[Resolved] gomyhit.com

suddenly, when i was in the net, mozilla firefox folder(from prog files) opens and a link starts(the link was http://gomyhit.com/MTk2MjQ=/2/288//).From then, i'm getting attacked with ads. i made a full scan with my anti-virus and it found a file (ufohanoh.tmp - honahofu.dll or something).the anti-virus fixed the problems, but in 3-4 minutes later(and every 3minutes) the anti-virus finds a adware virtumode NEO application(the ufohanoh.tmp one)

Here is the log from HijackThis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:42:45 μμ, on 2/5/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Πλαίσιο Computers
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Συνδέσεις
O1 - Hosts: 82.98.231.89 url.adtrgt.com
O1 - Hosts: 82.98.231.89 googleads2.gdoubleclick.net
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RegDoctor] C:\Program Files\RegDoctor\RegDoctor.exe -Quick
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [XarkaToday] C:\Program Files\Today Application\Today.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Απόσπασμα οθόνης και Εκκίνηση για το OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: E&ξαγωγή στο Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Αποστολή στο OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Α&ποστολή στο OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\yasisika.dll c:\windows\system32\rilalelu.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

–
End of file - 6117 bytes

thank you Essexboy for your reply! Here is the content of each text

GooredLog.txt:

GooredFix v1.92 by jpshortstuff
Log created at 17:10 on 02/05/2009 running Option #2 (User)
Firefox version 3.0.10 (el)

=====Goored Deletions=====

=====Dumping Registry Values=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.10\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.10\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\"

OTListIt.txt:

OTListIt logfile created on: 2/5/2009 5:15:09 μμ - Run 1
OTListIt2 by OldTimer - Version 2.0.15.2 Folder = C:\Documents and Settings\User\Επιφάνεια εργασίας
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000408 | Country: Ελλάδα | Language: ELL | Date Format: d/M/yyyy

2,00 Gb Total Physical Memory | 1,58 Gb Available Physical Memory | 78,94% Memory free
3,84 Gb Paging File | 3,60 Gb Available in Paging File | 93,62% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 88,62 Gb Free Space | 59,46% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 465,65 Gb Total Space | 186,61 Gb Free Space | 40,08% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ALEX91
Current User Name: User
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Computer, Inc.)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
PRC - C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
PRC - C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)
PRC - C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe (Microsoft Corporation)
PRC - C:\Program Files\DAEMON Tools\daemon.exe (DT Soft Ltd.)
PRC - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
PRC - C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe ()
PRC - C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe ()
PRC - C:\Documents and Settings\User\Επιφάνεια εργασίας\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (AVP [Auto | Stopped]) – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe (Kaspersky Lab)
SRV - (Bonjour Service [Auto | Running]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Computer, Inc.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (EhttpSrv [On_Demand | Stopped]) – C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn [Auto | Running]) – C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (FLEXnet Licensing Service [On_Demand | Stopped]) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (idsvc [Unknown | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (NVSvc [Auto | Running]) – C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
SRV - (odserv [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (usnjsvc [On_Demand | Stopped]) – C:\Program Files\Windows Live\Messenger\usnsvc.exe (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (ADIHdAudAddService [On_Demand | Running]) – C:\WINDOWS\system32\drivers\ADIHdAud.sys (Analog Devices, Inc.)
DRV - (AEAudio [On_Demand | Running]) – C:\WINDOWS\system32\drivers\AEAudio.sys (Andrea Electronics Corporation)
DRV - (AegisP [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\AegisP.sys (Meetinghouse Data Communications)
DRV - (alcan5ln [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\alcan5ln.sys (THOMSON)
DRV - (alcaudsl [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\alcaudsl.sys (THOMSON)
DRV - (eamon [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\eamon.sys (ESET)
DRV - (EAPPkt [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\EAPPkt.sys (Windows ® 2000 DDK provider)
DRV - (easdrv [System | Running]) – C:\WINDOWS\system32\DRIVERS\easdrv.sys (ESET)
DRV - (epfwtdir [System | Running]) – C:\WINDOWS\system32\DRIVERS\epfwtdir.sys ()
DRV - (HDAudBus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (Windows ® Server 2003 DDK provider)
DRV - (kl1 [Boot | Running]) – C:\WINDOWS\system32\drivers\kl1.sys (Kaspersky Lab)
DRV - (klbg [Boot | Running]) – C:\WINDOWS\system32\drivers\klbg.sys (Kaspersky Lab)
DRV - (KLFLTDEV [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\klfltdev.sys (Kaspersky Lab)
DRV - (KLIF [System | Running]) – C:\WINDOWS\system32\DRIVERS\klif.sys (Kaspersky Lab)
DRV - (klim5 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\klim5.sys (Kaspersky Lab)
DRV - (MTsensor [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ASACPI.sys ()
DRV - (nv [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\nv4_mini.sys (NVIDIA Corporation)
DRV - (NVENETFD [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\NVENETFD.sys (NVIDIA Corporation)
DRV - (nvnetbus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\nvnetbus.sys (NVIDIA Corporation)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (RTLWUSB [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\wg111v2.sys (NETGEAR Inc.)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (SenFiltService [On_Demand | Running]) – C:\WINDOWS\system32\drivers\Senfilt.sys (Sensaura)
DRV - (sfdrv01 [Boot | Running]) – C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology)
DRV - (sfhlp02 [Boot | Running]) – C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology)
DRV - (sfsync02 [Boot | Running]) – C:\WINDOWS\System32\drivers\sfsync02.sys (Protection Technology)
DRV - (sptd [Boot | Running]) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (Start1Driver [System | Running]) – C:\WINDOWS\System32\drivers\Start1Driver.SYS (F.Y.N. Technology Inc.)
DRV - (WmBEnum [On_Demand | Running]) – C:\WINDOWS\system32\drivers\WmBEnum.sys (Logitech Inc.)
DRV - (WmFilter [On_Demand | Running]) – C:\WINDOWS\system32\drivers\WmFilter.sys (Logitech Inc.)
DRV - (WmVirHid [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\WmVirHid.sys (Logitech Inc.)
DRV - (WmXlCore [On_Demand | Running]) – C:\WINDOWS\system32\drivers\WmXlCore.sys (Logitech Inc.)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?p…&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p…ER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.gr/firefox?client=firefox-a&rls=org.mozilla:el:official"
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.3
FF - prefs.js..extensions.enabledItems: {8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}:0.14
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\ [2008/11/16 16:26:20 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/04/30 11:58:31 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/04/28 14:02:52 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 2009\THBEXT [2009/04/30 10:34:58 | 00,000,000 | —D | M]

