Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Flooded with Malware & virus

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby Shaba » June 20th, 2007, 1:49 pm

Hi

Still those folders are there

Go to Program and look for folder like W?nSxS (? = some character which may look odd) and created on 2007-06-09.

If found, delete it.

Repeat process for similarly named folder in C:\Program Files\Common Files

Re-run combofix.

Post:

- a fresh HijackThis log
- combofix report
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland
Advertisement
Register to Remove

Latest logs 20062007 20:10

Unread postby jonked » June 20th, 2007, 3:15 pm

ComboFix

ComboFix 07-06-17 - C:\Documents and Settings\John\Desktop\ComboFix.exe
"John" - 2007-06-20 20:03:52 - Service Pack 2 NTFS


((((((((((((((((((((((((( Files Created from 2007-05-20 to 2007-06-20 )))))))))))))))))))))))))))))))


2007-06-20 17:08 <DIR> d-------- C:\WINDOWS\LastGood
2007-06-18 19:15 <DIR> d-------- C:\backups
2007-06-18 19:11 218,112 --a------ C:\scanner.exe
2007-06-17 22:34 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
2007-06-17 22:32 <DIR> d-------- C:\DOCUME~1\John\Phone Browser
2007-06-17 22:32 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Datalayer
2007-06-17 22:31 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Nokia
2007-06-17 22:25 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\AdobeAUM
2007-06-17 22:14 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-06-17 22:14 <DIR> d-------- C:\Program Files\DIFX
2007-06-17 22:14 <DIR> d-------- C:\Program Files\Common Files\Nokia
2007-06-17 22:14 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\PC Suite
2007-06-17 22:14 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
2007-06-17 22:13 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
2007-06-17 22:12 <DIR> d-------- C:\Program Files\Nokia
2007-06-17 22:12 <DIR> d-------- C:\Program Files\Common Files\PCSuite
2007-06-17 19:55 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-17 18:12 71,316 --a------ C:\VundoFix.exe
2007-06-12 20:06 <DIR> d-------- C:\DOCUME~1\John\.housecall6.6
2007-06-11 22:44 <DIR> d-------- C:\Program Files\Enigma Software Group
2007-06-08 20:28 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Symantec
2007-06-08 20:27 <DIR> d-------- C:\Program Files\Symantec
2007-06-08 20:27 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-06-08 20:27 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
2007-06-08 20:26 4,588,454 --a------ C:\Program Files\setup.exe
2007-06-08 20:26 <DIR> d-------- C:\Program Files\Support
2007-06-08 20:26 <DIR> d-------- C:\Program Files\Driver Validation
2007-06-05 21:22 <DIR> d-------- C:\Program Files\Freecom Backup Software
2007-06-05 21:21 73,728 --a------ C:\WINDOWS\system32\Zion.dll
2007-06-05 21:21 7,040 --a------ C:\WINDOWS\system32\drivers\Gonzales.sys
2007-06-05 21:21 12,160 --a------ C:\WINDOWS\system32\drivers\Bonifay.sys
2007-06-05 21:21 <DIR> d-------- C:\Program Files\Freecom Personal Media Suite
2007-05-29 20:19 <DIR> d-------- C:\DOCUME~1\Graeme\APPLIC~1\Google
2007-05-22 23:04 14 --a------ C:\WINDOWS\system32\systeminfo3.dll
2007-05-22 22:57 81,920 --a------ C:\DOCUME~1\John\APPLIC~1\ezpinst.exe
2007-05-22 22:57 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
2007-05-22 22:57 47,360 --a------ C:\DOCUME~1\John\APPLIC~1\pcouffin.sys
2007-05-22 22:57 <DIR> d-------- C:\Program Files\CloneDVD
2007-05-22 22:57 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Vso


