:00000000

"Width26"=dword:00000064

"Position27"=dword:00000021

"Visible27"=dword:00000000

"Width27"=dword:00000087

"Position28"=dword:00000022

"Visible28"=dword:00000000

"Width28"=dword:00000064

"Position29"=dword:00000023

"Visible29"=dword:00000000

"Width29"=dword:00000064

"Position30"=dword:00000024

"Visible30"=dword:00000000

"Width30"=dword:00000046

"Position31"=dword:00000025

"Visible31"=dword:00000000

"Width31"=dword:0000004b

"Position32"=dword:00000026

"Visible32"=dword:00000000

"Width32"=dword:00000046

"Position33"=dword:00000027

"Visible33"=dword:00000000

"Width33"=dword:0000004b

"Position34"=dword:00000028

"Visible34"=dword:00000000

"Width34"=dword:0000003c

"Position35"=dword:0000002a

"Visible35"=dword:00000000

"Width35"=dword:00000064

"Position36"=dword:0000002e

"Visible36"=dword:00000000

"Width36"=dword:00000073

"Position37"=dword:00000030

"Visible37"=dword:00000000

"Width37"=dword:0000005f

"Position38"=dword:00000033

"Visible38"=dword:00000000

"Width38"=dword:00000091

"Position39"=dword:00000035

"Visible39"=dword:00000000

"Width39"=dword:0000003c

"Position40"=dword:0000002c

"Visible40"=dword:00000000

"Width40"=dword:0000005a

"Position41"=dword:00000036

"Visible41"=dword:00000000

"Width41"=dword:00000041

"Position42"=dword:00000029

"Visible42"=dword:00000000

"Width42"=dword:00000050

"Position43"=dword:0000002b

"Visible43"=dword:00000000

"Width43"=dword:00000055

"Position44"=dword:0000002d

"Visible44"=dword:00000000

"Width44"=dword:0000005f

"Position45"=dword:00000037

"Visible45"=dword:00000000

"Width45"=dword:00000050

"Position46"=dword:00000038

"Visible46"=dword:00000000

"Width46"=dword:0000004b

"Position47"=dword:00000039

"Visible47"=dword:00000000

"Width47"=dword:0000004b

"Position48"=dword:0000003a

"Visible48"=dword:00000000

"Width48"=dword:00000046

"Position49"=dword:0000003b

"Visible49"=dword:00000000

"Width49"=dword:00000032

"Position50"=dword:0000003c

"Visible50"=dword:00000000

"Width50"=dword:0000003c

"Position51"=dword:0000003d

"Visible51"=dword:00000000

"Width51"=dword:0000004b

"Position52"=dword:0000003e

"Visible52"=dword:00000000

"Width52"=dword:0000003c

"Position53"=dword:0000003f

"Visible53"=dword:00000000

"Width53"=dword:00000037

"Position54"=dword:00000040

"Visible54"=dword:00000000

"Width54"=dword:00000069

"Position55"=dword:00000041

"Visible55"=dword:00000000

"Width55"=dword:0000005a

"Position56"=dword:00000044

"Visible56"=dword:00000000

"Width56"=dword:0000004b

"Position57"=dword:00000045

"Visible57"=dword:00000000

"Width57"=dword:0000004b

"Position58"=dword:00000046

"Visible58"=dword:00000000

"Width58"=dword:00000037

"Position59"=dword:00000047

"Visible59"=dword:00000000

"Width59"=dword:0000003c

"Position60"=dword:00000048

"Visible60"=dword:00000000

"Width60"=dword:0000003c

"Position61"=dword:00000049

"Visible61"=dword:00000000

"Width61"=dword:00000041

"Position62"=dword:0000004a

"Visible62"=dword:00000000

"Width62"=dword:00000055

"Position63"=dword:0000004b

"Visible63"=dword:00000000

"Width63"=dword:0000003c

"Position64"=dword:0000004c

"Visible64"=dword:00000000

"Width64"=dword:0000003c

"Position65"=dword:0000004d

"Visible65"=dword:00000000

"Width65"=dword:0000004b

"Position66"=dword:0000004e

"Visible66"=dword:00000000

"Width66"=dword:0000003c

"Position67"=dword:0000004f

"Visible67"=dword:00000000

"Width67"=dword:00000046

"Position68"=dword:00000050

"Visible68"=dword:00000000

"Width68"=dword:00000028

"Position69"=dword:00000051

"Visible69"=dword:00000000

"Width69"=dword:00000041

"Position70"=dword:00000052

"Visible70"=dword:00000000

"Width70"=dword:0000003c

"Position71"=dword:00000053

"Visible71"=dword:00000000

"Width71"=dword:00000069

"Position72"=dword:00000054

"Visible72"=dword:00000000

"Width72"=dword:00000041

"Position73"=dword:00000055

"Visible73"=dword:00000000

"Width73"=dword:0000005f

"Position74"=dword:00000056

"Visible74"=dword:00000000

"Width74"=dword:0000003c

"Position75"=dword:00000057

"Visible75"=dword:00000000

"Width75"=dword:00000037

"Position76"=dword:00000058

"Visible76"=dword:00000000

"Width76"=dword:0000004b

"Position77"=dword:00000059

"Visible77"=dword:00000000

"Width77"=dword:00000050

"Position78"=dword:0000005a

"Visible78"=dword:00000000

"Width78"=dword:00000037

"Position79"=dword:0000005b

"Visible79"=dword:00000000

"Width79"=dword:00000037

"Position80"=dword:0000005c

"Visible80"=dword:00000000

"Width80"=dword:0000005a

"Position81"=dword:0000005d

"Visible81"=dword:00000000

"Width81"=dword:0000004b

"Position82"=dword:0000005e

"Visible82"=dword:00000000

"Width82"=dword:00000055

"Position83"=dword:0000005f

"Visible83"=dword:00000000

"Width83"=dword:0000002d

"Position84"=dword:00000060

"Visible84"=dword:00000000

"Width84"=dword:00000037

"Position85"=dword:00000061

"Visible85"=dword:00000000

"Width85"=dword:0000003c

"Position86"=dword:00000062

"Visible86"=dword:00000000

"Width86"=dword:00000046

"Position87"=dword:00000063

"Visible87"=dword:00000000

"Width87"=dword:0000003c

"Position88"=dword:00000064

"Visible88"=dword:00000000

"Width88"=dword:0000005a

"Position89"=dword:00000065

"Visible89"=dword:00000000

"Width89"=dword:0000003c

"Position90"=dword:00000066

"Visible90"=dword:00000000

"Width90"=dword:00000050

"Position91"=dword:00000067

"Visible91"=dword:00000000

"Width91"=dword:00000046

"Position92"=dword:00000068

"Visible92"=dword:00000000

"Width92"=dword:0000005a

"Position93"=dword:00000069

"Visible93"=dword:00000000

"Width93"=dword:00000037

"Position94"=dword:0000006a

"Visible94"=dword:00000000

"Width94"=dword:0000003c

"Position95"=dword:0000006b

"Visible95"=dword:00000000

"Width95"=dword:0000003c

"Position96"=dword:0000006c

"Visible96"=dword:00000000

"Width96"=dword:00000046

"Position97"=dword:0000006d

"Visible97"=dword:00000000

"Width97"=dword:00000046

"Position98"=dword:0000006e

"Visible98"=dword:00000000

"Width98"=dword:00000055

"Position99"=dword:0000006f

"Visible99"=dword:00000000

"Width99"=dword:00000073

"Position100"=dword:00000042

"Visible100"=dword:00000000

"Width100"=dword:00000041

"Position101"=dword:00000070

"Visible101"=dword:00000000

"Width101"=dword:0000003c

"Position102"=dword:00000071

"Visible102"=dword:00000000

"Width102"=dword:0000003c

"Position103"=dword:00000072

"Visible103"=dword:00000000

"Width103"=dword:00000046

"Position104"=dword:00000073

"Visible104"=dword:00000000

"Width104"=dword:0000003c

"Position105"=dword:00000074

"Visible105"=dword:00000000

"Width105"=dword:00000041

"Position106"=dword:0000000f

"Visible106"=dword:00000001

"Width106"=dword:00000050

"Position107"=dword:0000000b

"Visible107"=dword:00000001

"Width107"=dword:00000028

"Position108"=dword:00000043

"Visible108"=dword:00000000

"Width108"=dword:00000050

"Position109"=dword:0000002f

"Visible109"=dword:00000000

"Width109"=dword:00000050

"Position110"=dword:00000031

"Visible110"=dword:00000000

"Width110"=dword:00000055

"Position111"=dword:00000032

"Visible111"=dword:00000000

"Width111"=dword:00000082

"Position112"=dword:00000034

"Visible112"=dword:00000000

"Width112"=dword:00000087

"Position113"=dword:00000075

"Visible113"=dword:00000000

"Width113"=dword:00000050

"Position114"=dword:00000076

"Visible114"=dword:00000000

"Width114"=dword:00000050

"Position115"=dword:00000077

"Visible115"=dword:00000000

"Width115"=dword:00000050

"Position116"=dword:00000078

"Visible116"=dword:00000000

"Width116"=dword:00000050

"Position117"=dword:00000079

"Visible117"=dword:00000000

"Width117"=dword:00000050

"Position118"=dword:0000007a

"Visible118"=dword:00000000

"Width118"=dword:00000050

"Position119"=dword:0000007b

"Visible119"=dword:00000000

"Width119"=dword:00000050

"Position120"=dword:0000007c

"Visible120"=dword:00000000

"Width120"=dword:00000050

"Position121"=dword:0000007d

"Visible121"=dword:00000000

"Width121"=dword:00000050

"Position122"=dword:0000007e

"Visible122"=dword:00000000

"Width122"=dword:00000050

"Position123"=dword:0000007f

"Visible123"=dword:00000000

"Width123"=dword:00000050

"Position124"=dword:00000080

"Visible124"=dword:00000000

"Width124"=dword:00000050

"Position125"=dword:00000081

"Visible125"=dword:00000000

"Width125"=dword:00000050

"Position126"=dword:00000082

"Visible126"=dword:00000000

"Width126"=dword:00000050

"Position127"=dword:00000083

"Visible127"=dword:00000000

"Width127"=dword:00000050

"Position128"=dword:00000084

"Visible128"=dword:00000000

"Width128"=dword:00000050

"Position129"=dword:00000085

"Visible129"=dword:00000000

"Width129"=dword:00000050

"Position130"=dword:00000086

"Visible130"=dword:00000000

"Width130"=dword:00000050

"Position131"=dword:00000087

"Visible131"=dword:00000000

"Width131"=dword:00000050

"Position132"=dword:00000088

"Visible132"=dword:00000000

"Width132"=dword:00000050

"Position133"=dword:00000089

"Visible133"=dword:00000000

"Width133"=dword:00000050

"Position134"=dword:0000008a

"Visible134"=dword:00000000

"Width134"=dword:00000050

"Position135"=dword:0000008b

"Visible135"=dword:00000000

"Width135"=dword:00000050

"Position136"=dword:0000008c

"Visible136"=dword:00000000

"Width136"=dword:00000050

"Position137"=dword:0000008d

"Visible137"=dword:00000000

"Width137"=dword:00000050

"Position138"=dword:0000008e

"Visible138"=dword:00000000

"Width138"=dword:00000050

"Position139"=dword:0000008f

"Visible139"=dword:00000000

"Width139"=dword:00000050

"Position140"=dword:00000090

"Visible140"=dword:00000000

"Width140"=dword:00000050

"Position141"=dword:00000091

"Visible141"=dword:00000000

"Width141"=dword:00000050

"Position142"=dword:00000092

"Visible142"=dword:00000000

"Width142"=dword:00000050

"Position143"=dword:00000093

"Visible143"=dword:00000000

"Width143"=dword:00000050

"Position144"=dword:00000094

"Visible144"=dword:00000000

"Width144"=dword:00000050

"Position145"=dword:00000095

"Visible145"=dword:00000000

"Width145"=dword:00000050

"Position146"=dword:00000004

"Visible146"=dword:00000000

"Width146"=dword:00000037

"Position147"=dword:00000005

"Visible147"=dword:00000000

"Width147"=dword:00000028

"Position148"=dword:00000006

"Visible148"=dword:00000000

"Width148"=dword:00000037

"Position149"=dword:00000007

"Visible149"=dword:00000001

"Width149"=dword:00000028

[HKEY_USERS\S-1-5-21-3280335825-2189611420-1378028180-1005\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Columns\Staff]