[2008/08/19 14:45:06 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\mozilla\Extensions
[2008/08/19 14:45:06 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/05/02 15:57:56 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\mozilla\Firefox\Profiles\gsuscw3j.default\extensions
[2009/04/29 15:21:02 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\mozilla\Firefox\Profiles\gsuscw3j.default\extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
[2009/04/10 19:36:58 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\mozilla\Firefox\Profiles\gsuscw3j.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2008/08/19 14:45:00 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/04/28 14:02:44 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/04/28 14:02:43 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/04/28 14:02:43 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2008/04/10 09:41:56 | 00,001,525 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2006/07/05 21:47:38 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2008/03/08 12:35:22 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2008/12/17 16:29:56 | 00,000,760 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2008/04/16 07:08:20 | 00,001,706 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2008/04/09 20:31:40 | 00,001,219 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia-el.xml
[2006/09/11 17:15:26 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: (698 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll (Kaspersky Lab)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" (Kaspersky Lab)
O4 - HKLM..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice (ESET)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install ()
O4 - HKLM..\Run: [RegDoctor] C:\Program Files\RegDoctor\RegDoctor.exe -Quick (RegDoctor)
O4 - HKLM..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray (Analog Devices, Inc.)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon (THOMSON Telecom Belgium)
O4 - HKCU..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 (DT Soft Ltd.)
O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation)
O4 - HKCU..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background (Microsoft Corporation)
O4 - HKCU..\Run: [XarkaToday] C:\Program Files\Today Application\Today.exe (Xarka Software)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Προγράμματα\Εκκίνηση\WG111v2 Smart Wizard Wireless Setting.lnk = C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe ()
O4 - Startup: C:\Documents and Settings\User\Start Menu\Προγράμματα\Εκκίνηση\Απόσπασμα οθόνης και Εκκίνηση για το OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O8 - Extra context menu item: E&ξαγωγή στο Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 (Microsoft Corporation)
O9 - Extra Button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll (Kaspersky Lab)
O9 - Extra Button: Αποστολή στο OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Α&ποστολή στο OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\yasisika.dll) - C:\WINDOWS\system32\yasisika.dll File not found
O20 - AppInit_DLLs: (c:\windows\system32\rilalelu.dll) - c:\windows\system32\rilalelu.dll File not found
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\adialhk.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 (Τρέχουσα αρχική σελίδα) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/05/21 00:35:03 | 00,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2007/08/21 22:18:24 | 00,000,000 | —D | M] - F:\autorun – [ FAT32 ]
O32 - AutoRun File - [2005/11/17 18:15:24 | 00,000,069 | -H– | M] () - F:\autorun.inf – [ FAT32 ]
O33 - MountPoints2\{1b0c7242-26cb-11dd-9de8-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{1b0c7242-26cb-11dd-9de8-806d6172696f}\Shell\AutoRun\command - "" = D:\setup.exe – File not found
O33 - MountPoints2\{78f86261-6f50-11dd-ac70-000e5064df41}\Shell\AutoRun\command - "" = H:\setupSNK.exe – File not found
O33 - MountPoints2\{f30a5918-6de1-11dd-ac67-001fc67dff27}\Shell\AutoRun\command - "" = F:\wd_windows_tools\setup.exe – [2006/03/01 13:00:32 | 00,786,432 | —- | M] (Western Digital Technologies)
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[3 C:\WINDOWS\*.tmp files]
[2009/05/02 17:11:48 | 00,501,248 | —- | C] (OldTimer Tools) – C:\Documents and Settings\User\Επιφάνεια εργασίας\OTListIt2.exe
[2009/05/02 17:10:39 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Επιφάνεια εργασίας\GooredFixBackups
[2009/05/02 17:08:51 | 00,094,208 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\GooredFix.exe
[2009/05/02 17:06:55 | 00,000,000 | —D | C] – C:\HostsXpert 4.2 - Hosts File Manager
[2009/05/02 17:06:11 | 00,353,485 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\HostsXpert.zip
[2009/05/02 16:36:06 | 19,187,191 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\global.iff
[2009/05/02 16:36:06 | 07,013,178 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\gamedata.iff
[2009/05/02 16:25:59 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Επιφάνεια εργασίας\IFF_Tool
[2009/05/02 16:25:23 | 04,411,481 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\IFF_Tool.rar
[2009/05/02 15:51:36 | 00,000,215 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\NBA2K9Options.cfg
[2009/05/02 15:51:25 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Επιφάνεια εργασίας\NBA2K9Editor
[2009/05/02 15:18:33 | 01,958,755 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\Rocket225 air Jordan.rar
[2009/05/02 15:17:10 | 14,758,820 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\IFF Editor.wmv
[2009/05/02 15:00:05 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Επιφάνεια εργασίας\NBA_2K9_IFF_Editor_Beta9
[2009/05/02 14:21:56 | 01,290,347 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\n-2m.jpg
[2009/05/02 14:19:04 | 02,752,439 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\poreia1.jpg
[2009/05/02 13:41:47 | 00,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2009/05/02 13:40:47 | 00,000,000 | —D | C] – C:\Program Files\ERUNT
[2009/05/02 13:39:36 | 00,001,734 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\HijackThis.lnk
[2009/05/02 13:39:00 | 00,791,393 | —- | C] (Lars Hederer ) – C:\Documents and Settings\User\Επιφάνεια εργασίας\erunt_setup.exe
[2009/05/02 13:34:51 | 00,812,344 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\User\Επιφάνεια εργασίας\HJTInstall.exe
[2009/05/01 19:55:48 | 00,872,328 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\kato.jpg
[2009/05/01 19:54:35 | 00,150,415 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\flyers1.jpg
[2009/05/01 19:54:05 | 00,111,860 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\team1.jpg
[2009/05/01 08:52:39 | 84,131,999 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\neoifakeloiAthema270409b.flv
[2009/04/30 22:24:03 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\Σημειωματάρια OneNote
[2009/04/30 22:24:01 | 00,000,957 | —- | C] () – C:\Documents and Settings\User\Start Menu\Προγράμματα\Εκκίνηση\Απόσπασμα οθόνης και Εκκίνηση για το OneNote 2007.lnk
[2009/04/30 21:38:12 | 00,049,502 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\athan.jpg
[2009/04/30 16:43:34 | 00,159,214 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\paok_panthrakikos1_goall_03.jpg
[2009/04/30 16:42:14 | 00,014,120 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\37273_hp.jpg
[2009/04/30 16:40:30 | 00,126,652 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\newego_LARGE_t_881_2910296.JPG
[2009/04/30 10:35:52 | 00,096,559 | —- | C] () – C:\WINDOWS\System32\drivers\klin.dat
[2009/04/30 10:35:52 | 00,087,855 | —- | C] () – C:\WINDOWS\System32\drivers\klick.dat
[2009/04/30 10:34:51 | 05,562,400 | -HS- | C] () – C:\WINDOWS\System32\drivers\fidbox.dat
[2009/04/30 10:34:51 | 00,245,792 | -HS- | C] () – C:\WINDOWS\System32\drivers\fidbox2.dat
[2009/04/30 10:34:51 | 00,044,536 | -HS- | C] () – C:\WINDOWS\System32\drivers\fidbox.idx
[2009/04/30 10:34:51 | 00,001,920 | -HS- | C] () – C:\WINDOWS\System32\drivers\fidbox2.idx
[2009/04/30 10:34:33 | 00,000,000 | —D | C] – C:\Program Files\Kaspersky Lab
[2009/04/30 10:34:33 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
[2009/04/30 10:34:05 | 00,213,008 | —- | C] (Kaspersky Lab) – C:\WINDOWS\System32\drivers\klif.sys
[2009/04/30 10:31:44 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
[2009/04/30 10:31:39 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\antibiotiko by atsi
[2009/04/30 10:24:39 | 37,762,314 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\antibiotiko_by_atsi.rar
[2009/04/30 09:36:18 | 00,312,849 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\03g1u0q2.jpg
[2009/04/30 09:34:52 | 00,296,728 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\01q48j5m.jpg
[2009/04/29 22:41:42 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/04/29 22:39:27 | 14,279,014 | —- | C] () – C:\WINDOWS\System32\TQIOVSMW
[2009/04/29 22:09:06 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2009/04/29 22:08:48 | 00,000,000 | —D | C] – C:\Program Files\SUPERAntiSpyware
[2009/04/29 22:08:48 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\SUPERAntiSpyware.com
[2009/04/29 20:38:33 | 00,005,120 | —- | C] (F.Y.N. Technology Inc.) – C:\WINDOWS\System32\drivers\Start1Driver.SYS
[2009/04/29 20:38:33 | 00,000,256 | —- | C] () – C:\WINDOWS\adaway.lic
[2009/04/29 19:32:50 | 00,000,404 | —- | C] () – C:\WINDOWS\tasks\Pareto UNS.job
[2009/04/29 19:32:26 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\ParetoLogic Anti-Spyware
[2009/04/29 18:51:31 | 00,168,749 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\a02_17339397.jpg
[2009/04/29 16:34:48 | 32,988,182 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\8504.flv
[2009/04/29 16:25:50 | 00,245,760 | —- | C] (vbAccelerator) – C:\WINDOWS\System32\vbalColumnTreeView6.ocx
[2009/04/29 16:25:50 | 00,040,960 | —- | C] (vbAccelerator) – C:\WINDOWS\System32\SSubTmr6.dll
[2009/04/29 16:25:50 | 00,008,096 | —- | C] () – C:\WINDOWS\System32\OLEGUIDS.TLB
[2009/04/29 16:25:49 | 00,152,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\Comdlg32.ocx
[2009/04/29 16:25:49 | 00,057,344 | —- | C] (CodeGuru) – C:\WINDOWS\System32\CGZipLibrary.DLL
[2009/04/29 16:25:49 | 00,018,728 | —- | C] () – C:\WINDOWS\System32\ISHF_Ex.tlb
[2009/04/29 16:25:49 | 00,000,000 | —D | C] – C:\Program Files\RegDoctor
[2009/04/29 16:15:49 | 00,000,000 | —D | C] – C:\Downloads
[2009/04/28 08:03:09 | 00,000,230 | —- | C] () – C:\WINDOWS\System32\spupdsvc.inf
[2009/04/27 22:27:27 | 00,653,145 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\poster_open_f.jpg
[2009/04/27 20:19:22 | 26,048,887 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\imagine katalipsi.MP3
[2009/04/27 19:14:08 | 00,000,471 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\NBA 2K9 (2).lnk
[2009/04/26 15:31:13 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Επιφάνεια εργασίας\Radar-Polygons_fix
[2009/04/26 15:21:12 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\PES_2009_Editor_v2.6
[2009/04/26 15:13:13 | 00,000,657 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\WeHellas Final Patch 2009 [PC].lnk
[2009/04/26 15:13:13 | 00,000,554 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\WeHellas Final Patch Settings [PC].lnk
[2009/04/26 15:12:01 | 84,841,1682 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\WeHellasPatchFinal.exe
[2009/04/25 19:09:59 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Επιφάνεια εργασίας\fmrte v2.0.0305
[2009/04/25 19:05:45 | 00,000,560 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\Συντόμευση (2) για το Civ3Conquests.lnk
[2009/04/25 19:05:22 | 00,000,560 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\Συντόμευση για το Civ3Conquests.lnk
[2009/04/25 13:01:03 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\125125
[2009/04/24 15:13:37 | 06,046,128 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\meg_patr.avi
[2009/04/24 15:07:10 | 00,272,694 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\vinteo000.3gp
[2009/04/24 15:06:50 | 00,278,528 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\vinteo003.3gp
[2009/04/24 15:05:56 | 00,278,528 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\vinteo011.3gp
[2009/04/22 22:17:18 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\JAVASPA - ANALWSHMOI ANTHRWPOI
[2009/04/22 15:14:02 | 00,024,213 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\n1239621928_30401393_3003257.jpg
[2009/04/21 00:21:13 | 04,298,937 | —- | C] (© 2001-2003 Atari Inc.) – C:\Documents and Settings\User\Επιφάνεια εργασίας\Civ3Conquests.exe
[2009/04/21 00:20:47 | 00,001,795 | —- | C] () – C:\Documents and Settings\All Users\Επιφάνεια εργασίας\Conquests.lnk
[2009/04/21 00:08:49 | 00,000,000 | —D | C] – C:\Program Files\CIV3
[2009/04/20 23:52:36 | 00,233,472 | —- | C] (Immersion Corporation) – C:\WINDOWS\System\IFC23.dll
[2009/04/20 23:50:49 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\Saves[C3C]
[2009/04/20 23:46:50 | 00,286,208 | —- | C] () – C:\WINDOWS\System\binkw32.dll
[2009/04/20 23:27:11 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Επιφάνεια εργασίας\C3C
[2009/04/20 23:19:24 | 03,138,048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\Civilization3X.exe
[2009/04/20 23:18:29 | 03,395,072 | —- | C] (© 2001-2004 Atari Inc.) – C:\Documents and Settings\User\Τα έγγραφά μου\Civ3Conquests.exe
[2009/04/20 23:17:56 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\civilization3conquests-nocd-1_0-ENG
[2009/04/20 23:13:19 | 02,491,487 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\civilization3conquests-nocd-1_0-ENG.zip
[2009/04/17 00:06:57 | 63,986,873 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\Avideostream-december2008814.flv
[2009/04/16 00:37:57 | 00,058,995 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\koykoyles.jpg
[2009/04/15 14:07:35 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NexonEU
[2009/04/15 12:19:30 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\COMBAT ARMS FILES
[2009/04/15 12:18:53 | 00,421,888 | —- | C] (NEXON Inc.) – C:\WINDOWS\NEXON_EU_DownloaderUpdater.exe
[2009/04/15 12:03:41 | 00,000,000 | —D | C] – C:\NGM
[2009/04/15 10:17:30 | 00,000,000 | —D | C] – C:\Nexon
[2009/04/15 10:17:29 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NexonUS
[2009/04/15 00:35:06 | 00,000,000 | —D | C] – C:\Program Files\Combat Arms
[2009/04/15 00:33:45 | 00,000,000 | —D | C] – C:\Program Files\Pando Networks
[2009/04/15 00:33:14 | 01,630,024 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\CombatArmsDownloaderV21.exe
[2009/04/14 15:23:04 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\1655
[2009/04/13 20:31:18 | 00,618,942 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\pantelehmvn.bmp
[2009/04/13 20:30:43 | 00,021,015 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\11.10.06__________3_pphncg.jpg
[2009/04/13 20:30:10 | 00,034,456 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\tsekoyratos.jpg
[2009/04/12 10:48:24 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\TORRENT FILES
[2009/04/12 10:48:08 | 00,036,898 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\[isoHunt] Call of Duty 5 World at War.torrent
[2009/04/12 10:03:27 | 00,662,602 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\draft_kat2.jpg
[2009/04/12 10:00:28 | 00,645,836 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\draft_kat1.jpg
[2009/04/11 17:45:01 | 00,473,799 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\indy_2_mikrofvnikh.jpg
[2009/04/11 17:44:32 | 00,488,649 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\indy_mikrofvnikh.jpg
[2009/04/11 12:30:26 | 00,138,935 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\delta2.jpg
[2009/04/10 16:04:20 | 00,174,340 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\ekamitesi09qhx.jpg
[2009/04/10 16:04:11 | 00,123,770 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\anapodogklomp2.jpg
[2009/04/10 16:04:05 | 00,102,567 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\anapodo_gklomp.jpg
[2009/04/10 13:46:05 | 04,692,452 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\2008__001.jpg
[2009/04/09 14:45:34 | 38,216,797 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\counterstrike_1.6.part3.rar
[2009/04/08 23:23:44 | 10,043,1872 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\counterstrike_1.6.part2.rar
[2009/04/08 22:45:31 | 10,043,1872 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\counterstrike_1.6.part1.rar
[2009/04/08 22:29:19 | 00,000,761 | —- | C] () – C:\Documents and Settings\All Users\Επιφάνεια εργασίας\Foosball Maniac.lnk
[2009/04/08 22:29:17 | 00,000,000 | —D | C] – C:\Program Files\Foosball Maniac
[2009/04/08 22:29:02 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\Foosball
[2009/04/08 22:22:27 | 08,576,966 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\Foosball.rar
[2009/04/08 18:55:21 | 10,443,1256 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\Panousis_-_live1.part2.rar
[2009/04/07 17:22:02 | 00,286,191 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\vg0408211small.jpg
[2009/04/06 15:52:33 | 96,921,976 | —- | C] (Microsoft Corporation) – C:\Documents and Settings\User\Τα έγγραφά μου\directx_mar2009_redist.exe
[2009/04/06 15:29:44 | 00,000,608 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\Call of Duty 4 - MP.lnk
[2009/04/06 15:29:43 | 00,000,608 | —- | C] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\Call of Duty 4 - Modern Warfare.lnk
[2009/04/06 13:12:36 | 00,000,000 | —D | C] – C:\Documents and Settings\User\Τα έγγραφά μου\Call of Duty 4 - Modern Warfare
[2009/04/06 13:03:35 | 26,840,22773 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\cod4.7z
[2009/04/06 12:33:13 | 19,948,2771 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part13.rar
[2009/04/06 11:51:59 | 01,077,731 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\___E_.mp4
[2009/04/06 11:49:41 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part12.rar
[2009/04/06 11:07:38 | 00,048,672 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\secic edin.jpg
[2009/04/06 11:05:01 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part11.rar
[2009/04/06 09:29:34 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part10.rar
[2009/04/05 23:29:09 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part09.rar
[2009/04/05 21:44:16 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part08.rar
[2009/04/05 20:07:17 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part07.rar
[2009/04/05 18:04:09 | 02,489,308 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\fmrte-2.0.0252.zip
[2009/04/05 17:46:17 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part06.rar
[2009/04/05 15:29:25 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part05.rar
[2009/04/05 14:15:48 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part04.rar
[2009/04/05 13:34:50 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part03.rar
[2009/04/05 13:07:13 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part02.rar
[2009/04/05 12:15:38 | 20,761,8048 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part01.rar
[2009/04/05 09:58:55 | 00,028,448 | —- | C] () – C:\Documents and Settings\User\Τα έγγραφά μου\gia_ta_gegonota_sto_20o_lykeio_thessalonikis.rtf
[2008/11/19 22:37:09 | 00,034,308 | —- | C] () – C:\WINDOWS\System32\BASSMOD.dll
[2008/10/26 10:03:18 | 00,000,194 | —- | C] () – C:\WINDOWS\XIIIHooligans.ini
[2008/10/22 22:29:57 | 00,021,840 | —- | C] () – C:\WINDOWS\System32\SIntfNT.dll
[2008/10/22 22:29:57 | 00,017,212 | —- | C] () – C:\WINDOWS\System32\SIntf32.dll
[2008/10/22 22:29:57 | 00,012,067 | —- | C] () – C:\WINDOWS\System32\SIntf16.dll
[2008/10/02 16:11:02 | 00,000,038 | —- | C] () – C:\WINDOWS\avisplitter.ini
[2008/10/02 16:10:57 | 03,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/10/02 16:10:57 | 00,755,027 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2008/10/02 16:10:57 | 00,159,839 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2008/10/02 16:10:51 | 00,007,680 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2008/10/02 16:10:51 | 00,000,547 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll.manifest
[2008/09/13 22:06:06 | 00,164,352 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2008/08/23 12:04:02 | 00,043,520 | —- | C] () – C:\WINDOWS\System32\CmdLineExt03.dll
[2008/08/20 00:24:26 | 00,682,232 | —- | C] () – C:\WINDOWS\System32\drivers\sptd.sys
[2008/08/19 17:44:33 | 00,354,816 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2008/08/19 14:27:44 | 00,005,606 | R— | C] () – C:\WINDOWS\System32\stci.dll
[2008/08/18 11:58:24 | 00,028,824 | —- | C] () – C:\WINDOWS\Ascd_tmp.ini
[2008/08/18 11:58:24 | 00,005,810 | R— | C] () – C:\WINDOWS\System32\drivers\ASACPI.sys
[2008/08/18 11:58:07 | 00,010,288 | —- | C] () – C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2008/07/01 09:04:40 | 00,034,312 | —- | C] () – C:\WINDOWS\System32\drivers\epfwtdir.sys
[2008/05/21 16:24:28 | 00,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2008/05/21 01:18:03 | 00,000,718 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2008/04/15 15:00:00 | 00,000,507 | —- | C] () – C:\WINDOWS\win.ini
[2008/04/15 15:00:00 | 00,000,231 | —- | C] () – C:\WINDOWS\system.ini
[2008/01/03 17:26:00 | 01,703,936 | —- | C] () – C:\WINDOWS\System32\nvwdmcpl.dll
[2008/01/03 17:26:00 | 01,474,560 | —- | C] () – C:\WINDOWS\System32\nview.dll
[2008/01/03 17:26:00 | 01,019,904 | —- | C] () – C:\WINDOWS\System32\nvwimg.dll
[2008/01/03 17:26:00 | 00,466,944 | —- | C] () – C:\WINDOWS\System32\nvshell.dll
[2008/01/03 17:26:00 | 00,286,720 | —- | C] () – C:\WINDOWS\System32\nvnt4cpl.dll

