MyCity » Ambulanta -> Arhiva Ambulante » Sumnjivi exe fajlovi

Sumnjivi exe fajlovi

Napisano na dan: 12.5.2013

Strana:
1
2

Sumnjivi exe fajlovi

Sledeća strana

Pagination

Odgovori

Strana:
1
2

Vladan Petkovic Poslao: 12 Maj 2013 17:55 Idi na vrh
offline Vladan Petkovic Novi MyCity građanin Pridružio: 05 Avg 2012 Poruke: 7	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Imam summljive fajlove u procesu : lsass.exe ,services.exe , csrss.exe , smss.exe Ne znam na koj nacin da ih uklonim pokusao sam sa "Malwarebytes Anti-Malware","Sophos Virus Removal Tool" pronasli su neke druge viruse.. dok igram cs 1.6 ona veoma baguje DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 8.0.6001.18702 Run by KUCNI at 17:49:15 on 2013-05-12 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.97 [GMT 2:00] . AV: Avira Desktop Enabled/Updated {AD166499-45F9-482A-A743-FDD3350758C7} FW: ZoneAlarm Free Firewall Firewall Disabled . ============== Running Processes ================ . C:\Windows\system32\nvsvc32.exe C:\Windows\Explorer.exe C:\Windows\services.exe C:\Windows\system32\ctfmon.exe C:\Documents and Settings\KUCNI\Desktop\IGRICE\CS 1.6\monitor.exe C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe C:\Documents and Settings\KUCNI\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\KUCNI\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\KUCNI\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\KUCNI\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\system32\svchost.exe -k netsvcs . ============== Pseudo HJT Report =============== . uStart Page = about:blank mStart Page = about:blank uInternet Connection Wizard,ShellNext = iexplore uURLSearchHooks: <No Name>: - LocalServer32 - <no file> mURLSearchHooks: <No Name>: - LocalServer32 - <no file> mWinlogon: Shell = Explorer.exe c:\windows\system32\fservice.exe uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [SoundMan] SOUNDMAN.EXE mRun: [LogMeIn Hamachi Ui] "d:\program files\logmein hamachi\hamachi-2-ui.exe" --auto-start dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE mExplorerRun: [DirectX For Microsoft® Windows] c:\windows\system32\fservice.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:221 mPolicies-Explorer: NoDriveAutoRun = dword:67108863 mPolicies-Explorer: NoDriveTypeAutoRun = dword:323 mPolicies-Explorer: NoDrives = dword:0 mPolicies-Explorer: NoDriveTypeAutoRun = dword:323 mPolicies-Explorer: NoDriveAutoRun = dword:67108863 TCP: NameServer = 192.168.1.1 TCP: Interfaces\{5FA3B8E9-E6E9-44B9-A8D9-A10DD3D95D2E} : DHCPNameServer = 192.168.1.1 Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll SecurityProviders: SecurityProviders = msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg mASetup: {5Y99AE78-58TT-11dW-BE53-Y67078979Y} - c:\windows\system\sservice.exe . ============= SERVICES / DRIVERS =============== . R0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [2013-1-8 13560] R0 mv61xxmm;mv61xxmm;c:\windows\system32\drivers\mv61xxmm.sys [2012-4-14 13616] R0 mv64xxmm;mv64xxmm;c:\windows\system32\drivers\mv64xxmm.sys [2012-4-14 5632] R0 mvxxmm;mvxxmm;c:\windows\system32\drivers\mvxxmm.sys [2012-4-14 13616] R1 PStrip;PSTRIP;c:\windows\system32\drivers\pstrip.sys [2007-7-15 27992] R2 KSS;Kaspersky Security Scan Service;c:\program files\kaspersky lab\kaspersky security scan 2.0\kss.exe [2012-4-25 202296] R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-10-28 242240] S1 Vsdatant;vsdatant;c:\windows\system32\vsdatant.sys --> c:\windows\system32\vsdatant.sys [?] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\program files\logmein hamachi\hamachi-2.exe [2012-12-14 1436160] S3 0fb18E;0fb18E;c:\windows\system32\0fb18E.sys [2013-3-15 185824] S3 97534542;97534542; [x] S3 esgiguard;esgiguard;\??\c:\program files\enigma software group\spyhunter\esgiguard.sys --> c:\program files\enigma software group\spyhunter\esgiguard.sys [?] S3 EsgScanner;EsgScanner;c:\windows\system32\drivers\EsgScanner.sys [2012-6-22 19984] S3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [2013-1-9 33616] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-4-29 22856] S3 MBAMScheduler;MBAMScheduler;d:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2013-5-7 418376] S3 RkHit;RkHit;c:\windows\system32\drivers\RKHit.sys [2013-5-9 34736] S3 WinRing0_1_2_0;WinRing0_1_2_0;d:\program files\iobit\game booster 3\driver\WinRing0.sys [2013-5-12 14416] S4 lfaqeorr;IP Traffic Filter Controller;c:\windows\system32\svchost.exe -k netsvcs [2008-4-14 14336] S4 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-1-8 161536] S4 WiseBootAssistant;Wise Boot Assistant;d:\program files\wise\wise care 365\BootTime.exe [2013-3-31 580648] . =============== Created Last 30 ================ . 2013-05-12 14:51:48 153424 -c--a-w- c:\documents and settings\kucni\application data\r3.exe 2013-05-12 10:32:21 -------- dc----w- c:\documents and settings\kucni\local settings\application data\LogMeIn Hamachi 2013-05-12 09:55:38 -------- dc----w- c:\documents and settings\kucni\application data\ParetoLogic 2013-05-12 09:50:32 -------- dc----w- c:\documents and settings\kucni\application data\SpeedyPC Software 2013-05-11 17:08:58 36864 -c--a-w- c:\windows\system32\reginv.dll 2013-05-11 17:08:55 350764 -csh--w- c:\windows\system32\fservice.exe 2013-05-11 17:08:55 350764 -csh--w- c:\windows\system\sservice.exe 2013-05-11 17:08:55 350764 -csh--w- c:\windows\services.exe 2013-05-11 17:08:55 13312 -c--a-w- c:\windows\system32\winkey.dll 2013-05-11 17:08:53 1117296 -c--a-w- c:\windows\system32\lncom_.exe 2013-05-11 14:39:40 180224 -c--a-w- c:\windows\system32\nvudisp.exe 2013-05-11 14:39:40 -------- dc----w- c:\windows\nview 2013-05-11 14:39:29 180224 -c--a-w- c:\windows\system32\NVUNINST.EXE 2013-05-09 16:33:49 -------- dc----w- c:\program files\Kaspersky Lab 2013-05-09 15:29:07 34736 -c--a-w- c:\windows\system32\drivers\RKHit.sys 2013-05-09 15:25:39 -------- dc----w- c:\documents and settings\kucni\application data\GetRightToGo 2013-05-09 14:26:48 -------- dc----w- c:\program files\Enigma Software Group 2013-05-09 14:26:33 -------- dc----w- c:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP 2013-05-09 14:24:26 -------- dc----w- c:\documents and settings\kucni\application data\IObit 2013-05-09 11:38:34 -------- dc----w- c:\windows\0AC0F1B261C74B6EACEF58FCC0B94835.TMP 2013-05-08 16:29:58 -------- dc----w- c:\program files\common files\Steam 2013-05-08 14:30:54 -------- dc----w- C:\TDSSKiller_Quarantine 2013-05-07 17:11:19 -------- dc----w- c:\program files\common files\Wise Installation Wizard 2013-05-06 17:47:17 -------- dc----w- c:\documents and settings\all users\application data\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} 2013-05-06 17:47:05 -------- dc----w- c:\documents and settings\all users\application data\{BDDB56DE-AE4E-48A2-B856-FB60C8498453} 2013-05-06 17:44:39 -------- dc----w- c:\documents and settings\all users\application data\IObit 2013-05-06 17:13:07 -------- dc----w- c:\documents and settings\all users\application data\Spybot - Search & Destroy 2013-05-02 11:01:43 -------- dc----w- c:\program files\CCleaner 2013-05-01 15:33:53 -------- dc----w- c:\program files\RegClean Pro 2013-04-29 16:37:50 -------- dc----w- c:\documents and settings\kucni\application data\Malwarebytes 2013-04-29 16:37:49 22856 -c--a-w- c:\windows\system32\drivers\mbam.sys 2013-04-29 07:47:42 -------- dc----w- c:\documents and settings\kucni\application data\OpenCandy 2013-04-28 15:33:53 -------- dc----w- c:\documents and settings\all users\application data\RealHideIP 2013-04-28 09:32:54 -------- dc----w- c:\documents and settings\kucni\application data\TS3Client 2013-04-27 22:15:07 -------- dc----w- c:\documents and settings\kucni\local settings\application data\Conduit 2013-04-27 15:29:31 10240 -c--a-w- c:\windows\system32\imdsksvc.exe 2013-04-27 08:42:41 25992 -c--a-w- c:\windows\system32\pgdfgsvc.exe 2013-04-25 11:59:07 -------- dc----w- C:\NVIDIA 2013-04-25 11:25:22 -------- dc----w- c:\documents and settings\all users\Uniblue 2013-04-23 12:03:28 -------- dc----w- c:\documents and settings\all users\application data\Kaspersky Lab 2013-04-23 10:36:54 -------- dc----w- c:\documents and settings\all users\application data\Sophos 2013-04-23 10:36:21 73728 -c--a-r- c:\documents and settings\kucni\application data\microsoft\installer\{b829e117-d072-41ea-9606-9826a38d34c1}\SVRTgui.exe1_810EDD9E2F0A4E2BACF86673C38D9F48.exe 2013-04-23 10:36:21 73728 -c--a-r- c:\documents and settings\kucni\application data\microsoft\installer\{b829e117-d072-41ea-9606-9826a38d34c1}\SVRTgui.exe_810EDD9E2F0A4E2BACF86673C38D9F48.exe 2013-04-23 10:36:21 73728 -c--a-r- c:\documents and settings\kucni\application data\microsoft\installer\{b829e117-d072-41ea-9606-9826a38d34c1}\ARPPRODUCTICON.exe 2013-04-19 21:26:46 -------- dc----w- c:\documents and settings\all users\application data\Canneverbe Limited 2013-04-19 17:56:54 1047552 -c--a-w- c:\windows\system32\mfc71u.dll 2013-04-18 09:17:51 -------- dc----w- c:\documents and settings\all users\application data\Tarma Installer 2013-04-17 18:15:19 98816 -c--a-w- c:\windows\sed.exe 2013-04-17 18:15:19 256000 -c--a-w- c:\windows\PEV.exe 2013-04-17 18:15:19 208896 -c--a-w- c:\windows\MBR.exe 2013-04-17 18:07:57 -------- dc----w- c:\documents and settings\kucni\local settings\application data\Max Secure Software 2013-04-17 09:19:26 -------- dc----w- c:\documents and settings\kucni\application data\uTorrent 2013-04-13 15:05:10 54016 -c--a-w- c:\windows\system32\drivers\iiifwsmb.sys 2013-04-13 14:41:52 177496 -c--a-w- c:\windows\system32\drivers\49187010.sys 2013-04-13 11:12:16 177496 -c--a-w- c:\windows\system32\drivers\78944739.sys 2013-04-13 10:37:01 27159 -c--a-w- c:\windows\TempFileCleaner.cmd . ==================== Find3M ==================== . 2013-05-12 14:54:58 153424 -c--a-w- c:\documents and settings\kucni\application data\Evhshw.exe 2013-04-25 11:39:33 69632 -c--a-w- c:\windows\agrsmdel.exe 2013-04-25 11:39:33 1149888 -c--a-w- c:\windows\system32\drivers\AGRSM.sys 2013-04-25 11:36:25 35427 -c--a-w- c:\windows\system32\drivers\sisnic.sys 2013-04-25 11:34:55 36992 -c--a-w- c:\windows\system32\drivers\SISAGPX.SYS 2013-04-13 08:48:24 71048 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-04-13 08:48:24 691592 -c--a-w- c:\windows\system32\FlashPlayerApp.exe 2013-04-11 14:22:56 770384 -c--a-w- c:\windows\system32\msvcr100.dll 2013-04-11 14:22:56 421200 -c--a-w- c:\windows\system32\msvcp100.dll 2013-04-10 16:54:58 249856 -c--a-w- c:\windows\Setup1.exe 2013-04-10 16:54:57 73216 -c--a-w- c:\windows\ST6UNST.EXE 2013-04-06 12:33:28 17488 -c--a-w- c:\windows\gdrv.sys 2013-03-19 12:34:02 28400 -c--a-w- c:\windows\system32\drivers\secdrv.sys 2013-03-15 16:07:35 185824 -c--a-w- c:\windows\system32\0fb18E.sys 2013-03-08 08:35:47 293376 -c--a-w- c:\windows\system32\winsrv.dll 2013-03-07 19:09:42 242240 -c--a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2013-03-07 04:23:36 2070016 -c--a-w- c:\windows\system32\ntkrnlpa.exe 2013-03-07 01:31:48 2193536 -c--a-w- c:\windows\system32\ntoskrnl.exe 2013-02-26 16:09:50 9338880 -c--a-w- c:\windows\system32\alsna108.rra . ============= FINISH: 17:50:52.96 ===============

Profil

Sass Drake Poslao: 12 Maj 2013 18:15 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav. Nedostaje DDS Attach izvještaj.

Profil

Vladan Petkovic Poslao: 12 Maj 2013 18:31 Idi na vrh
offline Vladan Petkovic Novi MyCity građanin Pridružio: 05 Avg 2012 Poruke: 7	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: [Link mogu videti samo ulogovani korisnici]

Profil

Sass Drake Poslao: 12 Maj 2013 18:42 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Preuzmite program GMER sa donjeg linka na Desktop: GMER download Kliknite dati link; Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberite Desktop i kliknite Save. Dvoklikom pokrenite GMER. Sačekajte da se završi uvodno skeniranje - ukoliko se pojavi bilo kakav upit, kliknite No; kliknite Scan i sačekajte da skeniranje bude završeno; kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer1); kliknite desnim tasterom u prozor programa Gmer i odaberite Options > 3rd party - kliknite Scan; po završetku skeniranja kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer2); kliknite taster >>> i odaberite Autostart karticu; po završetku kratkotrajnog skeniranja, kliknite Copy; otvorite Notepad i u njega postavite kopirani tekst - izveštaj sačuvajte na Desktop (pod nazivom Gmer3); Slikoviti prikaz postupka Priložite sva tri izveštaja uz poruku korišćenjem opcije Prikači fajl.