"Position0"=dword:00000000

"Visible0"=dword:00000001

"Width0"=dword:0000007d

"Position1"=dword:00000001

"Visible1"=dword:00000001

"Width1"=dword:00000064

"Position2"=dword:00000002

"Visible2"=dword:00000001

"Width2"=dword:00000064

"Position3"=dword:00000003

"Visible3"=dword:00000001

"Width3"=dword:00000069

"Position4"=dword:00000005

"Visible4"=dword:00000001

"Width4"=dword:00000028

"Position5"=dword:00000006

"Visible5"=dword:00000001

"Width5"=dword:00000028

"Position6"=dword:00000004

"Visible6"=dword:00000001

"Width6"=dword:00000028

"Position7"=dword:00000007

"Visible7"=dword:00000001

"Width7"=dword:00000050

"Position8"=dword:00000008

"Visible8"=dword:00000000

"Width8"=dword:00000050

"Position9"=dword:00000009

"Visible9"=dword:00000000

"Width9"=dword:0000004b

"Position10"=dword:0000000a

"Visible10"=dword:00000000

"Width10"=dword:0000002d

"Position11"=dword:0000000b

"Visible11"=dword:00000000

"Width11"=dword:0000003c

"Position12"=dword:0000000c

"Visible12"=dword:00000000

"Width12"=dword:0000004b

"Position13"=dword:0000000d

"Visible13"=dword:00000000

"Width13"=dword:00000064

"Position14"=dword:0000000e

"Visible14"=dword:00000000

"Width14"=dword:00000064

"Position15"=dword:0000000f

"Visible15"=dword:00000000

"Width15"=dword:0000004b

"Position16"=dword:00000010

"Visible16"=dword:00000000

"Width16"=dword:00000064

"Position17"=dword:00000011

"Visible17"=dword:00000000

"Width17"=dword:0000003c

"Position18"=dword:00000012

"Visible18"=dword:00000000

"Width18"=dword:0000004b

"Position19"=dword:00000013

"Visible19"=dword:00000000

"Width19"=dword:00000050

"Position20"=dword:00000014

"Visible20"=dword:00000000

"Width20"=dword:00000046

"Position21"=dword:00000015

"Visible21"=dword:00000000

"Width21"=dword:0000004b

"Position22"=dword:00000016

"Visible22"=dword:00000000

"Width22"=dword:00000046

"Position23"=dword:00000017

"Visible23"=dword:00000000

"Width23"=dword:00000046

"Position24"=dword:00000018

"Visible24"=dword:00000000

"Width24"=dword:0000003c

"Position25"=dword:00000019

"Visible25"=dword:00000000

"Width25"=dword:00000041

"Position26"=dword:0000001a

"Visible26"=dword:00000000

"Width26"=dword:0000003c

"Position27"=dword:0000001b

"Visible27"=dword:00000000

"Width27"=dword:00000055

"Position28"=dword:0000001c

"Visible28"=dword:00000000

"Width28"=dword:00000069

"Position29"=dword:0000001d

"Visible29"=dword:00000000

"Width29"=dword:0000006e

"Position30"=dword:0000001e

"Visible30"=dword:00000000

"Width30"=dword:00000064

"Position31"=dword:0000001f

"Visible31"=dword:00000000

"Width31"=dword:00000078

"Position32"=dword:00000020

"Visible32"=dword:00000000

"Width32"=dword:00000064

"Position33"=dword:00000021

"Visible33"=dword:00000000

"Width33"=dword:00000087

"Position34"=dword:00000022

"Visible34"=dword:00000000

"Width34"=dword:00000069

"Position35"=dword:00000023

"Visible35"=dword:00000000

"Width35"=dword:0000006e

"Position36"=dword:00000024

"Visible36"=dword:00000000

"Width36"=dword:00000073

"Position37"=dword:00000025

"Visible37"=dword:00000000

"Width37"=dword:0000004b

"Position38"=dword:00000026

"Visible38"=dword:00000000

"Width38"=dword:0000002d

"Position39"=dword:00000027

"Visible39"=dword:00000000

"Width39"=dword:00000055

"Position40"=dword:00000028

"Visible40"=dword:00000000

"Width40"=dword:00000046

"Position41"=dword:00000029

"Visible41"=dword:00000000

"Width41"=dword:0000004b

"Position42"=dword:0000002a

"Visible42"=dword:00000000

"Width42"=dword:0000003c

"Position43"=dword:0000002b

"Visible43"=dword:00000000

"Width43"=dword:00000046

"Position44"=dword:0000002c

"Visible44"=dword:00000000

"Width44"=dword:00000073

"Position45"=dword:0000002d

"Visible45"=dword:00000000

"Width45"=dword:0000004b

"Position46"=dword:0000002e

"Visible46"=dword:00000000

"Width46"=dword:00000073

"Position47"=dword:0000002f

"Visible47"=dword:00000000

"Width47"=dword:0000007d

"Position48"=dword:00000030

"Visible48"=dword:00000000

"Width48"=dword:0000006e

"Position49"=dword:00000031

"Visible49"=dword:00000000

"Width49"=dword:00000037

"Position50"=dword:00000032

"Visible50"=dword:00000000

"Width50"=dword:00000064

"Position51"=dword:00000033

"Visible51"=dword:00000000

"Width51"=dword:00000037

"Position52"=dword:00000034

"Visible52"=dword:00000000

"Width52"=dword:0000004b

"Position53"=dword:00000035

"Visible53"=dword:00000000

"Width53"=dword:00000046

"Position54"=dword:00000036

"Visible54"=dword:00000000

"Width54"=dword:00000037

"Position55"=dword:00000037

"Visible55"=dword:00000000

"Width55"=dword:0000003c

"Position56"=dword:00000038

"Visible56"=dword:00000000

"Width56"=dword:00000055

"Position57"=dword:00000039

"Visible57"=dword:00000000

"Width57"=dword:0000003c

"Position58"=dword:0000003a

"Visible58"=dword:00000000

"Width58"=dword:0000003c

"Position59"=dword:0000003b

"Visible59"=dword:00000000

"Width59"=dword:00000055

"Position60"=dword:0000003c

"Visible60"=dword:00000000

"Width60"=dword:00000046

"Position61"=dword:0000003d

"Visible61"=dword:00000000

"Width61"=dword:0000004b

"Position62"=dword:0000003e

"Visible62"=dword:00000000

"Width62"=dword:00000055

"Position63"=dword:0000003f

"Visible63"=dword:00000000

"Width63"=dword:0000005a

"Position64"=dword:00000040

"Visible64"=dword:00000000

"Width64"=dword:0000006e

"Position65"=dword:00000041

"Visible65"=dword:00000000

"Width65"=dword:00000050

"Position66"=dword:00000042

"Visible66"=dword:00000000

"Width66"=dword:00000032

"Position67"=dword:00000043

"Visible67"=dword:00000000

"Width67"=dword:00000064

"Position68"=dword:00000044

"Visible68"=dword:00000000

"Width68"=dword:0000004b

"Position69"=dword:00000045

"Visible69"=dword:00000000

"Width69"=dword:0000002d

"Position70"=dword:00000046

"Visible70"=dword:00000000

"Width70"=dword:0000004b

"Position71"=dword:00000047

"Visible71"=dword:00000000

"Width71"=dword:0000005a

"Position72"=dword:00000048

"Visible72"=dword:00000000

"Width72"=dword:0000005a

"Position73"=dword:00000049

"Visible73"=dword:00000000

"Width73"=dword:00000050

"Position74"=dword:0000004a

"Visible74"=dword:00000000

"Width74"=dword:0000004b

"Position75"=dword:0000004b

"Visible75"=dword:00000000

"Width75"=dword:00000050

"Position76"=dword:0000004c

"Visible76"=dword:00000000

"Width76"=dword:0000005a

"Position77"=dword:0000004d

"Visible77"=dword:00000000

"Width77"=dword:00000041

"Position78"=dword:0000004e

"Visible78"=dword:00000000

"Width78"=dword:00000041

"Position79"=dword:0000004f

"Visible79"=dword:00000000

"Width79"=dword:00000041

"Position80"=dword:00000050

"Visible80"=dword:00000000

"Width80"=dword:00000041

"Position81"=dword:00000051

"Visible81"=dword:00000000

"Width81"=dword:00000041

"Position82"=dword:00000052

"Visible82"=dword:00000000

"Width82"=dword:00000041

"Position83"=dword:00000053

"Visible83"=dword:00000000

"Width83"=dword:00000041

"Position84"=dword:00000054

"Visible84"=dword:00000000

"Width84"=dword:00000041

"Position85"=dword:00000055

"Visible85"=dword:00000000

"Width85"=dword:00000041

"Position86"=dword:00000056

"Visible86"=dword:00000000

"Width86"=dword:00000050

[HKEY_USERS\S-1-5-21-3280335825-2189611420-1378028180-1005\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Rating Coefficients]