========== Files - Modified Within 30 Days ==========

[6 C:\WINDOWS\System32\*.tmp files]
[3 C:\WINDOWS\*.tmp files]
[2009/05/02 17:12:02 | 00,501,248 | —- | M] (OldTimer Tools) – C:\Documents and Settings\User\Επιφάνεια εργασίας\OTListIt2.exe
[2009/05/02 17:08:51 | 00,094,208 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\GooredFix.exe
[2009/05/02 17:06:14 | 00,353,485 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\HostsXpert.zip
[2009/05/02 16:25:46 | 04,411,481 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\IFF_Tool.rar
[2009/05/02 15:51:36 | 00,000,215 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\NBA2K9Options.cfg
[2009/05/02 15:20:48 | 14,758,820 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\IFF Editor.wmv
[2009/05/02 15:18:47 | 01,958,755 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\Rocket225 air Jordan.rar
[2009/05/02 14:21:56 | 01,290,347 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\n-2m.jpg
[2009/05/02 14:19:05 | 02,752,439 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\poreia1.jpg
[2009/05/02 13:39:36 | 00,001,734 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\HijackThis.lnk
[2009/05/02 13:39:19 | 00,791,393 | —- | M] (Lars Hederer ) – C:\Documents and Settings\User\Επιφάνεια εργασίας\erunt_setup.exe
[2009/05/02 13:34:55 | 00,812,344 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\User\Επιφάνεια εργασίας\HJTInstall.exe
[2009/05/02 13:02:48 | 00,160,100 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2009/05/02 13:02:45 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\User\Local Settings\desktop.ini
[2009/05/02 13:02:45 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/05/02 13:02:42 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/05/02 10:41:54 | 05,562,400 | -HS- | M] () – C:\WINDOWS\System32\drivers\fidbox.dat
[2009/05/02 10:41:54 | 00,245,792 | -HS- | M] () – C:\WINDOWS\System32\drivers\fidbox2.dat
[2009/05/02 10:41:54 | 00,044,536 | -HS- | M] () – C:\WINDOWS\System32\drivers\fidbox.idx
[2009/05/02 10:41:54 | 00,001,920 | -HS- | M] () – C:\WINDOWS\System32\drivers\fidbox2.idx
[2009/05/01 19:55:49 | 00,872,328 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\kato.jpg
[2009/05/01 19:54:36 | 00,150,415 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\flyers1.jpg
[2009/05/01 19:54:06 | 00,111,860 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\team1.jpg
[2009/05/01 09:03:50 | 84,131,999 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\neoifakeloiAthema270409b.flv
[2009/04/30 22:24:01 | 00,000,957 | —- | M] () – C:\Documents and Settings\User\Start Menu\Προγράμματα\Εκκίνηση\Απόσπασμα οθόνης και Εκκίνηση για το OneNote 2007.lnk
[2009/04/30 21:38:14 | 00,049,502 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\athan.jpg
[2009/04/30 16:43:34 | 00,159,214 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\paok_panthrakikos1_goall_03.jpg
[2009/04/30 16:42:14 | 00,014,120 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\37273_hp.jpg
[2009/04/30 16:40:31 | 00,126,652 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\newego_LARGE_t_881_2910296.JPG
[2009/04/30 10:35:52 | 00,096,559 | —- | M] () – C:\WINDOWS\System32\drivers\klin.dat
[2009/04/30 10:35:52 | 00,087,855 | —- | M] () – C:\WINDOWS\System32\drivers\klick.dat
[2009/04/30 10:34:05 | 00,213,008 | —- | M] (Kaspersky Lab) – C:\WINDOWS\System32\drivers\klif.sys
[2009/04/30 10:31:14 | 37,762,314 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\antibiotiko_by_atsi.rar
[2009/04/30 10:24:05 | 00,000,573 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\My Sharing Folders.lnk
[2009/04/30 09:51:42 | 00,000,256 | —- | M] () – C:\WINDOWS\adaway.lic
[2009/04/30 09:36:19 | 00,312,849 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\03g1u0q2.jpg
[2009/04/30 09:34:53 | 00,296,728 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\01q48j5m.jpg
[2009/04/29 22:43:24 | 14,279,014 | —- | M] () – C:\WINDOWS\System32\TQIOVSMW
[2009/04/29 22:27:17 | 00,011,168 | -H– | M] () – C:\WINDOWS\System32\lelubiti
[2009/04/29 19:32:51 | 00,000,404 | —- | M] () – C:\WINDOWS\tasks\Pareto UNS.job
[2009/04/29 18:51:35 | 00,168,749 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\a02_17339397.jpg
[2009/04/29 18:40:09 | 00,012,620 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/04/29 16:43:46 | 32,988,182 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\8504.flv
[2009/04/28 08:03:09 | 00,000,230 | —- | M] () – C:\WINDOWS\System32\spupdsvc.inf
[2009/04/27 22:27:29 | 00,653,145 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\poster_open_f.jpg
[2009/04/27 20:25:17 | 26,048,887 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\imagine katalipsi.MP3
[2009/04/27 19:14:08 | 00,000,471 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\NBA 2K9 (2).lnk
[2009/04/27 18:59:23 | 00,052,224 | -HS- | M] () – C:\WINDOWS\System32\tugokubu.exe
[2009/04/26 15:13:13 | 00,000,657 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\WeHellas Final Patch 2009 [PC].lnk
[2009/04/26 15:13:13 | 00,000,554 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\WeHellas Final Patch Settings [PC].lnk
[2009/04/25 19:05:45 | 00,000,560 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\Συντόμευση (2) για το Civ3Conquests.lnk
[2009/04/25 19:05:22 | 00,000,560 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\Συντόμευση για το Civ3Conquests.lnk
[2009/04/24 15:14:23 | 06,046,128 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\meg_patr.avi
[2009/04/24 15:07:12 | 00,272,694 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\vinteo000.3gp
[2009/04/24 15:06:50 | 00,278,528 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\vinteo003.3gp
[2009/04/24 15:05:57 | 00,278,528 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\vinteo011.3gp
[2009/04/23 13:32:46 | 00,000,720 | —- | M] () – C:\Documents and Settings\All Users\Επιφάνεια εργασίας\Notepad++.lnk
[2009/04/22 21:35:27 | 84,841,1682 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\WeHellasPatchFinal.exe
[2009/04/22 15:14:03 | 00,024,213 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\n1239621928_30401393_3003257.jpg
[2009/04/21 00:20:47 | 00,001,795 | —- | M] () – C:\Documents and Settings\All Users\Επιφάνεια εργασίας\Conquests.lnk
[2009/04/20 23:13:43 | 02,491,487 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\civilization3conquests-nocd-1_0-ENG.zip
[2009/04/17 00:15:13 | 63,986,873 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\Avideostream-december2008814.flv
[2009/04/16 12:18:29 | 01,143,070 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/04/16 12:18:29 | 00,539,818 | —- | M] () – C:\WINDOWS\System32\perfh008.dat
[2009/04/16 12:18:29 | 00,432,356 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/04/16 12:18:29 | 00,089,810 | —- | M] () – C:\WINDOWS\System32\perfc008.dat
[2009/04/16 12:18:29 | 00,067,312 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/04/16 00:59:37 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/04/16 00:37:59 | 00,058,995 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\koykoyles.jpg
[2009/04/15 12:18:53 | 00,421,888 | —- | M] (NEXON Inc.) – C:\WINDOWS\NEXON_EU_DownloaderUpdater.exe
[2009/04/15 00:33:29 | 01,630,024 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\CombatArmsDownloaderV21.exe
[2009/04/13 20:31:18 | 00,618,942 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\pantelehmvn.bmp
[2009/04/13 20:30:43 | 00,021,015 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\11.10.06__________3_pphncg.jpg
[2009/04/13 20:30:11 | 00,034,456 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\tsekoyratos.jpg
[2009/04/12 10:48:08 | 00,036,898 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\[isoHunt] Call of Duty 5 World at War.torrent
[2009/04/12 10:03:27 | 00,662,602 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\draft_kat2.jpg
[2009/04/12 10:00:30 | 00,645,836 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\draft_kat1.jpg
[2009/04/11 17:45:02 | 00,473,799 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\indy_2_mikrofvnikh.jpg
[2009/04/11 17:44:33 | 00,488,649 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\indy_mikrofvnikh.jpg
[2009/04/11 12:30:27 | 00,138,935 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\delta2.jpg
[2009/04/10 16:04:21 | 00,174,340 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\ekamitesi09qhx.jpg
[2009/04/10 16:04:12 | 00,123,770 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\anapodogklomp2.jpg
[2009/04/10 16:04:05 | 00,102,567 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\anapodo_gklomp.jpg
[2009/04/10 13:46:09 | 04,692,452 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\2008__001.jpg
[2009/04/09 14:54:51 | 38,216,797 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\counterstrike_1.6.part3.rar
[2009/04/08 23:44:21 | 10,043,1872 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\counterstrike_1.6.part2.rar
[2009/04/08 23:07:39 | 10,043,1872 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\counterstrike_1.6.part1.rar
[2009/04/08 22:29:19 | 00,000,761 | —- | M] () – C:\Documents and Settings\All Users\Επιφάνεια εργασίας\Foosball Maniac.lnk
[2009/04/08 22:28:09 | 08,576,966 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\Foosball.rar
[2009/04/08 19:10:52 | 10,443,1256 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\Panousis_-_live1.part2.rar
[2009/04/07 17:22:03 | 00,286,191 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\vg0408211small.jpg
[2009/04/06 16:18:49 | 96,921,976 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\User\Τα έγγραφά μου\directx_mar2009_redist.exe
[2009/04/06 15:29:44 | 00,000,608 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\Call of Duty 4 - MP.lnk
[2009/04/06 15:29:44 | 00,000,608 | —- | M] () – C:\Documents and Settings\User\Επιφάνεια εργασίας\Call of Duty 4 - Modern Warfare.lnk
[2009/04/06 13:02:54 | 19,948,2771 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part13.rar
[2009/04/06 12:17:05 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part12.rar
[2009/04/06 11:52:22 | 01,077,731 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\___E_.mp4
[2009/04/06 11:26:11 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part11.rar
[2009/04/06 11:07:38 | 00,048,672 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\secic edin.jpg
[2009/04/06 09:46:55 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part10.rar
[2009/04/06 00:17:19 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part09.rar
[2009/04/05 22:40:23 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part08.rar
[2009/04/05 20:50:12 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part07.rar
[2009/04/05 18:49:43 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part06.rar
[2009/04/05 18:05:25 | 02,489,308 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\fmrte-2.0.0252.zip
[2009/04/05 17:17:55 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part05.rar
[2009/04/05 14:38:48 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part04.rar
[2009/04/05 13:58:33 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part03.rar
[2009/04/05 13:26:01 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part02.rar
[2009/04/05 12:32:35 | 20,761,8048 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\doc4.part01.rar
[2009/04/05 09:58:57 | 00,028,448 | —- | M] () – C:\Documents and Settings\User\Τα έγγραφά μου\gia_ta_gegonota_sto_20o_lykeio_thessalonikis.rtf

========== LOP Check ==========

[2009/04/30 10:34:33 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data
[2008/05/21 00:57:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Adobe
[2008/08/20 11:08:43 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ESET
[2008/08/30 13:13:53 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FLEXnet
[2009/05/02 13:03:07 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
[2009/04/30 10:31:44 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
[2008/10/17 14:22:40 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\KONAMI
[2009/03/13 21:15:23 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/04/28 13:18:00 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2009/04/15 14:14:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NexonEU
[2009/04/15 10:17:29 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NexonUS
[2009/04/29 19:32:26 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ParetoLogic Anti-Spyware
[2008/11/02 09:55:02 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sports Interactive
[2009/04/29 22:09:06 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2008/08/21 15:35:05 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/04/29 22:08:48 | 00,000,000 | RH-D | M] – C:\Documents and Settings\User\Application Data
[2008/10/24 10:02:55 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\2K Sports
[2009/03/19 19:50:40 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Adobe
[2009/02/27 20:53:13 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\BraCa_Soft
[2008/10/28 19:23:01 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Faces
[2008/12/06 21:08:48 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Google
[2008/10/16 13:12:20 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Help
[2008/05/21 00:48:18 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Identities
[2008/10/05 22:42:09 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Leadertech
[2008/08/19 16:22:45 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Macromedia
[2008/08/22 20:16:06 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Media Player Classic
[2009/04/30 22:24:07 | 00,000,000 | –SD | M] – C:\Documents and Settings\User\Application Data\Microsoft
[2008/10/07 20:59:53 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\MiniLyrics
[2008/08/19 14:45:06 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Mozilla
[2009/03/06 20:42:46 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Notepad++
[2008/11/15 10:43:05 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Sports Interactive
[2009/04/29 22:47:19 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\SUPERAntiSpyware.com
[2009/04/29 22:06:35 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\uTorrent
[2009/02/16 22:15:14 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\vlc
[2008/10/26 18:39:10 | 00,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\WinRAR
[2008/04/15 15:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/04/29 19:32:51 | 00,000,404 | —- | M] () – C:\WINDOWS\Tasks\Pareto UNS.job
[2009/05/02 13:02:45 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT

========== Purity Check ==========

< End of report >

Extras

OTListIt Extras logfile created on: 2/5/2009 5:15:09 μμ - Run 1
OTListIt2 by OldTimer - Version 2.0.15.2 Folder = C:\Documents and Settings\User\Επιφάνεια εργασίας
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000408 | Country: Ελλάδα | Language: ELL | Date Format: d/M/yyyy

2,00 Gb Total Physical Memory | 1,58 Gb Available Physical Memory | 78,94% Memory free
3,84 Gb Paging File | 3,60 Gb Available in Paging File | 93,62% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 88,62 Gb Free Space | 59,46% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 465,65 Gb Total Space | 186,61 Gb Free Space | 40,08% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ALEX91
Current User Name: User
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = htmlfile] – C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) (Microsoft Corporation)
C:\Nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe File not found
C:\Nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe File not found
C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe File not found
C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe File not found

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
F:\Games\ProEvolution Soccer 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008 File not found
F:\Games\PES 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008 File not found
F:\Games\Pro Evolution Soccer 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008 File not found
C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour (Apple Computer, Inc.)
C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent ()
F:\Games\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009 (Konami Digital Entertainment Co., Ltd.)
C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote (Microsoft Corporation)
C:\Program Files\Sports Interactive\Football Manager 2009\fm.exe:*:Enabled:Football Manager 2009 (Sports Interactive)
C:\Program Files\Sports Interactive\Football Manager 2009 Demo\fm.exe:*:Disabled:Football Manager 2009 Demo File not found
C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:*:Disabled:Football Manager 2008 File not found
F:\Games\Pro Evolution Soccer 2009\Pro Evolution Soccer 2009\wehellas2009.exe:*:Enabled:Pro Evolution Soccer 2009 (Konami Digital Entertainment Co., Ltd.)
F:\Games\Pro Evolution Soccer 2009\wehellas2009.exe:*:Enabled:Pro Evolution Soccer 2009 (Konami Digital Entertainment Co., Ltd.)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) (Microsoft Corporation)
C:\Program Files\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher File not found
C:\Program Files\Counter-Strike 1.6\hlds.exe:*:Enabled:HLDS Launcher File not found
C:\Program Files\Counter-Strike 1.6\hltv.exe:*:Enabled:HLTV Launcher File not found
C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager (Nexon)
C:\Nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe File not found
C:\Nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe File not found
C:\NGM\NGM.exe:*:Enabled:Nexon Game Manager (Nexon)
C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine ()
C:\Documents and Settings\All Users\Application Data\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager (Nexon)
C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe File not found
C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe File not found
C:\Nexon\Combat Arms EU\NMService.exe:*:Enabled:Nexon Messenger Core File not found
C:\WINDOWS\explorer.exe:*:Enabled:Explorer (Microsoft Corporation)
C:\WINDOWS\system32\taskmgr.exe:*:Enabled:taskmgr (Microsoft Corporation)
C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:firefox (Mozilla Corporation)
C:\Program Files\Messenger\msmsgs.exe:*:Enabled:msmsgs (Microsoft Corporation)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{3407FD83-0A2F-475E-BE94-34F1FA342C84}" = ESET NOD32 Antivirus
"{350C9408-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3D7E3EC9-46CF-4359-9289-39CE01DFB82F}" = Adobe Photoshop CS3
"{4C2BF3B9-7E8A-49DE-B662-3656FE60BB01}" = Civ3 Conquests v1.22 Full
"{508CE775-4BA4-4748-82DF-FE28DA9F03B0}" = Windows Live Messenger
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{5607C1B8-DA2B-31D0-93A6-968D8C23A944}" = Microsoft .NET Framework 3.5 Language Pack SP1 - ell
"{57481C12-C102-395A-8BC3-941F2D79A114}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - ELL
"{6AA26B7C-7C26-33B4-88DD-431CB7C94742}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - ELL
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{835DEF6B-850B-4DB8-A798-EBD8C5112D25}_is1" = Foosball Maniac 1.0
"{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}" = Kaspersky Internet Security 2009
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0010-0408-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Greek) 12
"{90120000-0015-0408-0000-0000000FF1CE}" = Microsoft Office Access MUI (Greek) 2007
"{90120000-0016-0408-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Greek) 2007
"{90120000-0018-0408-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Greek) 2007
"{90120000-0019-0408-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Greek) 2007
"{90120000-001A-0408-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Greek) 2007
"{90120000-001B-0408-0000-0000000FF1CE}" = Microsoft Office Word MUI (Greek) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0408-0000-0000000FF1CE}" = Microsoft Office Proof (Greek) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0408-0000-0000000FF1CE}" = Microsoft Office Proofing (Greek) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0044-0408-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Greek) 2007
"{90120000-006E-0408-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Greek) 2007
"{90120000-00A1-0408-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Greek) 2007
"{90120000-00BA-0408-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Greek) 2007
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{9578C0CD-8108-4379-9026-4601F59859A0}" = Google Earth Pro
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A8DB611A-D80E-450D-85F6-3ACDD164BE31}" = Pro Evolution Soccer 2009
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-A81100000003}" = Adobe Reader 8.1.1
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B9242864-2841-4ADE-86E0-8F90F91B04DD}" = Logitech Gaming Software
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{E0F252A6-DE85-4E93-A93B-DFC3537B3965}" = WG111v2 Configuration Utility
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F31BC49F-AB7B-4A53-A399-EB7331B585BC}" = Civilization III: Conquests
"{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}" = Adobe Setup
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"Adobe_719d6f144d0c086a0dfa7ff76bb9ac1" = Adobe Photoshop CS3
"eMule" = eMule
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ERUNT_is1" = ERUNT 1.1j
"FLV Player" = FLV Player 2.0 (build 25)
"Football Manager 2009" = Football Manager 2009
"GTA Vice City [Full]" = GTA Vice City [Full]
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"InstallWIX_{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}" = Kaspersky Internet Security 2009
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.1.7 (Full)
"Microsoft .NET Framework 3.5 Language Pack SP1 - ell" = Πακέτο γλώσσας του Microsoft .NET Framework 3.5 SP1 - ELL
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.0.10)" = Mozilla Firefox (3.0.10)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Notepad++" = Notepad++
"NVIDIA Drivers" = NVIDIA Drivers
"RegDoctor_is1" = RegDoctor 2.08
"uTorrent" = µTorrent
"WeHellas Beta 1.00to1.20 Fix 1.00" = WeHellas Beta 1.00to1.20 Fix 1.00
"WeHellas Patch 2009 Beta" = WeHellas Patch 2009 Beta
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xarka_Today_1_is1" = Today 3.9.3 Free Edition
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"WeHellas Greek Superleague Patch - Final 2009" = WeHellas Greek Superleague Patch - Final 2009

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 9/2/2009 2:14:23 μμ | Computer Name = ALEX91 | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή mplayerc.exe, έκδοση 6.4.9.1, στοιχείο ελέγχου
κρεμάσματος hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 14/2/2009 5:59:33 πμ | Computer Name = ALEX91 | Source = SecurityCenter | ID = 1802
Description = Η υπηρεσία του Κέντρου ασφάλειας των Windows δεν μπόρεσε να δημιουργήσει
τα ερωτήματα συμβάντων μέσω WMI που είναι απαραίτητα για την παρακολούθηση λογισμικού
προστασίας από ιούς και τείχους προστασίας άλλων κατασκευαστών.

Error - 21/2/2009 6:47:57 πμ | Computer Name = ALEX91 | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή mplayerc.exe, έκδοση 6.4.9.1, στοιχείο ελέγχου
κρεμάσματος hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 21/2/2009 1:03:36 μμ | Computer Name = ALEX91 | Source = Application Error | ID = 1000
Description = Ελαττωματική εφαρμογή vlc.exe, έκδοση [removed], ελαττωματική λειτουργική
μονάδα libqt4_plugin.dll, έκδοση 0.0.0.0, ελαττωματική διεύθυνση 0x0001070b.

Error - 27/2/2009 6:13:35 μμ | Computer Name = ALEX91 | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή FMRTEvWPF.exe, έκδοση 2.0.250.0, στοιχείο ελέγχου
κρεμάσματος hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 27/2/2009 6:14:49 μμ | Computer Name = ALEX91 | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή FMRTEvWPF.exe, έκδοση 2.0.250.0, στοιχείο ελέγχου
κρεμάσματος hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 28/2/2009 8:50:18 πμ | Computer Name = ALEX91 | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή FMRTEvWPF.exe, έκδοση 2.0.250.0, στοιχείο ελέγχου
κρεμάσματος hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 28/2/2009 11:05:06 πμ | Computer Name = ALEX91 | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή FMRTEvWPF.exe, έκδοση 2.0.250.0, στοιχείο ελέγχου
κρεμάσματος hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 13/3/2009 2:10:16 μμ | Computer Name = ALEX91 | Source = MsiInstaller | ID = 1013
Description = Προϊόν: Windows Live Messenger – Ο υπολογιστής σας διαθέτει μια πιο
πρόσφατη έκδοση του Windows Live Messenger από αυτή που προσπαθείτε να εγκαταστήσετε.
Για να εγκαταστήσετε μια παλιότερη έκδοση, καταργήστε πρώτα την τρέχουσα έκδοση
(επιλέξτε "Έναρξη", "Ρυθμίσεις", "Πίνακας Ελέγχου", "Προσθαφαίρεση προγραμμάτων",
Windows Live Messenger) και στη συνέχεια εκτελέστε πάλι αυτό το πρόγραμμα Εγκατάστασης.

