ComboFix 09-10-19.04 - Owner 20.10.2009 21:35.5.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.510.176 [GMT 2:00]
Spuštěný z: c:\documents and settings\Owner\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Owner\Plocha\CFScript.txt
AV: avast! antivirus 4.8.1356 [VPS 091020-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_CPUZ130
-------\Service_7b1d553b
-------\Service_cpuz130
((((((((((((((((((((((((( Soubory vytvořené od 2009-09-20 do 2009-10-20 )))))))))))))))))))))))))))))))
.
2009-10-19 20:23 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-10-19 18:57 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-19 18:57 . 2009-10-19 18:57 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-10-19 18:57 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-10-18 20:05 . 2009-10-18 20:05 -------- d-----w- c:\program files\Trend Micro
2009-10-18 18:19 . 2009-10-18 18:19 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2009-10-17 20:50 . 2009-09-15 10:54 52368 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-10-17 20:50 . 2009-09-15 10:54 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-10-17 20:50 . 2009-09-15 10:53 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-10-17 20:49 . 2009-09-15 10:53 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-10-17 20:49 . 2009-09-15 10:56 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-10-17 20:49 . 2009-09-15 10:55 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-10-17 20:49 . 2009-09-15 10:55 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-10-17 20:49 . 2009-09-15 10:56 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-10-17 20:48 . 2009-09-15 10:59 1279968 ----a-w- c:\windows\system32\aswBoot.exe
2009-10-06 17:23 . 2009-10-06 17:23 -------- d-----w- c:\program files\BZFlag2.0.10
2009-10-05 19:12 . 2009-10-05 19:13 -------- d-----w- c:\program files\CCleaner
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-20 18:15 . 2009-03-10 16:00 -------- d-----w- c:\program files\DNA
2009-10-19 18:24 . 2008-01-17 20:43 -------- d-----w- c:\program files\Common Files\Apple
2009-10-18 18:00 . 2005-12-31 23:38 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-10-18 15:58 . 2008-08-30 11:35 -------- d-----w- c:\program files\InterActual
2009-10-18 15:55 . 2007-09-11 21:38 -------- d-----w- c:\program files\Google
2009-10-18 15:50 . 2007-06-30 16:30 -------- d-----w- c:\program files\Zatre Online
2009-10-16 22:33 . 2006-03-02 12:00 82462 ----a-w- c:\windows\system32\perfc005.dat
2009-10-16 22:33 . 2006-03-02 12:00 437062 ----a-w- c:\windows\system32\perfh005.dat
2009-10-11 18:45 . 2009-01-30 10:23 -------- d-----w- c:\program files\Pokémon
2009-10-07 21:17 . 2008-05-04 11:09 -------- d-----w- c:\program files\Medvěd Míša - Rybí dobrodružství
2009-09-25 13:29 . 2009-06-22 20:14 -------- d-----w- c:\program files\Seznam.cz
2009-09-16 14:47 . 2009-09-16 14:47 -------- d-----w- c:\program files\Audacity 1.3 Beta (Unicode)
2009-09-11 14:19 . 2006-03-02 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:05 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 07:58 . 2006-03-02 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-08-28 19:52 . 2006-11-09 16:37 -------- d-----w- c:\program files\Monster Truck Rumble
2009-08-28 19:52 . 2006-09-29 09:36 -------- d-----w- c:\program files\Total Uninstall
2009-08-27 22:26 . 2006-10-18 13:27 -------- d-----w- c:\program files\LANGMaster Škola DNES
2009-08-27 22:26 . 2006-10-18 13:27 -------- d-----w- c:\program files\Common Files\GraphBoard 2.50
2009-08-27 22:20 . 2008-08-18 16:53 -------- d-----w- c:\program files\GumboyCrazyAdventures
2009-08-27 22:09 . 2009-02-28 19:08 -------- d-----w- c:\program files\Audiosurf
2009-08-26 08:02 . 2006-03-02 12:00 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-05 09:01 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 20:59 . 2006-03-02 12:00 2191360 ------w- c:\windows\system32\ntoskrnl.exe