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-20 09:21:56 -------- d-----w C:\Program Files\Common Files\Command Software
2007-06-17 21:09:18 -------- d-----w C:\DOCUME~1\John\APPLIC~1\Azureus
2007-06-16 19:32:28 -------- d-----w C:\Program Files\Virtools
2007-06-16 19:22:29 -------- d-----w C:\Program Files\Viewpoint
2007-06-12 20:18:41 -------- d-----w C:\Program Files\Common Files\PestPatrol
2007-05-16 15:12:02 683,520 ------w C:\WINDOWS\system32\inetcomm.dll
2007-05-15 21:13:18 -------- d-----w C:\Program Files\Your Syndicate Manager
2007-05-10 11:23:44 -------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-04-27 18:07:48 79,384 ----a-w C:\WINDOWS\system32\avmontr.dll
2007-04-27 17:49:12 840,352 ----a-w C:\WINDOWS\system32\drivers\css-dvp.sys
2007-04-25 18:20:57 -------- d-----w C:\DOCUME~1\John\APPLIC~1\AdobeUM
2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 21:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 21:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 21:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 21:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 21:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 21:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-03-23 05:07:56 1,683,280 ----a-w C:\WINDOWS\system32\XpsSvcs.dll
2007-03-23 05:07:54 583,504 ----a-w C:\WINDOWS\system32\XPSSHHDR.dll
2007-03-22 19:25:02 124,928 ----a-w C:\WINDOWS\system32\prntvpt.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll [2003-11-03 23:17]
{3C060EA2-E6A9-4E49-A530-D4657B8C449A}=C:\Program Files\blueyonder\PCguard\pkR.dll [2006-05-01 13:41]
{56071E0D-C61B-11D3-B41C-00E02927A304}=C:\Program Files\blueyonder\PCguard\FBHR.dll [2006-05-01 13:41]
{5CA3D70E-1895-11CF-8E15-001234567890}=C:\WINDOWS\system32\dla\tfswshx.dll [2004-08-03 01:05]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
{AE7CD045-E861-484f-8273-0445EE161910}=F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 02:03]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FLMLABTECMOUSE"="C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe" [2004-12-13 23:02]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 16:50]
"MISAggregator"="" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"NWEReboot"="" []
"IntelliType"="C:\Program Files\Microsoft Hardware\Keyboard\type32.exe" [2002-03-22 05:41]
"nwiz"="nwiz.exe" [2005-12-10 04:06 C:\WINDOWS\system32\nwiz.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-02-26 17:53 C:\WINDOWS\SOUNDMAN.EXE]
"Ptipbmf"="ptipbmf.dll" [2003-06-20 16:06 C:\WINDOWS\system32\ptipbmf.dll]
"PVR Agent"="C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe" [2005-07-05 19:25]
"EEventManager"="C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe" [2005-04-08 15:09]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-11-04 23:38]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-16 16:15]
"HP Software Update"="F:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 16:18]
"Easy-PrintToolBox"="C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.exe" [2004-01-14 02:10]
"eFax 4.1"="C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" [2005-12-17 00:59]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 15:27]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 13:43]
"five Media Manager Tray"="C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe" [2006-07-30 11:25]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 11:48]
"Profiler"="C:\Program Files\Saitek\Software\Profiler.exe" [2005-06-14 16:23]
"SaiMfd"="C:\Program Files\Saitek\Software\SaiMfd.exe" [2005-06-17 20:02]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 23:46]
"NSLauncher"="C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe" [2006-11-28 01:12]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 08:56]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-09-03 15:18]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MS Office32cb Startup"=OfficeGUI32cb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winlvv32]
winlvv32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acrobat Assistant.lnk]
backup=C:\WINDOWS\pss\Acrobat Assistant.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^eFax 4.1.lnk]
backup=C:\WINDOWS\pss\eFax 4.1.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Image Zone Fast Start.lnk]
backup=C:\WINDOWS\pss\HP Image Zone Fast Start.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Phone Connection Monitor.lnk]
backup=C:\WINDOWS\pss\Phone Connection Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"MediaFace Integration"=F:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe


Contents of the 'Scheduled Tasks' folder
2005-02-16 22:41:46 C:\WINDOWS\tasks\1 Copernic Intra-Daily ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\1 Copernic Intra-Daily ~HOME-PC John.job
2007-06-08 16:15:00 C:\WINDOWS\tasks\1-Click Maintenance.job
2005-02-16 22:41:46 C:\WINDOWS\tasks\2 Copernic Daily ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\2 Copernic Daily ~HOME-PC John.job
2005-02-16 22:41:46 C:\WINDOWS\tasks\3 Copernic Weekly ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\3 Copernic Weekly ~HOME-PC John.job
2005-02-16 22:41:46 C:\WINDOWS\tasks\4 Copernic Monthly ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\4 Copernic Monthly ~HOME-PC John.job