Profil

Vladan Petkovic Poslao: 13 Maj 2013 20:25 Idi na vrh
offline Vladan Petkovic Novi MyCity građanin Pridružio: 05 Avg 2012 Poruke: 7	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Evo gmer1 [Link mogu videti samo ulogovani korisnici] gmer2 [Link mogu videti samo ulogovani korisnici] gmer3 [Link mogu videti samo ulogovani korisnici]

Profil

ivance95 Poslao: 13 Maj 2013 21:39 Idi na vrh
offline ivance95 AMF pripravnik Pridružio: 04 Jul 2011 Poruke: 5424	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Preuzmi sUBs-ov ComboFix sa sledeće adrese na Desktop: Bleeping Computer Klikni desnim tasterom na link i odaberi opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu); Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberi Desktop i klikni Save. Kada preuzimanje programa bude završeno: deaktiviraj zaštitni softver (uputstvo); zatvori pokrenute programe; dvoklikom pokreni program ComboFix; u prozoru koji se otvori klikni "I Agree". U toku rada, ComboFix će:proveriti postoji li novija verzija programa: klikni Yes ako bude ponuđeno preuzimanje iste.ako Recovery Console nije instalirana, ponuditi instalaciju: obavezno prihvati klikom na Yes i isprati postupak.postaviti/dati određeni broj upita/obaveštenja: prihvati klikom na Yes ili OK.po potrebi, restartovati Windows (više puta); na kraju rada, otvoriti Notepad sa izveštajem o skeniranju. Iskopiraj izveštaj koji je ComboFix napravio u temu na forumu: klikni desnim tasterom miša u prozor Notepad-a i izaberi Select All; klikni desnim tasterom miša na obeleženi tekst i izaberi Copy; klikni desnim tasterom miša u polje za pisanje poruke i izaberi Paste. Napomena:Izveštaj će biti sačuvan pod nazivom ComboFix.txt na sistemskoj particiji (tipična lokacija: C:\ComboFix.txt); Ukoliko nakon slanja poruke primetiš da izveštaj nije kompletan, iskoristi opciju Prikači fajl za prilaganje file-a C:\ComboFix.txt uz poruku; Nemoj kliktati u okviru ComboFix prozora dok radi jer to može usporiti rad alata; Nemoj ponovo pokretati ComboFix na svoju ruku - javi se u temi bilo kakav problem da imaš tokom prvog pokretanja alata; Ako nakon restarta dobijaš grešku prilikom startovanja pojedinih programa da su označeni za brisanje (Illegal operation attempted on a registry key that has been marked for deletion), onda ponovo restartuj sistem i to ce rešiti problem. Ivance95 (AMF Tim)