2009-08-04 17:29 . 2004-08-17 15:45 2068224 ------w- c:\windows\system32\ntkrnlpa.exe
2009-07-25 03:23 . 2008-12-21 08:56 411368 ----a-w- c:\windows\system32\deploytk.dll
2007-12-28 14:18 . 2007-01-25 18:16 96736 ----a-w- c:\program files\PISQORKY.EXE
2007-10-09 19:44 . 2007-10-09 19:44 4645520 ----a-w- c:\program files\flashget194en.exe
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
((((((((((((((((((((((((((((( SnapShot@2009-10-19_20.23.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 17:41 . 2009-07-11 17:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
+ 2009-10-20 19:50 . 2009-10-20 19:50 16384 c:\windows\Temp\Perflib_Perfdata_584.dat
+ 2009-10-20 18:13 . 2009-10-20 18:13 16384 c:\windows\Temp\Perflib_Perfdata_578.dat
+ 2009-10-20 19:51 . 2009-10-20 19:51 16384 c:\windows\Temp\Perflib_Perfdata_1d4.dat
+ 2009-10-19 21:47 . 2009-10-19 21:47 248832 c:\windows\Installer\4eefc7.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-16 68856]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-09-03 3342336]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-03-10 321344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2006-05-04 69632]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2006-04-27 344064]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-12-14 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-14 7323648]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-05-01 843776]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-09-15 81000]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"WD Button Manager"="WDBtnMgr.exe" - c:\windows\system32\WDBtnMgr.exe [2008-10-14 364544]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2005-12-14 1519616]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-18 65588]
[HKLM\~\startupfolder\C:^Documents and Settings^Owner^Nabídka Start^Programy^Po spuštění^RollerCoaster Tycoon 3 Registration.lnk]
path=c:\documents and settings\Owner\Nabídka Start\Programy\Po spuštění\RollerCoaster Tycoon 3 Registration.lnk
backup=c:\windows\pss\RollerCoaster Tycoon 3 Registration.lnkStartup
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ubisoft\\Heroes of Might and Magic V\\bin\\H5_Game.exe"=
"c:\\Program Files\\Games\\RocketRacer\\RocketRacer.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Documents and Settings\\Owner\\Dokumenty\\Prizee\\server prizee\\http_prizee.exe"=
"c:\\Documents and Settings\\Owner\\Dokumenty\\Prizee\\server prizee\\serwer_prizee.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Sports Interactive\\Football Manager 2007\\fm.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"23456:TCP"= 23456:TCP:BitComet 23456 TCP
"23456:UDP"= 23456:UDP:BitComet 23456 UDP
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [5.7.2006 14:46 63352]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [17.10.2009 22:49 114768]
R1 wfcxacap;WinFast TV PCI Audio Capture Driver;c:\windows\system32\drivers\wfcxacap.sys [1.1.2006 2:05 9856]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17.10.2009 22:49 20560]
R2 wfcxatun;WinFast TV Analog Tuner Driver;c:\windows\system32\drivers\wfcxatun.sys [1.1.2006 2:05 31616]
R2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [1.1.2006 2:05 167296]
R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [1.1.2006 2:05 21248]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [1.1.2006 2:05 15872]
R3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [1.1.2006 2:11 10368]
R3 WFIOCTL;WFIOCTL;c:\program files\WinFast\WFDTV\WFIOCTL.sys [1.1.2006 2:15 9446]
S2 gupdate1c9a7bfd8c1434a;Služba Google Update (gupdate1c9a7bfd8c1434a);c:\program files\Google\Update\GoogleUpdate.exe [18.3.2009 13:51 133104]
S3 Asushwio;Asushwio;c:\windows\system32\drivers\ASUSHWIO.SYS [1.1.2006 1:33 5824]
S3 ZD1211BU(TP-LINK);TL-WN422G Wireless USB Adapter Driver(TP-LINK);c:\windows\system32\drivers\ZD1211BU.sys [14.3.2009 13:33 500736]
.