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-20 20:06:34
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************

Completion time: 2007-06-20 20:07:29
C:\ComboFix-quarantined-files.txt ... 2007-06-20 20:07
C:\ComboFix2.txt ... 2007-06-20 16:43
C:\ComboFix3.txt ... 2007-06-19 20:26

--- E O F ---
--------------------------------------

Combofix-quarantined-files.txt

ComboFix 07-06-17 - C:\Documents and Settings\John\Desktop\ComboFix.exe
"John" - 2007-06-20 20:03:52 - Service Pack 2 NTFS


((((((((((((((((((((((((( Files Created from 2007-05-20 to 2007-06-20 )))))))))))))))))))))))))))))))


2007-06-20 17:08 <DIR> d-------- C:\WINDOWS\LastGood
2007-06-18 19:15 <DIR> d-------- C:\backups
2007-06-18 19:11 218,112 --a------ C:\scanner.exe
2007-06-17 22:34 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
2007-06-17 22:32 <DIR> d-------- C:\DOCUME~1\John\Phone Browser
2007-06-17 22:32 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Datalayer
2007-06-17 22:31 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Nokia
2007-06-17 22:25 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\AdobeAUM
2007-06-17 22:14 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-06-17 22:14 <DIR> d-------- C:\Program Files\DIFX
2007-06-17 22:14 <DIR> d-------- C:\Program Files\Common Files\Nokia
2007-06-17 22:14 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\PC Suite
2007-06-17 22:14 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
2007-06-17 22:13 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
2007-06-17 22:12 <DIR> d-------- C:\Program Files\Nokia
2007-06-17 22:12 <DIR> d-------- C:\Program Files\Common Files\PCSuite
2007-06-17 19:55 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-17 18:12 71,316 --a------ C:\VundoFix.exe
2007-06-12 20:06 <DIR> d-------- C:\DOCUME~1\John\.housecall6.6
2007-06-11 22:44 <DIR> d-------- C:\Program Files\Enigma Software Group
2007-06-08 20:28 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Symantec
2007-06-08 20:27 <DIR> d-------- C:\Program Files\Symantec
2007-06-08 20:27 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-06-08 20:27 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
2007-06-08 20:26 4,588,454 --a------ C:\Program Files\setup.exe
2007-06-08 20:26 <DIR> d-------- C:\Program Files\Support
2007-06-08 20:26 <DIR> d-------- C:\Program Files\Driver Validation
2007-06-05 21:22 <DIR> d-------- C:\Program Files\Freecom Backup Software
2007-06-05 21:21 73,728 --a------ C:\WINDOWS\system32\Zion.dll
2007-06-05 21:21 7,040 --a------ C:\WINDOWS\system32\drivers\Gonzales.sys
2007-06-05 21:21 12,160 --a------ C:\WINDOWS\system32\drivers\Bonifay.sys
2007-06-05 21:21 <DIR> d-------- C:\Program Files\Freecom Personal Media Suite
2007-05-29 20:19 <DIR> d-------- C:\DOCUME~1\Graeme\APPLIC~1\Google
2007-05-22 23:04 14 --a------ C:\WINDOWS\system32\systeminfo3.dll
2007-05-22 22:57 81,920 --a------ C:\DOCUME~1\John\APPLIC~1\ezpinst.exe
2007-05-22 22:57 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
2007-05-22 22:57 47,360 --a------ C:\DOCUME~1\John\APPLIC~1\pcouffin.sys
2007-05-22 22:57 <DIR> d-------- C:\Program Files\CloneDVD
2007-05-22 22:57 <DIR> d-------- C:\DOCUME~1\John\APPLIC~1\Vso