Profil

Vladan Petkovic Poslao: 13 Maj 2013 22:54 Idi na vrh
offline Vladan Petkovic Novi MyCity građanin Pridružio: 05 Avg 2012 Poruke: 7	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Evo log od "Combofix" [Link mogu videti samo ulogovani korisnici] i zaboravio sam da kazem da sam danas skenirao komp sa "Malwarebytes Anti-Malware" i nasao je 18 virusa od toga je bio "services.exe" evo log od "Malwarebytes Anti-Malware" [Link mogu videti samo ulogovani korisnici] ComboFix 13-05-13.01 - KUCNI 05/13/2013 22:10:26.3.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.170 [GMT 2:00] Running from: c:\documents and settings\KUCNI\My Documents\Downloads\ComboFix.exe AV: Avira Desktop Enabled/Updated {AD166499-45F9-482A-A743-FDD3350758C7} FW: ZoneAlarm Free Firewall Firewall Disabled {829BDA32-94B3-44F4-8446-F8FCFF809F8B} . WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\All Users\Start Menu\Programs\Spyware Cease c:\documents and settings\All Users\Start Menu\Programs\Spyware Cease\Spyware Cease on the Web.lnk c:\documents and settings\All Users\Start Menu\Programs\Spyware Cease\Spyware Cease.lnk c:\documents and settings\All Users\Start Menu\Programs\Spyware Cease\Uninstall Spyware Cease.lnk c:\documents and settings\KUCNI\Application Data\1.exe c:\documents and settings\KUCNI\Application Data\D82.exe c:\documents and settings\KUCNI\Application Data\D83.exe c:\documents and settings\KUCNI\Application Data\D9B.exe c:\documents and settings\KUCNI\Application Data\D9C.exe c:\documents and settings\KUCNI\Application Data\F4.exe c:\documents and settings\KUCNI\Application Data\F5.exe c:\windows\EventSystem.log c:\windows\ST6UNST.000 c:\windows\system32\drivers\npf.sys c:\windows\system32\drivers\RKHit.sys c:\windows\wininit.ini . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_RKHIT -------\Service_RkHit . . ((((((((((((((((((((((((( Files Created from 2013-04-13 to 2013-05-13 ))))))))))))))))))))))))))))))) . . 2013-05-13 20:29 . 2013-05-13 20:29 244406 -c--a-w- c:\documents and settings\KUCNI\Application Data\5.exe 2013-05-13 20:29 . 2013-05-13 20:29 88401 -c--a-w- c:\documents and settings\KUCNI\Application Data\4.exe 2013-05-13 18:28 . 2012-10-12 14:34 33096 -c--a-w- c:\windows\system32\drivers\sct_skmscan.sys 2013-05-13 18:27 . 2013-05-13 18:27 40776 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2013-05-12 14:51 . 2013-05-11 00:37 153424 -c--a-w- c:\documents and settings\KUCNI\Application Data\r3.exe 2013-05-12 10:32 . 2013-05-13 08:24 -------- dc----w- c:\documents and settings\KUCNI\Local Settings\Application Data\LogMeIn Hamachi 2013-05-12 10:31 . 2013-05-13 08:33 -------- dc----w- c:\documents and settings\NetworkService\Local Settings\Application Data\LogMeIn Hamachi 2013-05-12 09:55 . 2013-05-12 09:55 -------- dc----w- c:\documents and settings\KUCNI\Application Data\ParetoLogic 2013-05-12 09:50 . 2013-05-12 09:50 -------- dc----w- c:\documents and settings\KUCNI\Application Data\SpeedyPC Software 2013-05-12 09:16 . 2013-05-12 09:16 -------- dc----w- c:\documents and settings\All Users\Application Data\nView_Profiles 2013-05-12 08:24 . 2013-05-13 17:57 -------- dc-h--w- c:\program files\InstallShield Installation Information 2013-05-11 18:50 . 2013-05-11 19:03 181064 -c--a-w- c:\windows\PSEXESVC.EXE 2013-05-11 14:39 . 2013-05-11 14:42 -------- dc----w- c:\windows\nview 2013-05-11 14:39 . 2005-11-04 16:03 180224 -c--a-w- c:\windows\system32\nvudisp.exe 2013-05-11 14:39 . 2005-11-04 17:03 180224 -c--a-w- c:\windows\system32\NVUNINST.EXE 2013-05-09 16:33 . 2013-05-09 16:33 -------- dc----w- c:\program files\Kaspersky Lab 2013-05-09 15:25 . 2013-05-09 15:28 -------- dc----w- c:\documents and settings\KUCNI\Application Data\GetRightToGo 2013-05-09 14:26 . 2013-05-09 14:26 -------- dc----w- c:\program files\Enigma Software Group 2013-05-09 14:26 . 2013-05-11 14:35 -------- dc----w- c:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP 2013-05-09 14:24 . 2013-05-09 14:24 -------- dc----w- c:\documents and settings\KUCNI\Application Data\IObit 2013-05-09 11:38 . 2013-05-09 14:24 -------- dc----w- c:\windows\0AC0F1B261C74B6EACEF58FCC0B94835.TMP 2013-05-08 16:29 . 2013-05-08 16:29 -------- dc----w- c:\program files\Common Files\Steam 2013-05-08 14:30 . 2013-05-08 14:30 -------- dc----w- C:\TDSSKiller_Quarantine 2013-05-07 17:11 . 2013-05-09 14:26 -------- dc----w- c:\program files\Common Files\Wise Installation Wizard 2013-05-06 17:47 . 2013-05-06 17:47 -------- dc----w- c:\documents and settings\All Users\Application Data\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} 2013-05-06 17:47 . 2013-05-06 17:47 -------- dc----w- c:\documents and settings\KUCNI\Application Data\Apple Computer 2013-05-06 17:47 . 2013-05-06 17:47 -------- dc----w- c:\documents and settings\All Users\Application Data\{BDDB56DE-AE4E-48A2-B856-FB60C8498453} 2013-05-06 17:44 . 2013-05-12 10:09 -------- dc----w- c:\documents and settings\All Users\Application Data\IObit 2013-05-06 17:13 . 2013-05-09 11:17 -------- dc----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2013-05-02 11:01 . 2013-05-02 11:01 -------- dc----w- c:\program files\CCleaner 2013-05-01 15:33 . 2013-05-01 15:34 -------- dc----w- c:\program files\RegClean Pro 2013-04-29 16:37 . 2013-04-29 16:37 -------- dc----w- c:\documents and settings\KUCNI\Application Data\Malwarebytes 2013-04-29 16:37 . 2013-04-04 12:50 22856 -c--a-w- c:\windows\system32\drivers\mbam.sys 2013-04-29 07:47 . 2013-04-29 07:47 -------- dc----w- c:\documents and settings\KUCNI\Application Data\OpenCandy 2013-04-28 15:33 . 2013-04-28 15:47 -------- dc----w- c:\documents and settings\All Users\Application Data\RealHideIP 2013-04-28 09:32 . 2013-04-28 16:18 -------- dc----w- c:\documents and settings\KUCNI\Application Data\TS3Client 2013-04-27 22:15 . 2013-04-28 07:00 -------- dc----w- c:\documents and settings\KUCNI\Local Settings\Application Data\Conduit 2013-04-27 15:29 . 2012-11-01 23:59 10240 -c--a-w- c:\windows\system32\imdsksvc.exe 2013-04-27 08:42 . 2013-04-27 08:42 25992 -c--a-w- c:\windows\system32\pgdfgsvc.exe 2013-04-25 11:59 . 2013-04-25 11:59 -------- dc----w- C:\NVIDIA 2013-04-25 11:25 . 2013-04-25 11:25 -------- dc----w- c:\documents and settings\All Users\Uniblue 2013-04-23 12:03 . 2013-04-23 13:54 -------- dc----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab 2013-04-23 10:36 . 2013-04-23 10:36 -------- dc----w- c:\documents and settings\All Users\Application Data\Sophos 2013-04-23 10:36 . 2013-04-23 10:36 73728 -c--a-r- c:\documents and settings\KUCNI\Application Data\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe1_810EDD9E2F0A4E2BACF86673C38D9F48.exe 2013-04-23 10:36 . 2013-04-23 10:36 73728 -c--a-r- c:\documents and settings\KUCNI\Application Data\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe_810EDD9E2F0A4E2BACF86673C38D9F48.exe 2013-04-23 10:36 . 2013-04-23 10:36 73728 -c--a-r- c:\documents and settings\KUCNI\Application Data\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\ARPPRODUCTICON.exe 2013-04-19 21:26 . 2013-04-19 21:26 -------- dc----w- c:\documents and settings\All Users\Application Data\Canneverbe Limited 2013-04-19 17:56 . 2003-03-18 18:12 1047552 -c--a-w- c:\windows\system32\mfc71u.dll 2013-04-18 09:17 . 2013-04-18 09:19 -------- dc----w- c:\documents and settings\All Users\Application Data\Tarma Installer 2013-04-17 18:07 . 2013-04-17 18:07 -------- dc----w- c:\documents and settings\KUCNI\Local Settings\Application Data\Max Secure Software 2013-04-17 09:19 . 2013-05-09 14:59 -------- dc----w- c:\documents and settings\KUCNI\Application Data\uTorrent . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-04-25 11:39 . 2004-06-29 07:07 1149888 -c--a-w- c:\windows\system32\drivers\AGRSM.sys 2013-04-25 11:39 . 2004-04-05 08:49 69632 -c--a-w- c:\windows\agrsmdel.exe 2013-04-25 11:36 . 2012-07-14 19:59 35427 -c--a-w- c:\windows\system32\drivers\sisnic.sys 2013-04-25 11:34 . 2013-01-24 19:44 36992 -c--a-w- c:\windows\system32\drivers\SISAGPX.SYS 2013-04-13 15:05 . 2013-04-13 15:05 54016 -c--a-w- c:\windows\system32\drivers\iiifwsmb.sys 2013-04-13 14:41 . 2013-04-13 14:41 177496 -c--a-w- c:\windows\system32\drivers\49187010.sys 2013-04-13 11:12 . 2013-04-13 11:12 177496 -c--a-w- c:\windows\system32\drivers\78944739.sys 2013-04-13 08:48 . 2008-04-14 12:00 71048 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-04-13 08:48 . 2008-04-14 12:00 691592 -c--a-w- c:\windows\system32\FlashPlayerApp.exe 2013-04-11 14:22 . 2011-06-11 00:58 770384 -c--a-w- c:\windows\system32\msvcr100.dll 2013-04-11 14:22 . 2011-06-11 00:58 421200 -c--a-w- c:\windows\system32\msvcp100.dll 2013-04-10 16:54 . 2013-03-12 17:59 249856 -c--a-w- c:\windows\Setup1.exe 2013-04-10 16:54 . 2013-03-12 17:59 73216 -c--a-w- c:\windows\ST6UNST.EXE 2013-04-06 12:33 . 2013-04-06 12:32 17488 -c--a-w- c:\windows\gdrv.sys 2013-03-19 12:34 . 2008-04-14 12:00 28400 -c--a-w- c:\windows\system32\drivers\secdrv.sys 2013-03-15 16:07 . 2013-03-15 16:07 185824 -c--a-w- c:\windows\system32\0fb18E.sys 2013-03-08 08:35 . 2012-04-14 14:15 293376 -c--a-w- c:\windows\system32\winsrv.dll 2013-03-07 19:09 . 2012-10-28 11:59 242240 -c--a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2013-03-07 04:23 . 2011-10-25 23:22 2070016 -c--a-w- c:\windows\system32\ntkrnlpa.exe 2013-03-07 01:31 . 2012-04-14 14:14 2193536 -c--a-w- c:\windows\system32\ntoskrnl.exe 2013-02-26 16:09 . 2013-02-26 16:09 9338880 -c--a-w- c:\windows\system32\alsna108.rra . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [-] 2008-04-14 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\atapi.sys [-] 2008-04-14 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys . [-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\asyncmac.sys [-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys . [-] 2008-04-14 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys [-] 2008-04-14 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys . [-] 2008-04-14 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\kbdclass.sys [-] 2008-04-14 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys . [-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ndis.sys [-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys . [-] 2008-11-18 . 4C51D5275AE8A16999EDFE7E647D00DE . 576384 . . [5.1.2600.5712] . . c:\windows\system32\dllcache\ntfs.sys [-] 2008-11-18 . 4C51D5275AE8A16999EDFE7E647D00DE . 576384 . . [5.1.2600.5712] . . c:\windows\system32\drivers\ntfs.sys . [-] 2008-04-14 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys [-] 2008-04-14 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys . [-] 2012-04-14 . 51E41F16ACD80B8B39C0AE703A213F09 . 361600 . . [5.1.2600.6009] . . c:\windows\system32\dllcache\tcpip.sys [-] 2012-04-14 . 51E41F16ACD80B8B39C0AE703A213F09 . 361600 . . [5.1.2600.6009] . . c:\windows\system32\drivers\tcpip.sys . [-] 2012-07-06 . FC6D1D80588D371F0321E15A75B2F8F2 . 78336 . . [5.1.2600.6260] . . c:\windows\system32\browser.dll [-] 2012-07-06 . FC6D1D80588D371F0321E15A75B2F8F2 . 78336 . . [5.1.2600.6260] . . c:\windows\system32\dllcache\browser.dll . [-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe [-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\lsass.exe . [-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll [-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\netman.dll . [-] 2008-04-14 12:00 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll [-] 2008-04-14 12:00 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . c:\windows\system32\dllcache\comres.dll . [-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll [-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\dllcache\qmgr.dll . [-] 2012-04-14 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll [-] 2012-04-14 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll . [-] 2012-04-14 . C519E15665CD89A91AD383FCE3CB556A . 110592 . . [5.1.2600.5922] . . c:\windows\system32\services.exe [-] 2012-04-14 . C519E15665CD89A91AD383FCE3CB556A . 110592 . . [5.1.2600.5922] . . c:\windows\system32\dllcache\services.exe . [-] 2012-04-14 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\system32\spoolsv.exe [-] 2012-04-14 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\system32\dllcache\spoolsv.exe . [-] 2012-04-14 . 53A8857723277B1D6D5EE60A9F85B117 . 509440 . . [5.1.2600.5788] . . c:\windows\system32\winlogon.exe [-] 2012-04-14 . 53A8857723277B1D6D5EE60A9F85B117 . 509440 . . [5.1.2600.5788] . . c:\windows\system32\dllcache\winlogon.exe . [-] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys [-] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys . [-] 2012-04-14 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll [-] 2012-04-14 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll [-] 2012-04-14 . 736B12B725AEB2B07F0241A9F680CB10 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [-] 2008-04-14 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll . [-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll [-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\cryptsvc.dll . [-] 2012-04-14 14:13 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll [-] 2012-04-14 14:13 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll . [-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll [-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\imm32.dll . [-] 2012-10-03 . 6CBFEEB384F04681AF75F495AA48DD32 . 991744 . . [5.1.2600.6293] . . c:\windows\system32\kernel32.dll [-] 2012-10-03 . 6CBFEEB384F04681AF75F495AA48DD32 . 991744 . . [5.1.2600.6293] . . c:\windows\system32\dllcache\kernel32.dll . [-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll [-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\linkinfo.dll . [-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll [-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\lpk.dll . [-] 2012-08-28 . CF6B381C3518AB328382429CAE206D64 . 6010368 . . [8.00.6001.23415] . . c:\windows\ie8updates\KB2761465-IE8\mshtml.dll [-] 2012-07-02 . DF599AC52B62DE001E42D36F92B45E68 . 6010368 . . [8.00.6001.23385] . . c:\windows\ie8updates\KB2744842-IE8\mshtml.dll [-] 2012-05-11 . 55F148B94246A77FB4AC33346671CAC8 . 6009344 . . [8.00.6001.23345] . . c:\windows\ie8updates\KB2722913-IE8\mshtml.dll [-] 2012-04-14 . 5DBB0C997AD276BCE9D30CD609BDBF67 . 5980672 . . [8.00.6001.23318] . . c:\windows\ie8updates\KB2699988-IE8\mshtml.dll [-] 2012-04-14 . 5DBB0C997AD276BCE9D30CD609BDBF67 . 5980672 . . [8.00.6001.23318] . . c:\windows\system32\mshtml.dll [-] 2012-04-14 . 5DBB0C997AD276BCE9D30CD609BDBF67 . 5980672 . . [8.00.6001.23318] . . c:\windows\system32\dllcache\mshtml.dll . [-] 2012-04-14 . 06B8485FB1DA9A552B10AB978CD1AC85 . 343040 . . [7.0.2600.5701] . . c:\windows\system32\msvcrt.dll [-] 2012-04-14 . 06B8485FB1DA9A552B10AB978CD1AC85 . 343040 . . [7.0.2600.5701] . . c:\windows\system32\dllcache\msvcrt.dll [-] 2012-04-14 . A4C4A54FD7E31179CB5BDF7896DF3DF7 . 343040 . . [7.0.2600.5701] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5701_x-ww_40d12c25\msvcrt.dll [-] 2008-04-14 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll . [-] 2012-04-14 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll [-] 2012-04-14 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll . [-] 2012-04-14 . 06CF9EEDB7E827205C6948C9DAF56974 . 407040 . . [5.1.2600.5582] . . c:\windows\system32\netlogon.dll [-] 2012-04-14 . 06CF9EEDB7E827205C6948C9DAF56974 . 407040 . . [5.1.2600.5582] . . c:\windows\system32\dllcache\netlogon.dll . [-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll [-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\dllcache\powrprof.dll . [-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll [-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\scecli.dll . [-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll [-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\sfc.dll . [-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe [-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\svchost.exe . [-] 2012-04-14 . E2B32B10ACC5D97623275AAFB67E5F03 . 