Error - 13/3/2009 2:21:32 μμ | Computer Name = ALEX91 | Source = MsiInstaller | ID = 1013
Description = Προϊόν: Windows Live Messenger – Ο υπολογιστής σας διαθέτει μια πιο
πρόσφατη έκδοση του Windows Live Messenger από αυτή που προσπαθείτε να εγκαταστήσετε.
Για να εγκαταστήσετε μια παλιότερη έκδοση, καταργήστε πρώτα την τρέχουσα έκδοση
(επιλέξτε "Έναρξη", "Ρυθμίσεις", "Πίνακας Ελέγχου", "Προσθαφαίρεση προγραμμάτων",
Windows Live Messenger) και στη συνέχεια εκτελέστε πάλι αυτό το πρόγραμμα Εγκατάστασης.

[ System Events ]
Error - 30/4/2009 1:11:29 μμ | Computer Name = ALEX91 | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας SjyPkt εξαιτίας του ακόλουθου
σφάλματος: %%2

Error - 1/5/2009 5:39:47 πμ | Computer Name = ALEX91 | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας SjyPkt εξαιτίας του ακόλουθου
σφάλματος: %%2

Error - 1/5/2009 5:50:50 πμ | Computer Name = ALEX91 | Source = DCOM | ID = 10005
Description = Παρουσιάστηκε σφάλμα "%1058" στο διακομιστή DCOM κατά την προσπάθεια
εκκίνησης της υπηρεσίας wuauserv με ορίσματα "" ώστε να λειτουργήσει ο διακομιστής:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}

Error - 1/5/2009 6:42:46 πμ | Computer Name = ALEX91 | Source = MRxSmb | ID = 8003
Description = Το κύριο πρόγραμμα περιήγησης έχει λάβει μια ανακοίνωση διακομιστή
από τον υπολογιστή ΤΉΝΟΥ ότι θεωρεί πως είναι το κύριο πρόγραμμα περιήγησης για
τον τομέα στο στοιχείο μεταφοράς NetBT_Tcpip_{D5FA25D5-5A1E-406B-8A2. Το κύριο πρόγραμμα
περιήγησης διακόπτεται ή εξαναγκάζεται μια εκλογή.

Error - 1/5/2009 12:15:50 μμ | Computer Name = ALEX91 | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας SjyPkt εξαιτίας του ακόλουθου
σφάλματος: %%2

Error - 1/5/2009 12:18:49 μμ | Computer Name = ALEX91 | Source = MRxSmb | ID = 8003
Description = Το κύριο πρόγραμμα περιήγησης έχει λάβει μια ανακοίνωση διακομιστή
από τον υπολογιστή ΤΉΝΟΥ ότι θεωρεί πως είναι το κύριο πρόγραμμα περιήγησης για
τον τομέα στο στοιχείο μεταφοράς NetBT_Tcpip_{D5FA25D5-5A1E-406B-8A2. Το κύριο πρόγραμμα
περιήγησης διακόπτεται ή εξαναγκάζεται μια εκλογή.

Error - 1/5/2009 12:42:06 μμ | Computer Name = ALEX91 | Source = DCOM | ID = 10005
Description = Παρουσιάστηκε σφάλμα "%1058" στο διακομιστή DCOM κατά την προσπάθεια
εκκίνησης της υπηρεσίας wuauserv με ορίσματα "" ώστε να λειτουργήσει ο διακομιστής:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}

Error - 2/5/2009 1:40:36 πμ | Computer Name = ALEX91 | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας SjyPkt εξαιτίας του ακόλουθου
σφάλματος: %%2

Error - 2/5/2009 6:03:10 πμ | Computer Name = ALEX91 | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας SjyPkt εξαιτίας του ακόλουθου
σφάλματος: %%2

Error - 2/5/2009 6:18:20 πμ | Computer Name = ALEX91 | Source = MRxSmb | ID = 8003
Description = Το κύριο πρόγραμμα περιήγησης έχει λάβει μια ανακοίνωση διακομιστή
από τον υπολογιστή ΤΉΝΟΥ ότι θεωρεί πως είναι το κύριο πρόγραμμα περιήγησης για
τον τομέα στο στοιχείο μεταφοράς NetBT_Tcpip_{D5FA25D5-5A1E-406B-8A2. Το κύριο πρόγραμμα
περιήγησης διακόπτεται ή εξαναγκάζεται μια εκλογή.


< End of report >

The log file(ComboFix.txt) is "in my hands", but a window ("ComboFix") is open and it writes: Please Wait.. C:\WINDOWS\system32\drivers\Combo-Fix.sys for about 30 minutes now…
Anyway here is the log file:


ComboFix 09-05-02.4 - User 03/05/2009 18:27.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1253.30.1032.18.2046.1513 [GMT 3:00]
Running from: c:\documents and settings\[removed]\Επιφάνεια εργασίας\ComboFix.exe
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated)
AV: Kaspersky Internet Security *On-access scanning disabled* (Outdated)
FW: Kaspersky Internet Security *disabled*

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\tugokubu.exe
F:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2009-04-03 to 2009-05-03 )))))))))))))))))))))))))))))))
.

2009-05-03 12:49 . 2009-05-03 12:49 ——– d—–w c:\documents and settings\User\Application Data\Malwarebytes
2009-05-03 12:49 . 2009-04-06 12:32 15504 —-a-w c:\windows\system32\drivers\mbam.sys
2009-05-03 12:49 . 2009-04-06 12:32 38496 —-a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-03 12:49 . 2009-05-03 12:49 ——– d—–w c:\documents and settings\All Users\Application Data\Malwarebytes
2009-05-03 12:49 . 2009-05-03 12:49 ——– d—–w c:\program files\Malwarebytes' Anti-Malware
2009-05-02 14:51 . 2009-05-02 14:51 ——– d—–w C:\_OTListIt
2009-05-02 14:06 . 2009-05-02 14:06 ——– d—–w C:\HostsXpert 4.2 - Hosts File Manager
2009-05-02 10:40 . 2009-05-02 10:40 ——– d—–w c:\program files\ERUNT
2009-04-30 07:35 . 2009-04-30 07:35 96559 —-a-w c:\windows\system32\drivers\klin.dat
2009-04-30 07:35 . 2009-04-30 07:35 87855 —-a-w c:\windows\system32\drivers\klick.dat
2009-04-30 07:34 . 2009-05-03 15:32 5569568 –sha-w c:\windows\system32\drivers\fidbox.dat
2009-04-30 07:34 . 2009-05-03 15:32 278560 –sha-w c:\windows\system32\drivers\fidbox2.dat
2009-04-30 07:34 . 2009-04-30 07:34 ——– d—–w c:\program files\Kaspersky Lab
2009-04-30 07:34 . 2009-05-03 15:32 ——– d—–w c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-04-30 07:31 . 2009-04-30 07:31 ——– d—–w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-04-29 19:41 . 2009-04-29 19:41 ——– d—–w c:\program files\Trend Micro
2009-04-29 19:09 . 2009-04-29 19:09 ——– d—–w c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-04-29 19:08 . 2009-04-29 19:47 ——– d—–w c:\program files\SUPERAntiSpyware
2009-04-29 19:08 . 2009-04-29 19:47 ——– d—–w c:\documents and settings\User\Application Data\SUPERAntiSpyware.com
2009-04-29 17:38 . 2009-03-14 03:48 5120 —-a-w c:\windows\system32\drivers\Start1Driver.SYS
2009-04-29 16:32 . 2009-04-29 16:32 ——– d—–w c:\documents and settings\All Users\Application Data\ParetoLogic Anti-Spyware
2009-04-29 13:25 . 2003-01-26 10:41 40960 —-a-w c:\windows\system32\SSubTmr6.dll
2009-04-29 13:25 . 1999-08-02 13:11 57344 —-a-w c:\windows\system32\CGZipLibrary.DLL
2009-04-29 13:25 . 2009-04-29 13:25 ——– d—–w c:\program files\RegDoctor
2009-04-29 13:15 . 2009-04-29 13:15 ——– d—–w C:\Downloads
2009-04-20 21:08 . 2009-04-20 21:13 ——– d—–w c:\program files\CIV3
2009-04-20 20:52 . 2004-11-28 18:10 233472 —-a-w c:\windows\system\IFC23.dll
2009-04-20 20:46 . 2000-07-31 10:28 286208 —-a-w c:\windows\system\binkw32.dll
2009-04-15 11:07 . 2009-04-15 11:14 ——– d—–w c:\documents and settings\All Users\Application Data\NexonEU
2009-04-15 09:18 . 2009-04-15 09:18 421888 —-a-w c:\windows\NEXON_EU_DownloaderUpdater.exe
2009-04-15 09:03 . 2009-04-15 09:03 ——– d—–w C:\NGM
2009-04-15 07:17 . 2009-04-15 11:07 ——– d—–w C:\Nexon
2009-04-15 07:17 . 2009-04-15 07:17 ——– d—–w c:\documents and settings\All Users\Application Data\NexonUS
2009-04-14 21:35 . 2009-04-15 07:20 ——– d—–w c:\program files\Combat Arms
2009-04-14 21:33 . 2009-04-28 10:07 ——– d—–w c:\program files\Pando Networks
2009-04-08 19:29 . 2009-04-08 19:29 ——– d—–w c:\program files\Foosball Maniac

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-03 15:32 . 2009-04-30 07:34 44592 –sha-w c:\windows\system32\drivers\fidbox.idx
2009-05-03 15:32 . 2009-04-30 07:34 2032 –sha-w c:\windows\system32\drivers\fidbox2.idx
2009-05-03 15:31 . 2008-05-20 21:37 6 —ha-w c:\windows\Tasks\SA.DAT
2009-05-01 14:36 . 2008-11-16 13:26 995176 —-a-w c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-04-29 16:32 . 2009-04-29 16:32 404 —-a-w c:\windows\Tasks\Pareto UNS.job
2009-04-23 10:32 . 2009-03-06 17:40 ——– d—–w c:\program files\Notepad++
2009-04-20 21:33 . 2008-08-18 08:58 ——– d–h–w c:\program files\InstallShield Installation Information
2009-04-16 09:18 . 2008-04-15 12:00 89810 —-a-w c:\windows\system32\perfc008.dat
2009-04-16 09:18 . 2008-04-15 12:00 539818 —-a-w c:\windows\system32\perfh008.dat
2009-03-27 14:31 . 2009-03-27 14:31 ——– d—–w c:\program files\Metal Fin
2009-03-19 16:51 . 2008-09-23 14:32 ——– d—–w c:\program files\eMule
2009-03-13 18:15 . 2009-03-13 17:33 ——– d—–w c:\program files\Windows Live
2009-03-13 17:34 . 2009-03-13 17:34 ——– d—–w c:\program files\Microsoft
2009-03-13 17:28 . 2009-03-13 17:28 ——– d—–w c:\program files\Common Files\Windows Live
2009-03-06 14:20 . 2008-04-15 12:00 287232 —-a-w c:\windows\system32\pdh.dll
2009-02-20 17:10 . 2008-04-15 12:00 78336 —-a-w c:\windows\system32\ieencode.dll
2009-02-20 08:09 . 2008-04-15 12:00 671744 —-a-w c:\windows\system32\wininet.dll
2009-02-09 14:05 . 2008-04-15 12:00 1847040 —-a-w c:\windows\system32\win32k.sys
2009-02-09 11:23 . 2008-04-14 21:29 2031104 —-a-w c:\windows\system32\ntkrnlpa.exe
2009-02-09 11:23 . 2008-04-15 12:00 2152448 —-a-w c:\windows\system32\ntoskrnl.exe
2009-02-09 11:23 . 2008-04-15 12:00 111104 —-a-w c:\windows\system32\services.exe
2009-02-09 10:52 . 2008-04-15 12:00 751104 —-a-w c:\windows\system32\ntdll.dll
2009-02-09 10:52 . 2008-04-15 12:00 737280 —-a-w c:\windows\system32\lsasrv.dll
2009-02-09 10:52 . 2008-04-15 12:00 692224 —-a-w c:\windows\system32\advapi32.dll
2009-02-09 10:52 . 2008-04-15 12:00 401408 —-a-w c:\windows\system32\rpcss.dll
2009-02-06 10:39 . 2008-04-15 12:00 35328 —-a-w c:\windows\system32\sc.exe
2009-02-03 19:57 . 2008-04-15 12:00 56832 —-a-w c:\windows\system32\secur32.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-15 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-04-03 165784]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"XarkaToday"="c:\program files\Today Application\Today.exe" [2009-01-01 3518680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 39792]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-10-08 1036288]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-01-03 13508608]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-01-03 86016]
"SpeedTouch USB Diagnostics"="c:\program files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-04-07 877568]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-07-01 1447168]
"RegDoctor"="c:\program files\RegDoctor\RegDoctor.exe" [2007-08-14 2256896]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2008-07-29 206088]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-01-03 1626112]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360]

c:\documents and settings\User\Start Menu\¨¦š¨α££˜«˜\„΅΅ε¤ž©ž\
€§ζ©§˜©£˜ ¦Ÿζ¤ž ΅˜  „΅΅ε¤ž©ž š ˜ «¦ OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]

c:\documents and settings\All Users\Start Menu\¨¦š¨α££˜«˜\„΅΅ε¤ž©ž\
WG111v2 Smart Wizard Wireless Setting.lnk - c:\program files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe [2008-8-26 745472]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"f:\\Games\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Sports Interactive\\Football Manager 2009\\fm.exe"=
"f:\\Games\\Pro Evolution Soccer 2009\\Pro Evolution Soccer 2009\\wehellas2009.exe"=
"f:\\Games\\Pro Evolution Soccer 2009\\wehellas2009.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
"c:\\NGM\\NGM.exe"=
"c:\\Nexon\\NEXON_EU_Downloader\\NEXON_EU_Downloader_Engine.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\NexonEU\\NGM\\NGM.exe"=
"c:\\WINDOWS\\system32\\taskmgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=

R3 DiagnosticScan;DiagnosticScan; [x]
R3 SjyPkt;SjyPkt; [x]
S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784]
S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2008-07-01 34312]
S1 Start1Driver;Start1Driver; [x]
S2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\DRIVERS\EAPPkt.sys [2005-04-01 66048]
S2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2007-12-21 468224]
S3 alcan5ln;SpeedTouch™ USB ADSL RFC1483 Networking Driver (NDIS);c:\windows\system32\DRIVERS\alcan5ln.sys [2003-12-08 36256]
S3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\DRIVERS\klfltdev.sys [2008-03-13 26640]
S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2008-04-30 24592]
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\DRIVERS\wg111v2.sys [2006-03-16 167808]


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1b0c7242-26cb-11dd-9de8-806d6172696f}]
\Shell\AutoRun\command - D:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{78f86261-6f50-11dd-ac70-000e5064df41}]
\Shell\AutoRun\command - H:\setupSNK.exe
.
Contents of the 'Scheduled Tasks' folder
.
- - - - ORPHANS REMOVED - - - -

SSODL-CDBurn-{fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll
SSODL-WebCheck-{E6FB5E20-DE35-11CF-9C87-00AA005127ED} - %SystemRoot%\system32\webcheck.dll