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-20 09:21:56 -------- d-----w C:\Program Files\Common Files\Command Software
2007-06-17 21:09:18 -------- d-----w C:\DOCUME~1\John\APPLIC~1\Azureus
2007-06-16 19:32:28 -------- d-----w C:\Program Files\Virtools
2007-06-16 19:22:29 -------- d-----w C:\Program Files\Viewpoint
2007-06-12 20:18:41 -------- d-----w C:\Program Files\Common Files\PestPatrol
2007-05-16 15:12:02 683,520 ------w C:\WINDOWS\system32\inetcomm.dll
2007-05-15 21:13:18 -------- d-----w C:\Program Files\Your Syndicate Manager
2007-05-10 11:23:44 -------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-04-27 18:07:48 79,384 ----a-w C:\WINDOWS\system32\avmontr.dll
2007-04-27 17:49:12 840,352 ----a-w C:\WINDOWS\system32\drivers\css-dvp.sys
2007-04-25 18:20:57 -------- d-----w C:\DOCUME~1\John\APPLIC~1\AdobeUM
2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 21:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 21:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 21:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 21:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 21:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 21:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-03-23 05:07:56 1,683,280 ----a-w C:\WINDOWS\system32\XpsSvcs.dll
2007-03-23 05:07:54 583,504 ----a-w C:\WINDOWS\system32\XPSSHHDR.dll
2007-03-22 19:25:02 124,928 ----a-w C:\WINDOWS\system32\prntvpt.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll [2003-11-03 23:17]
{3C060EA2-E6A9-4E49-A530-D4657B8C449A}=C:\Program Files\blueyonder\PCguard\pkR.dll [2006-05-01 13:41]
{56071E0D-C61B-11D3-B41C-00E02927A304}=C:\Program Files\blueyonder\PCguard\FBHR.dll [2006-05-01 13:41]
{5CA3D70E-1895-11CF-8E15-001234567890}=C:\WINDOWS\system32\dla\tfswshx.dll [2004-08-03 01:05]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
{AE7CD045-E861-484f-8273-0445EE161910}=F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 02:03]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FLMLABTECMOUSE"="C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe" [2004-12-13 23:02]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 16:50]
"MISAggregator"="" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"NWEReboot"="" []
"IntelliType"="C:\Program Files\Microsoft Hardware\Keyboard\type32.exe" [2002-03-22 05:41]
"nwiz"="nwiz.exe" [2005-12-10 04:06 C:\WINDOWS\system32\nwiz.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-02-26 17:53 C:\WINDOWS\SOUNDMAN.EXE]
"Ptipbmf"="ptipbmf.dll" [2003-06-20 16:06 C:\WINDOWS\system32\ptipbmf.dll]
"PVR Agent"="C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe" [2005-07-05 19:25]
"EEventManager"="C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe" [2005-04-08 15:09]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-11-04 23:38]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-16 16:15]
"HP Software Update"="F:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 16:18]
"Easy-PrintToolBox"="C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.exe" [2004-01-14 02:10]
"eFax 4.1"="C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" [2005-12-17 00:59]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 15:27]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 13:43]
"five Media Manager Tray"="C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe" [2006-07-30 11:25]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 11:48]
"Profiler"="C:\Program Files\Saitek\Software\Profiler.exe" [2005-06-14 16:23]
"SaiMfd"="C:\Program Files\Saitek\Software\SaiMfd.exe" [2005-06-17 20:02]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 23:46]
"NSLauncher"="C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe" [2006-11-28 01:12]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 08:56]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-09-03 15:18]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MS Office32cb Startup"=OfficeGUI32cb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winlvv32]
winlvv32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acrobat Assistant.lnk]
backup=C:\WINDOWS\pss\Acrobat Assistant.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^eFax 4.1.lnk]
backup=C:\WINDOWS\pss\eFax 4.1.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Image Zone Fast Start.lnk]
backup=C:\WINDOWS\pss\HP Image Zone Fast Start.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Phone Connection Monitor.lnk]
backup=C:\WINDOWS\pss\Phone Connection Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"MediaFace Integration"=F:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe


Contents of the 'Scheduled Tasks' folder
2005-02-16 22:41:46 C:\WINDOWS\tasks\1 Copernic Intra-Daily ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\1 Copernic Intra-Daily ~HOME-PC John.job
2007-06-08 16:15:00 C:\WINDOWS\tasks\1-Click Maintenance.job
2005-02-16 22:41:46 C:\WINDOWS\tasks\2 Copernic Daily ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\2 Copernic Daily ~HOME-PC John.job
2005-02-16 22:41:46 C:\WINDOWS\tasks\3 Copernic Weekly ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\3 Copernic Weekly ~HOME-PC John.job
2005-02-16 22:41:46 C:\WINDOWS\tasks\4 Copernic Monthly ~HOME-PC Anne.job
2005-12-04 20:43:01 C:\WINDOWS\tasks\4 Copernic Monthly ~HOME-PC John.job