"GKWeightCoef"=dword:00000064

"GKCurrentAbilityCoef"=dword:00000000

"GKCornersCoef"=dword:00000000

"GKCrossingCoef"=dword:00000000

"GKDribblingCoef"=dword:00000000

"GKFinishingCoef"=dword:00000000

"GKFirstTouchCoef"=dword:00000000

"GKFreeKicksCoef"=dword:00000000

"GKHeadingCoef"=dword:00000000

"GKLongShotsCoef"=dword:00000000

"GKLongThrowsCoef"=dword:00000000

"GKMarkingCoef"=dword:00000000

"GKPassingCoef"=dword:00000000

"GKPenaltiesCoef"=dword:00000000

"GKTacklingCoef"=dword:00000005

"GKTechniqueCoef"=dword:00000000

"GKLeftFootCoef"=dword:00000000

"GKRightFootCoef"=dword:00000000

"GKAggressionCoef"=dword:0000000a

"GKAnticipationCoef"=dword:00000005

"GKBraveryCoef"=dword:00000014

"GKComposureCoef"=dword:00000014

"GKConcentrationCoef"=dword:0000000a

"GKConsistencyCoef"=dword:0000000a

"GKCreativityCoef"=dword:00000000

"GKDecisionsCoef"=dword:00000014

"GKDeterminationCoef"=dword:0000000a

"GKDirtinessCoef"=dword:fffffffb

"GKFlairCoef"=dword:00000000

"GKImportantMatchesCoef"=dword:0000000a

"GKInfluenceCoef"=dword:0000000a

"GKOffTheBallCoef"=dword:00000000

"GKPositioningCoef"=dword:00000050

"GKTeamworkCoef"=dword:00000005

"GKWorkRateCoef"=dword:00000000

"GKAccelerationCoef"=dword:00000005

"GKAgilityCoef"=dword:0000000a

"GKBalanceCoef"=dword:0000000a

"GKInjuryPronenessCoef"=dword:fffffffb

"GKJumpingCoef"=dword:00000050

"GKNaturalFitnessCoef"=dword:00000005

"GKPaceCoef"=dword:00000000

"GKStaminaCoef"=dword:00000000

"GKStrengthCoef"=dword:0000000a

"GKVersatilityCoef"=dword:00000000

"GKAerialAbilityCoef"=dword:00000032

"GKCommandOfAreaCoef"=dword:00000014

"GKCommunicationCoef"=dword:00000032

"GKEccentricityCoef"=dword:ffffffec

"GKHandlingCoef"=dword:00000064

"GKKickingCoef"=dword:0000000a

"GKOneOnOnesCoef"=dword:00000032

"GKReflexesCoef"=dword:00000064

"GKRushingOutCoef"=dword:00000014

"GKTendencyToPunchCoef"=dword:fffffff6

"GKThrowingCoef"=dword:0000000a

"GKAdaptabilityCoef"=dword:00000005

"GKAmbitionCoef"=dword:0000000a

"GKControversyCoef"=dword:fffffffb

"GKLoyalityCoef"=dword:00000005

"GKPressureCoef"=dword:00000005

"GKProfessionalismCoef"=dword:00000005

"GKSportsmanshipCoef"=dword:00000005

"GKTemperamentCoef"=dword:00000005

"SWWeightCoef"=dword:00000066

"SWCurrentAbilityCoef"=dword:00000000

"SWCornersCoef"=dword:00000000

"SWCrossingCoef"=dword:00000000

"SWDribblingCoef"=dword:00000000

"SWFinishingCoef"=dword:00000000

"SWFirstTouchCoef"=dword:00000014

"SWFreeKicksCoef"=dword:0000000a

"SWHeadingCoef"=dword:00000064

"SWLongShotsCoef"=dword:0000000a

"SWLongThrowsCoef"=dword:00000000

"SWMarkingCoef"=dword:00000064

"SWPassingCoef"=dword:0000000a

"SWPenaltiesCoef"=dword:00000005

"SWTacklingCoef"=dword:00000064

"SWTechniqueCoef"=dword:0000000a

"SWLeftFootCoef"=dword:00000005

"SWRightFootCoef"=dword:00000005

"SWAggressionCoef"=dword:00000014

"SWAnticipationCoef"=dword:00000014

"SWBraveryCoef"=dword:00000028

"SWComposureCoef"=dword:00000028

"SWConcentrationCoef"=dword:0000003c

"SWConsistencyCoef"=dword:0000000a

"SWCreativityCoef"=dword:0000000a

"SWDecisionsCoef"=dword:00000014

"SWDeterminationCoef"=dword:0000000a

"SWDirtinessCoef"=dword:ffffffe7

"SWFlairCoef"=dword:00000000

"SWImportantMatchesCoef"=dword:0000000a

"SWInfluenceCoef"=dword:0000000a

"SWOffTheBallCoef"=dword:0000000a

"SWPositioningCoef"=dword:00000064

"SWTeamworkCoef"=dword:00000028

"SWWorkRateCoef"=dword:00000014

"SWAccelerationCoef"=dword:0000001e

"SWAgilityCoef"=dword:0000000a

"SWBalanceCoef"=dword:00000014

"SWInjuryPronenessCoef"=dword:fffffffb

"SWJumpingCoef"=dword:00000064

"SWNaturalFitnessCoef"=dword:00000005

"SWPaceCoef"=dword:00000014

"SWStaminaCoef"=dword:0000000a

"SWStrengthCoef"=dword:00000050

"SWVersatilityCoef"=dword:00000005

"SWAerialAbilityCoef"=dword:00000000

"SWCommandOfAreaCoef"=dword:00000000

"SWCommunicationCoef"=dword:00000000

"SWEccentricityCoef"=dword:00000000

"SWHandlingCoef"=dword:00000000

"SWKickingCoef"=dword:00000000

"SWOneOnOnesCoef"=dword:00000005

"SWReflexesCoef"=dword:00000005

"SWRushingOutCoef"=dword:00000000

"SWTendencyToPunchCoef"=dword:00000000

"SWThrowingCoef"=dword:00000000

"SWAdaptabilityCoef"=dword:00000005

"SWAmbitionCoef"=dword:0000000a

"SWControversyCoef"=dword:fffffffb

"SWLoyalityCoef"=dword:00000005

"SWPressureCoef"=dword:00000005

"SWProfessionalismCoef"=dword:00000005

"SWSportsmanshipCoef"=dword:00000005

"SWTemperamentCoef"=dword:00000005

"CBWeightCoef"=dword:00000064

"CBCurrentAbilityCoef"=dword:00000000

"CBCornersCoef"=dword:00000000

"CBCrossingCoef"=dword:00000000

"CBDribblingCoef"=dword:00000000

"CBFinishingCoef"=dword:00000000

"CBFirstTouchCoef"=dword:00000014

"CBFreeKicksCoef"=dword:0000000a

"CBHeadingCoef"=dword:00000064

"CBLongShotsCoef"=dword:0000000a

"CBLongThrowsCoef"=dword:00000000

"CBMarkingCoef"=dword:00000050

"CBPassingCoef"=dword:00000014

"CBPenaltiesCoef"=dword:00000005

"CBTacklingCoef"=dword:00000064

"CBTechniqueCoef"=dword:0000000a

"CBLeftFootCoef"=dword:00000005

"CBRightFootCoef"=dword:00000005

"CBAggressionCoef"=dword:00000014

"CBAnticipationCoef"=dword:00000014

"CBBraveryCoef"=dword:00000028

"CBComposureCoef"=dword:00000014

"CBConcentrationCoef"=dword:00000028

"CBConsistencyCoef"=dword:0000000a

"CBCreativityCoef"=dword:0000000a

"CBDecisionsCoef"=dword:00000014

"CBDeterminationCoef"=dword:0000000a

"CBDirtinessCoef"=dword:ffffffec

"CBFlairCoef"=dword:00000000

"CBImportantMatchesCoef"=dword:0000000a

"CBInfluenceCoef"=dword:0000000a

"CBOffTheBallCoef"=dword:0000000a

"CBPositioningCoef"=dword:00000050