.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: E&ξαγωγή στο Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {{FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\Messenger\msmsgs.exe
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\progra~1\COMMON~1\System\OLEDB~1\MSDAIPP.DLL
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - c:\progra~1\COMMON~1\System\OLEDB~1\MSDAIPP.DLL
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\progra~1\COMMON~1\System\OLEDB~1\MSDAIPP.DLL
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - c:\progra~1\COMMON~1\System\OLEDB~1\MSDAIPP.DLL
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\progra~1\COMMON~1\System\OLEDB~1\MSDAIPP.DLL
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\progra~1\COMMON~1\System\OLEDB~1\MSDAIPP.DLL
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - c:\progra~1\COMMON~1\System\OLEDB~1\MSDAIPP.DLL
FF - ProfilePath - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\gsuscw3j.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.gr/firefox?client=firefox-a&rls;=org.mozilla:el:official
FF - plugin: c:\documents and settings\All Users\Application Data\NexonEU\NGM\npNxGameeu.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-03 18:33
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-3398244231-3639263185-3890589703-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2008]
"Currency"=dword:0000001c
"GameDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2008\\games"
"ShortlistDir"=""
"ScreenshotsDir"="c:\\Documents and Settings\\User\\Επιφάνεια εργασίας"
"SaveDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2008\\"
"HistoryDir"="c:\\Documents and Settings\\User\\Επιφάνεια εργασίας\\FM Genie Scout 2008\\History Points"
"LangDB"="c:\\Program Files\\Sports Interactive\\Football Manager 2008\\data\\updates\\update-802\\db\\802\\lang_db.dat"
"LastSaveGame"="c:\\Documents and Settings\\User\\Επιφάνεια εργασίας\\full\\ALL.fm"
"Language"="English"
"LoadLangDB"=dword:00000001
"CompressHistoryPoints"=dword:00000000
"HighlightedAttributes"=dword:00000000
"MinCondition"=dword:00000050
"SkinID"=dword:00000001
"LastUpdateCheck"=dword:00000000
"HighQualityGUI"=dword:00000001
"AutomaticallyUpdateCheck"=dword:00000001
"AdvancedGeneration"=dword:00000000
"TranslateStaffSkills"=dword:00000001
"TranslatePlayerSkills"=dword:00000001
"TranslatePositions"=dword:00000001
"ShowHistory"=dword:00000001
"WindowState"=dword:00000002
"WindowHeight"=dword:0000026d
"WindowWidth"=dword:000003fc
"WindowLeft"=dword:00000002
"WindowTop"=dword:0000004a
"UseProxy"=dword:00000000
"ProxyHost"=""
"ProxyPort"=""
"UseAuthentication"=dword:00000000
"UserName"=""
"UserPassword"=""

[HKEY_USERS\S-1-5-21-3398244231-3639263185-3890589703-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Columns\Clubs]
"Position0"=dword:00000000
"Visible0"=dword:00000001
"Width0"=dword:0000007d
"Position1"=dword:00000001
"Visible1"=dword:00000001
"Width1"=dword:00000064
"Position2"=dword:00000002
"Visible2"=dword:00000001
"Width2"=dword:00000064
"Position3"=dword:00000003
"Visible3"=dword:00000001
"Width3"=dword:00000032
"Position4"=dword:00000004
"Visible4"=dword:00000001
"Width4"=dword:00000032
"Position5"=dword:00000005
"Visible5"=dword:00000001
"Width5"=dword:00000050
"Position6"=dword:00000006
"Visible6"=dword:00000001
"Width6"=dword:00000050
"Position7"=dword:00000007
"Visible7"=dword:00000001
"Width7"=dword:00000050
"Position8"=dword:00000008
"Visible8"=dword:00000000
"Width8"=dword:00000050
"Position9"=dword:00000009
"Visible9"=dword:00000000
"Width9"=dword:0000002d
"Position10"=dword:0000000a
"Visible10"=dword:00000000
"Width10"=dword:0000001e
"Position11"=dword:0000000b
"Visible11"=dword:00000000
"Width11"=dword:0000001e
"Position12"=dword:0000000c
"Visible12"=dword:00000000
"Width12"=dword:0000001e
"Position13"=dword:0000000d
"Visible13"=dword:00000001
"Width13"=dword:0000003c
"Position14"=dword:0000000e
"Visible14"=dword:00000000
"Width14"=dword:00000032
"Position15"=dword:0000000f
"Visible15"=dword:00000000
"Width15"=dword:00000032
"Position16"=dword:00000010
"Visible16"=dword:00000000
"Width16"=dword:00000032
"Position17"=dword:00000011
"Visible17"=dword:00000001
"Width17"=dword:00000050
"Position18"=dword:00000012
"Visible18"=dword:00000001
"Width18"=dword:00000050
"Position19"=dword:00000013
"Visible19"=dword:00000000
"Width19"=dword:00000050

[HKEY_USERS\S-1-5-21-3398244231-3639263185-3890589703-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Columns\Players]
"Position0"=dword:00000000
"Visible0"=dword:00000001
"Width0"=dword:0000008e
"Position1"=dword:00000001
"Visible1"=dword:00000001
"Width1"=dword:0000000a
"Position2"=dword:00000002
"Visible2"=dword:00000001
"Width2"=dword:0000000a
"Position3"=dword:00000003
"Visible3"=dword:00000001
"Width3"=dword:0000000a
"Position4"=dword:00000008
"Visible4"=dword:00000000
"Width4"=dword:00000023
"Position5"=dword:00000009
"Visible5"=dword:00000000
"Width5"=dword:00000028
"Position6"=dword:0000000a
"Visible6"=dword:00000000
"Width6"=dword:00000028
"Position7"=dword:0000000b
"Visible7"=dword:00000000
"Width7"=dword:0000004b
"Position8"=dword:0000000c
"Visible8"=dword:00000000
"Width8"=dword:0000004b
"Position9"=dword:0000006e
"Visible9"=dword:00000001
"Width9"=dword:00000033
"Position10"=dword:0000000e
"Visible10"=dword:00000001
"Width10"=dword:0000000a
"Position11"=dword:0000000f
"Visible11"=dword:00000000
"Width11"=dword:0000004b
"Position12"=dword:00000011
"Visible12"=dword:00000000
"Width12"=dword:0000002d
"Position13"=dword:00000012
"Visible13"=dword:00000000
"Width13"=dword:0000003c
"Position14"=dword:00000013
"Visible14"=dword:00000000
"Width14"=dword:0000004b
"Position15"=dword:00000014
"Visible15"=dword:00000000
"Width15"=dword:00000064
"Position16"=dword:00000015
"Visible16"=dword:00000000
"Width16"=dword:00000064
"Position17"=dword:00000016
"Visible17"=dword:00000000
"Width17"=dword:0000004b
"Position18"=dword:00000017
"Visible18"=dword:00000000
"Width18"=dword:00000064
"Position19"=dword:00000018
"Visible19"=dword:00000000
"Width19"=dword:0000003c
"Position20"=dword:00000019
"Visible20"=dword:00000000
"Width20"=dword:0000004b
"Position21"=dword:0000001a
"Visible21"=dword:00000000
"Width21"=dword:00000050
"Position22"=dword:0000001b
"Visible22"=dword:00000000
"Width22"=dword:00000073
"Position23"=dword:0000001c
"Visible23"=dword:00000000
"Width23"=dword:00000050
"Position24"=dword:0000001d
"Visible24"=dword:00000000
"Width24"=dword:0000005a
"Position25"=dword:0000001e
"Visible25"=dword:00000000
"Width25"=dword:0000006e
"Position26"=dword:0000001f
"Visible26"=dword:00000000
"Width26"=dword:00000064
"Position27"=dword:00000020
"Visible27"=dword:00000000
"Width27"=dword:00000087
"Position28"=dword:00000021
"Visible28"=dword:00000000
"Width28"=dword:00000064
"Position29"=dword:00000022
"Visible29"=dword:00000000
"Width29"=dword:00000064
"Position30"=dword:00000023
"Visible30"=dword:00000000
"Width30"=dword:00000046
"Position31"=dword:00000024
"Visible31"=dword:00000000
"Width31"=dword:0000004b
"Position32"=dword:00000025
"Visible32"=dword:00000000
"Width32"=dword:00000046
"Position33"=dword:00000071
"Visible33"=dword:00000001
"Width33"=dword:0000001b
"Position34"=dword:0000007e
"Visible34"=dword:00000001
"Width34"=dword:0000001d
"Position35"=dword:00000080
"Visible35"=dword:00000001
"Width35"=dword:0000001b
"Position36"=dword:00000083
"Visible36"=dword:00000001
"Width36"=dword:0000001b
"Position37"=dword:0000008b
"Visible37"=dword:00000001
"Width37"=dword:0000001c
"Position38"=dword:0000008e
"Visible38"=dword:00000001
"Width38"=dword:00000024
"Position39"=dword:00000092
"Visible39"=dword:00000001
"Width39"=dword:0000001a
"Position40"=dword:00000088
"Visible40"=dword:00000001
"Width40"=dword:00000023
"Position41"=dword:00000093
"Visible41"=dword:00000001
"Width41"=dword:00000019
"Position42"=dword:00000087
"Visible42"=dword:00000001
"Width42"=dword:0000001a
"Position43"=dword:00000085
"Visible43"=dword:00000001
"Width43"=dword:0000001b
"Position44"=dword:00000089
"Visible44"=dword:00000001
"Width44"=dword:00000024
"Position45"=dword:00000026
"Visible45"=dword:00000001
"Width45"=dword:0000000a
"Position46"=dword:00000027
"Visible46"=dword:00000001
"Width46"=dword:0000000a
"Position47"=dword:00000028
"Visible47"=dword:00000001
"Width47"=dword:0000000a
"Position48"=dword:00000029
"Visible48"=dword:00000001
"Width48"=dword:0000000a
"Position49"=dword:0000002a
"Visible49"=dword:00000001
"Width49"=dword:0000000a
"Position50"=dword:0000002b
"Visible50"=dword:00000001
"Width50"=dword:0000000a
"Position51"=dword:0000002c
"Visible51"=dword:00000001
"Width51"=dword:0000000a
"Position52"=dword:0000002d
"Visible52"=dword:00000001
"Width52"=dword:0000000a
"Position53"=dword:0000002e
"Visible53"=dword:00000001
"Width53"=dword:0000000a
"Position54"=dword:0000002f
"Visible54"=dword:00000001
"Width54"=dword:0000000a
"Position55"=dword:00000030
"Visible55"=dword:00000001
"Width55"=dword:0000000a
"Position56"=dword:00000033
"Visible56"=dword:00000001
"Width56"=dword:0000000a
"Position57"=dword:00000034
"Visible57"=dword:00000001
"Width57"=dword:0000000a
"Position58"=dword:00000035
"Visible58"=dword:00000001
"Width58"=dword:0000000a
"Position59"=dword:00000036
"Visible59"=dword:00000001
"Width59"=dword:0000000a
"Position60"=dword:00000037
"Visible60"=dword:00000001
"Width60"=dword:0000000a
"Position61"=dword:00000038
"Visible61"=dword:00000001
"Width61"=dword:0000000a
"Position62"=dword:00000039
"Visible62"=dword:00000001
"Width62"=dword:0000000a
"Position63"=dword:0000003a
"Visible63"=dword:00000001
"Width63"=dword:0000000a
"Position64"=dword:0000003b
"Visible64"=dword:00000001
"Width64"=dword:0000000a
"Position65"=dword:0000003c
"Visible65"=dword:00000001
"Width65"=dword:0000000a
"Position66"=dword:0000003d
"Visible66"=dword:00000001
"Width66"=dword:0000000a
"Position67"=dword:0000003e
"Visible67"=dword:00000001
"Width67"=dword:0000000a
"Position68"=dword:0000003f
"Visible68"=dword:00000001
"Width68"=dword:0000000a
"Position69"=dword:00000040
"Visible69"=dword:00000001
"Width69"=dword:0000000a
"Position70"=dword:00000041
"Visible70"=dword:00000001
"Width70"=dword:0000000a
"Position71"=dword:00000042
"Visible71"=dword:00000001
"Width71"=dword:0000000a
"Position72"=dword:00000043
"Visible72"=dword:00000001
"Width72"=dword:0000000a
"Position73"=dword:00000044
"Visible73"=dword:00000001
"Width73"=dword:0000000a
"Position74"=dword:00000045
"Visible74"=dword:00000001
"Width74"=dword:0000000a
"Position75"=dword:00000046
"Visible75"=dword:00000001
"Width75"=dword:0000000a
"Position76"=dword:00000047
"Visible76"=dword:00000001
"Width76"=dword:0000000a
"Position77"=dword:00000048
"Visible77"=dword:00000001
"Width77"=dword:0000000a
"Position78"=dword:00000049
"Visible78"=dword:00000001
"Width78"=dword:0000000a
"Position79"=dword:0000004a
"Visible79"=dword:00000001
"Width79"=dword:0000000a
"Position80"=dword:0000004b
"Visible80"=dword:00000001
"Width80"=dword:0000000a
"Position81"=dword:0000004c
"Visible81"=dword:00000001
"Width81"=dword:0000000a
"Position82"=dword:0000004d
"Visible82"=dword:00000001
"Width82"=dword:0000000a
"Position83"=dword:0000004e
"Visible83"=dword:00000001
"Width83"=dword:0000000a
"Position84"=dword:0000004f
"Visible84"=dword:00000001
"Width84"=dword:0000000a
"Position85"=dword:00000050
"Visible85"=dword:00000001
"Width85"=dword:0000000a
"Position86"=dword:00000051
"Visible86"=dword:00000001
"Width86"=dword:0000000a
"Position87"=dword:00000052
"Visible87"=dword:00000001
"Width87"=dword:0000000a
"Position88"=dword:00000053
"Visible88"=dword:00000001
"Width88"=dword:0000000a
"Position89"=dword:00000054
"Visible89"=dword:00000001
"Width89"=dword:0000000a
"Position90"=dword:00000055
"Visible90"=dword:00000001
"Width90"=dword:0000000a
"Position91"=dword:00000056
"Visible91"=dword:00000001
"Width91"=dword:0000000a
"Position92"=dword:00000057
"Visible92"=dword:00000001
"Width92"=dword:0000000a
"Position93"=dword:00000058
"Visible93"=dword:00000001
"Width93"=dword:0000000a
"Position94"=dword:00000059
"Visible94"=dword:00000001
"Width94"=dword:0000000a
"Position95"=dword:0000005a
"Visible95"=dword:00000001
"Width95"=dword:0000000a
"Position96"=dword:0000005b
"Visible96"=dword:00000001
"Width96"=dword:0000000a
"Position97"=dword:0000005c
"Visible97"=dword:00000001
"Width97"=dword:0000000a
"Position98"=dword:0000005d
"Visible98"=dword:00000001
"Width98"=dword:0000002f
"Position99"=dword:00000063
"Visible99"=dword:00000001
"Width99"=dword:0000002c
"Position100"=dword:00000031
"Visible100"=dword:00000001
"Width100"=dword:0000000a
"Position101"=dword:0000005e
"Visible101"=dword:00000001
"Width101"=dword:00000028
"Position102"=dword:0000005f
"Visible102"=dword:00000001
"Width102"=dword:00000024
"Position103"=dword:00000060
"Visible103"=dword:00000001
"Width103"=dword:00000029
"Position104"=dword:00000061
"Visible104"=dword:00000001
"Width104"=dword:00000026
"Position105"=dword:00000062
"Visible105"=dword:00000001
"Width105"=dword:0000002a
"Position106"=dword:00000010
"Visible106"=dword:00000000
"Width106"=dword:00000050
"Position107"=dword:0000000d
"Visible107"=dword:00000000
"Width107"=dword:00000028
"Position108"=dword:00000032
"Visible108"=dword:00000001
"Width108"=dword:0000000a
"Position109"=dword:0000008d
"Visible109"=dword:00000001
"Width109"=dword:0000001a
"Position110"=dword:0000008c
"Visible110"=dword:00000001
"Width110"=dword:0000001b
"Position111"=dword:00000090
"Visible111"=dword:00000001
"Width111"=dword:00000022
"Position112"=dword:0000008f
"Visible112"=dword:00000001
"Width112"=dword:00000023
"Position113"=dword:00000064
"Visible113"=dword:00000000
"Width113"=dword:00000050
"Position114"=dword:00000065
"Visible114"=dword:00000001
"Width114"=dword:0000002b
"Position115"=dword:00000068
"Visible115"=dword:00000001
"Width115"=dword:00000026
"Position116"=dword:00000066
"Visible116"=dword:00000001
"Width116"=dword:00000028
"Position117"=dword:00000067
"Visible117"=dword:00000001
"Width117"=dword:00000027
"Position118"=dword:0000006a
"Visible118"=dword:00000001
"Width118"=dword:0000002d
"Position119"=dword:00000069
"Visible119"=dword:00000001
"Width119"=dword:0000002f
"Position120"=dword:0000006b
"Visible120"=dword:00000001
"Width120"=dword:00000029
"Position121"=dword:0000007c
"Visible121"=dword:00000001
"Width121"=dword:0000002a
"Position122"=dword:0000006c
"Visible122"=dword:00000001
"Width122"=dword:00000026
"Position123"=dword:0000006d
"Visible123"=dword:00000001
"Width123"=dword:0000002b
"Position124"=dword:0000007d
"Visible124"=dword:00000001
"Width124"=dword:0000002d
"Position125"=dword:0000006f
"Visible125"=dword:00000001
"Width125"=dword:00000030
"Position126"=dword:00000070
"Visible126"=dword:00000001
"Width126"=dword:00000032
"Position127"=dword:00000072
"Visible127"=dword:00000001
"Width127"=dword:00000029
"Position128"=dword:00000073
"Visible128"=dword:00000001
"Width128"=dword:00000029
"Position129"=dword:00000074
"Visible129"=dword:00000000
"Width129"=dword:00000050
"Position130"=dword:00000075
"Visible130"=dword:00000000
"Width130"=dword:00000050
"Position131"=dword:00000076
"Visible131"=dword:00000000
"Width131"=dword:00000050
"Position132"=dword:00000077
"Visible132"=dword:00000000
"Width132"=dword:00000050
"Position133"=dword:00000078
"Visible133"=dword:00000000
"Width133"=dword:00000050
"Position134"=dword:00000079
"Visible134"=dword:00000000
"Width134"=dword:00000050
"Position135"=dword:0000007a
"Visible135"=dword:00000000
"Width135"=dword:00000050
"Position136"=dword:0000007b
"Visible136"=dword:00000000
"Width136"=dword:00000050
"Position137"=dword:0000007f
"Visible137"=dword:00000000
"Width137"=dword:00000050
"Position138"=dword:00000081
"Visible138"=dword:00000000
"Width138"=dword:00000050
"Position139"=dword:00000082
"Visible139"=dword:00000000
"Width139"=dword:00000050
"Position140"=dword:00000084
"Visible140"=dword:00000000
"Width140"=dword:00000050
"Position141"=dword:00000086
"Visible141"=dword:00000000
"Width141"=dword:00000050
"Position142"=dword:0000008a
"Visible142"=dword:00000000
"Width142"=dword:00000050
"Position143"=dword:00000091
"Visible143"=dword:00000000
"Width143"=dword:00000050
"Position144"=dword:00000094
"Visible144"=dword:00000000
"Width144"=dword:00000050
"Position145"=dword:00000095
"Visible145"=dword:00000000
"Width145"=dword:00000050
"Position146"=dword:00000004
"Visible146"=dword:00000000
"Width146"=dword:00000037
"Position147"=dword:00000005
"Visible147"=dword:00000000
"Width147"=dword:00000028
"Position148"=dword:00000006
"Visible148"=dword:00000000
"Width148"=dword:00000037
"Position149"=dword:00000007
"Visible149"=dword:00000000
"Width149"=dword:00000028