Obsah adresáře 'Naplánované úlohy'
2008-12-17 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
2009-10-20 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-09-11 19:57]
2009-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-18 11:50]
2009-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-18 11:50]
2009-10-20 c:\windows\Tasks\User_Feed_Synchronization-{F80991AB-FF4C-41ED-B8FF-543E363CC853}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page =
hxxp://www.seznam.cz/uDefault_Search_URL =
hxxp://www.google.com/ieuSearchMigratedDefaultURL =
hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) =
hxxp://www.google.com/search?q=%s
IE: {{0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - c:\program files\Seznam.cz\listicka.dll
FF - ProfilePath - c:\documents and settings\Owner\Data aplikací\Mozilla\Firefox\Profiles\zqscofsy.default\
FF - prefs.js: browser.search.selectedEngine - Seznam
FF - prefs.js: browser.startup.homepage -
hxxp://www.seznam.cz/FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2009-10-20 21:52
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-725345543-1060284298-2147124373-1003\Software\G*e*n*i*e*"!\FM Genie Scout]
"GameDir"=""
"ShortlistDir"=""
"ScreenshotsDir"=""
"SaveDir"=""
"HistoryDir"="c:\\Documents and Settings\\Owner\\Dokumenty\\Dany\\Football Manager 2007\\fm_genie_scout_2007_v1.0\\FM Genie Scout 2007\\History Points"
"LangDB"=""
"LastSaveGame"="c:\\Documents and Settings\\Owner\\Dokumenty\\Sports Interactive\\Football Manager 2007\\games\\Daniel Borák - Amatér 1-1.fm"
"LoadLangDB"=dword:00000000
"CompressHistoryPoints"=dword:00000000
"HighlightedAttributes"=dword:00000000
"WindowState"=dword:00000002
"Currency"=dword:00000056
"WindowHeight"=dword:00000250
"WindowWidth"=dword:000003d6
"WindowLeft"=dword:00000055
"WindowTop"=dword:00000088
[HKEY_USERS\S-1-5-21-725345543-1060284298-2147124373-1003\Software\G*e*n*i*e*"!\FM Genie Scout\Columns\Players]
"Position0"=dword:00000000
"Visible0"=dword:00000001
"Width0"=dword:00000090
"Position1"=dword:00000001
"Visible1"=dword:00000001
"Width1"=dword:0000007b
"Position2"=dword:00000002
"Visible2"=dword:00000001
"Width2"=dword:00000074
"Position3"=dword:00000003
"Visible3"=dword:00000001
"Width3"=dword:00000068
"Position4"=dword:00000005
"Visible4"=dword:00000001
"Width4"=dword:00000026
"Position5"=dword:00000006
"Visible5"=dword:00000001
"Width5"=dword:00000027
"Position6"=dword:00000004
"Visible6"=dword:00000001
"Width6"=dword:00000028
"Position7"=dword:00000008
"Visible7"=dword:00000001
"Width7"=dword:0000004b
"Position8"=dword:00000009
"Visible8"=dword:00000001
"Width8"=dword:0000004b
"Position9"=dword:0000000a
"Visible9"=dword:00000001
"Width9"=dword:00000050
"Position10"=dword:0000000b
"Visible10"=dword:00000000
"Width10"=dword:00000050
"Position11"=dword:0000000c
"Visible11"=dword:00000000
"Width11"=dword:0000004b
"Position12"=dword:0000000d
"Visible12"=dword:00000000
"Width12"=dword:0000002d
"Position13"=dword:0000000e
"Visible13"=dword:00000000
"Width13"=dword:0000003c
"Position14"=dword:0000000f
"Visible14"=dword:00000000
"Width14"=dword:0000004b
"Position15"=dword:00000010
"Visible15"=dword:00000000
"Width15"=dword:00000064
"Position16"=dword:00000011
"Visible16"=dword:00000000
"Width16"=dword:00000064
"Position17"=dword:00000012
"Visible17"=dword:00000000
"Width17"=dword:0000004b
"Position18"=dword:00000013
"Visible18"=dword:00000000
"Width18"=dword:00000064