"CBTeamworkCoef"=dword:00000028

"CBWorkRateCoef"=dword:00000014

"CBAccelerationCoef"=dword:00000028

"CBAgilityCoef"=dword:0000000a

"CBBalanceCoef"=dword:00000014

"CBInjuryPronenessCoef"=dword:fffffffb

"CBJumpingCoef"=dword:00000064

"CBNaturalFitnessCoef"=dword:00000005

"CBPaceCoef"=dword:0000001e

"CBStaminaCoef"=dword:0000000a

"CBStrengthCoef"=dword:0000003c

"CBVersatilityCoef"=dword:00000005

"CBAerialAbilityCoef"=dword:00000000

"CBCommandOfAreaCoef"=dword:00000000

"CBCommunicationCoef"=dword:00000000

"CBEccentricityCoef"=dword:00000000

"CBHandlingCoef"=dword:00000000

"CBKickingCoef"=dword:00000000

"CBOneOnOnesCoef"=dword:00000005

"CBReflexesCoef"=dword:00000005

"CBRushingOutCoef"=dword:00000000

"CBTendencyToPunchCoef"=dword:00000000

"CBThrowingCoef"=dword:00000000

"CBAdaptabilityCoef"=dword:00000005

"CBAmbitionCoef"=dword:0000000a

"CBControversyCoef"=dword:fffffffb

"CBLoyalityCoef"=dword:00000005

"CBPressureCoef"=dword:00000005

"CBProfessionalismCoef"=dword:00000005

"CBSportsmanshipCoef"=dword:00000005

"CBTemperamentCoef"=dword:00000005

"FBWeightCoef"=dword:00000069

"FBCurrentAbilityCoef"=dword:00000000

"FBCornersCoef"=dword:0000000a

"FBCrossingCoef"=dword:0000001e

"FBDribblingCoef"=dword:00000014

"FBFinishingCoef"=dword:00000000

"FBFirstTouchCoef"=dword:00000014

"FBFreeKicksCoef"=dword:0000000a

"FBHeadingCoef"=dword:0000003c

"FBLongShotsCoef"=dword:0000000a

"FBLongThrowsCoef"=dword:0000000a

"FBMarkingCoef"=dword:0000003c

"FBPassingCoef"=dword:0000001e

"FBPenaltiesCoef"=dword:00000005

"FBTacklingCoef"=dword:00000064

"FBTechniqueCoef"=dword:00000014

"FBLeftFootCoef"=dword:00000005

"FBRightFootCoef"=dword:00000005

"FBAggressionCoef"=dword:0000000f

"FBAnticipationCoef"=dword:00000050

"FBBraveryCoef"=dword:00000014

"FBComposureCoef"=dword:0000000a

"FBConcentrationCoef"=dword:0000001e

"FBConsistencyCoef"=dword:0000000a

"FBCreativityCoef"=dword:0000000a

"FBDecisionsCoef"=dword:00000014

"FBDeterminationCoef"=dword:0000000a

"FBDirtinessCoef"=dword:fffffff6

"FBFlairCoef"=dword:00000005

"FBImportantMatchesCoef"=dword:0000000a

"FBInfluenceCoef"=dword:0000000a

"FBOffTheBallCoef"=dword:00000014

"FBPositioningCoef"=dword:00000064

"FBTeamworkCoef"=dword:00000014

"FBWorkRateCoef"=dword:00000014

"FBAccelerationCoef"=dword:0000003c

"FBAgilityCoef"=dword:0000000a

"FBBalanceCoef"=dword:00000014

"FBInjuryPronenessCoef"=dword:fffffffb

"FBJumpingCoef"=dword:0000003c

"FBNaturalFitnessCoef"=dword:00000005

"FBPaceCoef"=dword:00000050

"FBStaminaCoef"=dword:0000003c

"FBStrengthCoef"=dword:00000028

"FBVersatilityCoef"=dword:00000005

"FBAerialAbilityCoef"=dword:00000000

"FBCommandOfAreaCoef"=dword:00000000

"FBCommunicationCoef"=dword:00000000

"FBEccentricityCoef"=dword:00000000

"FBHandlingCoef"=dword:00000000

"FBKickingCoef"=dword:00000000

"FBOneOnOnesCoef"=dword:00000005

"FBReflexesCoef"=dword:00000005

"FBRushingOutCoef"=dword:00000000

"FBTendencyToPunchCoef"=dword:00000000

"FBThrowingCoef"=dword:00000000

"FBAdaptabilityCoef"=dword:00000005

"FBAmbitionCoef"=dword:0000000a

"FBControversyCoef"=dword:fffffffb

"FBLoyalityCoef"=dword:00000005

"FBPressureCoef"=dword:00000005

"FBProfessionalismCoef"=dword:00000005

"FBSportsmanshipCoef"=dword:00000005

"FBTemperamentCoef"=dword:00000005

"WBWeightCoef"=dword:0000006c

"WBCurrentAbilityCoef"=dword:00000000

"WBCornersCoef"=dword:0000000a

"WBCrossingCoef"=dword:0000003c

"WBDribblingCoef"=dword:00000028

"WBFinishingCoef"=dword:0000000a

"WBFirstTouchCoef"=dword:00000014

"WBFreeKicksCoef"=dword:0000000a

"WBHeadingCoef"=dword:00000028

"WBLongShotsCoef"=dword:00000014

"WBLongThrowsCoef"=dword:0000000a

"WBMarkingCoef"=dword:0000003c

"WBPassingCoef"=dword:00000028

"WBPenaltiesCoef"=dword:00000005

"WBTacklingCoef"=dword:00000064

"WBTechniqueCoef"=dword:00000028

"WBLeftFootCoef"=dword:00000005

"WBRightFootCoef"=dword:00000005

"WBAggressionCoef"=dword:0000000a

"WBAnticipationCoef"=dword:00000050

"WBBraveryCoef"=dword:0000000a

"WBComposureCoef"=dword:0000000a

"WBConcentrationCoef"=dword:00000014

"WBConsistencyCoef"=dword:0000000a

"WBCreativityCoef"=dword:00000014

"WBDecisionsCoef"=dword:00000014

"WBDeterminationCoef"=dword:0000000a

"WBDirtinessCoef"=dword:fffffff6

"WBFlairCoef"=dword:0000000a

"WBImportantMatchesCoef"=dword:0000000a

"WBInfluenceCoef"=dword:0000000a

"WBOffTheBallCoef"=dword:00000014

"WBPositioningCoef"=dword:00000064

"WBTeamworkCoef"=dword:00000014

"WBWorkRateCoef"=dword:00000028

"WBAccelerationCoef"=dword:00000050

"WBAgilityCoef"=dword:0000000a

"WBBalanceCoef"=dword:00000014

"WBInjuryPronenessCoef"=dword:fffffffb

"WBJumpingCoef"=dword:00000014

"WBNaturalFitnessCoef"=dword:00000005

"WBPaceCoef"=dword:00000064

"WBStaminaCoef"=dword:00000050

"WBStrengthCoef"=dword:00000028

"WBVersatilityCoef"=dword:00000005

"WBAerialAbilityCoef"=dword:00000000

"WBCommandOfAreaCoef"=dword:00000000

"WBCommunicationCoef"=dword:00000000

"WBEccentricityCoef"=dword:00000000

"WBHandlingCoef"=dword:00000000

"WBKickingCoef"=dword:00000000

"WBOneOnOnesCoef"=dword:00000005

"WBReflexesCoef"=dword:00000005

"WBRushingOutCoef"=dword:00000000

"WBTendencyToPunchCoef"=dword:00000000

"WBThrowingCoef"=dword:00000000

"WBAdaptabilityCoef"=dword:00000005

"WBAmbitionCoef"=dword:0000000a

"WBControversyCoef"=dword:fffffffb

"WBLoyalityCoef"=dword:00000005

"WBPressureCoef"=dword:00000005

"WBProfessionalismCoef"=dword:00000005

"WBSportsmanshipCoef"=dword:00000005

"WBTemperamentCoef"=dword:00000005

"DMWeightCoef"=dword:00000067