[HKEY_USERS\S-1-5-21-3398244231-3639263185-3890589703-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Columns\Staff]
"Position0"=dword:00000000
"Visible0"=dword:00000001
"Width0"=dword:0000007d
"Position1"=dword:00000001
"Visible1"=dword:00000001
"Width1"=dword:00000064
"Position2"=dword:00000002
"Visible2"=dword:00000001
"Width2"=dword:00000064
"Position3"=dword:00000003
"Visible3"=dword:00000001
"Width3"=dword:00000069
"Position4"=dword:00000005
"Visible4"=dword:00000001
"Width4"=dword:00000028
"Position5"=dword:00000006
"Visible5"=dword:00000001
"Width5"=dword:00000028
"Position6"=dword:00000004
"Visible6"=dword:00000001
"Width6"=dword:00000028
"Position7"=dword:00000007
"Visible7"=dword:00000001
"Width7"=dword:00000050
"Position8"=dword:00000008
"Visible8"=dword:00000000
"Width8"=dword:00000050
"Position9"=dword:00000009
"Visible9"=dword:00000000
"Width9"=dword:0000004b
"Position10"=dword:0000000a
"Visible10"=dword:00000000
"Width10"=dword:0000002d
"Position11"=dword:0000000b
"Visible11"=dword:00000000
"Width11"=dword:0000003c
"Position12"=dword:0000000c
"Visible12"=dword:00000000
"Width12"=dword:0000004b
"Position13"=dword:0000000d
"Visible13"=dword:00000000
"Width13"=dword:00000064
"Position14"=dword:0000000e
"Visible14"=dword:00000000
"Width14"=dword:00000064
"Position15"=dword:0000000f
"Visible15"=dword:00000000
"Width15"=dword:0000004b
"Position16"=dword:00000010
"Visible16"=dword:00000000
"Width16"=dword:00000064
"Position17"=dword:00000011
"Visible17"=dword:00000001
"Width17"=dword:0000003c
"Position18"=dword:00000012
"Visible18"=dword:00000000
"Width18"=dword:0000004b
"Position19"=dword:00000013
"Visible19"=dword:00000000
"Width19"=dword:00000050
"Position20"=dword:00000014
"Visible20"=dword:00000000
"Width20"=dword:00000046
"Position21"=dword:00000015
"Visible21"=dword:00000000
"Width21"=dword:0000004b
"Position22"=dword:00000016
"Visible22"=dword:00000000
"Width22"=dword:00000046
"Position23"=dword:00000017
"Visible23"=dword:00000000
"Width23"=dword:00000046
"Position24"=dword:00000018
"Visible24"=dword:00000000
"Width24"=dword:0000003c
"Position25"=dword:00000019
"Visible25"=dword:00000000
"Width25"=dword:00000041
"Position26"=dword:0000001a
"Visible26"=dword:00000000
"Width26"=dword:0000003c
"Position27"=dword:0000001b
"Visible27"=dword:00000000
"Width27"=dword:00000055
"Position28"=dword:0000001c
"Visible28"=dword:00000000
"Width28"=dword:00000069
"Position29"=dword:0000001d
"Visible29"=dword:00000000
"Width29"=dword:0000006e
"Position30"=dword:0000001e
"Visible30"=dword:00000000
"Width30"=dword:00000064
"Position31"=dword:0000001f
"Visible31"=dword:00000000
"Width31"=dword:00000078
"Position32"=dword:00000020
"Visible32"=dword:00000000
"Width32"=dword:00000064
"Position33"=dword:00000021
"Visible33"=dword:00000000
"Width33"=dword:00000087
"Position34"=dword:00000022
"Visible34"=dword:00000000
"Width34"=dword:00000069
"Position35"=dword:00000023
"Visible35"=dword:00000000
"Width35"=dword:0000006e
"Position36"=dword:00000024
"Visible36"=dword:00000000
"Width36"=dword:00000073
"Position37"=dword:00000025
"Visible37"=dword:00000000
"Width37"=dword:0000004b
"Position38"=dword:00000026
"Visible38"=dword:00000000
"Width38"=dword:0000002d
"Position39"=dword:00000027
"Visible39"=dword:00000000
"Width39"=dword:00000055
"Position40"=dword:00000028
"Visible40"=dword:00000000
"Width40"=dword:00000046
"Position41"=dword:00000029
"Visible41"=dword:00000000
"Width41"=dword:0000004b
"Position42"=dword:0000002a
"Visible42"=dword:00000000
"Width42"=dword:0000003c
"Position43"=dword:0000002b
"Visible43"=dword:00000000
"Width43"=dword:00000046
"Position44"=dword:0000002c
"Visible44"=dword:00000000
"Width44"=dword:00000073
"Position45"=dword:0000002d
"Visible45"=dword:00000000
"Width45"=dword:0000004b
"Position46"=dword:0000002e
"Visible46"=dword:00000000
"Width46"=dword:00000073
"Position47"=dword:0000002f
"Visible47"=dword:00000000
"Width47"=dword:0000007d
"Position48"=dword:00000030
"Visible48"=dword:00000000
"Width48"=dword:0000006e
"Position49"=dword:00000031
"Visible49"=dword:00000000
"Width49"=dword:00000037
"Position50"=dword:00000032
"Visible50"=dword:00000000
"Width50"=dword:00000064
"Position51"=dword:00000033
"Visible51"=dword:00000000
"Width51"=dword:00000037
"Position52"=dword:00000034
"Visible52"=dword:00000000
"Width52"=dword:0000004b
"Position53"=dword:00000035
"Visible53"=dword:00000000
"Width53"=dword:00000046
"Position54"=dword:00000036
"Visible54"=dword:00000000
"Width54"=dword:00000037
"Position55"=dword:00000037
"Visible55"=dword:00000000
"Width55"=dword:0000003c
"Position56"=dword:00000038
"Visible56"=dword:00000000
"Width56"=dword:00000055
"Position57"=dword:00000039
"Visible57"=dword:00000000
"Width57"=dword:0000003c
"Position58"=dword:0000003a
"Visible58"=dword:00000000
"Width58"=dword:0000003c
"Position59"=dword:0000003b
"Visible59"=dword:00000000
"Width59"=dword:00000055
"Position60"=dword:0000003c
"Visible60"=dword:00000000
"Width60"=dword:00000046
"Position61"=dword:0000003d
"Visible61"=dword:00000000
"Width61"=dword:0000004b
"Position62"=dword:0000003e
"Visible62"=dword:00000000
"Width62"=dword:00000055
"Position63"=dword:0000003f
"Visible63"=dword:00000000
"Width63"=dword:0000005a
"Position64"=dword:00000040
"Visible64"=dword:00000000
"Width64"=dword:0000006e
"Position65"=dword:00000041
"Visible65"=dword:00000000
"Width65"=dword:00000050
"Position66"=dword:00000042
"Visible66"=dword:00000000
"Width66"=dword:00000032
"Position67"=dword:00000043
"Visible67"=dword:00000000
"Width67"=dword:00000064
"Position68"=dword:00000044
"Visible68"=dword:00000000
"Width68"=dword:0000004b
"Position69"=dword:00000045
"Visible69"=dword:00000000
"Width69"=dword:0000002d
"Position70"=dword:00000046
"Visible70"=dword:00000000
"Width70"=dword:0000004b
"Position71"=dword:00000047
"Visible71"=dword:00000000
"Width71"=dword:0000005a
"Position72"=dword:00000048
"Visible72"=dword:00000001
"Width72"=dword:0000005a
"Position73"=dword:00000049
"Visible73"=dword:00000000
"Width73"=dword:00000050
"Position74"=dword:0000004a
"Visible74"=dword:00000001
"Width74"=dword:0000004b
"Position75"=dword:0000004b
"Visible75"=dword:00000000
"Width75"=dword:00000050
"Position76"=dword:0000004c
"Visible76"=dword:00000000
"Width76"=dword:0000005a
"Position77"=dword:0000004d
"Visible77"=dword:00000000
"Width77"=dword:00000041
"Position78"=dword:0000004e
"Visible78"=dword:00000000
"Width78"=dword:00000041
"Position79"=dword:0000004f
"Visible79"=dword:00000000
"Width79"=dword:00000041
"Position80"=dword:00000050
"Visible80"=dword:00000000
"Width80"=dword:00000041
"Position81"=dword:00000051
"Visible81"=dword:00000000
"Width81"=dword:00000041
"Position82"=dword:00000052
"Visible82"=dword:00000000
"Width82"=dword:00000041
"Position83"=dword:00000053
"Visible83"=dword:00000000
"Width83"=dword:00000041
"Position84"=dword:00000054
"Visible84"=dword:00000000
"Width84"=dword:00000041
"Position85"=dword:00000055
"Visible85"=dword:00000000
"Width85"=dword:00000041
"Position86"=dword:00000056
"Visible86"=dword:00000000
"Width86"=dword:00000050