"Position19"=dword:00000014
"Visible19"=dword:00000000
"Width19"=dword:0000003c
"Position20"=dword:00000015
"Visible20"=dword:00000000
"Width20"=dword:0000004b
"Position21"=dword:00000016
"Visible21"=dword:00000000
"Width21"=dword:00000050
"Position22"=dword:00000017
"Visible22"=dword:00000000
"Width22"=dword:00000073
"Position23"=dword:00000018
"Visible23"=dword:00000000
"Width23"=dword:00000050
"Position24"=dword:00000019
"Visible24"=dword:00000000
"Width24"=dword:0000005a
"Position25"=dword:0000001a
"Visible25"=dword:00000000
"Width25"=dword:0000006e
"Position26"=dword:0000001b
"Visible26"=dword:00000000
"Width26"=dword:00000064
"Position27"=dword:0000001c
"Visible27"=dword:00000000
"Width27"=dword:00000087
"Position28"=dword:0000001d
"Visible28"=dword:00000000
"Width28"=dword:00000064
"Position29"=dword:0000001e
"Visible29"=dword:00000000
"Width29"=dword:00000064
"Position30"=dword:0000001f
"Visible30"=dword:00000000
"Width30"=dword:00000046
"Position31"=dword:00000020
"Visible31"=dword:00000000
"Width31"=dword:0000004b
"Position32"=dword:00000021
"Visible32"=dword:00000000
"Width32"=dword:00000046
"Position33"=dword:00000022
"Visible33"=dword:00000000
"Width33"=dword:0000004b
"Position34"=dword:00000023
"Visible34"=dword:00000000
"Width34"=dword:0000003c
"Position35"=dword:00000024
"Visible35"=dword:00000000
"Width35"=dword:00000064
"Position36"=dword:00000025
"Visible36"=dword:00000000
"Width36"=dword:00000073
"Position37"=dword:00000026
"Visible37"=dword:00000000
"Width37"=dword:0000005f
"Position38"=dword:00000027
"Visible38"=dword:00000000
"Width38"=dword:00000091
"Position39"=dword:00000028
"Visible39"=dword:00000000
"Width39"=dword:0000003c
"Position40"=dword:00000029
"Visible40"=dword:00000000
"Width40"=dword:0000005a
"Position41"=dword:0000002a
"Visible41"=dword:00000000
"Width41"=dword:00000041
"Position42"=dword:0000002b
"Visible42"=dword:00000000
"Width42"=dword:00000050
"Position43"=dword:0000002c
"Visible43"=dword:00000000
"Width43"=dword:00000055
"Position44"=dword:0000002d
"Visible44"=dword:00000000
"Width44"=dword:0000005f
"Position45"=dword:0000002e
"Visible45"=dword:00000000
"Width45"=dword:00000050
"Position46"=dword:0000002f
"Visible46"=dword:00000000
"Width46"=dword:0000004b
"Position47"=dword:00000030
"Visible47"=dword:00000000
"Width47"=dword:0000004b
"Position48"=dword:00000031
"Visible48"=dword:00000000
"Width48"=dword:00000046
"Position49"=dword:00000032
"Visible49"=dword:00000000
"Width49"=dword:00000032
"Position50"=dword:00000033
"Visible50"=dword:00000000
"Width50"=dword:0000003c
"Position51"=dword:00000034
"Visible51"=dword:00000000
"Width51"=dword:0000004b
"Position52"=dword:00000035
"Visible52"=dword:00000000
"Width52"=dword:0000003c
"Position53"=dword:00000036
"Visible53"=dword:00000000
"Width53"=dword:00000037
"Position54"=dword:00000037
"Visible54"=dword:00000000
"Width54"=dword:00000069
"Position55"=dword:00000038
"Visible55"=dword:00000000
"Width55"=dword:0000005a
"Position56"=dword:00000039
"Visible56"=dword:00000000
"Width56"=dword:0000004b
"Position57"=dword:0000003a
"Visible57"=dword:00000000
"Width57"=dword:0000004b
"Position58"=dword:0000003b
"Visible58"=dword:00000000
"Width58"=dword:00000037
"Position59"=dword:0000003c
"Visible59"=dword:00000000
"Width59"=dword:0000003c
"Position60"=dword:0000003d
"Visible60"=dword:00000000
"Width60"=dword:0000003c
"Position61"=dword:0000003e
"Visible61"=dword:00000000
"Width61"=dword:00000041