"DMCurrentAbilityCoef"=dword:00000000

"DMCornersCoef"=dword:0000000a

"DMCrossingCoef"=dword:0000001e

"DMDribblingCoef"=dword:00000014

"DMFinishingCoef"=dword:0000000a

"DMFirstTouchCoef"=dword:0000001e

"DMFreeKicksCoef"=dword:0000000a

"DMHeadingCoef"=dword:00000028

"DMLongShotsCoef"=dword:00000014

"DMLongThrowsCoef"=dword:00000005

"DMMarkingCoef"=dword:0000003c

"DMPassingCoef"=dword:00000028

"DMPenaltiesCoef"=dword:00000005

"DMTacklingCoef"=dword:00000064

"DMTechniqueCoef"=dword:0000001e

"DMLeftFootCoef"=dword:00000005

"DMRightFootCoef"=dword:00000005

"DMAggressionCoef"=dword:00000028

"DMAnticipationCoef"=dword:00000028

"DMBraveryCoef"=dword:00000014

"DMComposureCoef"=dword:0000000a

"DMConcentrationCoef"=dword:00000014

"DMConsistencyCoef"=dword:0000000a

"DMCreativityCoef"=dword:00000014

"DMDecisionsCoef"=dword:00000014

"DMDeterminationCoef"=dword:0000000a

"DMDirtinessCoef"=dword:fffffff6

"DMFlairCoef"=dword:0000000a

"DMImportantMatchesCoef"=dword:0000000a

"DMInfluenceCoef"=dword:0000000a

"DMOffTheBallCoef"=dword:0000001e

"DMPositioningCoef"=dword:00000050

"DMTeamworkCoef"=dword:00000028

"DMWorkRateCoef"=dword:00000050

"DMAccelerationCoef"=dword:00000028

"DMAgilityCoef"=dword:0000000a

"DMBalanceCoef"=dword:0000000a

"DMInjuryPronenessCoef"=dword:fffffffb

"DMJumpingCoef"=dword:00000028

"DMNaturalFitnessCoef"=dword:00000005

"DMPaceCoef"=dword:00000028

"DMStaminaCoef"=dword:0000003c

"DMStrengthCoef"=dword:00000028

"DMVersatilityCoef"=dword:00000005

"DMAerialAbilityCoef"=dword:00000000

"DMCommandOfAreaCoef"=dword:00000000

"DMCommunicationCoef"=dword:00000000

"DMEccentricityCoef"=dword:00000000

"DMHandlingCoef"=dword:00000000

"DMKickingCoef"=dword:00000000

"DMOneOnOnesCoef"=dword:00000005

"DMReflexesCoef"=dword:00000005

"DMRushingOutCoef"=dword:00000000

"DMTendencyToPunchCoef"=dword:00000000

"DMThrowingCoef"=dword:00000000

"DMAdaptabilityCoef"=dword:00000005

"DMAmbitionCoef"=dword:0000000a

"DMControversyCoef"=dword:fffffffb

"DMLoyalityCoef"=dword:00000005

"DMPressureCoef"=dword:00000005

"DMProfessionalismCoef"=dword:00000005

"DMSportsmanshipCoef"=dword:00000005

"DMTemperamentCoef"=dword:00000005

"MWeightCoef"=dword:00000068

"MCurrentAbilityCoef"=dword:00000000

"MCornersCoef"=dword:0000000a

"MCrossingCoef"=dword:00000028

"MDribblingCoef"=dword:00000032

"MFinishingCoef"=dword:00000014

"MFirstTouchCoef"=dword:0000001e

"MFreeKicksCoef"=dword:0000000a

"MHeadingCoef"=dword:0000001e

"MLongShotsCoef"=dword:00000014

"MLongThrowsCoef"=dword:00000005

"MMarkingCoef"=dword:00000028

"MPassingCoef"=dword:00000046

"MPenaltiesCoef"=dword:00000005

"MTacklingCoef"=dword:0000003c

"MTechniqueCoef"=dword:00000032

"MLeftFootCoef"=dword:00000005

"MRightFootCoef"=dword:00000005

"MAggressionCoef"=dword:0000001e

"MAnticipationCoef"=dword:00000028

"MBraveryCoef"=dword:0000000a

"MComposureCoef"=dword:0000000a

"MConcentrationCoef"=dword:0000000a

"MConsistencyCoef"=dword:0000000a

"MCreativityCoef"=dword:0000003c

"MDecisionsCoef"=dword:0000001e

"MDeterminationCoef"=dword:0000000a

"MDirtinessCoef"=dword:fffffffb

"MFlairCoef"=dword:0000000a

"MImportantMatchesCoef"=dword:0000000a

"MInfluenceCoef"=dword:0000000a

"MOffTheBallCoef"=dword:00000028

"MPositioningCoef"=dword:00000028

"MTeamworkCoef"=dword:00000032

"MWorkRateCoef"=dword:00000032

"MAccelerationCoef"=dword:00000032

"MAgilityCoef"=dword:0000000a

"MBalanceCoef"=dword:0000000a

"MInjuryPronenessCoef"=dword:fffffffb

"MJumpingCoef"=dword:00000028

"MNaturalFitnessCoef"=dword:00000005

"MPaceCoef"=dword:00000028

"MStaminaCoef"=dword:0000003c

"MStrengthCoef"=dword:0000001e

"MVersatilityCoef"=dword:00000005

"MAerialAbilityCoef"=dword:00000000

"MCommandOfAreaCoef"=dword:00000000

"MCommunicationCoef"=dword:00000000

"MEccentricityCoef"=dword:00000000

"MHandlingCoef"=dword:00000000

"MKickingCoef"=dword:00000000

"MOneOnOnesCoef"=dword:00000005

"MReflexesCoef"=dword:00000005

"MRushingOutCoef"=dword:00000000

"MTendencyToPunchCoef"=dword:00000000

"MThrowingCoef"=dword:00000000

"MAdaptabilityCoef"=dword:00000005

"MAmbitionCoef"=dword:0000000a

"MControversyCoef"=dword:fffffffb

"MLoyalityCoef"=dword:00000005

"MPressureCoef"=dword:00000005

"MProfessionalismCoef"=dword:00000005

"MSportsmanshipCoef"=dword:00000005

"MTemperamentCoef"=dword:00000005

"AMWeightCoef"=dword:00000068

"AMCurrentAbilityCoef"=dword:00000000

"AMCornersCoef"=dword:0000000a

"AMCrossingCoef"=dword:0000003c

"AMDribblingCoef"=dword:00000050

"AMFinishingCoef"=dword:00000028

"AMFirstTouchCoef"=dword:0000001e

"AMFreeKicksCoef"=dword:0000000a

"AMHeadingCoef"=dword:00000014

"AMLongShotsCoef"=dword:00000014

"AMLongThrowsCoef"=dword:00000005

"AMMarkingCoef"=dword:0000000a

"AMPassingCoef"=dword:00000064

"AMPenaltiesCoef"=dword:00000005

"AMTacklingCoef"=dword:0000000a

"AMTechniqueCoef"=dword:00000050

"AMLeftFootCoef"=dword:00000005

"AMRightFootCoef"=dword:00000005

"AMAggressionCoef"=dword:0000000a

"AMAnticipationCoef"=dword:0000001e

"AMBraveryCoef"=dword:0000000a

"AMComposureCoef"=dword:0000000a

"AMConcentrationCoef"=dword:0000000a

"AMConsistencyCoef"=dword:0000000a

"AMCreativityCoef"=dword:00000064

"AMDecisionsCoef"=dword:00000028

"AMDeterminationCoef"=dword:0000000a

"AMDirtinessCoef"=dword:fffffffb

"AMFlairCoef"=dword:00000014

"AMImportantMatchesCoef"=dword:0000000a

"AMInfluenceCoef"=dword:0000000a

"AMOffTheBallCoef"=dword:0000003c

"AMPositioningCoef"=dword:00000014

"AMTeamworkCoef"=dword:0000003c

"AMWorkRateCoef"=dword:00000014

"AMAccelerationCoef"=dword:0000003c