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-20 20:06:34
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************

Completion time: 2007-06-20 20:07:29
C:\ComboFix-quarantined-files.txt ... 2007-06-20 20:07
C:\ComboFix2.txt ... 2007-06-20 16:43
C:\ComboFix3.txt ... 2007-06-19 20:26

--- E O F ---
-----------------------------------------------

Highjackthis log

Logfile of HijackThis v1.99.1
Scan saved at 20:13, on 2007-06-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaServer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Cloudmark\SpamNet\OE\snoe.exe
C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [FLMLABTECMOUSE] C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [PVR Agent] C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [eFax 4.1] "C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [five Media Manager Tray] "C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe" /CustomId:five
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Freecom Personal Media Suite.lnk = C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Cloudmark Desktop for Outlook Express.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Search Using Copernic Agent - res://F:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/haphazard/rapti ... loader.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {164B406B-0FD6-4E7F-BA7E-64D227D4CA37} (dnlplayer Class) - http://www.digitalwebbooks.com/reader/dbplugin.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/house ... hcImpl.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/inflaterball/mi ... Loader.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/Reflex ... Loader.cab
O16 - DPF: {46431044-1B22-4EF3-B333-863AAF310153} (five Class) - http://www.download.five.tv/Download/five_3_4_0_8.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0, ... Portal.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2779681543
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7678277405
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} (MediaControl Class) - http://www.download.five.tv/Download/En ... Silent.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winlvv32 - winlvv32.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe (file missing)

----------------------------------

Regards
jonked
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm

Unread postby Shaba » June 21st, 2007, 4:19 am

Hi

Open HijackThis, click do a system scan only and checkmark this:

O20 - Winlogon Notify: winlvv32 - winlvv32.dll (file missing)

Close all windows including browser and press fix checked.

Reboot

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings
  • In the scan settings make sure that the following are selected:

    o Scan using the following Anti-Virus database:

    + Extended (If available otherwise Standard)

    o Scan Options:

    + Scan Archives
    + Scan Mail Bases

  • Click OK
  • Now under select a target to scan select My Computer
  • The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button
  • Save the file to your desktop.
  • Copy and paste that information in your next post.


Post:

- a fresh HijackThis log
- kaspersky report
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Highjackthis and kaspersky logs

Unread postby jonked » June 21st, 2007, 7:01 pm

Highjackthis log

Logfile of HijackThis v1.99.1
Scan saved at 23:59, on 2007-06-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaServer.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Cloudmark\SpamNet\OE\snoe.exe
C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [FLMLABTECMOUSE] C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [PVR Agent] C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [eFax 4.1] "C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [five Media Manager Tray] "C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe" /CustomId:five
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Freecom Personal Media Suite.lnk = C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Cloudmark Desktop for Outlook Express.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Search Using Copernic Agent - res://F:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/haphazard/rapti ... loader.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/ka ... nicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {164B406B-0FD6-4E7F-BA7E-64D227D4CA37} (dnlplayer Class) - http://www.digitalwebbooks.com/reader/dbplugin.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/house ... hcImpl.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/inflaterball/mi ... Loader.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/Reflex ... Loader.cab
O16 - DPF: {46431044-1B22-4EF3-B333-863AAF310153} (five Class) - http://www.download.five.tv/Download/five_3_4_0_8.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0, ... Portal.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2779681543
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7678277405
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} (MediaControl Class) - http://www.download.five.tv/Download/En ... Silent.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe (file missing)





**********************************

kaspersky.txt.