[HKEY_USERS\S-1-5-21-3398244231-3639263185-3890589703-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2008\Rating Coefficients]
"GKWeightCoef"=dword:00000064
"GKCurrentAbilityCoef"=dword:00000000
"GKCornersCoef"=dword:00000000
"GKCrossingCoef"=dword:00000000
"GKDribblingCoef"=dword:00000000
"GKFinishingCoef"=dword:00000000
"GKFirstTouchCoef"=dword:00000000
"GKFreeKicksCoef"=dword:00000000
"GKHeadingCoef"=dword:00000000
"GKLongShotsCoef"=dword:00000000
"GKLongThrowsCoef"=dword:00000000
"GKMarkingCoef"=dword:00000000
"GKPassingCoef"=dword:00000000
"GKPenaltiesCoef"=dword:00000000
"GKTacklingCoef"=dword:00000005
"GKTechniqueCoef"=dword:00000000
"GKLeftFootCoef"=dword:00000000
"GKRightFootCoef"=dword:00000000
"GKAggressionCoef"=dword:0000000a
"GKAnticipationCoef"=dword:00000005
"GKBraveryCoef"=dword:00000014
"GKComposureCoef"=dword:00000014
"GKConcentrationCoef"=dword:0000000a
"GKConsistencyCoef"=dword:0000000a
"GKCreativityCoef"=dword:00000000
"GKDecisionsCoef"=dword:00000014
"GKDeterminationCoef"=dword:0000000a
"GKDirtinessCoef"=dword:fffffffb
"GKFlairCoef"=dword:00000000
"GKImportantMatchesCoef"=dword:0000000a
"GKInfluenceCoef"=dword:0000000a
"GKOffTheBallCoef"=dword:00000000
"GKPositioningCoef"=dword:00000050
"GKTeamworkCoef"=dword:00000005
"GKWorkRateCoef"=dword:00000000
"GKAccelerationCoef"=dword:00000005
"GKAgilityCoef"=dword:0000000a
"GKBalanceCoef"=dword:0000000a
"GKInjuryPronenessCoef"=dword:fffffffb
"GKJumpingCoef"=dword:00000050
"GKNaturalFitnessCoef"=dword:00000005
"GKPaceCoef"=dword:00000000
"GKStaminaCoef"=dword:00000000
"GKStrengthCoef"=dword:0000000a
"GKVersatilityCoef"=dword:00000000
"GKAerialAbilityCoef"=dword:00000032
"GKCommandOfAreaCoef"=dword:00000014
"GKCommunicationCoef"=dword:00000032
"GKEccentricityCoef"=dword:ffffffec
"GKHandlingCoef"=dword:00000064
"GKKickingCoef"=dword:0000000a
"GKOneOnOnesCoef"=dword:00000032
"GKReflexesCoef"=dword:00000064
"GKRushingOutCoef"=dword:00000014
"GKTendencyToPunchCoef"=dword:fffffff6
"GKThrowingCoef"=dword:0000000a
"GKAdaptabilityCoef"=dword:00000005
"GKAmbitionCoef"=dword:0000000a
"GKControversyCoef"=dword:fffffffb
"GKLoyalityCoef"=dword:00000005
"GKPressureCoef"=dword:00000005
"GKProfessionalismCoef"=dword:00000005
"GKSportsmanshipCoef"=dword:00000005
"GKTemperamentCoef"=dword:00000005
"SWWeightCoef"=dword:00000066
"SWCurrentAbilityCoef"=dword:00000000
"SWCornersCoef"=dword:00000000
"SWCrossingCoef"=dword:00000000
"SWDribblingCoef"=dword:00000000
"SWFinishingCoef"=dword:00000000
"SWFirstTouchCoef"=dword:00000014
"SWFreeKicksCoef"=dword:0000000a
"SWHeadingCoef"=dword:00000064
"SWLongShotsCoef"=dword:0000000a
"SWLongThrowsCoef"=dword:00000000
"SWMarkingCoef"=dword:00000064
"SWPassingCoef"=dword:0000000a
"SWPenaltiesCoef"=dword:00000005
"SWTacklingCoef"=dword:00000064
"SWTechniqueCoef"=dword:0000000a
"SWLeftFootCoef"=dword:00000005
"SWRightFootCoef"=dword:00000005
"SWAggressionCoef"=dword:00000014
"SWAnticipationCoef"=dword:00000014
"SWBraveryCoef"=dword:00000028
"SWComposureCoef"=dword:00000028
"SWConcentrationCoef"=dword:0000003c
"SWConsistencyCoef"=dword:0000000a
"SWCreativityCoef"=dword:0000000a
"SWDecisionsCoef"=dword:00000014
"SWDeterminationCoef"=dword:0000000a
"SWDirtinessCoef"=dword:ffffffe7
"SWFlairCoef"=dword:00000000
"SWImportantMatchesCoef"=dword:0000000a
"SWInfluenceCoef"=dword:0000000a
"SWOffTheBallCoef"=dword:0000000a
"SWPositioningCoef"=dword:00000064
"SWTeamworkCoef"=dword:00000028
"SWWorkRateCoef"=dword:00000014
"SWAccelerationCoef"=dword:0000001e
"SWAgilityCoef"=dword:0000000a
"SWBalanceCoef"=dword:00000014
"SWInjuryPronenessCoef"=dword:fffffffb
"SWJumpingCoef"=dword:00000064
"SWNaturalFitnessCoef"=dword:00000005
"SWPaceCoef"=dword:00000014
"SWStaminaCoef"=dword:0000000a
"SWStrengthCoef"=dword:00000050
"SWVersatilityCoef"=dword:00000005
"SWAerialAbilityCoef"=dword:00000000
"SWCommandOfAreaCoef"=dword:00000000
"SWCommunicationCoef"=dword:00000000
"SWEccentricityCoef"=dword:00000000
"SWHandlingCoef"=dword:00000000
"SWKickingCoef"=dword:00000000
"SWOneOnOnesCoef"=dword:00000005
"SWReflexesCoef"=dword:00000005
"SWRushingOutCoef"=dword:00000000
"SWTendencyToPunchCoef"=dword:00000000
"SWThrowingCoef"=dword:00000000
"SWAdaptabilityCoef"=dword:00000005
"SWAmbitionCoef"=dword:0000000a
"SWControversyCoef"=dword:fffffffb
"SWLoyalityCoef"=dword:00000005
"SWPressureCoef"=dword:00000005
"SWProfessionalismCoef"=dword:00000005
"SWSportsmanshipCoef"=dword:00000005
"SWTemperamentCoef"=dword:00000005
"CBWeightCoef"=dword:00000064
"CBCurrentAbilityCoef"=dword:00000000
"CBCornersCoef"=dword:00000000
"CBCrossingCoef"=dword:00000000
"CBDribblingCoef"=dword:00000000
"CBFinishingCoef"=dword:00000000
"CBFirstTouchCoef"=dword:00000014
"CBFreeKicksCoef"=dword:0000000a
"CBHeadingCoef"=dword:00000064
"CBLongShotsCoef"=dword:0000000a
"CBLongThrowsCoef"=dword:00000000
"CBMarkingCoef"=dword:00000050
"CBPassingCoef"=dword:00000014
"CBPenaltiesCoef"=dword:00000005
"CBTacklingCoef"=dword:00000064
"CBTechniqueCoef"=dword:0000000a
"CBLeftFootCoef"=dword:00000005
"CBRightFootCoef"=dword:00000005
"CBAggressionCoef"=dword:00000014
"CBAnticipationCoef"=dword:00000014
"CBBraveryCoef"=dword:00000028
"CBComposureCoef"=dword:00000014
"CBConcentrationCoef"=dword:00000028
"CBConsistencyCoef"=dword:0000000a
"CBCreativityCoef"=dword:0000000a
"CBDecisionsCoef"=dword:00000014
"CBDeterminationCoef"=dword:0000000a
"CBDirtinessCoef"=dword:ffffffec
"CBFlairCoef"=dword:00000000
"CBImportantMatchesCoef"=dword:0000000a
"CBInfluenceCoef"=dword:0000000a
"CBOffTheBallCoef"=dword:0000000a
"CBPositioningCoef"=dword:00000050
"CBTeamworkCoef"=dword:00000028
"CBWorkRateCoef"=dword:00000014
"CBAccelerationCoef"=dword:00000028
"CBAgilityCoef"=dword:0000000a
"CBBalanceCoef"=dword:00000014
"CBInjuryPronenessCoef"=dword:fffffffb
"CBJumpingCoef"=dword:00000064
"CBNaturalFitnessCoef"=dword:00000005
"CBPaceCoef"=dword:0000001e
"CBStaminaCoef"=dword:0000000a
"CBStrengthCoef"=dword:0000003c
"CBVersatilityCoef"=dword:00000005
"CBAerialAbilityCoef"=dword:00000000
"CBCommandOfAreaCoef"=dword:00000000
"CBCommunicationCoef"=dword:00000000
"CBEccentricityCoef"=dword:00000000
"CBHandlingCoef"=dword:00000000
"CBKickingCoef"=dword:00000000
"CBOneOnOnesCoef"=dword:00000005
"CBReflexesCoef"=dword:00000005
"CBRushingOutCoef"=dword:00000000
"CBTendencyToPunchCoef"=dword:00000000
"CBThrowingCoef"=dword:00000000
"CBAdaptabilityCoef"=dword:00000005
"CBAmbitionCoef"=dword:0000000a
"CBControversyCoef"=dword:fffffffb
"CBLoyalityCoef"=dword:00000005
"CBPressureCoef"=dword:00000005
"CBProfessionalismCoef"=dword:00000005
"CBSportsmanshipCoef"=dword:00000005
"CBTemperamentCoef"=dword:00000005
"FBWeightCoef"=dword:00000069
"FBCurrentAbilityCoef"=dword:00000000
"FBCornersCoef"=dword:0000000a
"FBCrossingCoef"=dword:0000001e
"FBDribblingCoef"=dword:00000014
"FBFinishingCoef"=dword:00000000
"FBFirstTouchCoef"=dword:00000014
"FBFreeKicksCoef"=dword:0000000a
"FBHeadingCoef"=dword:0000003c
"FBLongShotsCoef"=dword:0000000a
"FBLongThrowsCoef"=dword:0000000a
"FBMarkingCoef"=dword:0000003c
"FBPassingCoef"=dword:0000001e
"FBPenaltiesCoef"=dword:00000005
"FBTacklingCoef"=dword:00000064
"FBTechniqueCoef"=dword:00000014
"FBLeftFootCoef"=dword:00000005
"FBRightFootCoef"=dword:00000005
"FBAggressionCoef"=dword:0000000f
"FBAnticipationCoef"=dword:00000050
"FBBraveryCoef"=dword:00000014
"FBComposureCoef"=dword:0000000a
"FBConcentrationCoef"=dword:0000001e
"FBConsistencyCoef"=dword:0000000a
"FBCreativityCoef"=dword:0000000a
"FBDecisionsCoef"=dword:00000014
"FBDeterminationCoef"=dword:0000000a
"FBDirtinessCoef"=dword:fffffff6
"FBFlairCoef"=dword:00000005
"FBImportantMatchesCoef"=dword:0000000a
"FBInfluenceCoef"=dword:0000000a
"FBOffTheBallCoef"=dword:00000014
"FBPositioningCoef"=dword:00000064
"FBTeamworkCoef"=dword:00000014
"FBWorkRateCoef"=dword:00000014
"FBAccelerationCoef"=dword:0000003c
"FBAgilityCoef"=dword:0000000a
"FBBalanceCoef"=dword:00000014
"FBInjuryPronenessCoef"=dword:fffffffb
"FBJumpingCoef"=dword:0000003c
"FBNaturalFitnessCoef"=dword:00000005
"FBPaceCoef"=dword:00000050
"FBStaminaCoef"=dword:0000003c
"FBStrengthCoef"=dword:00000028
"FBVersatilityCoef"=dword:00000005
"FBAerialAbilityCoef"=dword:00000000
"FBCommandOfAreaCoef"=dword:00000000
"FBCommunicationCoef"=dword:00000000
"FBEccentricityCoef"=dword:00000000
"FBHandlingCoef"=dword:00000000
"FBKickingCoef"=dword:00000000
"FBOneOnOnesCoef"=dword:00000005
"FBReflexesCoef"=dword:00000005
"FBRushingOutCoef"=dword:00000000
"FBTendencyToPunchCoef"=dword:00000000
"FBThrowingCoef"=dword:00000000
"FBAdaptabilityCoef"=dword:00000005
"FBAmbitionCoef"=dword:0000000a
"FBControversyCoef"=dword:fffffffb
"FBLoyalityCoef"=dword:00000005
"FBPressureCoef"=dword:00000005
"FBProfessionalismCoef"=dword:00000005
"FBSportsmanshipCoef"=dword:00000005
"FBTemperamentCoef"=dword:00000005
"WBWeightCoef"=dword:0000006c
"WBCurrentAbilityCoef"=dword:00000000
"WBCornersCoef"=dword:0000000a
"WBCrossingCoef"=dword:0000003c
"WBDribblingCoef"=dword:00000028
"WBFinishingCoef"=dword:0000000a
"WBFirstTouchCoef"=dword:00000014
"WBFreeKicksCoef"=dword:0000000a
"WBHeadingCoef"=dword:00000028
"WBLongShotsCoef"=dword:00000014
"WBLongThrowsCoef"=dword:0000000a
"WBMarkingCoef"=dword:0000003c
"WBPassingCoef"=dword:00000028
"WBPenaltiesCoef"=dword:00000005
"WBTacklingCoef"=dword:00000064
"WBTechniqueCoef"=dword:00000028
"WBLeftFootCoef"=dword:00000005
"WBRightFootCoef"=dword:00000005
"WBAggressionCoef"=dword:0000000a
"WBAnticipationCoef"=dword:00000050
"WBBraveryCoef"=dword:0000000a
"WBComposureCoef"=dword:0000000a
"WBConcentrationCoef"=dword:00000014
"WBConsistencyCoef"=dword:0000000a
"WBCreativityCoef"=dword:00000014
"WBDecisionsCoef"=dword:00000014
"WBDeterminationCoef"=dword:0000000a
"WBDirtinessCoef"=dword:fffffff6
"WBFlairCoef"=dword:0000000a
"WBImportantMatchesCoef"=dword:0000000a
"WBInfluenceCoef"=dword:0000000a
"WBOffTheBallCoef"=dword:00000014
"WBPositioningCoef"=dword:00000064
"WBTeamworkCoef"=dword:00000014
"WBWorkRateCoef"=dword:00000028
"WBAccelerationCoef"=dword:00000050
"WBAgilityCoef"=dword:0000000a
"WBBalanceCoef"=dword:00000014
"WBInjuryPronenessCoef"=dword:fffffffb
"WBJumpingCoef"=dword:00000014
"WBNaturalFitnessCoef"=dword:00000005
"WBPaceCoef"=dword:00000064
"WBStaminaCoef"=dword:00000050
"WBStrengthCoef"=dword:00000028
"WBVersatilityCoef"=dword:00000005
"WBAerialAbilityCoef"=dword:00000000
"WBCommandOfAreaCoef"=dword:00000000
"WBCommunicationCoef"=dword:00000000
"WBEccentricityCoef"=dword:00000000
"WBHandlingCoef"=dword:00000000
"WBKickingCoef"=dword:00000000
"WBOneOnOnesCoef"=dword:00000005
"WBReflexesCoef"=dword:00000005
"WBRushingOutCoef"=dword:00000000
"WBTendencyToPunchCoef"=dword:00000000
"WBThrowingCoef"=dword:00000000
"WBAdaptabilityCoef"=dword:00000005
"WBAmbitionCoef"=dword:0000000a
"WBControversyCoef"=dword:fffffffb
"WBLoyalityCoef"=dword:00000005
"WBPressureCoef"=dword:00000005
"WBProfessionalismCoef"=dword:00000005
"WBSportsmanshipCoef"=dword:00000005
"WBTemperamentCoef"=dword:00000005
"DMWeightCoef"=dword:00000067
"DMCurrentAbilityCoef"=dword:00000000
"DMCornersCoef"=dword:0000000a
"DMCrossingCoef"=dword:0000001e
"DMDribblingCoef"=dword:00000014
"DMFinishingCoef"=dword:0000000a
"DMFirstTouchCoef"=dword:0000001e
"DMFreeKicksCoef"=dword:0000000a
"DMHeadingCoef"=dword:00000028
"DMLongShotsCoef"=dword:00000014
"DMLongThrowsCoef"=dword:00000005
"DMMarkingCoef"=dword:0000003c
"DMPassingCoef"=dword:00000028
"DMPenaltiesCoef"=dword:00000005
"DMTacklingCoef"=dword:00000064
"DMTechniqueCoef"=dword:0000001e
"DMLeftFootCoef"=dword:00000005
"DMRightFootCoef"=dword:00000005
"DMAggressionCoef"=dword:00000028
"DMAnticipationCoef"=dword:00000028
"DMBraveryCoef"=dword:00000014
"DMComposureCoef"=dword:0000000a
"DMConcentrationCoef"=dword:00000014
"DMConsistencyCoef"=dword:0000000a
"DMCreativityCoef"=dword:00000014
"DMDecisionsCoef"=dword:00000014
"DMDeterminationCoef"=dword:0000000a
"DMDirtinessCoef"=dword:fffffff6
"DMFlairCoef"=dword:0000000a
"DMImportantMatchesCoef"=dword:0000000a
"DMInfluenceCoef"=dword:0000000a
"DMOffTheBallCoef"=dword:0000001e
"DMPositioningCoef"=dword:00000050
"DMTeamworkCoef"=dword:00000028
"DMWorkRateCoef"=dword:00000050
"DMAccelerationCoef"=dword:00000028
"DMAgilityCoef"=dword:0000000a
"DMBalanceCoef"=dword:0000000a
"DMInjuryPronenessCoef"=dword:fffffffb
"DMJumpingCoef"=dword:00000028
"DMNaturalFitnessCoef"=dword:00000005
"DMPaceCoef"=dword:00000028
"DMStaminaCoef"=dword:0000003c
"DMStrengthCoef"=dword:00000028
"DMVersatilityCoef"=dword:00000005
"DMAerialAbilityCoef"=dword:00000000
"DMCommandOfAreaCoef"=dword:00000000
"DMCommunicationCoef"=dword:00000000
"DMEccentricityCoef"=dword:00000000
"DMHandlingCoef"=dword:00000000
"DMKickingCoef"=dword:00000000
"DMOneOnOnesCoef"=dword:00000005
"DMReflexesCoef"=dword:00000005
"DMRushingOutCoef"=dword:00000000
"DMTendencyToPunchCoef"=dword:00000000
"DMThrowingCoef"=dword:00000000
"DMAdaptabilityCoef"=dword:00000005
"DMAmbitionCoef"=dword:0000000a
"DMControversyCoef"=dword:fffffffb
"DMLoyalityCoef"=dword:00000005
"DMPressureCoef"=dword:00000005
"DMProfessionalismCoef"=dword:00000005
"DMSportsmanshipCoef"=dword:00000005
"DMTemperamentCoef"=dword:00000005
"MWeightCoef"=dword:00000068
"MCurrentAbilityCoef"=dword:00000000
"MCornersCoef"=dword:0000000a
"MCrossingCoef"=dword:00000028
"MDribblingCoef"=dword:00000032
"MFinishingCoef"=dword:00000014
"MFirstTouchCoef"=dword:0000001e
"MFreeKicksCoef"=dword:0000000a
"MHeadingCoef"=dword:0000001e
"MLongShotsCoef"=dword:00000014
"MLongThrowsCoef"=dword:00000005
"MMarkingCoef"=dword:00000028
"MPassingCoef"=dword:00000046
"MPenaltiesCoef"=dword:00000005
"MTacklingCoef"=dword:0000003c
"MTechniqueCoef"=dword:00000032
"MLeftFootCoef"=dword:00000005
"MRightFootCoef"=dword:00000005
"MAggressionCoef"=dword:0000001e
"MAnticipationCoef"=dword:00000028
"MBraveryCoef"=dword:0000000a
"MComposureCoef"=dword:0000000a
"MConcentrationCoef"=dword:0000000a
"MConsistencyCoef"=dword:0000000a
"MCreativityCoef"=dword:0000003c
"MDecisionsCoef"=dword:0000001e
"MDeterminationCoef"=dword:0000000a
"MDirtinessCoef"=dword:fffffffb
"MFlairCoef"=dword:0000000a
"MImportantMatchesCoef"=dword:0000000a
"MInfluenceCoef"=dword:0000000a
"MOffTheBallCoef"=dword:00000028
"MPositioningCoef"=dword:00000028
"MTeamworkCoef"=dword:00000032
"MWorkRateCoef"=dword:00000032
"MAccelerationCoef"=dword:00000032
"MAgilityCoef"=dword:0000000a
"MBalanceCoef"=dword:0000000a
"MInjuryPronenessCoef"=dword:fffffffb
"MJumpingCoef"=dword:00000028
"MNaturalFitnessCoef"=dword:00000005
"MPaceCoef"=dword:00000028
"MStaminaCoef"=dword:0000003c
"MStrengthCoef"=dword:0000001e
"MVersatilityCoef"=dword:00000005
"MAerialAbilityCoef"=dword:00000000
"MCommandOfAreaCoef"=dword:00000000
"MCommunicationCoef"=dword:00000000
"MEccentricityCoef"=dword:00000000
"MHandlingCoef"=dword:00000000
"MKickingCoef"=dword:00000000
"MOneOnOnesCoef"=dword:00000005
"MReflexesCoef"=dword:00000005
"MRushingOutCoef"=dword:00000000
"MTendencyToPunchCoef"=dword:00000000
"MThrowingCoef"=dword:00000000
"MAdaptabilityCoef"=dword:00000005
"MAmbitionCoef"=dword:0000000a
"MControversyCoef"=dword:fffffffb
"MLoyalityCoef"=dword:00000005
"MPressureCoef"=dword:00000005
"MProfessionalismCoef"=dword:00000005
"MSportsmanshipCoef"=dword:00000005
"MTemperamentCoef"=dword:00000005
"AMWeightCoef"=dword:00000068
"AMCurrentAbilityCoef"=dword:00000000
"AMCornersCoef"=dword:0000000a
"AMCrossingCoef"=dword:0000003c
"AMDribblingCoef"=dword:00000050
"AMFinishingCoef"=dword:00000028
"AMFirstTouchCoef"=dword:0000001e
"AMFreeKicksCoef"=dword:0000000a
"AMHeadingCoef"=dword:00000014
"AMLongShotsCoef"=dword:00000014
"AMLongThrowsCoef"=dword:00000005
"AMMarkingCoef"=dword:0000000a
"AMPassingCoef"=dword:00000064
"AMPenaltiesCoef"=dword:00000005
"AMTacklingCoef"=dword:0000000a
"AMTechniqueCoef"=dword:00000050
"AMLeftFootCoef"=dword:00000005
"AMRightFootCoef"=dword:00000005
"AMAggressionCoef"=dword:0000000a
"AMAnticipationCoef"=dword:0000001e
"AMBraveryCoef"=dword:0000000a
"AMComposureCoef"=dword:0000000a
"AMConcentrationCoef"=dword:0000000a
"AMConsistencyCoef"=dword:0000000a
"AMCreativityCoef"=dword:00000064
"AMDecisionsCoef"=dword:00000028
"AMDeterminationCoef"=dword:0000000a
"AMDirtinessCoef"=dword:fffffffb
"AMFlairCoef"=dword:00000014
"AMImportantMatchesCoef"=dword:0000000a
"AMInfluenceCoef"=dword:0000000a
"AMOffTheBallCoef"=dword:0000003c
"AMPositioningCoef"=dword:00000014
"AMTeamworkCoef"=dword:0000003c
"AMWorkRateCoef"=dword:00000014
"AMAccelerationCoef"=dword:0000003c
"AMAgilityCoef"=dword:0000000a
"AMBalanceCoef"=dword:0000000a
"AMInjuryPronenessCoef"=dword:fffffffb
"AMJumpingCoef"=dword:00000014
"AMNaturalFitnessCoef"=dword:00000005
"AMPaceCoef"=dword:0000003c
"AMStaminaCoef"=dword:0000003c
"AMStrengthCoef"=dword:00000014
"AMVersatilityCoef"=dword:00000005
"AMAerialAbilityCoef"=dword:00000000
"AMCommandOfAreaCoef"=dword:00000000
"AMCommunicationCoef"=dword:00000000
"AMEccentricityCoef"=dword:00000000
"AMHandlingCoef"=dword:00000000
"AMKickingCoef"=dword:00000000
"AMOneOnOnesCoef"=dword:00000005
"AMReflexesCoef"=dword:00000005
"AMRushingOutCoef"=dword:00000000
"AMTendencyToPunchCoef"=dword:00000000
"AMThrowingCoef"=dword:00000000
"AMAdaptabilityCoef"=dword:00000005
"AMAmbitionCoef"=dword:0000000a
"AMControversyCoef"=dword:fffffffb
"AMLoyalityCoef"=dword:00000005
"AMPressureCoef"=dword:00000005
"AMProfessionalismCoef"=dword:00000005
"AMSportsmanshipCoef"=dword:00000005
"AMTemperamentCoef"=dword:00000005
"WWeightCoef"=dword:00000069
"WCurrentAbilityCoef"=dword:00000000
"WCornersCoef"=dword:0000000a
"WCrossingCoef"=dword:00000064
"WDribblingCoef"=dword:00000064
"WFinishingCoef"=dword:0000003c
"WFirstTouchCoef"=dword:0000001e
"WFreeKicksCoef"=dword:0000000a
"WHeadingCoef"=dword:00000014
"WLongShotsCoef"=dword:00000014
"WLongThrowsCoef"=dword:00000005
"WMarkingCoef"=dword:0000000a
"WPassingCoef"=dword:0000003c
"WPenaltiesCoef"=dword:00000005
"WTacklingCoef"=dword:0000000a
"WTechniqueCoef"=dword:00000050
"WLeftFootCoef"=dword:00000005
"WRightFootCoef"=dword:00000005
"WAggressionCoef"=dword:0000000a
"WAnticipationCoef"=dword:00000014
"WBraveryCoef"=dword:0000000a
"WComposureCoef"=dword:0000000a
"WConcentrationCoef"=dword:0000000a
"WConsistencyCoef"=dword:0000000a
"WCreativityCoef"=dword:0000003c
"WDecisionsCoef"=dword:00000014
"WDeterminationCoef"=dword:0000000a
"WDirtinessCoef"=dword:fffffffb
"WFlairCoef"=dword:0000000a
"WImportantMatchesCoef"=dword:00000014
"WInfluenceCoef"=dword:0000000a
"WOffTheBallCoef"=dword:0000003c
"WPositioningCoef"=dword:00000014
"WTeamworkCoef"=dword:0000001e
"WWorkRateCoef"=dword:0000001e
"WAccelerationCoef"=dword:00000050
"WAgilityCoef"=dword:00000014
"WBalanceCoef"=dword:0000000a
"WInjuryPronenessCoef"=dword:fffffffb
"WJumpingCoef"=dword:00000014
"WNaturalFitnessCoef"=dword:00000005
"WPaceCoef"=dword:00000064
"WStaminaCoef"=dword:0000003c
"WStrengthCoef"=dword:00000014
"WVersatilityCoef"=dword:00000005
"WAerialAbilityCoef"=dword:00000000
"WCommandOfAreaCoef"=dword:00000000
"WCommunicationCoef"=dword:00000000
"WEccentricityCoef"=dword:00000000
"WHandlingCoef"=dword:00000000
"WKickingCoef"=dword:00000000
"WOneOnOnesCoef"=dword:00000005
"WReflexesCoef"=dword:00000005
"WRushingOutCoef"=dword:00000000
"WTendencyToPunchCoef"=dword:00000000
"WThrowingCoef"=dword:00000000
"WAdaptabilityCoef"=dword:00000005
"WAmbitionCoef"=dword:0000000a
"WControversyCoef"=dword:fffffffb
"WLoyalityCoef"=dword:00000005
"WPressureCoef"=dword:00000005
"WProfessionalismCoef"=dword:00000005
"WSportsmanshipCoef"=dword:00000005
"WTemperamentCoef"=dword:00000005
"FSTWeightCoef"=dword:00000067
"FSTCurrentAbilityCoef"=dword:00000000
"FSTCornersCoef"=dword:0000000a
"FSTCrossingCoef"=dword:0000000a
"FSTDribblingCoef"=dword:00000050
"FSTFinishingCoef"=dword:00000064
"FSTFirstTouchCoef"=dword:00000028
"FSTFreeKicksCoef"=dword:0000000a
"FSTHeadingCoef"=dword:00000028
"FSTLongShotsCoef"=dword:00000014
"FSTLongThrowsCoef"=dword:00000000
"FSTMarkingCoef"=dword:00000000
"FSTPassingCoef"=dword:00000028
"FSTPenaltiesCoef"=dword:00000005
"FSTTacklingCoef"=dword:00000000
"FSTTechniqueCoef"=dword:00000050
"FSTLeftFootCoef"=dword:00000005
"FSTRightFootCoef"=dword:00000005
"FSTAggressionCoef"=dword:0000000a
"FSTAnticipationCoef"=dword:0000000a
"FSTBraveryCoef"=dword:0000000a
"FSTComposureCoef"=dword:0000000a
"FSTConcentrationCoef"=dword:0000000a
"FSTConsistencyCoef"=dword:0000000a
"FSTCreativityCoef"=dword:00000028
"FSTDecisionsCoef"=dword:0000000a
"FSTDeterminationCoef"=dword:0000000a
"FSTDirtinessCoef"=dword:fffffffb
"FSTFlairCoef"=dword:0000000a
"FSTImportantMatchesCoef"=dword:0000000a
"FSTInfluenceCoef"=dword:0000000a
"FSTOffTheBallCoef"=dword:00000050
"FSTPositioningCoef"=dword:0000000a
"FSTTeamworkCoef"=dword:0000000a
"FSTWorkRateCoef"=dword:0000000a
"FSTAccelerationCoef"=dword:00000064
"FSTAgilityCoef"=dword:00000028
"FSTBalanceCoef"=dword:0000000a
"FSTInjuryPronenessCoef"=dword:fffffffb
"FSTJumpingCoef"=dword:00000014
"FSTNaturalFitnessCoef"=dword:00000005
"FSTPaceCoef"=dword:00000064
"FSTStaminaCoef"=dword:00000028
"FSTStrengthCoef"=dword:00000014
"FSTVersatilityCoef"=dword:00000005
"FSTAerialAbilityCoef"=dword:00000000
"FSTCommandOfAreaCoef"=dword:00000000
"FSTCommunicationCoef"=dword:00000000
"FSTEccentricityCoef"=dword:00000000
"FSTHandlingCoef"=dword:00000000
"FSTKickingCoef"=dword:00000000
"FSTOneOnOnesCoef"=dword:00000005
"FSTReflexesCoef"=dword:00000005
"FSTRushingOutCoef"=dword:00000000
"FSTTendencyToPunchCoef"=dword:00000000
"FSTThrowingCoef"=dword:00000000
"FSTAdaptabilityCoef"=dword:00000005
"FSTAmbitionCoef"=dword:0000000a
"FSTControversyCoef"=dword:fffffffb
"FSTLoyalityCoef"=dword:00000005
"FSTPressureCoef"=dword:00000005
"FSTProfessionalismCoef"=dword:00000005
"FSTSportsmanshipCoef"=dword:00000005
"FSTTemperamentCoef"=dword:00000005
"TSTWeightCoef"=dword:00000067
"TSTCurrentAbilityCoef"=dword:00000000
"TSTCornersCoef"=dword:00000000
"TSTCrossingCoef"=dword:0000000a
"TSTDribblingCoef"=dword:0000003c
"TSTFinishingCoef"=dword:00000050
"TSTFirstTouchCoef"=dword:0000001e
"TSTFreeKicksCoef"=dword:0000000a
"TSTHeadingCoef"=dword:00000064
"TSTLongShotsCoef"=dword:00000014
"TSTLongThrowsCoef"=dword:00000000
"TSTMarkingCoef"=dword:00000000
"TSTPassingCoef"=dword:00000028
"TSTPenaltiesCoef"=dword:00000005
"TSTTacklingCoef"=dword:00000000
"TSTTechniqueCoef"=dword:00000028
"TSTLeftFootCoef"=dword:00000005
"TSTRightFootCoef"=dword:00000005
"TSTAggressionCoef"=dword:00000014
"TSTAnticipationCoef"=dword:0000000a
"TSTBraveryCoef"=dword:00000014
"TSTComposureCoef"=dword:0000000a
"TSTConcentrationCoef"=dword:0000000a
"TSTConsistencyCoef"=dword:0000000a
"TSTCreativityCoef"=dword:00000014
"TSTDecisionsCoef"=dword:0000000a
"TSTDeterminationCoef"=dword:0000000a
"TSTDirtinessCoef"=dword:fffffffb
"TSTFlairCoef"=dword:0000000a
"TSTImportantMatchesCoef"=dword:0000000a
"TSTInfluenceCoef"=dword:0000000a
"TSTOffTheBallCoef"=dword:00000050
"TSTPositioningCoef"=dword:00000014
"TSTTeamworkCoef"=dword:0000000a
"TSTWorkRateCoef"=dword:0000000a
"TSTAccelerationCoef"=dword:00000028
"TSTAgilityCoef"=dword:00000014
"TSTBalanceCoef"=dword:00000014
"TSTInjuryPronenessCoef"=dword:fffffffb
"TSTJumpingCoef"=dword:00000064
"TSTNaturalFitnessCoef"=dword:00000005
"TSTPaceCoef"=dword:00000028
"TSTStaminaCoef"=dword:00000014
"TSTStrengthCoef"=dword:00000050
"TSTVersatilityCoef"=dword:00000005
"TSTAerialAbilityCoef"=dword:00000000
"TSTCommandOfAreaCoef"=dword:00000000
"TSTCommunicationCoef"=dword:00000000
"TSTEccentricityCoef"=dword:00000000
"TSTHandlingCoef"=dword:00000000
"TSTKickingCoef"=dword:00000000
"TSTOneOnOnesCoef"=dword:00000005
"TSTReflexesCoef"=dword:00000005
"TSTRushingOutCoef"=dword:00000000
"TSTTendencyToPunchCoef"=dword:00000000
"TSTThrowingCoef"=dword:00000000
"TSTAdaptabilityCoef"=dword:00000005
"TSTAmbitionCoef"=dword:0000000a
"TSTControversyCoef"=dword:fffffffb
"TSTLoyalityCoef"=dword:00000005
"TSTPressureCoef"=dword:00000005
"TSTProfessionalismCoef"=dword:00000005
"TSTSportsmanshipCoef"=dword:00000005
"TSTTemperamentCoef"=dword:00000005