"Position62"=dword:0000003f
"Visible62"=dword:00000000
"Width62"=dword:00000055
"Position63"=dword:00000040
"Visible63"=dword:00000000
"Width63"=dword:0000003c
"Position64"=dword:00000041
"Visible64"=dword:00000000
"Width64"=dword:0000003c
"Position65"=dword:00000042
"Visible65"=dword:00000000
"Width65"=dword:0000004b
"Position66"=dword:00000043
"Visible66"=dword:00000000
"Width66"=dword:0000003c
"Position67"=dword:00000044
"Visible67"=dword:00000000
"Width67"=dword:00000046
"Position68"=dword:00000045
"Visible68"=dword:00000000
"Width68"=dword:00000028
"Position69"=dword:00000046
"Visible69"=dword:00000000
"Width69"=dword:00000041
"Position70"=dword:00000047
"Visible70"=dword:00000000
"Width70"=dword:0000003c
"Position71"=dword:00000048
"Visible71"=dword:00000000
"Width71"=dword:00000069
"Position72"=dword:00000049
"Visible72"=dword:00000000
"Width72"=dword:00000041
"Position73"=dword:0000004a
"Visible73"=dword:00000000
"Width73"=dword:0000005f
"Position74"=dword:0000004b
"Visible74"=dword:00000000
"Width74"=dword:0000003c
"Position75"=dword:0000004c
"Visible75"=dword:00000000
"Width75"=dword:00000037
"Position76"=dword:0000004d
"Visible76"=dword:00000000
"Width76"=dword:0000004b
"Position77"=dword:0000004e
"Visible77"=dword:00000000
"Width77"=dword:00000050
"Position78"=dword:0000004f
"Visible78"=dword:00000000
"Width78"=dword:00000037
"Position79"=dword:00000050
"Visible79"=dword:00000000
"Width79"=dword:00000037
"Position80"=dword:00000051
"Visible80"=dword:00000000
"Width80"=dword:0000005a
"Position81"=dword:00000052
"Visible81"=dword:00000000
"Width81"=dword:0000004b
"Position82"=dword:00000053
"Visible82"=dword:00000000
"Width82"=dword:00000055
"Position83"=dword:00000054
"Visible83"=dword:00000000
"Width83"=dword:0000002d
"Position84"=dword:00000055
"Visible84"=dword:00000000
"Width84"=dword:00000037
"Position85"=dword:00000056
"Visible85"=dword:00000000
"Width85"=dword:0000003c
"Position86"=dword:00000057
"Visible86"=dword:00000000
"Width86"=dword:00000046
"Position87"=dword:00000058
"Visible87"=dword:00000000
"Width87"=dword:0000003c
"Position88"=dword:00000059
"Visible88"=dword:00000000
"Width88"=dword:0000005a
"Position89"=dword:0000005a
"Visible89"=dword:00000000
"Width89"=dword:0000003c
"Position90"=dword:0000005b
"Visible90"=dword:00000000
"Width90"=dword:00000050
"Position91"=dword:0000005c
"Visible91"=dword:00000000
"Width91"=dword:00000046
"Position92"=dword:0000005d
"Visible92"=dword:00000000
"Width92"=dword:0000005a
"Position93"=dword:0000005e
"Visible93"=dword:00000000
"Width93"=dword:00000037
"Position94"=dword:0000005f
"Visible94"=dword:00000000
"Width94"=dword:0000003c
"Position95"=dword:00000060
"Visible95"=dword:00000000
"Width95"=dword:0000003c
"Position96"=dword:00000061
"Visible96"=dword:00000000
"Width96"=dword:00000046
"Position97"=dword:00000062
"Visible97"=dword:00000000
"Width97"=dword:00000046
"Position98"=dword:00000063
"Visible98"=dword:00000000
"Width98"=dword:00000055
"Position99"=dword:00000064
"Visible99"=dword:00000000
"Width99"=dword:00000073
"Position100"=dword:00000065
"Visible100"=dword:00000000
"Width100"=dword:00000041
"Position101"=dword:00000066
"Visible101"=dword:00000000
"Width101"=dword:0000003c
"Position102"=dword:00000067
"Visible102"=dword:00000000
"Width102"=dword:0000003c
"Position103"=dword:00000068
"Visible103"=dword:00000000
"Width103"=dword:00000046
"Position104"=dword:00000069
"Visible104"=dword:00000000