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
2007-06-21 23:47
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 21/06/2007
Kaspersky Anti-Virus database records: 350724
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
M:\
N:\
O:\
P:\
R:\

Scan Statistics:
Total number of scanned objects: 135467
Number of viruses found: 14
Number of infected objects: 41
Number of suspicious objects: 3
Duration of the scan process: 02:15:07

Infected Object Name / Virus Name / Last Action
C:\data Infected: Trojan-Downloader.Win32.IstBar.nh skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\FirewallService06-21-2007--21-17-45.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\Fw_Session.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\SafetyConsoleLog06-21-2007--21-19-06.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\ServiceModel06-21-2007--21-19-04.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00190b31baad4001b39d55479cda0f14_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\002c1c35706fe7ba99a4df322447f291_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\002ed1f641792f689e8a3a9d2c06b130_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\008b754678b0538a2e3b1d06482d0011_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00e05790f6cf5d9064208a22a03ac04a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00f543450598ff63be271af4b92757a5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0106eaf486d6319d6c38673e1c52158e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\012e4c50f585677663a8ed30c6f47107_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\01f23019a3249620c4db48cc226a1801_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0206c0bd91efb8cfb1a2053fc8bb67de_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0253f93d8ac85eec0b2b6c6389cf600b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0299da5594a00b6b0bc33b17e2cef27c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02d25db8e3725e2bc1b299e8f88e43c0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02def71f5580b401933c46dac1277331_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0399c193b36661999f48a2a4d9200922_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03be10277f1a08f5b017ce699b844d16_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0446d44463b35330a5774201d9568a2e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\046f77677401307548a8ad8bdc4cfe67_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\050c982df2824e1b66fb98cdbdae3d01_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\059f5ed1162dbcbb25d66dc3c7e819d2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\05c22c478574ceb9a7fc8ef79af72216_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06645b85e34c07e0540c765abe537e68_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\079631f440a493c086c2ae10d5102c7b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08428d788d87732ea28fbfdc512e6827_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\087bec683495802ae6f6b0e38d557763_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0886ad58607aa7b646cd68dccc0b886d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0894648c533f1f5424259489b3c10590_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09464675a8e0d8df494b9f2c9766486f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09735c6bcfd4507d780787dc1e89f150_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09909b66f8fe3acb9aad9ed1ef42ab24_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09c652e0f8bd3617658bd1526027243b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09e3be2e69c4e0297395d8b2808c2dce_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09ee2f32bda6b0ab76a8352a2849e0d2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a7d1aab16b7e1c3722af376de96b5b1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ace511459ced9136a3e1e9f3a2eb539_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b5d788a381924b5bf7c381257ed4920_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0bdad133882d0878a1559f17b51086a3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c2c3d3c37c1d2a038862cdb04c35c80_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c65f054e21abb4fb1fcad8912699537_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c94918ef6808a27217f6b46990e8c48_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d66ced4aeda574b435b0bac20f17190_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d6ae64487605e0f4a645c76621fbf85_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0dd16ffdc9bf1c1f5bad25d5a68de7bf_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ddc512357706fe5df98fe1677b0bf46_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e4774e42c585bc5c25bc74cb54df029_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ed276ebd73a7e74578a754cc4298d4a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ee1141ff9c406ea0a337b8c87b245a7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f44f385aaf57409a4196e5bd4891b76_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f6201d92afe4bab71766d0a2162a589_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f6b6aa13c5f8f409e926d5300529034_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f966163bc05c6438842bcaa49699685_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\103a23b5fc2baa3a7eded2585d4fc54a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\110b68b648b9b2c2cefb229fc6a0288a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\111591084cf7d416779db314e3d9068b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\11858af651905eabd367a7d438fc1c1c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1241c8209f3839443d1834703ff4fdf7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12b4c02f982591991d364c3039858c5e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12c9dd4800c6f26e22805cc98de53680_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12faa4560b27743898b94f70378c5b79_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13670aa924de77fbf7058a26f8f77252_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13a121dbe9a192270a40eec65655ed57_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13abf5ace5d380a05a0722ad0682a176_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13edae527435327a0b51936a5fedba34_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\144e4f5fe3a2610c7992da2aea7ca988_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1454615ce4ea85c897ab2ac5dd6d916d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\145cad87b0825f74c9c9cb1b61ac5a09_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1474cd803aea6618883ddb7ae2adee4d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