249856 . . [5.1.2600.5654] . . c:\windows\system32\tapisrv.dll [-] 2012-04-14 . E2B32B10ACC5D97623275AAFB67E5F03 . 249856 . . [5.1.2600.5654] . . c:\windows\system32\dllcache\tapisrv.dll . [-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll [-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\user32.dll . [-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe [-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\userinit.exe . [-] 2012-08-28 . DCEA3B3193B7181CF818ECC4EAB30A66 . 920064 . . [8.00.6001.23415] . . c:\windows\ie8updates\KB2761465-IE8\wininet.dll [-] 2012-07-02 . EFB2241DE3AA6480521A16D0CB67B0EC . 920064 . . [8.00.6001.23385] . . c:\windows\ie8updates\KB2744842-IE8\wininet.dll [-] 2012-05-16 . 553AD35768CD27959391DD5AA82CEF6F . 920064 . . [8.00.6001.23359] . . c:\windows\ie8updates\KB2722913-IE8\wininet.dll [-] 2012-04-14 . 4EC67FAB39F37626AD6D9895FC094ABF . 919552 . . [8.00.6001.23318] . . c:\windows\ie8updates\KB2699988-IE8\wininet.dll [-] 2012-04-14 . 4EC67FAB39F37626AD6D9895FC094ABF . 919552 . . [8.00.6001.23318] . . c:\windows\system32\wininet.dll [-] 2012-04-14 . 4EC67FAB39F37626AD6D9895FC094ABF . 919552 . . [8.00.6001.23318] . . c:\windows\system32\dllcache\wininet.dll . [-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll [-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ws2_32.dll . [-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll [-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ws2help.dll . [-] 2012-04-14 . 2BB75B7F548D82A099125D0C5971DE7D . 1033728 . . [6.00.2900.5634] . . c:\windows\explorer.exe [-] 2012-04-14 . 2BB75B7F548D82A099125D0C5971DE7D . 1033728 . . [6.00.2900.5634] . . c:\windows\system32\dllcache\explorer.exe . [-] 2008-04-14 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512] . . c:\windows\regedit.exe [-] 2008-04-14 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\regedit.exe . [-] 2012-04-14 . 7D9DDE1AB4B00DDB173F5A16E9206517 . 1289216 . . [5.1.2600.6168] . . c:\windows\system32\ole32.dll [-] 2012-04-14 . 7D9DDE1AB4B00DDB173F5A16E9206517 . 1289216 . . [5.1.2600.6168] . . c:\windows\system32\dllcache\ole32.dll . [-] 2012-04-14 . F8894BCC961D461674002B4BAE7AECC1 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll [-] 2012-04-14 . F8894BCC961D461674002B4BAE7AECC1 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll . [-] 2002-12-11 23:14 . 15914E0BF4DDA56CF797993DCCB637D1 . 4096 . . [5.3.0000000.900 built by: DIRECTX] . . c:\windows\Driver Cache\i386\ksuser.dll [-] 2002-12-11 23:14 . 15914E0BF4DDA56CF797993DCCB637D1 . 4096 . . [5.3.0000000.900 built by: DIRECTX] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksuser.dll [-] 2002-12-11 23:14 . 15914E0BF4DDA56CF797993DCCB637D1 . 4096 . . [5.3.0000000.900 built by: DIRECTX] . . c:\windows\system32\ksuser.dll [-] 2002-12-11 23:14 . 15914E0BF4DDA56CF797993DCCB637D1 . 4096 . . [5.3.0000000.900 built by: DIRECTX] . . c:\windows\system32\dllcache\ksuser.dll [-] 2002-12-11 23:14 . 15914E0BF4DDA56CF797993DCCB637D1 . 4096 . . [5.3.0000000.900 built by: DIRECTX] . . c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\ksuser.dll . [-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe [-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ctfmon.exe . [-] 2012-04-14 . 888CD7B39C37E13A2419BECFAAF0A28C . 135168 . . [6.00.2900.5853] . . c:\windows\system32\shsvcs.dll [-] 2012-04-14 . 888CD7B39C37E13A2419BECFAAF0A28C . 135168 . . [6.00.2900.5853] . . c:\windows\system32\dllcache\shsvcs.dll . [-] 2008-04-14 . AFFC87E2501FCE8F09D4C10BA6421CCF . 4608 . . [5.1.2600.5512] . . c:\windows\system32\msimg32.dll [-] 2008-04-14 . AFFC87E2501FCE8F09D4C10BA6421CCF . 4608 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\msimg32.dll . [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\srsvc.dll . [-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe [-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\wscntfy.exe . [-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll [-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\xmlprov.dll . [-] 2010-12-09 . 15CE4DBC22FAB90B3CA5352AF1FFF81C . 718336 . . [5.1.2600.6055] . . c:\windows\system32\ntdll.dll [-] 2010-12-09 . 15CE4DBC22FAB90B3CA5352AF1FFF81C . 718336 . . [5.1.2600.6055] . . c:\windows\system32\dllcache\ntdll.dll . [-] 2012-04-14 . 30B7D847BA9075AA8E1122FB6AF3D1B5 . 177152 . . [5.1.2600.5768] . . c:\windows\system32\MSCTFIME.IME [-] 2012-04-14 . 30B7D847BA9075AA8E1122FB6AF3D1B5 . 177152 . . [5.1.2600.5768] . . c:\windows\system32\dllcache\msctfime.ime . [-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll [-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\eventlog.dll . [-] 2012-04-14 . E17798E1E6FF1CA9C67B8576570E05EE . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll . [-] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys [-] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys . [-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll [-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\regsvc.dll . [-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll [-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\schedsvc.dll . [-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll [-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ssdpsrv.dll . [-] 2012-04-14 . 5128852A18AE46C387F87BF27DA4C9DD . 296960 . . [5.1.2600.5815] . . c:\windows\system32\termsrv.dll [-] 2012-04-14 . 5128852A18AE46C387F87BF27DA4C9DD . 296960 . . [5.1.2600.5815] . . c:\windows\system32\dllcache\termsrv.dll . [-] 2012-04-14 . 0A878AA66E4DD3E2608192A1ECCD9F8F . 344064 . . [5.1.2600.5589] . . c:\windows\system32\hnetcfg.dll [-] 2012-04-14 . 0A878AA66E4DD3E2608192A1ECCD9F8F . 344064 . . [5.1.2600.5589] . . c:\windows\system32\dllcache\hnetcfg.dll . [-] 2008-04-14 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll [-] 2008-04-14 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\appmgmts.dll . [-] 2008-04-14 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\dllcache\acpiec.sys [-] 2008-04-14 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys . [-] 2008-04-13 19:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\dllcache\aec.sys [-] 2008-04-13 19:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys . [-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ip6fw.sys [-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys . [-] 2012-04-14 14:13 . 842900DEDBC8E3E8DBCCCB298FD88F65 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll [-] 2012-04-14 14:13 . 842900DEDBC8E3E8DBCCCB298FD88F65 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll . [-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll [-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\msgsvc.dll . [-] 2008-04-14 12:00 . C7E39EA41233E9F5B86C8DA3A9F1E4A8 . 52224 . . [9.0.1.56] . . c:\windows\system32\mspmsnsv.dll [-] 2008-04-14 12:00 . C7E39EA41233E9F5B86C8DA3A9F1E4A8 . 52224 . . [9.0.1.56] . . c:\windows\system32\dllcache\mspmsnsv.dll . [-] 2013-03-07 . 9EBEDA306E5EABDABCFF8B695FCD4CD6 . 2070016 . . [5.1.2600.6368] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe [-] 2013-03-07 . 9EBEDA306E5EABDABCFF8B695FCD4CD6 . 2070016 . . [5.1.2600.6368] . . c:\windows\system32\ntkrnlpa.exe [-] 2013-03-07 . 9EBEDA306E5EABDABCFF8B695FCD4CD6 . 2070016 . . [5.1.2600.6368] . . c:\windows\system32\dllcache\ntkrnlpa.exe . [-] 2008-04-14 12:00 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll [-] 2008-04-14 12:00 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\system32\dllcache\ntmssvc.dll . [-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll [-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\upnphost.dll . [-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll [-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dllcache\dsound.dll [-] 2004-07-09 03:27 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll . [-] 2012-04-14 . D2CF91B2C710E9F666E60AFBF87643EE . 1689088 . . [5.03.2600.5601] . . c:\windows\system32\d3d9.dll [-] 2012-04-14 . D2CF91B2C710E9F666E60AFBF87643EE . 1689088 . . [5.03.2600.5601] . . c:\windows\system32\dllcache\d3d9.dll . [-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll [-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\system32\dllcache\ddraw.dll [-] 2004-07-09 03:27 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll . [-] 2008-04-14 12:00 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll [-] 2008-04-14 12:00 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\olepro32.dll . [-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll [-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\perfctrs.dll . [-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll [-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\version.dll . [-] 2013-03-07 . 9FC16E5EBFE88F3C844FFE2E6CB7F1E8 . 2193536 . . [5.1.2600.6368] . . c:\windows\Driver Cache\i386\ntoskrnl.exe [-] 2013-03-07 . 9FC16E5EBFE88F3C844FFE2E6CB7F1E8 . 2193536 . . [5.1.2600.6368] . . c:\windows\system32\ntoskrnl.exe [-] 2013-03-07 . 9FC16E5EBFE88F3C844FFE2E6CB7F1E8 . 2193536 . . [5.1.2600.6368] . . c:\windows\system32\dllcache\ntoskrnl.exe . [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\srsvc.dll . [-] 2012-04-14 . 9F8A0D0CBB2FA265A754516128C00E22 . 175616 . . [5.1.2600.5635] . . c:\windows\system32\w32time.dll [-] 2012-04-14 . 9F8A0D0CBB2FA265A754516128C00E22 . 175616 . . [5.1.2600.5635] . . c:\windows\system32\dllcache\w32time.dll . [-] 2008-04-14 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll [-] 2008-04-14 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\wiaservc.dll . [-] 2008-04-14 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll [-] 2008-04-14 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\midimap.dll . [-] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll [-] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\rasadhlp.dll . [-] 2008-04-14 . 4E3D06D6E68EEDB52565080F55B460D3 . 19456 . . [5.1.2600.5512] . . c:\windows\system32\wshtcpip.dll [-] 2008-04-14 . 4E3D06D6E68EEDB52565080F55B460D3 . 19456 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\wshtcpip.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "0x000101"="c:\documents and settings\KUCNI\Application Data\5.exe" [2013-05-13 244406] "0x000101"="c:\documents and settings\KUCNI\Application Data\5.exe" [2013-05-13 244406] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ ?????????\0autocheck autochk . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCT_SKMScan] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] 2008-04-14 12:00 15360 -c--a-w- c:\windows\system32\ctfmon.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KSS] 2012-04-25 17:53 202296 -c--a-w- c:\program files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui] 2012-12-14 09:08 2255360 -c--a-w- d:\program files\LogMeIn Hamachi\hamachi-2-ui.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] 2005-11-04 16:03 7307264 -c--a-w- c:\windows\system32\nvcpl.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] 2005-11-04 16:03 86016 -c--a-w- c:\windows\system32\nvmctray.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] 2005-11-04 16:03 1519616 -c--a-w- c:\windows\system32\nwiz.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareCease.exe] 2010-05-17 15:51 7210280 -c--a-w- d:\program files\Spyware Cease\SpywareCease.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "TuneUp.UtilitiesSvc"=2 (0x2) "srservice"=2 (0x2) "RemoteRegistry"=3 (0x3) "RemoteAccess"=3 (0x3) "RasMan"=2 (0x2) "NtmsSvc"=3 (0x3) "MSDTC"=3 (0x3) "EventSystem"=3 (0x3) "CryptSvc"=2 (0x2) "BITS"=3 (0x3) "wuauserv"=2 (0x2) "SENS"=2 (0x2) "mnmsrvc"=2 (0x2) "EapHost"=3 (0x3) "dmserver"=2 (0x2) "dmadmin"=3 (0x3) "upnphost"=3 (0x3) "SysmonLog"=3 (0x3) "Spooler"=2 (0x2) "NtLmSsp"=3 (0x3) "Netlogon"=2 (0x2) "MBAMService"=2 (0x2) "MBAMScheduler"=2 (0x2) "FastUserSwitchingCompatibility"=2 (0x2) "Dot3svc"=3 (0x3) "NVSvc"=2 (0x2) "NetDDEdsdm"=2 (0x2) "NetDDE"=2 (0x2) "LmHosts"=2 (0x2) "W32Time"=2 (0x2) "ShellHWDetection"=2 (0x2) "VSS"=3 (0x3) "LanmanServer"=2 (0x2) "HTTPFilter"=2 (0x2) "clr_optimization_v2.0.50727_32"=3 (0x3) "Browser"=2 (0x2) "aspnet_state"=2 (0x2) "wscsvc"=2 (0x2) "WmdmPmSN"=3 (0x3) "WiseBootAssistant"=3 (0x3) "winmgmt"=2 (0x2) "UPS"=3 (0x3) "TlntSvr"=3 (0x3) "seclogon"=2 (0x2) "MSIServer"=3 (0x3) "lfaqeorr"=2 (0x2) "helpsvc"=2 (0x2) "ERSvc"=2 (0x2) "COMSysApp"=3 (0x3) "ClipSrv"=3 (0x3) "CiSvc"=3 (0x3) "!SASCORE"=3 (0x3) . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\Windows\\system32\\sessmgr.exe"= "d:\\Program Files\\Firefly Studios\\Stronghold Crusader\\Stronghold_Crusader_Extreme.exe"= "c:\\WINDOWS\\system32\\dplaysvr.exe"= "d:\\games\\CS1.6v44\\hl.exe"= "d:\\Documents and Settings\\KUCNI\\Application Data\\uTorrent\\uTorrent.exe"= "d:\\Program Files\\Counter-Strike 1.6 V35\\hl.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP::Disabled:@xpsp2res.dll,-22009 . R0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [1/8/2013 10:37 PM 13560] R0 mv61xxmm;mv61xxmm;c:\windows\system32\drivers\mv61xxmm.sys [4/14/2012 4:50 PM 13616] R0 mv64xxmm;mv64xxmm;c:\windows\system32\drivers\mv64xxmm.sys [4/14/2012 4:50 PM 5632] R0 mvxxmm;mvxxmm;c:\windows\system32\drivers\mvxxmm.sys [4/14/2012 4:50 PM 13616] R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?] R1 PStrip;PSTRIP;c:\windows\system32\drivers\pstrip.sys [7/15/2007 3:37 AM 27992] R2 KSS;Kaspersky Security Scan Service;c:\program files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [4/25/2012 7:53 PM 202296] R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [10/28/2012 1:59 PM 242240] S3 0fb18E;0fb18E;c:\windows\system32\0fb18E.sys [3/15/2013 6:07 PM 185824] S3 97534542;97534542; [x] S3 esgiguard;esgiguard;\??\c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys --> c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [?] S3 EsgScanner;EsgScanner;c:\windows\system32\drivers\EsgScanner.sys [6/22/2012 11:01 AM 19984] S3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [1/9/2013 12:13 AM 33616] S3 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\program files\LogMeIn Hamachi\hamachi-2.exe [12/14/2012 11:08 AM 1436160] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [4/29/2013 6:37 PM 22856] S3 MBAMScheduler;MBAMScheduler;d:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [5/7/2013 3:39 PM 418376] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [5/13/2013 8:27 PM 40776] S3 SCT_SKMScan;SCT_SKMScan;c:\windows\system32\drivers\sct_skmscan.sys [5/13/2013 8:28 PM 33096] S3 WinRing0_1_2_0;WinRing0_1_2_0;\??\d:\program files\IObit\Game Booster 3\Driver\WinRing0.sys --> d:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [?] S4 lfaqeorr;IP Traffic Filter Controller;c:\windows\System32\svchost.exe -k netsvcs [4/14/2008 2:00 PM 14336] S4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [1/8/2013 1:55 PM 161536] S4 WiseBootAssistant;Wise Boot Assistant;d:\program files\Wise\Wise Care 365\BootTime.exe [3/31/2013 1:27 AM 580648] . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs lfaqeorr . Contents of the 'Scheduled Tasks' folder . 2013-05-13 c:\windows\Tasks\Wise Turbo Checker.job - d:\program files\Wise\Wise Care 365\WiseTurbo.exe [2013-05-12 12:57] . . ------- Supplementary Scan ------- . uStart Page = about:blank mStart Page = about:blank uInternet Connection Wizard,ShellNext = iexplore TCP: DhcpNameServer = 192.168.1.1 . - - - - ORPHANS REMOVED - - - - . SafeBoot-84060315.sys . . . *********************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici] Rootkit scan 2013-05-13 22:28 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . HKCU\Software\Microsoft\Windows\CurrentVersion\Run Evhshw = c:\documents and settings\KUCNI\Application Data\Evhshw.exe . scanning hidden files ... . . c:\documents and settings\KUCNI\Application Data\Evhshw.exe 153425 bytes executable . scan completed successfully hidden files: 1 . ************************************************************************ . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Evhshw"="c:\\Documents and Settings\\KUCNI\\Application Data\\Evhshw.exe" . [HKEY_LOCAL_MACHINE\System\ControlSet006\Services\PEVSystemStart] "ImagePath"="\"c:\combofix\pev.3XE\" EXEC /i \"c:\combofix\REGT.3XE\" /S \"c:\combofix\erunt.dat\"" . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-1454471165-1383384898-842925246-1003\Software\Genie"!\FM Genie Scout] "GameDir"="" "ShortlistDir"="" "ScreenshotsDir"="" "SaveDir"="" "LangDB"="" "LastSaveGame"="" "Language"="English" "LoadLangDB"=dword:00000000 "CompressHistoryPoints"=dword:00000000 "HighlightedAttributes"=dword:00000000 "MinCondition"=dword:00000050 "LastUpdateCheck"=dword:0000a091 "HighQualityGUI"=dword:00000000 "AutomaticallyUpdateCheck"=dword:00000001 "AdvancedGeneration"=dword:00000000 "TranslateStaffSkills"=dword:00000001 "TranslatePlayerSkills"=dword:00000001 "TranslatePositions"=dword:00000001 "ShowHistory"=dword:00000001 "WindowState"=dword:00000000 "WindowHeight"=dword:00000325 "WindowWidth"=dword:000003fc "WindowLeft"=dword:00000042 "WindowTop"=dword:0000001e "UseProxy"=dword:00000000 "ProxyHost"="" "ProxyPort"="" "UseAuthentication"=dword:00000000 "UserName"="" "UserPassword"="" . [HKEY_USERS\S-1-5-21-1454471165-1383384898-842925246-1003\Software\Genie"!\FM Genie Scout\Columns\Clubs] "Position0"=dword:00000000 "Visible0"=dword:00000001 "Width0"=dword:0000007d "Position1"=dword:00000001 "Visible1"=dword:00000001 "Width1"=dword:00000064 "Position2"=dword:00000002 "Visible2"=dword:00000001 "Width2"=dword:00000064 "Position3"=dword:00000003 "Visible3"=dword:00000001 "Width3"=dword:00000032 "Position4"=dword:00000004 "Visible4"=dword:00000001 "Width4"=dword:00000032 "Position5"=dword:00000005 "Visible5"=dword:00000001 "Width5"=dword:00000050 "Position6"=dword:00000006 "Visible6"=dword:00000001 "Width6"=dword:00000050 "Position7"=dword:00000007 "Visible7"=dword:00000001 "Width7"=dword:00000050 "Position8"=dword:00000008 "Visible8"=dword:00000000 "Width8"=dword:00000050 "Position9"=dword:00000009 "Visible9"=dword:00000000 "Width9"=dword:0000002d "Position10"=dword:0000000a "Visible10"=dword:00000000 "Width10"=dword:0000001e "Position11"=dword:0000000b "Visible11"=dword:00000000 "Width11"=dword:0000001e "Position12"=dword:0000000c "Visible12"=dword:00000000 "Width12"=dword:0000001e "Position13"=dword:0000000d "Visible13"=dword:00000001 "Width13"=dword:0000003c "Position14"=dword:0000000e "Visible14"=dword:00000000 "Width14"=dword:00000032 "Position15"=dword:0000000f "Visible15"=dword:00000000 "Width15"=dword:00000032 "Position16"=dword:00000010 "Visible16"=dword:00000000 "Width16"=dword:00000032 "Position17"=dword:00000011 "Visible17"=dword:00000001 "Width17"=dword:00000050 "Position18"=dword:00000012 "Visible18"=dword:00000001 "Width18"=dword:00000050 "Position19"=dword:00000013 "Visible19"=dword:00000000 "Width19"=dword:00000050 . [HKEY_USERS\S-1-5-21-1454471165-1383384898-842925246-1003\Software\Genie"!\FM Genie Scout\Columns\Players] "Position0"=dword:00000000 "Visible0"=dword:00000001 "Width0"=dword:0000007d "Position1"=dword:00000001 "Visible1"=dword:00000001 "Width1"=dword:00000064 "Position2"=dword:00000002 "Visible2"=dword:00000001 "Width2"=dword:00000064 "Position3"=dword:00000003 "Visible3"=dword:00000001 "Width3"=dword:00000037 "Position4"=dword:00000008 "Visible4"=dword:00000001 "Width4"=dword:00000023 "Position5"=dword:00000009 "Visible5"=dword:00000001 "Width5"=dword:00000028 "Position6"=dword:0000000a "Visible6"=dword:00000001 "Width6"=dword:00000028 "Position7"=dword:0000000c "Visible7"=dword:00000001 "Width7"=dword:0000004b "Position8"=dword:0000000d "Visible8"=dword:00000001 "Width8"=dword:0000004b "Position9"=dword:0000000e "Visible9"=dword:00000001 "Width9"=dword:00000050 "Position10"=dword:00000010 "Visible10"=dword:00000000 "Width10"=dword:00000050 "Position11"=dword:00000011 "Visible11"=dword:00000000 "Width11"=dword:0000004b "Position12"=dword:00000012 "Visible12"=dword:00000000 "Width12"=dword:0000002d "Position13"=dword:00000013 "Visible13"=dword:00000000 "Width13"=dword:0000003c "Position14"=dword:00000014 "Visible14"=dword:00000000 "Width14"=dword:0000004b "Position15"=dword:00000015 "Visible15"=dword:00000000 "Width15"=dword:00000064 "Position16"=dword:00000016 "Visible16"=dword:00000000 "Width16"=dword:00000064 "Position17"=dword:00000017 "Visible17"=dword:00000000 "Width17"=dword:0000004b "Position18"=dword:00000018 "Visible18"=dword:00000000 "Width18"=dword:00000064 "Position19"=dword:00000019 "Visible19"=dword:00000000 "Width19"=dword:0000003c "Position20"=dword:0000001a "Visible20"=dword:00000000 "Width20"=dword:0000004b "Position21"=dword:0000001b "Visible21"=dword:00000000 "Width21"=dword:00000050 "Position22"=dword:0000001c "Visible22"=dword:00000000 "Width22"=dword:00000073 "Position23"=dword:0000001d "Visible23"=dword:00000000 "Width23"=dword:00000050 "Position24"=dword:0000001e "Visible24"=dword:00000000 "Width24"=dword:0000005a "Position25"=dword:0000001f "Visible25"=dword:00000000 "Width25"=dword:0000006e "Position26"=dword:00000020 "Visible26"=dword:00000000 "Width26"=dword:00000064 "Position27"=dword:00000021 "Visible27"=dword:00000000 "Width27"=dword:00000087 "Position28"=dword:00000022 "Visible28"=dword:00000000 "Width28"=dword:00000064 "Position29"=dword:00000023 "Visible29"=dword:00000000 "Width29"=dword:00000064 "Position30"=dword:00000024 "Visible30"=dword:00000000 "Width30"=dword:00000046 "Position31"=dword:00000025 "Visible31"=dword:00000000 "Width31"=dword:0000004b "Position32"=dword:00000026 "Visible32"=dword:00000000 "Width32"=dword:00000046 "Position33"=dword:00000027 "Visible33"=dword:00000000 "Width33"=dword:0000004b "Position34"=dword:00000028 "Visible34"=dword:00000000 "Width34"=dword:0000003c "Position35"=dword:0000002a "Visible35"=dword:00000000 "Width35"=dword:00000064 "Position36"=dword:0000002e "Visible36"=dword:00000000 "Width36"=dword:00000073 "Position37"=dword:00000030 "Visible37"=dword:00000000 "Width37"=dword:0000005f "Position38"=dword:00000033 "Visible38"=dword:00000000 "Width38"=dword:00000091 "Position39"=dword:00000035 "Visible39"=dword:00000000 "Width39"=dword:0000003c "Position40"=dword:0000002c "Visible40"=dword:00000000 "Width40"=dword:0000005a "Position41"=dword:00000036 "Visible41"=dword:00000000 "Width41"=dword:00000041 "Position42"=dword:00000029 "Visible42"=dword:00000000 "Width42"=dword:00000050 "Position43"=dword:0000002b "Visible43"=dword:00000000 "Width43"=dword:00000055 "Position44"=dword:0000002d "Visible44"=dword:00000000 "Width44"=dword:0000005f "Position45"=dword:00000037 "Visible45"=dword:00000000 "Width45"=dword:00000050 "Position46"=dword:00000038 "Visible46"=dword:00000000 "Width46"=dword:0000004b "Position47"=dword:00000039 "Visible47"=dword:00000000 "Width47"=dword:0000004b "Position48"=dword:0000003a "Visible48"=dword:00000000 "Width48"=dword:00000046 "Position49"=dword:0000003b "Visible49"=dword:00000000 "Width49"=dword:00000032 "Position50"=dword:0000003c "Visible50"=dword:00000000 "Width50"=dword:0000003c "Position51"=dword:0000003d "Visible51"=dword:00000000 "Width51"=dword:0000004b "Position52"=dword:0000003e "Visible52"=dword:00000000 "Width52"=dword:0000003c "Position53"=dword:0000003f "Visible53"=dword:00000000 "Width53"=dword:00000037 "Position54"=dword:00000040 "Visible54"=dword:00000000 "Width54"=dword:00000069 "Position55"=dword:00000041 "Visible55"=dword:00000000 "Width55"=dword:0000005a "Position56"=dword:00000044 "Visible56"=dword:00000000 "Width56"=dword:0000004b "Position57"=dword:00000045 "Visible57"=dword:00000000 "Width57"=dword:0000004b "Position58"=dword:00000046 "Visible58"=dword:00000000 "Width58"=dword:00000037 "Position59"=dword:00000047 "Visible59"=dword:00000000 "Width59"=dword:0000003c "Position60"=dword:00000048 "Visible60"=dword:00000000 "Width60"=dword:0000003c "Position61"=dword:00000049 "Visible61"=dword:00000000 "Width61"=dword:00000041 "Position62"=dword:0000004a "Visible62"=dword:00000000 "Width62"=dword:00000055 "Position63"=dword:0000004b "Visible63"=dword:00000000 "Width63"=dword:0000003c "Position64"=dword:0000004c "Visible64"=dword:00000000 "Width64"=dword:0000003c "Position65"=dword:0000004d "Visible65"=dword:00000000 "Width65"=dword:0000004b "Position66"=dword:0000004e "Visible66"=dword:00000000 "Width66"=dword:0000003c "Position67"=dword:0000004f "Visible67"=dword:00000000 "Width67"=dword:00000046 "Position68"=dword:00000050 "Visible68"=dword:00000000 "Width68"=dword:00000028 "Position69"=dword:00000051 "Visible69"=dword:00000000 "Width69"=dword:00000041 "Position70"=dword:00000052 "Visible70"=dword:00000000 "Width70"=dword:0000003c "Position71"=dword:00000053 "Visible71"=dword:00000000 "Width71"=dword:00000069 "Position72"=dword:00000054 "Visible72"=dword:00000000 "Width72"=dword:00000041 "Position73"=dword:00000055 "Visible73"=dword:00000000 "Width73"=dword:0000005f "Position74"=dword:00000056 "Visible74"=dword:00000000 "Width74"=dword:0000003c "Position75"=dword:00000057 "Visible75"=dword:00000000 "Width75"=dword:00000037 "Position76"=dword:00000058 "Visible76"=dword:00000000 "Width76"=dword:0000004b "Position77"=dword:00000059 "Visible77"=dword:00000000 "Width77"=dword:00000050 "Position78"=dword:0000005a "Visible78"=dword:00000000 "Width78"=dword:00000037 "Position79"=dword:0000005b "Visible79"=dword:00000000 "Width79"=dword:00000037 "Position80"=dword:0000005c "Visible80"=dword:00000000 "Width80"=dword:0000005a "Position81"=dword:0000005d "Visible81"=dword:00000000 "Width81"=dword:0000004b "Position82"=dword:0000005e "Visible82"=dword:00000000 "Width82"=dword:00000055 "Position83"=dword:0000005f "Visible83"=dword:00000000 "Width83"=dword:0000002d "Position84"=dword:00000060 "Visible84"=dword:00000000 "Width84"=dword:00000037 "Position85"=dword:00000061 "Visible85"=dword:00000000 "Width85"=dword:0000003c "Position86"=dword:00000062 "Visible86"=dword:00000000 "Width86"=dword:00000046 "Position87"=dword:00000063 "Visible87"=dword:00000000 "Width87"=dword:0000003c "Position88"=dword:00000064 "Visible88"=dword:00000000 "Width88"=dword:0000005a "Position89"=dword:00000065 "Visible89"=dword:00000000 "Width89"=dword:0000003c "Position90"=dword:00000066 "Visible90"=dword:00000000 "Width90"=dword:00000050 "Position91"=dword:00000067 "Visible91"=dword:00000000 "Width91"=dword:00000046 "Position92"=dword:00000068 "Visible92"=dword:00000000 "Width92"=dword:0000005a "Position93"=dword:00000069 "Visible93"=dword:00000000 "Width93"=dword:00000037 "Position94"=dword:0000006a "Visible94"=dword:00000000 "Width94"=dword:0000003c "Position95"=dword:0000006b "Visible95"=dword:00000000 "Width95"=dword:0000003c "Position96"=dword:0000006c "Visible96"=dword:00000000 "Width96"=dword:00000046 "Position97"=dword:0000006d "Visible97"=dword:00000000 "Width97"=dword:00000046 "Position98"=dword:0000006e "Visible98"=dword:00000000 "Width98"=dword:00000055 "Position99"=dword:0000006f "Visible99"=dword:00000000 "Width99"=dword:00000073 "Position100"=dword:00000042 "Visible100"=dword:00000000 "Width100"=dword:00000041 "Position101"=dword:00000070 "Visible101"=dword:00000000 "Width101"=dword:0000003c "Position102"=dword:00000071 "Visible102"=dword:00000000 "Width102"=dword:0000003c "Position103"=dword:00000072 "Visible103"=dword:00000000 "Width103"=dword:00000046 "Position104"=dword:00000073 "Visible104"=dword:00000000 "Width104"=dword:0000003c "Position105"=dword:00000074 "Visible105"=dword:00000000 "Width105"=dword:00000041 "Position106"=dword:0000000f "Visible106"=dword:00000001 "Width106"=dword:00000050 "Position107"=dword:0000000b "Visible107"=dword:00000001 "Width107"=dword:00000028 "Position108"=dword:00000043 "Visible108"=dword:00000000 "Width108"=dword:00000050 "Position109"=dword:0000002f "Visible109"=dword:00000000 "Width109"=dword:00000050 "Position110"=dword:00000031 "Visible110"=dword:00000000 "Width110"=dword:00000055 "Position111"=dword:00000032 "Visible111"=dword:00000000 "Width111"=dword:00000082 "Position112"=dword:00000034 "Visible112"=dword:00000000 "Width112"=dword:00000087 "Position113"=dword:00000075 "Visible113"=dword:00000000 "Width113"=dword:00000050 "Position114"=dword:00000076 "Visible114"=dword:00000000 "Width114"=dword:00000050 "Position115"=dword:00000077 "Visible115"=dword:00000000 "Width115"=dword:00000050 "Position116"=dword:00000078 "Visible116"=dword:00000000 "Width116"=dword:00000050 "Position117"=dword:00000079 "Visible117"=dword:00000000 "Width117"=dword:00000050 "Position118"=dword:0000007a "Visible118"=dword:00000000 "Width118"=dword:00000050 "Position119"=dword:0000007b "Visible119"=dword:00000000 "Width119"=dword:00000050 "Position120"=dword:0000007c "Visible120"=dword:00000000 "Width120"=dword:00000050 "Position121"=dword:0000007d "Visible121"=dword:00000000 "Width121"=dword:00000050 "Position122"=dword:0000007e "Visible122"=dword:00000000 "Width122"=dword:00000050 "Position123"=dword:0000007f "Visible123"=dword:00000000 "Width123"=dword:00000050 "Position124"=dword:00000080 "Visible124"=dword:00000000 "Width124"=dword:00000050 "Position125"=dword:00000081 "Visible125"=dword:00000000 "Width125"=dword:00000050 "Position126"=dword:00000082 "Visible126"=dword:00000000 "Width126"=dword:00000050 "Position127"=dword:00000083 "Visible127"=dword:00000000 "Width127"=dword:00000050 "Position128"=dword:00000084 "Visible128"=dword:00000000 "Width128"=dword:00000050 "Position129"=dword:00000085 "Visible129"=dword:00000000 "Width129"=dword:00000050 "Position130"=dword:00000086 "Visible130"=dword:00000000 "Width130"=dword:00000050 "Position131"=dword:00000087 "Visible131"=dword:00000000 "Width131"=dword:00000050 "Position132"=dword:00000088 "Visible132"=dword:00000000 "Width132"=dword:00000050 "Position133"=dword:00000089 "Visible133"=dword:00000000 "Width133"=dword:00000050 "Position134"=dword:0000008a "Visible134"=dword:00000000 "Width134"=dword:00000050 "Position135"=dword:0000008b "Visible135"=dword:00000000 "Width135"=dword:00000050 "Position136"=dword:0000008c "Visible136"=dword:00000000 "Width136"=dword:00000050 "Position137"=dword:0000008d "Visible137"=dword:00000000 "Width137"=dword:00000050 "Position138"=dword:0000008e "Visible138"=dword:00000000 "Width138"=dword:00000050 "Position139"=dword:0000008f "Visible139"=dword:00000000 "Width139"=dword:00000050 "Position140"=dword:00000090 "Visible140"=dword:00000000 "Width140"=dword:00000050 "Position141"=dword:00000091 "Visible141"=dword:00000000 "Width141"=dword:00000050 "Position142"=dword:00000092 "Visible142"=dword:00000000 "Width142"=dword:00000050 "Position143"=dword:00000093 "Visible143"=dword:00000000 "Width143"=dword:00000050 "Position144"=dword:00000094 "Visible144"=dword:00000000 "Width144"=dword:00000050 "Position145"=dword:00000095 "Visible145"=dword:00000000 "Width145"=dword:00000050 "Position146"=dword:00000004 "Visible146"=dword:00000000 "Width146"=dword:00000037 "Position147"=dword:00000005 "Visible147"=dword:00000000 "Width147"=dword:00000028 "Position148"=dword:00000006 "Visible148"=dword:00000000 "Width148"=dword:00000037 "Position149"=dword:00000007 "Visible149"=dword:00000001 "Width149"=dword:00000028 . [HKEY_USERS\S-1-5-21-1454471165-1383384898-842925246-1003\Software\Genie"!