"Width104"=dword:0000003c
"Position105"=dword:0000006a
"Visible105"=dword:00000000
"Width105"=dword:00000041
"Position106"=dword:0000006b
"Visible106"=dword:00000001
"Width106"=dword:00000050
"Position107"=dword:00000007
"Visible107"=dword:00000001
"Width107"=dword:00000027
"Position108"=dword:0000006c
"Visible108"=dword:00000000
"Width108"=dword:00000050
"Position109"=dword:0000006d
"Visible109"=dword:00000000
"Width109"=dword:00000050
"Position110"=dword:0000006e
"Visible110"=dword:00000000
"Width110"=dword:00000055
"Position111"=dword:0000006f
"Visible111"=dword:00000000
"Width111"=dword:00000082
"Position112"=dword:00000070
"Visible112"=dword:00000000
"Width112"=dword:00000087
"Position113"=dword:00000071
"Visible113"=dword:00000000
"Width113"=dword:0000000a
"Position114"=dword:00000072
"Visible114"=dword:00000000
"Width114"=dword:0000000a
"Position115"=dword:00000073
"Visible115"=dword:00000000
"Width115"=dword:00000072
"Position116"=dword:00000074
"Visible116"=dword:00000000
"Width116"=dword:0000000a
"Position117"=dword:00000075
"Visible117"=dword:00000000
"Width117"=dword:0000000a
"Position118"=dword:00000076
"Visible118"=dword:00000000
"Width118"=dword:0000000a
"Position119"=dword:00000077
"Visible119"=dword:00000000
"Width119"=dword:0000000a
"Position120"=dword:00000078
"Visible120"=dword:00000000
"Width120"=dword:0000000a
"Position121"=dword:00000079
"Visible121"=dword:00000000
"Width121"=dword:0000000a
"Position122"=dword:0000007a
"Visible122"=dword:00000000
"Width122"=dword:0000000a
"Position123"=dword:0000007b
"Visible123"=dword:00000000
"Width123"=dword:0000000a
"Position124"=dword:0000007c
"Visible124"=dword:00000000
"Width124"=dword:0000000a
"Position125"=dword:0000007d
"Visible125"=dword:00000000
"Width125"=dword:0000000a
"Position126"=dword:0000007e
"Visible126"=dword:00000000
"Width126"=dword:0000000a
"Position127"=dword:0000007f
"Visible127"=dword:00000000
"Width127"=dword:0000000a
"Position128"=dword:00000080
"Visible128"=dword:00000000
"Width128"=dword:0000000a
"Position129"=dword:00000081
"Visible129"=dword:00000000
"Width129"=dword:0000000a
"Position130"=dword:00000082
"Visible130"=dword:00000000
"Width130"=dword:0000000a
"Position131"=dword:00000083
"Visible131"=dword:00000000
"Width131"=dword:0000000a
"Position132"=dword:00000084
"Visible132"=dword:00000000
"Width132"=dword:0000000a
"Position133"=dword:00000085
"Visible133"=dword:00000000
"Width133"=dword:0000000a
"Position134"=dword:00000086
"Visible134"=dword:00000000
"Width134"=dword:0000000a
"Position135"=dword:00000087
"Visible135"=dword:00000000
"Width135"=dword:0000000a
"Position136"=dword:00000088
"Visible136"=dword:00000000
"Width136"=dword:0000000a
"Position137"=dword:00000089
"Visible137"=dword:00000000
"Width137"=dword:0000000a
"Position138"=dword:0000008a
"Visible138"=dword:00000000
"Width138"=dword:0000000a
"Position139"=dword:0000008b
"Visible139"=dword:00000000
"Width139"=dword:0000000a
"Position140"=dword:0000008c
"Visible140"=dword:00000000
"Width140"=dword:0000000a
"Position141"=dword:0000008d
"Visible141"=dword:00000000
"Width141"=dword:0000000a
"Position142"=dword:0000008e
"Visible142"=dword:00000000
"Width142"=dword:0000000a
"Position143"=dword:0000008f
"Visible143"=dword:00000000
"Width143"=dword:0000000a
"Position144"=dword:00000090
"Visible144"=dword:00000000
"Width144"=dword:0000000a
[HKEY_USERS\S-1-5-21-725345543-1060284298-2147124373-1003\Software\G*e*n*i*e*"!\FM Genie Scout\Columns\Staff]