\14cc25d2f3272f4c23f9bcc5c524a55b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15800fc8c362012ea830226d6208976e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15a6459690d78ca2c0aa214d239be1f6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1623570e9c50379a17fe4e333936285f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\16b6df2966b2f8e52d6aed08ecb3caa4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17165eee8229fccdd6775131f2a98f33_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\171d5fd7944f4c4f202e8182e4d982a3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1732a68d99f5abe3667f184a36ee8aa6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17d8defccfd698c11f1885bdbb71efa7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18028226f4862e77f7fc7007a3a0bf0b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1845444aed08f1bdad6bebb5baa4a20a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18f118409934f214c79aac3636a37900_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\190940bcdaebf5cc323f1acdaa346bc8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\191c08d77db4371db108c6c014b59d0e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a091a88095871f5451634b4b5a7e8ff_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a197b5d5a2778746dc0e56d50b55f0b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a75543349e44d0d9b768de0cb44c3e0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a9b5d2e3ed7bc50a7e946e8ea1c2f7b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1abbe7ac46b9042fdae45bbf67beb7cf_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ae676721ab65605e79bb6b8f8eabb24_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1af86907938dbfc87b1a4993701840b3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ba933dbbb312000c2c094970bd7032e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1bc2798fd8ca50263c2dffc38445b756_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1bfd82f70b5c027467aa1a4dee8e93da_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c165095051aea49146abfe26111a8d5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c5574ca11b55ad1aef69f7ed6e90d90_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d40c6f28d80840d8fa3d1a0baa829e3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d4eeb325d7ba5b48cc67114f2578c17_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d8d4c2a936cf6363257519dba508914_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1dff10a033c37c6cf14fb3885aff3e6c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e5844e9c9973b3522d7111ce1cfeee4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e7e3255a86bb3c7a0be9b6e35fac941_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e9efe5556eb89e56dc24a624bf3333c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f00d1e172e55547e8268714c92df244_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f92198967cbcfdbe4c464dee5a84ca7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fca3a07da2839cbefc80bcbb90e55ac_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ff41fdd2f6ea3775f12b1194238f2c0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ffe968b85e46421418440e89c865bf8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\20e2a425247514824f0c4d663e1d714e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\213fb25a8f6bacc8c4921ce7dea56497_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21d0ebf7bfb802cbaa96614b0d7a529b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21f9b0045aac4ef96cce60c3f338d906_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\227306f963dc4fed03e5a66126da7ed5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22feffbaa72e3cc4791c23a6d34107e3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\23039190d45a03a59ed0875f0f3a4416_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\235cca91806fa4da2b69e84380fb37f3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\239c01ab140057b5eafde8192010cbd7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\23faad866e961d0242c17dcf1c28b8f6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\241870a483f46d97d10e912f14af14c4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2538976a7c8536109d4b1f1aa17f7039_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25425867d83ee9d601c477439f33d4c9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\255c05ee1cbc0b5140250741af8520ab_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25bba288101bfe3525785e9a4932a738_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2638a2f3ca5084fe879bb66bb150227a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2663cd20b45f7bc495c7dab8016880df_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\269f1c2224707a694c2bcbd496f72be6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26cc0cbce6273bd93e7f949d25ed7376_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26d64a60b0ea69efc23f309c666efe50_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26e9e2a542fb5018205da6941193cb61_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26ea804400a9343b07f058f20b4bc608_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\271a9eb12be238d3e64f872a63f59669_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27284b6a83d4adc657655eb5f94694bb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27d4ff15d6be51cce4c4e1e89412a4ad_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\281b093f4f791aeefcde3b7db762eb67_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\286a7d917ed08c4ea9815fb48dd63632_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28703ecf161bb2c437851c65756a0fef_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2880b66a9b291c4eba0f7c26f8d844ed_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28ad4097fd496e69b34296390ffcfad9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28b4bf69534f969a07a2a317ce7ccc2f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29152cd795a59c4be6e921769da5b9d0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\291fa0e31696e53fbdb06c1b2edce3c5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\292e195bf6925041110d2b7218488791_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\293848a3a7b1715047bfcc46583a908d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2963c0eaaecca39274334472f6156441_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29a60831facb89553ac9b5059fe9450e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29befaa0137c2d51615cea43ff99d892_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29d34790f9bc1fb77d7810b93d3c980f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a664d0f45b22da9a0fe0c3a15c49b78_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