"AMAgilityCoef"=dword:0000000a

"AMBalanceCoef"=dword:0000000a

"AMInjuryPronenessCoef"=dword:fffffffb

"AMJumpingCoef"=dword:00000014

"AMNaturalFitnessCoef"=dword:00000005

"AMPaceCoef"=dword:0000003c

"AMStaminaCoef"=dword:0000003c

"AMStrengthCoef"=dword:00000014

"AMVersatilityCoef"=dword:00000005

"AMAerialAbilityCoef"=dword:00000000

"AMCommandOfAreaCoef"=dword:00000000

"AMCommunicationCoef"=dword:00000000

"AMEccentricityCoef"=dword:00000000

"AMHandlingCoef"=dword:00000000

"AMKickingCoef"=dword:00000000

"AMOneOnOnesCoef"=dword:00000005

"AMReflexesCoef"=dword:00000005

"AMRushingOutCoef"=dword:00000000

"AMTendencyToPunchCoef"=dword:00000000

"AMThrowingCoef"=dword:00000000

"AMAdaptabilityCoef"=dword:00000005

"AMAmbitionCoef"=dword:0000000a

"AMControversyCoef"=dword:fffffffb

"AMLoyalityCoef"=dword:00000005

"AMPressureCoef"=dword:00000005

"AMProfessionalismCoef"=dword:00000005

"AMSportsmanshipCoef"=dword:00000005

"AMTemperamentCoef"=dword:00000005

"WWeightCoef"=dword:00000069

"WCurrentAbilityCoef"=dword:00000000

"WCornersCoef"=dword:0000000a

"WCrossingCoef"=dword:00000064

"WDribblingCoef"=dword:00000064

"WFinishingCoef"=dword:0000003c

"WFirstTouchCoef"=dword:0000001e

"WFreeKicksCoef"=dword:0000000a

"WHeadingCoef"=dword:00000014

"WLongShotsCoef"=dword:00000014

"WLongThrowsCoef"=dword:00000005

"WMarkingCoef"=dword:0000000a

"WPassingCoef"=dword:0000003c

"WPenaltiesCoef"=dword:00000005

"WTacklingCoef"=dword:0000000a

"WTechniqueCoef"=dword:00000050

"WLeftFootCoef"=dword:00000005

"WRightFootCoef"=dword:00000005

"WAggressionCoef"=dword:0000000a

"WAnticipationCoef"=dword:00000014

"WBraveryCoef"=dword:0000000a

"WComposureCoef"=dword:0000000a

"WConcentrationCoef"=dword:0000000a

"WConsistencyCoef"=dword:0000000a

"WCreativityCoef"=dword:0000003c

"WDecisionsCoef"=dword:00000014

"WDeterminationCoef"=dword:0000000a

"WDirtinessCoef"=dword:fffffffb

"WFlairCoef"=dword:0000000a

"WImportantMatchesCoef"=dword:00000014

"WInfluenceCoef"=dword:0000000a

"WOffTheBallCoef"=dword:0000003c

"WPositioningCoef"=dword:00000014

"WTeamworkCoef"=dword:0000001e

"WWorkRateCoef"=dword:0000001e

"WAccelerationCoef"=dword:00000050

"WAgilityCoef"=dword:00000014

"WBalanceCoef"=dword:0000000a

"WInjuryPronenessCoef"=dword:fffffffb

"WJumpingCoef"=dword:00000014

"WNaturalFitnessCoef"=dword:00000005

"WPaceCoef"=dword:00000064

"WStaminaCoef"=dword:0000003c

"WStrengthCoef"=dword:00000014

"WVersatilityCoef"=dword:00000005

"WAerialAbilityCoef"=dword:00000000

"WCommandOfAreaCoef"=dword:00000000

"WCommunicationCoef"=dword:00000000

"WEccentricityCoef"=dword:00000000

"WHandlingCoef"=dword:00000000

"WKickingCoef"=dword:00000000

"WOneOnOnesCoef"=dword:00000005

"WReflexesCoef"=dword:00000005

"WRushingOutCoef"=dword:00000000

"WTendencyToPunchCoef"=dword:00000000

"WThrowingCoef"=dword:00000000

"WAdaptabilityCoef"=dword:00000005

"WAmbitionCoef"=dword:0000000a

"WControversyCoef"=dword:fffffffb

"WLoyalityCoef"=dword:00000005

"WPressureCoef"=dword:00000005

"WProfessionalismCoef"=dword:00000005

"WSportsmanshipCoef"=dword:00000005

"WTemperamentCoef"=dword:00000005

"FSTWeightCoef"=dword:00000067

"FSTCurrentAbilityCoef"=dword:00000000

"FSTCornersCoef"=dword:0000000a

"FSTCrossingCoef"=dword:0000000a

"FSTDribblingCoef"=dword:00000050

"FSTFinishingCoef"=dword:00000064

"FSTFirstTouchCoef"=dword:00000028

"FSTFreeKicksCoef"=dword:0000000a

"FSTHeadingCoef"=dword:00000028

"FSTLongShotsCoef"=dword:00000014

"FSTLongThrowsCoef"=dword:00000000

"FSTMarkingCoef"=dword:00000000

"FSTPassingCoef"=dword:00000028

"FSTPenaltiesCoef"=dword:00000005

"FSTTacklingCoef"=dword:00000000

"FSTTechniqueCoef"=dword:00000050

"FSTLeftFootCoef"=dword:00000005

"FSTRightFootCoef"=dword:00000005

"FSTAggressionCoef"=dword:0000000a

"FSTAnticipationCoef"=dword:0000000a

"FSTBraveryCoef"=dword:0000000a

"FSTComposureCoef"=dword:0000000a

"FSTConcentrationCoef"=dword:0000000a

"FSTConsistencyCoef"=dword:0000000a

"FSTCreativityCoef"=dword:00000028

"FSTDecisionsCoef"=dword:0000000a

"FSTDeterminationCoef"=dword:0000000a

"FSTDirtinessCoef"=dword:fffffffb

"FSTFlairCoef"=dword:0000000a

"FSTImportantMatchesCoef"=dword:0000000a

"FSTInfluenceCoef"=dword:0000000a

"FSTOffTheBallCoef"=dword:00000050

"FSTPositioningCoef"=dword:0000000a

"FSTTeamworkCoef"=dword:0000000a

"FSTWorkRateCoef"=dword:0000000a

"FSTAccelerationCoef"=dword:00000064

"FSTAgilityCoef"=dword:00000028

"FSTBalanceCoef"=dword:0000000a

"FSTInjuryPronenessCoef"=dword:fffffffb

"FSTJumpingCoef"=dword:00000014

"FSTNaturalFitnessCoef"=dword:00000005

"FSTPaceCoef"=dword:00000064

"FSTStaminaCoef"=dword:00000028

"FSTStrengthCoef"=dword:00000014

"FSTVersatilityCoef"=dword:00000005

"FSTAerialAbilityCoef"=dword:00000000

"FSTCommandOfAreaCoef"=dword:00000000

"FSTCommunicationCoef"=dword:00000000

"FSTEccentricityCoef"=dword:00000000

"FSTHandlingCoef"=dword:00000000

"FSTKickingCoef"=dword:00000000

"FSTOneOnOnesCoef"=dword:00000005

"FSTReflexesCoef"=dword:00000005

"FSTRushingOutCoef"=dword:00000000

"FSTTendencyToPunchCoef"=dword:00000000

"FSTThrowingCoef"=dword:00000000

"FSTAdaptabilityCoef"=dword:00000005

"FSTAmbitionCoef"=dword:0000000a

"FSTControversyCoef"=dword:fffffffb

"FSTLoyalityCoef"=dword:00000005

"FSTPressureCoef"=dword:00000005

"FSTProfessionalismCoef"=dword:00000005

"FSTSportsmanshipCoef"=dword:00000005

"FSTTemperamentCoef"=dword:00000005

"TSTWeightCoef"=dword:00000067

"TSTCurrentAbilityCoef"=dword:00000000

"TSTCornersCoef"=dword:00000000

"TSTCrossingCoef"=dword:0000000a

"TSTDribblingCoef"=dword:0000003c