"Position0"=dword:00000000
"Visible0"=dword:00000001
"Width0"=dword:0000007d
"Position1"=dword:00000001
"Visible1"=dword:00000001
"Width1"=dword:00000064
"Position2"=dword:00000002
"Visible2"=dword:00000001
"Width2"=dword:00000064
"Position3"=dword:00000003
"Visible3"=dword:00000001
"Width3"=dword:00000069
"Position4"=dword:00000005
"Visible4"=dword:00000001
"Width4"=dword:00000028
"Position5"=dword:00000006
"Visible5"=dword:00000001
"Width5"=dword:00000028
"Position6"=dword:00000004
"Visible6"=dword:00000001
"Width6"=dword:00000028
"Position7"=dword:00000007
"Visible7"=dword:00000001
"Width7"=dword:00000050
"Position8"=dword:00000008
"Visible8"=dword:00000000
"Width8"=dword:00000050
"Position9"=dword:00000009
"Visible9"=dword:00000000
"Width9"=dword:0000004b
"Position10"=dword:0000000a
"Visible10"=dword:00000000
"Width10"=dword:0000002d
"Position11"=dword:0000000b
"Visible11"=dword:00000000
"Width11"=dword:0000003c
"Position12"=dword:0000000c
"Visible12"=dword:00000000
"Width12"=dword:0000004b
"Position13"=dword:0000000d
"Visible13"=dword:00000000
"Width13"=dword:00000064
"Position14"=dword:0000000e
"Visible14"=dword:00000000
"Width14"=dword:00000064
"Position15"=dword:0000000f
"Visible15"=dword:00000000
"Width15"=dword:0000004b
"Position16"=dword:00000010
"Visible16"=dword:00000000
"Width16"=dword:00000064
"Position17"=dword:00000011
"Visible17"=dword:00000000
"Width17"=dword:0000003c
"Position18"=dword:00000012
"Visible18"=dword:00000000
"Width18"=dword:0000004b
"Position19"=dword:00000013
"Visible19"=dword:00000000
"Width19"=dword:00000050
"Position20"=dword:00000014
"Visible20"=dword:00000000
"Width20"=dword:00000046
"Position21"=dword:00000015
"Visible21"=dword:00000000
"Width21"=dword:0000004b
"Position22"=dword:00000016
"Visible22"=dword:00000000
"Width22"=dword:00000046
"Position23"=dword:00000017
"Visible23"=dword:00000000
"Width23"=dword:00000046
"Position24"=dword:00000018
"Visible24"=dword:00000000
"Width24"=dword:0000003c
"Position25"=dword:00000019
"Visible25"=dword:00000000
"Width25"=dword:00000041
"Position26"=dword:0000001a
"Visible26"=dword:00000000
"Width26"=dword:0000003c
"Position27"=dword:0000001b
"Visible27"=dword:00000000
"Width27"=dword:00000055
"Position28"=dword:0000001c
"Visible28"=dword:00000000
"Width28"=dword:00000069
"Position29"=dword:0000001d
"Visible29"=dword:00000000
"Width29"=dword:0000006e
"Position30"=dword:0000001e
"Visible30"=dword:00000000
"Width30"=dword:00000064
"Position31"=dword:0000001f
"Visible31"=dword:00000000
"Width31"=dword:00000078
"Position32"=dword:00000020
"Visible32"=dword:00000000
"Width32"=dword:00000064
"Position33"=dword:00000021
"Visible33"=dword:00000000
"Width33"=dword:00000087
"Position34"=dword:00000022
"Visible34"=dword:00000000
"Width34"=dword:00000069
"Position35"=dword:00000023
"Visible35"=dword:00000000
"Width35"=dword:0000006e
"Position36"=dword:00000024
"Visible36"=dword:00000000
"Width36"=dword:00000073
"Position37"=dword:00000025
"Visible37"=dword:00000000
"Width37"=dword:0000004b
"Position38"=dword:00000026
"Visible38"=dword:00000000
"Width38"=dword:0000002d
"Position39"=dword:00000027
"Visible39"=dword:00000000
"Width39"=dword:00000055
"Position40"=dword:00000028
"Visible40"=dword:00000000
"Width40"=dword:00000046
"Position41"=dword:00000029
"Visible41"=dword:00000000
"Width41"=dword:0000004b
"Position42"=dword:0000002a
"Visible42"=dword:00000000
"Width42"=dword:0000003c