\FM Genie Scout\Columns\Staff] "Position0"=dword:00000000 "Visible0"=dword:00000001 "Width0"=dword:0000007d "Position1"=dword:00000001 "Visible1"=dword:00000001 "Width1"=dword:00000064 "Position2"=dword:00000002 "Visible2"=dword:00000001 "Width2"=dword:00000064 "Position3"=dword:00000003 "Visible3"=dword:00000001 "Width3"=dword:00000069 "Position4"=dword:00000005 "Visible4"=dword:00000001 "Width4"=dword:00000028 "Position5"=dword:00000006 "Visible5"=dword:00000001 "Width5"=dword:00000028 "Position6"=dword:00000004 "Visible6"=dword:00000001 "Width6"=dword:00000028 "Position7"=dword:00000007 "Visible7"=dword:00000001 "Width7"=dword:00000050 "Position8"=dword:00000008 "Visible8"=dword:00000000 "Width8"=dword:00000050 "Position9"=dword:00000009 "Visible9"=dword:00000000 "Width9"=dword:0000004b "Position10"=dword:0000000a "Visible10"=dword:00000000 "Width10"=dword:0000002d "Position11"=dword:0000000b "Visible11"=dword:00000000 "Width11"=dword:0000003c "Position12"=dword:0000000c "Visible12"=dword:00000000 "Width12"=dword:0000004b "Position13"=dword:0000000d "Visible13"=dword:00000000 "Width13"=dword:00000064 "Position14"=dword:0000000e "Visible14"=dword:00000000 "Width14"=dword:00000064 "Position15"=dword:0000000f "Visible15"=dword:00000000 "Width15"=dword:0000004b "Position16"=dword:00000010 "Visible16"=dword:00000000 "Width16"=dword:00000064 "Position17"=dword:00000011 "Visible17"=dword:00000000 "Width17"=dword:0000003c "Position18"=dword:00000012 "Visible18"=dword:00000000 "Width18"=dword:0000004b "Position19"=dword:00000013 "Visible19"=dword:00000000 "Width19"=dword:00000050 "Position20"=dword:00000014 "Visible20"=dword:00000000 "Width20"=dword:00000046 "Position21"=dword:00000015 "Visible21"=dword:00000000 "Width21"=dword:0000004b "Position22"=dword:00000016 "Visible22"=dword:00000000 "Width22"=dword:00000046 "Position23"=dword:00000017 "Visible23"=dword:00000000 "Width23"=dword:00000046 "Position24"=dword:00000018 "Visible24"=dword:00000000 "Width24"=dword:0000003c "Position25"=dword:00000019 "Visible25"=dword:00000000 "Width25"=dword:00000041 "Position26"=dword:0000001a "Visible26"=dword:00000000 "Width26"=dword:0000003c "Position27"=dword:0000001b "Visible27"=dword:00000000 "Width27"=dword:00000055 "Position28"=dword:0000001c "Visible28"=dword:00000000 "Width28"=dword:00000069 "Position29"=dword:0000001d "Visible29"=dword:00000000 "Width29"=dword:0000006e "Position30"=dword:0000001e "Visible30"=dword:00000000 "Width30"=dword:00000064 "Position31"=dword:0000001f "Visible31"=dword:00000000 "Width31"=dword:00000078 "Position32"=dword:00000020 "Visible32"=dword:00000000 "Width32"=dword:00000064 "Position33"=dword:00000021 "Visible33"=dword:00000000 "Width33"=dword:00000087 "Position34"=dword:00000022 "Visible34"=dword:00000000 "Width34"=dword:00000069 "Position35"=dword:00000023 "Visible35"=dword:00000000 "Width35"=dword:0000006e "Position36"=dword:00000024 "Visible36"=dword:00000000 "Width36"=dword:00000073 "Position37"=dword:00000025 "Visible37"=dword:00000000 "Width37"=dword:0000004b "Position38"=dword:00000026 "Visible38"=dword:00000000 "Width38"=dword:0000002d "Position39"=dword:00000027 "Visible39"=dword:00000000 "Width39"=dword:00000055 "Position40"=dword:00000028 "Visible40"=dword:00000000 "Width40"=dword:00000046 "Position41"=dword:00000029 "Visible41"=dword:00000000 "Width41"=dword:0000004b "Position42"=dword:0000002a "Visible42"=dword:00000000 "Width42"=dword:0000003c "Position43"=dword:0000002b "Visible43"=dword:00000000 "Width43"=dword:00000046 "Position44"=dword:0000002c "Visible44"=dword:00000000 "Width44"=dword:00000073 "Position45"=dword:0000002d "Visible45"=dword:00000000 "Width45"=dword:0000004b "Position46"=dword:0000002e "Visible46"=dword:00000000 "Width46"=dword:00000073 "Position47"=dword:0000002f "Visible47"=dword:00000000 "Width47"=dword:0000007d "Position48"=dword:00000030 "Visible48"=dword:00000000 "Width48"=dword:0000006e "Position49"=dword:00000031 "Visible49"=dword:00000000 "Width49"=dword:00000037 "Position50"=dword:00000032 "Visible50"=dword:00000000 "Width50"=dword:00000064 "Position51"=dword:00000033 "Visible51"=dword:00000000 "Width51"=dword:00000037 "Position52"=dword:00000034 "Visible52"=dword:00000000 "Width52"=dword:0000004b "Position53"=dword:00000035 "Visible53"=dword:00000000 "Width53"=dword:00000046 "Position54"=dword:00000036 "Visible54"=dword:00000000 "Width54"=dword:00000037 "Position55"=dword:00000037 "Visible55"=dword:00000000 "Width55"=dword:0000003c "Position56"=dword:00000038 "Visible56"=dword:00000000 "Width56"=dword:00000055 "Position57"=dword:00000039 "Visible57"=dword:00000000 "Width57"=dword:0000003c "Position58"=dword:0000003a "Visible58"=dword:00000000 "Width58"=dword:0000003c "Position59"=dword:0000003b "Visible59"=dword:00000000 "Width59"=dword:00000055 "Position60"=dword:0000003c "Visible60"=dword:00000000 "Width60"=dword:00000046 "Position61"=dword:0000003d "Visible61"=dword:00000000 "Width61"=dword:0000004b "Position62"=dword:0000003e "Visible62"=dword:00000000 "Width62"=dword:00000055 "Position63"=dword:0000003f "Visible63"=dword:00000000 "Width63"=dword:0000005a "Position64"=dword:00000040 "Visible64"=dword:00000000 "Width64"=dword:0000006e "Position65"=dword:00000041 "Visible65"=dword:00000000 "Width65"=dword:00000050 "Position66"=dword:00000042 "Visible66"=dword:00000000 "Width66"=dword:00000032 "Position67"=dword:00000043 "Visible67"=dword:00000000 "Width67"=dword:00000064 "Position68"=dword:00000044 "Visible68"=dword:00000000 "Width68"=dword:0000004b "Position69"=dword:00000045 "Visible69"=dword:00000000 "Width69"=dword:0000002d "Position70"=dword:00000046 "Visible70"=dword:00000000 "Width70"=dword:0000004b "Position71"=dword:00000047 "Visible71"=dword:00000000 "Width71"=dword:0000005a "Position72"=dword:00000048 "Visible72"=dword:00000000 "Width72"=dword:0000005a "Position73"=dword:00000049 "Visible73"=dword:00000000 "Width73"=dword:00000050 "Position74"=dword:0000004a "Visible74"=dword:00000000 "Width74"=dword:0000004b "Position75"=dword:0000004b "Visible75"=dword:00000000 "Width75"=dword:00000050 "Position76"=dword:0000004c "Visible76"=dword:00000000 "Width76"=dword:0000005a "Position77"=dword:0000004d "Visible77"=dword:00000000 "Width77"=dword:00000041 "Position78"=dword:0000004e "Visible78"=dword:00000000 "Width78"=dword:00000041 "Position79"=dword:0000004f "Visible79"=dword:00000000 "Width79"=dword:00000041 "Position80"=dword:00000050 "Visible80"=dword:00000000 "Width80"=dword:00000041 "Position81"=dword:00000051 "Visible81"=dword:00000000 "Width81"=dword:00000041 "Position82"=dword:00000052 "Visible82"=dword:00000000 "Width82"=dword:00000041 "Position83"=dword:00000053 "Visible83"=dword:00000000 "Width83"=dword:00000041 "Position84"=dword:00000054 "Visible84"=dword:00000000 "Width84"=dword:00000041 "Position85"=dword:00000055 "Visible85"=dword:00000000 "Width85"=dword:00000041 "Position86"=dword:00000056 "Visible86"=dword:00000000 "Width86"=dword:00000050 . [HKEY_USERS\S-1-5-21-1454471165-1383384898-842925246-1003\Software\Genie"!\FM Genie Scout\Rating Coefficients] "GKWeightCoef"=dword:00000062 "GKCurrentAbilityCoef"=dword:00000000 "GKCornersCoef"=dword:00000000 "GKCrossingCoef"=dword:00000000 "GKDribblingCoef"=dword:00000000 "GKFinishingCoef"=dword:00000000 "GKFirstTouchCoef"=dword:00000000 "GKFreeKicksCoef"=dword:00000000 "GKHeadingCoef"=dword:00000000 "GKLongShotsCoef"=dword:00000000 "GKLongThrowsCoef"=dword:00000000 "GKMarkingCoef"=dword:00000000 "GKPassingCoef"=dword:00000000 "GKPenaltiesCoef"=dword:00000000 "GKTacklingCoef"=dword:00000005 "GKTechniqueCoef"=dword:00000000 "GKLeftFootCoef"=dword:00000000 "GKRightFootCoef"=dword:00000000 "GKAggressionCoef"=dword:0000000a "GKAnticipationCoef"=dword:00000005 "GKBraveryCoef"=dword:00000014 "GKComposureCoef"=dword:00000014 "GKConcentrationCoef"=dword:0000000a "GKConsistencyCoef"=dword:0000000a "GKCreativityCoef"=dword:00000000 "GKDecisionsCoef"=dword:00000014 "GKDeterminationCoef"=dword:0000000a "GKDirtinessCoef"=dword:fffffffb "GKFlairCoef"=dword:00000000 "GKImportantMatchesCoef"=dword:0000000a "GKInfluenceCoef"=dword:0000000a "GKOffTheBallCoef"=dword:00000000 "GKPositioningCoef"=dword:00000050 "GKTeamworkCoef"=dword:00000005 "GKWorkRateCoef"=dword:00000000 "GKAccelerationCoef"=dword:00000005 "GKAgilityCoef"=dword:0000000a "GKBalanceCoef"=dword:0000000a "GKInjuryPronenessCoef"=dword:fffffffb "GKJumpingCoef"=dword:00000050 "GKNaturalFitnessCoef"=dword:00000005 "GKPaceCoef"=dword:00000000 "GKStaminaCoef"=dword:00000000 "GKStrengthCoef"=dword:0000000a "GKVersatilityCoef"=dword:00000000 "GKAerialAbilityCoef"=dword:00000032 "GKCommandOfAreaCoef"=dword:00000014 "GKCommunicationCoef"=dword:00000032 "GKEccentricityCoef"=dword:ffffffec "GKHandlingCoef"=dword:00000064 "GKKickingCoef"=dword:0000000a "GKOneOnOnesCoef"=dword:00000032 "GKReflexesCoef"=dword:00000064 "GKRushingOutCoef"=dword:00000014 "GKTendencyToPunchCoef"=dword:fffffff6 "GKThrowingCoef"=dword:0000000a "GKAdaptabilityCoef"=dword:00000005 "GKAmbitionCoef"=dword:0000000a "GKControversyCoef"=dword:fffffffb "GKLoyalityCoef"=dword:00000005 "GKPressureCoef"=dword:00000005 "GKProfessionalismCoef"=dword:00000005 "GKSportsmanshipCoef"=dword:00000005 "GKTemperamentCoef"=dword:00000005 "SWWeightCoef"=dword:00000066 "SWCurrentAbilityCoef"=dword:00000000 "SWCornersCoef"=dword:00000000 "SWCrossingCoef"=dword:00000000 "SWDribblingCoef"=dword:00000000 "SWFinishingCoef"=dword:00000000 "SWFirstTouchCoef"=dword:00000014 "SWFreeKicksCoef"=dword:0000000a "SWHeadingCoef"=dword:00000064 "SWLongShotsCoef"=dword:0000000a "SWLongThrowsCoef"=dword:00000000 "SWMarkingCoef"=dword:00000064 "SWPassingCoef"=dword:0000000a "SWPenaltiesCoef"=dword:00000005 "SWTacklingCoef"=dword:00000064 "SWTechniqueCoef"=dword:0000000a "SWLeftFootCoef"=dword:00000005 "SWRightFootCoef"=dword:00000005 "SWAggressionCoef"=dword:00000014 "SWAnticipationCoef"=dword:00000014 "SWBraveryCoef"=dword:00000028 "SWComposureCoef"=dword:00000028 "SWConcentrationCoef"=dword:0000003c "SWConsistencyCoef"=dword:0000000a "SWCreativityCoef"=dword:0000000a "SWDecisionsCoef"=dword:00000014 "SWDeterminationCoef"=dword:0000000a "SWDirtinessCoef"=dword:ffffffe7 "SWFlairCoef"=dword:00000000 "SWImportantMatchesCoef"=dword:0000000a "SWInfluenceCoef"=dword:0000000a "SWOffTheBallCoef"=dword:0000000a "SWPositioningCoef"=dword:00000064 "SWTeamworkCoef"=dword:00000028 "SWWorkRateCoef"=dword:00000014 "SWAccelerationCoef"=dword:0000001e "SWAgilityCoef"=dword:0000000a "SWBalanceCoef"=dword:00000014 "SWInjuryPronenessCoef"=dword:fffffffb "SWJumpingCoef"=dword:00000064 "SWNaturalFitnessCoef"=dword:00000005 "SWPaceCoef"=dword:00000014 "SWStaminaCoef"=dword:0000000a "SWStrengthCoef"=dword:00000050 "SWVersatilityCoef"=dword:00000005 "SWAerialAbilityCoef"=dword:00000000 "SWCommandOfAreaCoef"=dword:00000000 "SWCommunicationCoef"=dword:00000000 "SWEccentricityCoef"=dword:00000000 "SWHandlingCoef"=dword:00000000 "SWKickingCoef"=dword:00000000 "SWOneOnOnesCoef"=dword:00000005 "SWReflexesCoef"=dword:00000005 "SWRushingOutCoef"=dword:00000000 "SWTendencyToPunchCoef"=dword:00000000 "SWThrowingCoef"=dword:00000000 "SWAdaptabilityCoef"=dword:00000005 "SWAmbitionCoef"=dword:0000000a "SWControversyCoef"=dword:fffffffb "SWLoyalityCoef"=dword:00000005 "SWPressureCoef"=dword:00000005 "SWProfessionalismCoef"=dword:00000005 "SWSportsmanshipCoef"=dword:00000005 "SWTemperamentCoef"=dword:00000005 "CBWeightCoef"=dword:00000064 "CBCurrentAbilityCoef"=dword:00000000 "CBCornersCoef"=dword:00000000 "CBCrossingCoef"=dword:00000000 "CBDribblingCoef"=dword:00000000 "CBFinishingCoef"=dword:00000000 "CBFirstTouchCoef"=dword:00000014 "CBFreeKicksCoef"=dword:0000000a "CBHeadingCoef"=dword:00000064 "CBLongShotsCoef"=dword:0000000a "CBLongThrowsCoef"=dword:00000000 "CBMarkingCoef"=dword:00000050 "CBPassingCoef"=dword:00000014 "CBPenaltiesCoef"=dword:00000005 "CBTacklingCoef"=dword:00000064 "CBTechniqueCoef"=dword:0000000a "CBLeftFootCoef"=dword:00000005 "CBRightFootCoef"=dword:00000005 "CBAggressionCoef"=dword:00000014 "CBAnticipationCoef"=dword:00000014 "CBBraveryCoef"=dword:00000028 "CBComposureCoef"=dword:00000014 "CBConcentrationCoef"=dword:00000028 "CBConsistencyCoef"=dword:0000000a "CBCreativityCoef"=dword:0000000a "CBDecisionsCoef"=dword:00000014 "CBDeterminationCoef"=dword:0000000a "CBDirtinessCoef"=dword:ffffffec "CBFlairCoef"=dword:00000000 "CBImportantMatchesCoef"=dword:0000000a "CBInfluenceCoef"=dword:0000000a "CBOffTheBallCoef"=dword:0000000a "CBPositioningCoef"=dword:00000050 "CBTeamworkCoef"=dword:00000028 "CBWorkRateCoef"=dword:00000014 "CBAccelerationCoef"=dword:00000028 "CBAgilityCoef"=dword:0000000a "CBBalanceCoef"=dword:00000014 "CBInjuryPronenessCoef"=dword:fffffffb "CBJumpingCoef"=dword:00000064 "CBNaturalFitnessCoef"=dword:00000005 "CBPaceCoef"=dword:0000001e "CBStaminaCoef"=dword:0000000a "CBStrengthCoef"=dword:0000003c "CBVersatilityCoef"=dword:00000005 "CBAerialAbilityCoef"=dword:00000000 "CBCommandOfAreaCoef"=dword:00000000 "CBCommunicationCoef"=dword:00000000 "CBEccentricityCoef"=dword:00000000 "CBHandlingCoef"=dword:00000000 "CBKickingCoef"=dword:00000000 "CBOneOnOnesCoef"=dword:00000005 "CBReflexesCoef"=dword:00000005 "CBRushingOutCoef"=dword:00000000 "CBTendencyToPunchCoef"=dword:00000000 "CBThrowingCoef"=dword:00000000 "CBAdaptabilityCoef"=dword:00000005 "CBAmbitionCoef"=dword:0000000a "CBControversyCoef"=dword:fffffffb "CBLoyalityCoef"=dword:00000005 "CBPressureCoef"=dword:00000005 "CBProfessionalismCoef"=dword:00000005 "CBSportsmanshipCoef"=dword:00000005 "CBTemperamentCoef"=dword:00000005 "FBWeightCoef"=dword:00000068 "FBCurrentAbilityCoef"=dword:00000000 "FBCornersCoef"=dword:0000000a "FBCrossingCoef"=dword:0000001e "FBDribblingCoef"=dword:00000014 "FBFinishingCoef"=dword:00000000 "FBFirstTouchCoef"=dword:00000014 "FBFreeKicksCoef"=dword:0000000a "FBHeadingCoef"=dword:0000003c "FBLongShotsCoef"=dword:0000000a "FBLongThrowsCoef"=dword:0000000a "FBMarkingCoef"=dword:0000003c "FBPassingCoef"=dword:0000001e "FBPenaltiesCoef"=dword:00000005 "FBTacklingCoef"=dword:00000064 "FBTechniqueCoef"=dword:00000014 "FBLeftFootCoef"=dword:00000005 "FBRightFootCoef"=dword:00000005 "FBAggressionCoef"=dword:0000000f "FBAnticipationCoef"=dword:00000050 "FBBraveryCoef"=dword:00000014 "FBComposureCoef"=dword:0000000a "FBConcentrationCoef"=dword:0000001e "FBConsistencyCoef"=dword:0000000a "FBCreativityCoef"=dword:0000000a "FBDecisionsCoef"=dword:00000014 "FBDeterminationCoef"=dword:0000000a "FBDirtinessCoef"=dword:fffffff6 "FBFlairCoef"=dword:00000005 "FBImportantMatchesCoef"=dword:0000000a "FBInfluenceCoef"=dword:0000000a "FBOffTheBallCoef"=dword:00000014 "FBPositioningCoef"=dword:00000064 "FBTeamworkCoef"=dword:00000014 "FBWorkRateCoef"=dword:00000014 "FBAccelerationCoef"=dword:0000003c "FBAgilityCoef"=dword:0000000a "FBBalanceCoef"=dword:00000014 "FBInjuryPronenessCoef"=dword:fffffffb "FBJumpingCoef"=dword:0000003c "FBNaturalFitnessCoef"=dword:00000005 "FBPaceCoef"=dword:00000050 "FBStaminaCoef"=dword:0000003c "FBStrengthCoef"=dword:00000028 "FBVersatilityCoef"=dword:00000005 "FBAerialAbilityCoef"=dword:00000000 "FBCommandOfAreaCoef"=dword:00000000 "FBCommunicationCoef"=dword:00000000 "FBEccentricityCoef"=dword:00000000 "FBHandlingCoef"=dword:00000000 "FBKickingCoef"=dword:00000000 "FBOneOnOnesCoef"=dword:00000005 "FBReflexesCoef"=dword:00000005 "FBRushingOutCoef"=dword:00000000 "FBTendencyToPunchCoef"=dword:00000000 "FBThrowingCoef"=dword:00000000 "FBAdaptabilityCoef"=dword:00000005 "FBAmbitionCoef"=dword:0000000a "FBControversyCoef"=dword:fffffffb "FBLoyalityCoef"=dword:00000005 "FBPressureCoef"=dword:00000005 "FBProfessionalismCoef"=dword:00000005 "FBSportsmanshipCoef"=dword:00000005 "FBTemperamentCoef"=dword:00000005 "WBWeightCoef"=dword:00000069 "WBCurrentAbilityCoef"=dword:00000000 "WBCornersCoef"=dword:0000000a "WBCrossingCoef"=dword:0000003c "WBDribblingCoef"=dword:00000028 "WBFinishingCoef"=dword:0000000a "WBFirstTouchCoef"=dword:00000014 "WBFreeKicksCoef"=dword:0000000a "WBHeadingCoef"=dword:00000028 "WBLongShotsCoef"=dword:00000014 "WBLongThrowsCoef"=dword:0000000a "WBMarkingCoef"=dword:0000003c "WBPassingCoef"=dword:00000028 "WBPenaltiesCoef"=dword:00000005 "WBTacklingCoef"=dword:00000064 "WBTechniqueCoef"=dword:00000028 "WBLeftFootCoef"=dword:00000005 "WBRightFootCoef"=dword:00000005 "WBAggressionCoef"=dword:0000000a "WBAnticipationCoef"=dword:00000050 "WBBraveryCoef"=dword:0000000a "WBComposureCoef"=dword:0000000a "WBConcentrationCoef"=dword:00000014 "WBConsistencyCoef"=dword:0000000a "WBCreativityCoef"=dword:00000014 "WBDecisionsCoef"=dword:00000014 "WBDeterminationCoef"=dword:0000000a "WBDirtinessCoef"=dword:fffffff6 "WBFlairCoef"=dword:0000000a "WBImportantMatchesCoef"=dword:0000000a "WBInfluenceCoef"=dword:0000000a "WBOffTheBallCoef"=dword:00000014 "WBPositioningCoef"=dword:00000064 "WBTeamworkCoef"=dword:00000014 "WBWorkRateCoef"=dword:00000028 "WBAccelerationCoef"=dword:00000050 "WBAgilityCoef"=dword:0000000a "WBBalanceCoef"=dword:00000014 "WBInjuryPronenessCoef"=dword:fffffffb "WBJumpingCoef"=dword:00000014 "WBNaturalFitnessCoef"=dword:00000005 "WBPaceCoef"=dword:00000064 "WBStaminaCoef"=dword:00000050 "WBStrengthCoef"=dword:00000028 "WBVersatilityCoef"=dword:00000005 "WBAerialAbilityCoef"=dword:00000000 "WBCommandOfAreaCoef"=dword:00000000 "WBCommunicationCoef"=dword:00000000 "WBEccentricityCoef"=dword:00000000 "WBHandlingCoef"=dword:00000000 "WBKickingCoef"=dword:00000000 "WBOneOnOnesCoef"=dword:00000005 "WBReflexesCoef"=dword:00000005 "WBRushingOutCoef"=dword:00000000 "WBTendencyToPunchCoef"=dword:00000000 "WBThrowingCoef"=dword:00000000 "WBAdaptabilityCoef"=dword:00000005 "WBAmbitionCoef"=dword:0000000a "WBControversyCoef"=dword:fffffffb "WBLoyalityCoef"=dword:00000005 "WBPressureCoef"=dword:00000005 "WBProfessionalismCoef"=dword:00000005 "WBSportsmanshipCoef"=dword:00000005 "WBTemperamentCoef"=dword:00000005 "DMWeightCoef"=dword:00000066 "DMCurrentAbilityCoef"=dword:00000000 "DMCornersCoef"=dword:0000000a "DMCrossingCoef"=dword:0000001e "DMDribblingCoef"=dword:00000014 "DMFinishingCoef"=dword:0000000a "DMFirstTouchCoef"=dword:0000001e "DMFreeKicksCoef"=dword:0000000a "DMHeadingCoef"=dword:00000028 "DMLongShotsCoef"=dword:00000014 "DMLongThrowsCoef"=dword:00000005 "DMMarkingCoef"=dword:0000003c "DMPassingCoef"=dword:00000028 "DMPenaltiesCoef"=dword:00000005 "DMTacklingCoef"=dword:00000064 "DMTechniqueCoef"=dword:0000001e "DMLeftFootCoef"=dword:00000005 "DMRightFootCoef"=dword:00000005 "DMAggressionCoef"=dword:00000028 "DMAnticipationCoef"=dword:00000028 "DMBraveryCoef"=dword:00000014 "DMComposureCoef"=dword:0000000a "DMConcentrationCoef"=dword:00000014 "DMConsistencyCoef"=dword:0000000a "DMCreativityCoef"=dword:00000014 "DMDecisionsCoef"=dword:00000014 "DMDeterminationCoef"=dword:0000000a "DMDirtinessCoef"=dword:fffffff6 "DMFlairCoef"=dword:0000000a "DMImportantMatchesCoef"=dword:0000000a "DMInfluenceCoef"=dword:0000000a "DMOffTheBallCoef"=dword:0000001e "DMPositioningCoef"=dword:00000050 "DMTeamworkCoef"=dword:00000028 "DMWorkRateCoef"=dword:00000050 "DMAccelerationCoef"=dword:00000028 "DMAgilityCoef"=dword:0000000a "DMBalanceCoef"=dword:0000000a "DMInjuryPronenessCoef"=dword:fffffffb "DMJumpingCoef"=dword:00000028 "DMNaturalFitnessCoef"=dword:00000005 "DMPaceCoef"=dword:00000028 "DMStaminaCoef"=dword:0000003c "DMStrengthCoef"=dword:00000028 "DMVersatilityCoef"=dword:00000005 "DMAerialAbilityCoef"=dword:00000000 "DMCommandOfAreaCoef"=dword:00000000 "DMCommunicationCoef"=dword:00000000 "DMEccentricityCoef"=dword:00000000 "DMHandlingCoef"=dword:00000000 "DMKickingCoef"=dword:00000000 "DMOneOnOnesCoef"=dword:00000005 "DMReflexesCoef"=dword:00000005 "DMRushingOutCoef"=dword:00000000 "DMTendencyToPunchCoef"=dword:00000000 "DMThrowingCoef"=dword:00000000 "DMAdaptabilityCoef"=dword:00000005 "DMAmbitionCoef"=dword:0000000a "DMControversyCoef"=dword:fffffffb "DMLoyalityCoef"=dword:00000005 "DMPressureCoef"=dword:00000005 "DMProfessionalismCoef"=dword:00000005 "DMSportsmanshipCoef"=dword:00000005 "DMTemperamentCoef"=dword:00000005 "MWeightCoef"=dword:00000067 "MCurrentAbilityCoef"=dword:00000000 "MCornersCoef"=dword:0000000a "MCrossingCoef"=dword:00000028 "MDribblingCoef"=dword:00000032 "MFinishingCoef"=dword:00000014 "MFirstTouchCoef"=dword:0000001e "MFreeKicksCoef"=dword:0000000a "MHeadingCoef"=dword:0000001e "MLongShotsCoef"=dword:00000014 "MLongThrowsCoef"=dword:00000005 "MMarkingCoef"=dword:00000028 "MPassingCoef"=dword:00000046 "MPenaltiesCoef"=dword:00000005 "MTacklingCoef"=dword:0000003c "MTechniqueCoef"=dword:00000032 "MLeftFootCoef"=dword:00000005 "MRightFootCoef"=dword:00000005 "MAggressionCoef"=dword:0000001e "MAnticipationCoef"=dword:00000028 "MBraveryCoef"=dword:0000000a "MComposureCoef"=dword:0000000a "MConcentrationCoef"=dword:0000000a "MConsistencyCoef"=dword:0000000a "MCreativityCoef"=dword:0000003c "MDecisionsCoef"=dword:0000001e "MDeterminationCoef"=dword:0000000a "MDirtinessCoef"=dword:fffffffb "MFlairCoef"=dword:0000000a "MImportantMatchesCoef"=dword:0000000a "MInfluenceCoef"=dword:0000000a "MOffTheBallCoef"=dword:00000028 "MPositioningCoef"=dword:00000028 "MTeamworkCoef"=dword:00000032 "MWorkRateCoef"=dword:00000032 "MAccelerationCoef"=dword:00000032 "MAgilityCoef"=dword:0000000a "MBalanceCoef"=dword:0000000a "MInjuryPronenessCoef"=dword:fffffffb "MJumpingCoef"=dword:00000028 "MNaturalFitnessCoef"=dword:00000005 "MPaceCoef"=dword:00000028 "MStaminaCoef"=dword:0000003c "MStrengthCoef"=dword:0000001e "MVersatilityCoef"=dword:00000005 "MAerialAbilityCoef"=dword:00000000 "MCommandOfAreaCoef"=dword:00000000 "MCommunicationCoef"=dword:00000000 "MEccentricityCoef"=dword:00000000 "MHandlingCoef"=dword:00000000 "MKickingCoef"=dword:00000000 "MOneOnOnesCoef"=dword:00000005 "MReflexesCoef"=dword:00000005 "MRushingOutCoef"=dword:00000000 "MTendencyToPunchCoef"=dword:00000000 "MThrowingCoef"=dword:00000000 "MAdaptabilityCoef"=dword:00000005 "MAmbitionCoef"=dword:0000000a "MControversyCoef"=dword:fffffffb "MLoyalityCoef"=dword:00000005 "MPressureCoef"=dword:00000005 "MProfessionalismCoef"=dword:00000005 "MSportsmanshipCoef"=dword:00000005 "MTemperamentCoef"=dword:00000005 "AMWeightCoef"=dword:00000066 "AMCurrentAbilityCoef"=dword:00000000 "AMCornersCoef"=dword:0000000a "AMCrossingCoef"=dword:0000003c "AMDribblingCoef"=dword:00000050 "AMFinishingCoef"=dword:00000028 "AMFirstTouchCoef"=dword:0000001e "AMFreeKicksCoef"=dword:0000000a "AMHeadingCoef"=dword:00000014 "AMLongShotsCoef"=dword:00000014 "AMLongThrowsCoef"=dword:00000005 "AMMarkingCoef"=dword:0000000a "AMPassingCoef"=dword:00000064 "AMPenaltiesCoef"=dword:00000005 "AMTacklingCoef"=dword:0000000a "AMTechniqueCoef"=dword:00000050 "AMLeftFootCoef"=dword:00000005 "AMRightFootCoef"=dword:00000005 "AMAggressionCoef"=dword:0000000a "AMAnticipationCoef"=dword:0000001e "AMBraveryCoef"=dword:0000000a "AMComposureCoef"=dword:0000000a "AMConcentrationCoef"=dword:0000000a "AMConsistencyCoef"=dword:0000000a "AMCreativityCoef"=dword:00000064 "AMDecisionsCoef"=dword:00000028 "AMDeterminationCoef"=dword:0000000a "AMDirtinessCoef"=dword:fffffffb "AMFlairCoef"=dword:00000014 "AMImportantMatchesCoef"=dword:0000000a "AMInfluenceCoef"=dword:0000000a "AMOffTheBallCoef"=dword:0000003c "AMPositioningCoef"=dword:00000014 "AMTeamworkCoef"=dword:0000003c "AMWorkRateCoef"=dword:00000014 "AMAccelerationCoef"=dword:0000003c "AMAgilityCoef"=dword:0000000a "AMBalanceCoef"=dword:0000000a "AMInjuryPronenessCoef"=dword:fffffffb "AMJumpingCoef"=dword:00000014 "AMNaturalFitnessCoef"=dword:00000005 "AMPaceCoef"=dword:0000003c "AMStaminaCoef"=dword:0000003c "AMStrengthCoef"=dword:00000014 "AMVersatilityCoef"=dword:00000005 "AMAerialAbilityCoef"=dword:00000000 "AMCommandOfAreaCoef"=dword:00000000 "AMCommunicationCoef"=dword:00000000 "AMEccentricityCoef"=dword:00000000 "AMHandlingCoef"=dword:00000000 "AMKickingCoef"=dword:00000000 "AMOneOnOnesCoef"=dword:00000005 "AMReflexesCoef"=dword:00000005 "AMRushingOutCoef"=dword:00000000 "AMTendencyToPunchCoef"=dword:00000000 "AMThrowingCoef"=dword:00000000 "AMAdaptabilityCoef"=dword:00000005 "AMAmbitionCoef"=dword:0000000a "AMControversyCoef"=dword:fffffffb "AMLoyalityCoef"=dword:00000005 "AMPressureCoef"=dword:00000005 "AMProfessionalismCoef"=dword:00000005 "AMSportsmanshipCoef"=dword:00000005 "AMTemperamentCoef"=dword:00000005 "WWeightCoef"=dword:00000066 "WCurrentAbilityCoef"=dword:00000000 "WCornersCoef"=dword:0000000a "WCrossingCoef"=dword:00000064 "WDribblingCoef"=dword:00000064 "WFinishingCoef"=dword:0000003c "WFirstTouchCoef"=dword:0000001e "WFreeKicksCoef"=dword:0000000a "WHeadingCoef"=dword:00000014 "WLongShotsCoef"=dword:00000014 "WLongThrowsCoef"=dword:00000005 "WMarkingCoef"=dword:0000000a "WPassingCoef"=dword:0000003c "WPenaltiesCoef"=dword:00000005 "WTacklingCoef"=dword:0000000a "WTechniqueCoef"=dword:00000050 "WLeftFootCoef"=dword:00000005 "WRightFootCoef"=dword:00000005 "WAggressionCoef"=dword:0000000a "WAnticipationCoef"=dword:00000014 "WBraveryCoef"=dword:0000000a "WComposureCoef"=dword:0000000a "WConcentrationCoef"=dword:0000000a "WConsistencyCoef"=dword:0000000a "WCreativityCoef"=dword:0000003c "WDecisionsCoef"=dword:00000014 "WDeterminationCoef"=dword:0000000a "WDirtinessCoef"=dword:fffffffb "WFlairCoef"=dword:0000000a "WImportantMatchesCoef"=dword:00000014 "WInfluenceCoef"=dword:0000000a "WOffTheBallCoef"=dword:0000003c "WPositioningCoef"=dword:00000014 "WTeamworkCoef"=dword:0000001e "WWorkRateCoef"=dword:0000001e "WAccelerationCoef"=dword:00000050 "WAgilityCoef"=dword:00000014 "WBalanceCoef"=dword:0000000a "WInjuryPronenessCoef"=dword:fffffffb "WJumpingCoef"=dword:00000014 "WNaturalFitnessCoef"=dword:00000005 "WPaceCoef"=dword:00000064 "WStaminaCoef"=dword:0000003c "WStrengthCoef"=dword:00000014 "WVersatilityCoef"=dword:00000005 "WAerialAbilityCoef"=dword:00000000 "WCommandOfAreaCoef"=dword:00000000 "WCommunicationCoef"=dword:00000000 "WEccentricityCoef"=dword:00000000 "WHandlingCoef"=dword:00000000 "WKickingCoef"=dword:00000000 "WOneOnOnesCoef"=dword:00000005 "WReflexesCoef"=dword:00000005 "WRushingOutCoef"=dword:00000000 "WTendencyToPunchCoef"=dword:00000000 "WThrowingCoef"=dword:00000000 "WAdaptabilityCoef"=dword:00000005 "WAmbitionCoef"=dword:0000000a "WControversyCoef"=dword:fffffffb "WLoyalityCoef"=dword:00000005 "WPressureCoef"=dword:00000005 "WProfessionalismCoef"=dword:00000005 "WSportsmanshipCoef"=dword:00000005 "WTemperamentCoef"=dword:00000005 "FSTWeightCoef"=dword:00000064 "FSTCurrentAbilityCoef"=dword:00000000 "FSTCornersCoef"=dword:0000000a "FSTCrossingCoef"=dword:0000000a "FSTDribblingCoef"=dword:00000050 "FSTFinishingCoef"=dword:00000064 "FSTFirstTouchCoef"=dword:00000028 "FSTFreeKicksCoef"=dword:0000000a "FSTHeadingCoef"=dword:00000028 "FSTLongShotsCoef"=dword:00000014 "FSTLongThrowsCoef"=dword:00000000 "FSTMarkingCoef"=dword:00000000 "FSTPassingCoef"=dword:00000028 "FSTPenaltiesCoef"=dword:00000005 "FSTTacklingCoef"=dword:00000000 "FSTTechniqueCoef"=dword:00000050 "FSTLeftFootCoef"=dword:00000005 "FSTRightFootCoef"=dword:00000005 "FSTAggressionCoef"=dword:0000000a "FSTAnticipationCoef"=dword:0000000a "FSTBraveryCoef"=dword:0000000a "FSTComposureCoef"=dword:0000000a "FSTConcentrationCoef"=dword:0000000a "FSTConsistencyCoef"=dword:0000000a "FSTCreativityCoef"=dword:00000028 "FSTDecisionsCoef"=dword:0000000a "FSTDeterminationCoef"=dword:0000000a "FSTDirtinessCoef"=dword:fffffffb "FSTFlairCoef"=dword:0000000a "FSTImportantMatchesCoef"=dword:0000000a "FSTInfluenceCoef"=dword:0000000a "FSTOffTheBallCoef"=dword:00000050 "FSTPositioningCoef"=dword:0000000a "FSTTeamworkCoef"=dword:0000000a "FSTWorkRateCoef"=dword:0000000a "FSTAccelerationCoef"=dword:00000064 "FSTAgilityCoef"=dword:00000028 "FSTBalanceCoef"=dword:0000000a "FSTInjuryPronenessCoef"=dword:fffffffb "FSTJumpingCoef"=dword:00000014 "FSTNaturalFitnessCoef"=dword:00000005 "FSTPaceCoef"=dword:00000064 "FSTStaminaCoef"=dword:00000028 "FSTStrengthCoef"=dword:00000014 "FSTVersatilityCoef"=dword:00000005 "FSTAerialAbilityCoef"=dword:00000000 "FSTCommandOfAreaCoef"=dword:00000000 "FSTCommunicationCoef"=dword:00000000 "FSTEccentricityCoef"=dword:00000000 "FSTHandlingCoef"=dword:00000000 "FSTKickingCoef"=dword:00000000 "FSTOneOnOnesCoef"=dword:00000005 "FSTReflexesCoef"=dword:00000005 "FSTRushingOutCoef"=dword:00000000 "FSTTendencyToPunchCoef"=dword:00000000 "FSTThrowingCoef"=dword:00000000 "FSTAdaptabilityCoef"=dword:00000005 "FSTAmbitionCoef"=dword:0000000a "FSTControversyCoef"=dword:fffffffb "FSTLoyalityCoef"=dword:00000005 "FSTPressureCoef"=dword:00000005 "FSTProfessionalismCoef"=dword:00000005 "FSTSportsmanshipCoef"=dword:00000005 "FSTTemperamentCoef"=dword:00000005 "TSTWeightCoef"=dword:00000065 "TSTCurrentAbilityCoef"=dword:00000000 "TSTCornersCoef"=dword:00000000 "TSTCrossingCoef"=dword:0000000a "TSTDribblingCoef"=dword:0000003c "TSTFinishingCoef"=dword:00000050 "TSTFirstTouchCoef"=dword:0000001e "TSTFreeKicksCoef"=dword:0000000a "TSTHeadingCoef"=dword:00000064 "TSTLongShotsCoef"=dword:00000014 "TSTLongThrowsCoef"=dword:00000000 "TSTMarkingCoef"=dword:00000000 "TSTPassingCoef"=dword:00000028 "TSTPenaltiesCoef"=dword:00000005 "TSTTacklingCoef"=dword:00000000 "TSTTechniqueCoef"=dword:00000028 "TSTLeftFootCoef"=dword:00000005 "TSTRightFootCoef"=dword:00000005 "TSTAggressionCoef"=dword:00000014 "TSTAnticipationCoef"=dword:0000000a "TSTBraveryCoef"=dword:00000014 "TSTComposureCoef"=dword:0000000a "TSTConcentrationCoef"=dword:0000000a "TSTConsistencyCoef"=dword:0000000a "TSTCreativityCoef"=dword:00000014 "TSTDecisionsCoef"=dword:0000000a "TSTDeterminationCoef"=dword:0000000a "TSTDirtinessCoef"=dword:fffffffb "TSTFlairCoef"=dword:0000000a "TSTImportantMatchesCoef"=dword:0000000a "TSTInfluenceCoef"=dword:0000000a "TSTOffTheBallCoef"=dword:00000050 "TSTPositioningCoef"=dword:00000014 "TSTTeamworkCoef"=dword:0000000a "TSTWorkRateCoef"=dword:0000000a "TSTAccelerationCoef"=dword:00000028 "TSTAgilityCoef"=dword:00000014 "TSTBalanceCoef"=dword:00000014 "TSTInjuryPronenessCoef"=dword:fffffffb "TSTJumpingCoef"=dword:00000064 "TSTNaturalFitnessCoef"=dword:00000005 "TSTPaceCoef"=dword:00000028 "TSTStaminaCoef"=dword:00000014 "TSTStrengthCoef"=dword:00000050 "TSTVersatilityCoef"=dword:00000005 "TSTAerialAbilityCoef"=dword:00000000 "TSTCommandOfAreaCoef"=dword:00000000 "TSTCommunicationCoef"=dword:00000000 "TSTEccentricityCoef"=dword:00000000 "TSTHandlingCoef"=dword:00000000 "TSTKickingCoef"=dword:00000000 "TSTOneOnOnesCoef"=dword:00000005 "TSTReflexesCoef"=dword:00000005 "TSTRushingOutCoef"=dword:00000000 "TSTTendencyToPunchCoef"=dword:00000000 "TSTThrowingCoef"=dword:00000000 "TSTAdaptabilityCoef"=dword:00000005 "TSTAmbitionCoef"=dword:0000000a "TSTControversyCoef"=dword:fffffffb "TSTLoyalityCoef"=dword:00000005 "TSTPressureCoef"=dword:00000005 "TSTProfessionalismCoef"=dword:00000005 "TSTSportsmanshipCoef"=dword:00000005 "TSTTemperamentCoef"=dword:00000005 . [HKEY_USERS\S-1-5-21-1454471165-1383384898-842925246-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(548) c:\windows\system32\WININET.dll . - - - - - - - > 'explorer.exe'(208) c:\windows\system32\WININET.dll c:\windows\system32\mshtml.dll c:\windows\system32\msls31.dll c:\windows\system32\msi.dll c:\windows\system32\IEFRAME.dll c:\windows\system32\webcheck.dll . - - - - - - - > 'csrss.exe'(524) c:\windows\system32\WININET.dll . ------------------------ Other Running Processes ------------------------ . c:\docume~1\KUCNI\LOCALS~1\Temp\minerd.exe c:\documents and settings\KUCNI\Application Data\4.exe c:\documents and settings\KUCNI\Application Data\6.exe . ************************************************************************** . Completion time: 2013-05-13 22:38:22 - machine was rebooted ComboFix-quarantined-files.txt 2013-05-13 20:38 . Pre-Run: 2,819,854,336 bytes free Post-Run: 2,805,399,552 bytes free . - - End Of File - - 83C18101D45DB713AD79961B1D10AA10