"TSTFinishingCoef"=dword:00000050

"TSTFirstTouchCoef"=dword:0000001e

"TSTFreeKicksCoef"=dword:0000000a

"TSTHeadingCoef"=dword:00000064

"TSTLongShotsCoef"=dword:00000014

"TSTLongThrowsCoef"=dword:00000000

"TSTMarkingCoef"=dword:00000000

"TSTPassingCoef"=dword:00000028

"TSTPenaltiesCoef"=dword:00000005

"TSTTacklingCoef"=dword:00000000

"TSTTechniqueCoef"=dword:00000028

"TSTLeftFootCoef"=dword:00000005

"TSTRightFootCoef"=dword:00000005

"TSTAggressionCoef"=dword:00000014

"TSTAnticipationCoef"=dword:0000000a

"TSTBraveryCoef"=dword:00000014

"TSTComposureCoef"=dword:0000000a

"TSTConcentrationCoef"=dword:0000000a

"TSTConsistencyCoef"=dword:0000000a

"TSTCreativityCoef"=dword:00000014

"TSTDecisionsCoef"=dword:0000000a

"TSTDeterminationCoef"=dword:0000000a

"TSTDirtinessCoef"=dword:fffffffb

"TSTFlairCoef"=dword:0000000a

"TSTImportantMatchesCoef"=dword:0000000a

"TSTInfluenceCoef"=dword:0000000a

"TSTOffTheBallCoef"=dword:00000050

"TSTPositioningCoef"=dword:00000014

"TSTTeamworkCoef"=dword:0000000a

"TSTWorkRateCoef"=dword:0000000a

"TSTAccelerationCoef"=dword:00000028

"TSTAgilityCoef"=dword:00000014

"TSTBalanceCoef"=dword:00000014

"TSTInjuryPronenessCoef"=dword:fffffffb

"TSTJumpingCoef"=dword:00000064

"TSTNaturalFitnessCoef"=dword:00000005

"TSTPaceCoef"=dword:00000028

"TSTStaminaCoef"=dword:00000014

"TSTStrengthCoef"=dword:00000050

"TSTVersatilityCoef"=dword:00000005

"TSTAerialAbilityCoef"=dword:00000000

"TSTCommandOfAreaCoef"=dword:00000000

"TSTCommunicationCoef"=dword:00000000

"TSTEccentricityCoef"=dword:00000000

"TSTHandlingCoef"=dword:00000000

"TSTKickingCoef"=dword:00000000

"TSTOneOnOnesCoef"=dword:00000005

"TSTReflexesCoef"=dword:00000005

"TSTRushingOutCoef"=dword:00000000

"TSTTendencyToPunchCoef"=dword:00000000

"TSTThrowingCoef"=dword:00000000

"TSTAdaptabilityCoef"=dword:00000005

"TSTAmbitionCoef"=dword:0000000a

"TSTControversyCoef"=dword:fffffffb

"TSTLoyalityCoef"=dword:00000005

"TSTPressureCoef"=dword:00000005

"TSTProfessionalismCoef"=dword:00000005

"TSTSportsmanshipCoef"=dword:00000005

"TSTTemperamentCoef"=dword:00000005

[HKEY_USERS\S-1-5-21-3280335825-2189611420-1378028180-1005\Software\G*e*n*i*e*"!\FM Genie Scout 2009 XE]

"GameDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2009\\games"

"ShortlistDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2009\\shortlists"

"ScreenshotsDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2009"

"SaveDir"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2009\\"

"HistoryDir"="c:\\Documents and Settings\\Erlend T.Narum\\Desktop\\fm 2009\\FM Genie Scout 2009 XE\\History Points"

"LangDB"="c:\\Program Files\\Sports Interactive\\Football Manager 2009\\data\\updates\\update-910\\db\\910\\lang_db.dat"

"LastSaveGame"="c:\\Documents and Settings\\Erlend T.Narum\\My Documents\\Sports Interactive\\Football Manager 2009\\games\\Genoa.fm"

"Language"="English"

"LoadLangDB"=dword:00000001

"CompressHistoryPoints"=dword:00000000

"HighlightedAttributes"=dword:00000000

"MinCondition"=dword:00000050

"SkinName"="Champions League"

"LastUpdateCheck"=dword:00000000

"HighQualityGUI"=dword:00000001

"AutomaticallyUpdateCheck"=dword:00000001

"AdvancedGeneration"=dword:00000000

"TranslateStaffSkills"=dword:00000001

"TranslatePlayerSkills"=dword:00000001

"TranslatePositions"=dword:00000001

"ShowHistory"=dword:00000001

"Version"=dword:00000066

"UniqueID"="F4-92FF-C81F"

"Currency"=dword:00000056

"UseProxy"=dword:00000000

"ProxyHost"=""

"ProxyPort"=""

"UseAuthentication"=dword:00000000

"UserName"=""

"UserPassword"=""

[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&y@^t! #^$ g9^$&pgb SDB36o \EC1A69D1C0948222]

"1"=hex:b0,cd,e0,26,42,20,9e,7c,08,f1,c1,23,e7,41,66,ec,04,7d,73,7b,41,5e,94,

fd

"2"=hex:d7,7a,ea,31,a0,f7,22,dd,b6,43,6f,32,07,8b,4a,0a,e2,6f,a8,1b,53,71,0d,

78,d5,ad,68,1b,c8,4a,9b,03

"3"=hex:b0,cd,e0,26,42,20,9e,7c,08,f1,c1,23,e7,41,66,ec,aa,6b,6f,c8,5d,d1,dd,

70,c8,0c,a2,71,14,a4,b5,05,7d,2c,84,8d,ff,2b,de,6d,f8,f2,70,94,19,43,ce,bd,\

[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&y@^t! #^$ g9^$&pgb SDB36o \EC1A69D1C0948222\48236A7EED3B8895E98434D6DCE253AC]

"1"=hex:08,26,de,b9,bd,1e,cc,2a,55,96,fd,b8,7e,1b,23,82,71,bb,5a,5f,e0,12,25,

42,0c,3f,30,d4,d3,b8,cd,35,d5,a9,6f,e0,2c,05,4e,14

"2"=hex:58,92,5a,34,3f,c6,a5,c5

"3"=hex:c6,b4,e3,77,dd,70,34,0e,f7,83,7f,20,d3,56,e5,53,ae,33,0e,0d,a8,ca,dd,

97,a3,1a,a5,ea,cf,cd,65,2b,18,95,69,cc,b3,6c,4d,53,76,60,67,00,8a,45,03,67,\

"4"=hex:2f,ad,a2,e7,8a,bf,05,5e

"5"=hex:bf,e5,23,7b,b0,66,d6,fc,b8,e8,6b,a0,96,52,f7,32,80,09,8f,24,b7,b3,55,

1a,98,d1,47,16,02,43,61,1c,b9,d5,8f,2a,7b,81,b1,fb,95,22,f8,b3,2c,53,9d,ae,\

"6"=hex:bf,e5,23,7b,b0,66,d6,fc,bc,64,22,fb,7e,d3,39,3e,a3,00,33,13,c0,21,f4,

51,6c,4e,0c,96,e2,dd,ad,8a,b6,c4,05,e8,5a,bd,9a,e9,d4,1a,3d,68,9d,00,32,20

"7"=hex:08,26,de,b9,bd,1e,cc,2a,55,96,fd,b8,7e,1b,23,82,71,bb,5a,5f,e0,12,25,

42,0c,3f,30,d4,d3,b8,cd,35,61,5a,c0,6c,22,7e,83,13,6e,44,91,28,69,cc,01,dd

"8"=hex:9d,9e,b2,b9,a7,a5,f4,ae,4d,29,c2,a3,c0,78,c4,c5,73,7e,45,c6,9f,9e,10,

63,a0,2f,06,c2,a3,e9,62,70,d1,3e,e6,57,b7,98,40,c9,e4,cc,88,e6,39,d6,95,f5,\

"9"=hex:81,20,8f,ab,28,6a,52,9c

"18"=hex:70,56,26,33,e3,20,f8,ab

"10"=hex:9f,76,ea,b5,36,96,32,9b

"11"=hex:81,20,8f,ab,28,6a,52,9c

"12"=hex:81,20,8f,ab,28,6a,52,9c

"13"=hex:81,20,8f,ab,28,6a,52,9c

"14"=hex:81,20,8f,ab,28,6a,52,9c

"24"=hex:81,20,8f,ab,28,6a,52,9c

"26"=hex:81,20,8f,ab,28,6a,52,9c

"27"=hex:81,20,8f,ab,28,6a,52,9c

"19"=hex:81,20,8f,ab,28,6a,52,9c

"22"=hex:81,20,8f,ab,28,6a,52,9c

.