"Position43"=dword:0000002b
"Visible43"=dword:00000000
"Width43"=dword:00000046
"Position44"=dword:0000002c
"Visible44"=dword:00000000
"Width44"=dword:00000073
"Position45"=dword:0000002d
"Visible45"=dword:00000000
"Width45"=dword:0000004b
"Position46"=dword:0000002e
"Visible46"=dword:00000000
"Width46"=dword:00000073
"Position47"=dword:0000002f
"Visible47"=dword:00000000
"Width47"=dword:0000007d
"Position48"=dword:00000030
"Visible48"=dword:00000000
"Width48"=dword:0000006e
"Position49"=dword:00000031
"Visible49"=dword:00000000
"Width49"=dword:00000037
"Position50"=dword:00000032
"Visible50"=dword:00000000
"Width50"=dword:00000064
"Position51"=dword:00000033
"Visible51"=dword:00000000
"Width51"=dword:00000037
"Position52"=dword:00000034
"Visible52"=dword:00000000
"Width52"=dword:0000004b
"Position53"=dword:00000035
"Visible53"=dword:00000000
"Width53"=dword:00000046
"Position54"=dword:00000036
"Visible54"=dword:00000000
"Width54"=dword:00000037
"Position55"=dword:00000037
"Visible55"=dword:00000000
"Width55"=dword:0000003c
"Position56"=dword:00000038
"Visible56"=dword:00000000
"Width56"=dword:00000055
"Position57"=dword:00000039
"Visible57"=dword:00000000
"Width57"=dword:0000003c
"Position58"=dword:0000003a
"Visible58"=dword:00000000
"Width58"=dword:0000003c
"Position59"=dword:0000003b
"Visible59"=dword:00000000
"Width59"=dword:00000055
"Position60"=dword:0000003c
"Visible60"=dword:00000000
"Width60"=dword:00000046
"Position61"=dword:0000003d
"Visible61"=dword:00000000
"Width61"=dword:0000004b
"Position62"=dword:0000003e
"Visible62"=dword:00000000
"Width62"=dword:00000055
"Position63"=dword:0000003f
"Visible63"=dword:00000000
"Width63"=dword:0000005a
"Position64"=dword:00000040
"Visible64"=dword:00000000
"Width64"=dword:0000006e
"Position65"=dword:00000041
"Visible65"=dword:00000000
"Width65"=dword:00000050
"Position66"=dword:00000042
"Visible66"=dword:00000000
"Width66"=dword:00000032
"Position67"=dword:00000043
"Visible67"=dword:00000000
"Width67"=dword:00000064
"Position68"=dword:00000044
"Visible68"=dword:00000000
"Width68"=dword:0000004b
"Position69"=dword:00000045
"Visible69"=dword:00000000
"Width69"=dword:0000002d
"Position70"=dword:00000046
"Visible70"=dword:00000000
"Width70"=dword:0000004b
"Position71"=dword:00000047
"Visible71"=dword:00000000
"Width71"=dword:0000005a
"Position72"=dword:00000048
"Visible72"=dword:00000000
"Width72"=dword:0000005a
"Position73"=dword:00000049
"Visible73"=dword:00000000
"Width73"=dword:00000050
"Position74"=dword:0000004a
"Visible74"=dword:00000000
"Width74"=dword:0000004b
"Position75"=dword:0000004b
"Visible75"=dword:00000000
"Width75"=dword:00000050
"Position76"=dword:0000004c
"Visible76"=dword:00000000
"Width76"=dword:0000005a
"Position77"=dword:0000004d
"Visible77"=dword:00000000
"Width77"=dword:00000041
"Position78"=dword:0000004e
"Visible78"=dword:00000000
"Width78"=dword:00000041
"Position79"=dword:0000004f
"Visible79"=dword:00000000
"Width79"=dword:00000041
"Position80"=dword:00000050
"Visible80"=dword:00000000
"Width80"=dword:00000041
"Position81"=dword:00000051
"Visible81"=dword:00000000
"Width81"=dword:00000041
"Position82"=dword:00000052
"Visible82"=dword:00000000
"Width82"=dword:00000041
"Position83"=dword:00000053
"Visible83"=dword:00000000
"Width83"=dword:00000041
"Position84"=dword:00000054
"Visible84"=dword:00000000
"Width84"=dword:00000041
"Position85"=dword:00000055
"Visible85"=dword:00000000
"Width85"=dword:00000041