[HKEY_USERS\S-1-5-21-3398244231-3639263185-3890589703-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2009]
"GameDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\games"
"ShortlistDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\shortlists"
"ScreenshotsDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009"
"SaveDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\"
"HistoryDir"="c:\\DOCUME~1\\User\\LOCALS~1\\Temp\\Rar$EX00.250\\FM Genie Scout 2009\\History Points"
"LangDB"="c:\\Program Files\\Sports Interactive\\Football Manager 2009\\data\\updates\\update-910\\db\\910\\lang_db.dat"
"LastSaveGame"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\games\\Alex.PAOKGenie.fm"
"Language"="English"
"LoadLangDB"=dword:00000001
"CompressHistoryPoints"=dword:00000000
"HighlightedAttributes"=dword:00000000
"MinCondition"=dword:00000050
"SkinName"="Champions League"
"LastUpdateCheck"=dword:00009b75
"HighQualityGUI"=dword:00000001
"AutomaticallyUpdateCheck"=dword:00000001
"AdvancedGeneration"=dword:00000000
"TranslateStaffSkills"=dword:00000001
"TranslatePlayerSkills"=dword:00000001
"TranslatePositions"=dword:00000001
"ShowHistory"=dword:00000001
"Version"=dword:00000065
"UniqueID"="35-E180-E53F"
"UseProxy"=dword:00000000
"ProxyHost"=""
"ProxyPort"=""
"UseAuthentication"=dword:00000000
"UserName"=""
"UserPassword"=""
"Currency"=dword:00000056

[HKEY_USERS\S-1-5-21-3398244231-3639263185-3890589703-1004\Software\G*e*n*i*e*"!\FM Genie Scout 2009 XE]
"GameDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\games"
"ShortlistDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\shortlists"
"ScreenshotsDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009"
"SaveDir"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\"
"HistoryDir"="c:\\DOCUME~1\\User\\LOCALS~1\\Temp\\Rar$EX00.156\\FM Genie Scout 2009 XE\\History Points"
"LangDB"="c:\\Program Files\\Sports Interactive\\Football Manager 2009\\data\\updates\\update-910\\db\\910\\lang_db.dat"
"LastSaveGame"="c:\\Documents and Settings\\User\\Τα έγγραφά μου\\Sports Interactive\\Football Manager 2009\\games\\All.Playa.fm"
"Language"="English"
"LoadLangDB"=dword:00000001
"CompressHistoryPoints"=dword:00000000
"HighlightedAttributes"=dword:00000000
"MinCondition"=dword:00000050
"SkinName"="FM 2009"
"LastUpdateCheck"=dword:00009b75
"HighQualityGUI"=dword:00000001
"AutomaticallyUpdateCheck"=dword:00000000
"AdvancedGeneration"=dword:00000000
"TranslateStaffSkills"=dword:00000001
"TranslatePlayerSkills"=dword:00000001
"TranslatePositions"=dword:00000001
"ShowHistory"=dword:00000001
"Version"=dword:00000067
"UniqueID"="35-E180-E53F"
"Currency"=dword:0000001c
"UseProxy"=dword:00000000
"ProxyHost"=""
"ProxyPort"=""
"UseAuthentication"=dword:00000000
"UserName"=""
"UserPassword"=""
"GraphStep"=dword:00000000
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'explorer.exe'(3356)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\rundll32.exe
c:\program files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2009-05-03 18:35 - machine was rebooted
ComboFix-quarantined-files.txt 2009-05-03 15:35

Pre-Run: 14 Κατάλογοι 99.607.547.904 διαθέσιμα byte
Post-Run: 13 Κατάλογοι 102.497.406.976 διαθέσιμα byte

1779 — E O F — 2009-05-03 13:25