--------------------- DLL'er Lastet Av Kjørende Prosesser ---------------------

- - - - - - - > 'winlogon.exe'(928)

c:\windows\system32\Ati2evxx.dll

.

------------------------ Andre Kjørende Prosesser ------------------------

.

c:\windows\system32\ati2evxx.exe

c:\program files\Intel\Wireless\Bin\EvtEng.exe

c:\program files\Intel\Wireless\Bin\S24EvMon.exe

c:\program files\Intel\Wireless\Bin\WLKEEPER.exe

c:\program files\Lavasoft\Ad-Aware\aawservice.exe

c:\windows\system32\brss01a.exe

c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

c:\windows\ehome\ehrecvr.exe

c:\windows\ehome\ehSched.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\program files\Dell\QuickSet\NicConfigSvc.exe

c:\windows\system32\PnkBstrA.exe

c:\program files\Intel\Wireless\Bin\RegSrvc.exe

c:\windows\ehome\mcrdsvc.exe

c:\program files\AVG\AVG8\avgrsx.exe

c:\windows\system32\dllhost.exe

c:\windows\system32\ati2evxx.exe

c:\windows\system32\wscntfy.exe

c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe

c:\program files\iPod\bin\iPodService.exe

.

**************************************************************************

.

Tidspunkt ferdig: 2009-01-22 12:43:56 - maskinen ble startet på nytt

ComboFix-quarantined-files.txt 2009-01-22 11:43:52

Pre-Run: 1 175 347 200 bytes free

Post-Run: 3,097,214,976 byte ledig

WindowsXP-KB310994-SP2-Pro-BootDisk-NOR.exe

[boot Loader]

Timeout=2

Default=c:\$win_nt$.~bt\BOOTSECT.DAT

[Operating Systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect

c:\$win_nt$.~bt\BOOTSECT.DAT="Installere Microsoft Windows XP Professional"

Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4

1867 --- E O F --- 2009-01-15 02:03:52

>

Malware

Klikk for å se/fjerne innholdet nedenfor

<Malwarebytes' Anti-Malware 1.33

Databaseversjon: 1676

Windows 5.1.2600 Service Pack 3

22.01.2009 12:24:27

mbam-log-2009-01-22 (12-24-27).txt

Skanntype: Rask Skann

Objekter skannet: 68376

Tid tilbakelagt: 12 minute(s), 55 second(s)

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 26

Registerverdier infisert: 0

Registerfiler infisert: 0

Mapper infisert: 5

Filer infisert: 21

Minneprosesser infisert:

(Ingen mistenkelige filer funnet)

Minnemoduler infisert:

(Ingen mistenkelige filer funnet)

Registernøkler infisert:

HKEY_CLASSES_ROOT\pornpro.pornpro_bho (Adware.PlayaZ) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\pornpro.pornpro_bho.1 (Adware.PlayaZ) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{0d39a900-0f3a-4c29-a254-3e65244fdc34} (Adware.PlayaZ) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{60e2746a-9c2e-45a2-85ce-7e1a8a890961} (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0d39a900-0f3a-4c29-a254-3e65244fdc34} (Adware.PlayaZ) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0d39a900-0f3a-4c29-a254-3e65244fdc34} (Adware.PlayaZ) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\contexttool (Adware.PlayaZ) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\playmp3 (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\PlayMP3 (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fbrowsingadvisor_is1 (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Juan (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\jkwslist (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Juan (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\CAC (Malware.Trace) -> Quarantined and deleted successfully.

Registerverdier infisert:

(Ingen mistenkelige filer funnet)

Registerfiler infisert:

(Ingen mistenkelige filer funnet)

Mapper infisert:

C:\Program Files\contexttool (Adware.PlayaZ) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\FBrowserAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

C:\Documents and Settings\Erlend T.Narum\Start Menu\Programs\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

Filer infisert:

C:\WINDOWS\system32\ntmlruos.dllbox (Trojan.Vundo.H) -> Quarantined and deleted successfully.

C:\Program Files\Mozilla Firefox\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\contexttool\ContextHelper.dat (Adware.PlayaZ) -> Quarantined and deleted successfully.

C:\Program Files\contexttool\pcre3.dll (Adware.PlayaZ) -> Quarantined and deleted successfully.

C:\Program Files\contexttool\uninstall.exe (Adware.PlayaZ) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor\Logo.png (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor\main.db (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor\main.db-journal (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor\unins000.dat (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor\unins000.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

C:\Program Files\PlayMP3z\uninstall.exe (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

C:\Documents and Settings\Erlend T.Narum\Start Menu\Programs\PlayMP3z\Run PlayMP3z.lnk (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\mcrh.tmp (Malware.Trace) -> Quarantined and deleted successfully.

C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\tdssservers.dat (Trojan.Agent) -> Quarantined and deleted successfully.

C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\WINDOWS\BM073bbb22.xml (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\WINDOWS\BM073bbb22.txt (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\TDSSerrors.log (Trojan.TDSS) -> Quarantined and deleted successfully.

>

Endret 22. januar 2009 av big_dunc

snippsat · 22. januar 2009

Scann denne filen her virustotal

c:\windows\system32\5A1B3C113A.sys

Kopiere fet tekst under bildet->åpne notisblokk og lim inn.

Lagre på skrivebordet som CFScript.txt

Gjør som på bildet combofix vil starte,Post logg c:\combofix.txt

DirLook::

C:\425411f09c3be89843eae5

c:\windows\SxsCaPendDel

Endret 22. januar 2009 av SNIPPSAT

big_dunc · 22. januar 2009

Scann denne filen her virustotal
c:\windows\system32\5A1B3C113A.sys

Kopiere fet tekst under bildet->åpne notisblokk og lim inn.

Lagre på skrivebordet som CFScript.txt

Gjør som på bildet combofix vil starte,Post logg c:\combofix.txt

DirLook::

C:\425411f09c3be89843eae5

c:\windows\SxsCaPendDel

Har kjørt combifix som du sa men fikk ikke brukt virustotal da jeg ikke kunne finne filen enda jeg browset system32 mappen

ny logg

Klikk for å se/fjerne innholdet nedenfor

<ComboFix 09-01-21.02 - Erlend T.Narum 2009-01-22 15:46:53.2 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1336 [GMT 1:00]

Kjører fra: c:\documents and settings\Erlend T.Narum\Desktop\ComboFix.exe

Command switches brukt :: c:\documents and settings\Erlend T.Narum\Desktop\CFScript.txt

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

FW: COMODO Firewall *enabled*

* Opprettet nytt gjenopprettingspunkt

ADVARSEL -DENNE MASKINEN HAR IKKE GJENOPPRETTINGSKONSOLLEN INSTALLERT !!

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2008-12-22 til 2009-01-22 )))))))))))))))))))))))))))))))))

.

2009-01-22 13:41 . 2009-01-22 13:41 <DIR> d-------- c:\program files\COMODO

2009-01-22 13:41 . 2009-01-22 13:52 <DIR> d-------- c:\documents and settings\All Users\Application Data\comodo

2009-01-22 13:41 . 2009-01-22 13:41 147,192 --a------ c:\windows\system32\guard32.dll

2009-01-22 13:41 . 2009-01-22 13:41 101,776 --a------ c:\windows\system32\drivers\cmdguard.sys

2009-01-22 13:41 . 2009-01-22 13:41 31,504 --a------ c:\windows\system32\drivers\cmdhlp.sys

2009-01-22 13:32 . 2009-01-22 13:32 <DIR> d-------- c:\program files\SUPERAntiSpyware

2009-01-22 13:32 . 2009-01-22 13:32 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard

2009-01-22 13:32 . 2009-01-22 13:32 <DIR> d-------- c:\documents and settings\Erlend T.Narum\Application Data\SUPERAntiSpyware.com

2009-01-22 13:32 . 2009-01-22 13:32 <DIR> d-------- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com