Profil

ivance95 Poslao: 14 Maj 2013 09:18 Idi na vrh
offline ivance95 AMF pripravnik Pridružio: 04 Jul 2011 Poruke: 5424	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uploaduj mi ovaj fajl: c:\windows\system32\0fb18E.sys Preko sledeće forme: [Link mogu videti samo ulogovani korisnici] Javi ovde kada uradiš. Ivance95 (AMF Tim)

Profil

Vladan Petkovic Poslao: 14 Maj 2013 10:31 Idi na vrh
offline Vladan Petkovic Novi MyCity građanin Pridružio: 05 Avg 2012 Poruke: 7	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Upload sam.

Profil

ivance95 Poslao: 14 Maj 2013 21:52 Idi na vrh
offline ivance95 AMF pripravnik Pridružio: 04 Jul 2011 Poruke: 5424	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Otvoriti Notepad i iskopirati sledeci tekst: File:: c:\documents and settings\KUCNI\Application Data\5.exe c:\documents and settings\KUCNI\Application Data\4.exe c:\documents and settings\KUCNI\Application Data\r3.exe c:\windows\system32\drivers\78944739.sys c:\windows\system32\drivers\49187010.sys c:\windows\system32\0fb18E.sys c:\documents and settings\KUCNI\Application Data\Evhshw.exe c:\docume~1\KUCNI\LOCALS~1\Temp\minerd.exe c:\documents and settings\KUCNI\Application Data\6.exe c:\windows\system32\drivers\iiifwsmb.sys Registry:: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "0x000101"=- "Evhshw"=- Driver:: 0fb18E 97534542 lfaqeorr Netsvc:: lfaqeorr ClearJavaCache:: Snimiti na Desktop fajl iz Notepada kao "CFScript" Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici. Postaviti u sledecoj poruci log koji bude bio napravljen na kraju ciscenja/skeniranja. Kakvo je stanje nakon ovoga? Ivance95 (AMF Tim)

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Sumnjivi exe fajlovi

Ko je trenutno na forumu

Ukupno su 813 korisnika na forumu :: 195 registrovanih, 14 sakrivenih i 604 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: 015, 1MAP, acov34, Ageofloneliness, ALEKSICMILE, ALEXV, amonsrb, anbeast, Apok, Aska, Automaticar, BaneM75, bb929, Betta, Black Luster Soldier, Bojke549, boromir, BORUTUS, Botovac, bounty hunters, celt, ceman, chichabg, coaaco, CrazyDiablo, cuvarkuca, cyprus, dankisha, Darth Malak, Demi87, Despot1, dexteroza, Dioniss, DjomlaHomer, djonsule, Dorcolac, dragan4s, draganl, dragoljub11987, dule10savic, dushan, dzoni19, ElGenius, Fliper, Fog of War, fokac, g_g, Gall, gasazem, Gauss56, GH69, ghoost, ginjica, Giro77, glados, gobrad, goran.vvv, Grochow, GveX, HogarStrashni, Igor Antonic, ikan, Imprimatur, In_hero, IQ116, istina, Istman, istokzapad, ivan1973, ivica976, Jager715510, Jester, JimmyNapoli, Joco Skljoco, jodzula, Jomini, jopicus, Još malo pa deda, kaput21, Koce, Kredit, Kriglord, Kum Ruzvelt, kunktator, kybonacci, Lazur_01, Levi, Lobo, luja, M74AB3, M855, Mamadu, Manjane, marki231, marko.markovic, MarkoD, mercedesamg, Mi lao shu, Michellefromrezistance, MiGac, milenko crazy north, milimoj, minke, mkukoleca, mnn2, molusan, Muki 123, narandzasti, Natuzzi, nebidrag, neko iz mase, Nemanja Opalić, Nemanja.M, Nepopravljivi, niksa517, Njubara, novator, Ognjen D., oldtimer, OtacMakarije, paja69, Paklenica, Pale2025, partyzan, pein, petrovicrs, Pilence, pobeda, Poof, Povratak1912, Pururin, PuškeiPlavuše, RajkoB, rakivan, Reddot, renvoi, repac, RJ, Rogan33, s0ne, sap, saputnik plavetnila, sasics, Sass Drake, savaskytec, sekretar, Semprini, Shilok, Shinobi, shlauf, sickmouse, sijecanj, skylab1111, Smor, srbijaiznadsvega, ssekir75, StefanNS, Stoilkovic, svnedelja, Tandrčak, Tas011, teheran, tesa, tmanda323, tooooom, Totem, tvlada, UAV operator, Utd4ce, v0idmp3, vathra, vdeki, vensla, vjetar, voja64, volimpivuvolimrakiju, Vrač, Warrior, Wehicle, wizzardone, x011, xAlex2, Yekaterinburg, Yugol33, zivojin32, zlaya011, Zmaj Ognjeni Vuk, zmajbre, zombicar153, zoran-ruma, Zukov, |_MeD_|, ČOBAN, 787, 800077

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by