a6bd7d960df722f9fb20262b05c514b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a8f675c5b2304f52b420f7f11715a17_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b16bde3e436db1c1b0c1003708925a2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b49cef12f79cbde93156690bd7e0834_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b9eae39d5a0ad9afaed7d2262e66835_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2be362b2779773fd4a8ab6505bf59ac8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2bf44ea88f3e676920c8f5137b1cdbff_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c1cb24f327bc3a799e27fca1932295c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c5a0bd01caecb7768c788246a1b6dd6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c605946c6fb7f532a0256ee2aaea468_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c64a8fb00db8e7bf67db62f89a5f605_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c97e22422d2d8acab07b4d1dc8267b0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d41d1103b141f72dff3bfd68fd5f2c5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d92ba4ee3b27d3ca07a9cacee84c386_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e26a89d7b1999fcf6c19ad7c38986ba_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e53f0525f8ebcc6dd4dc20ee782afcb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2eaa271d3022d3587e1ac0e745705aa2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ec602fb2d46ad0c8ff811a3c91ea601_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ee2ea9c2f7897f20678921c241efc36_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f2123d61753e7c455699dbccf643893_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f6af7cc473e536274415aacb4810aa1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2fe346504dcbfade8a72e5de8771743c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\300df73d9eb7874063f898664dae47f1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\301f977de6a63e984f8b56216b6abe19_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30892e17451338ccbc257f49dfffae6f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30a7ff900346683a0457ff374e9f44ee_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30b2b6c22732c69fa72f25f2fe817fa1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30c91fe7a33ef449b56aaecb84751692_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3125e653da9edcd3875e66f62ac3a54a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\312d2397365918d30f65e0d0445811af_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\317d803a15e6df1430ff7b66aee4a4a4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31afefc3bdf28c606fb9d0474a9be4f0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3206625d7e2e547de40dcaeb4576e684_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3277d14189638bd34ac512c08b416520_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3337b6f050c5f40fa1157abafc5223d4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\334e894c2ea9f9582a8741071d471ab5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33a023a997af509f8ef27b5f44647a4b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33b275050e0464f05beb7536fa58815a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33e3975f85c47758458ae85b7746a3b9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3478bc1c9b429b95ace150b8aedf1374_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3488583dd9edaa0a6250d26c5734dd89_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34a043d3d8a416ad29fed96344844cff_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34d2e1ea0938e958d1b539e5aef3ef09_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3552ef6338bdd7a327f9009ada76ae6e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3617ca7dc55ec952c9b0178272baacb9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36422749b0b07fd827f4ce2c9fe90a53_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36466c6b9ed310e6c9435161d53e2642_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36668694ec29c7483859d76d3ff18a20_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37201b49bf408aa3dfbb1a199370dab8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37477e14f246302040e7e399b1d86c1c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37bfacb56b6b1ea61c986ceda60e6bb5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37da4c048ac2632f2ac0ca4f84b79675_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3881269439aed67fdf967df2110e3ce7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3886f1b31da63c229d94714d7cd71fd9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\38883040e4d5ae25bfa18a2db8a5fff8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\396e19898df9310e161f51c4d60222fa_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\398136ce068d6d0fe711656f6f729e28_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\39d40fc812447de6f6c2e94958464793_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\39d7cbf759dfb4669ef64a8d5129986b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\39e0467654ea15d45a25ec0fd752034b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3a328ba7c4cf03d92edb0d2554f52195_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3acf34f958c3c02538323077c8babaf2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ad7d759726c218bb818bc1d1fba9c2d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c23afa3699d340383492db93ef49056_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c362e8a2352f50bf903d943afff04fe_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c3f31a9849453f8c7c9ebd1091e7d8f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c8d3a5830e78d42406587e278f53544_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ccdffe01b92e39aa412642be07a47d3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3da61ca685546f57e6fa17aff86bb8ca_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e89db62a700a138cf6fcf4029b3955b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e8e9775a769ec845e54ab1ff1266552_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ea112b88f1dd6b2c1e82baf185304d2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f7e59dfc74b2c4cbe6b44dfe2e7d269_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3fdafd016943bcfdf47731dda8cdcacf_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42612b445cf1b0f678616aa9c1c5f6c3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4297d81bc335d3c082e369cf9ee7e550_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42c34d42aae99d7eabd265cc5a0ccd66_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42f4cce3957c6dab21cf5db172324cc1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\432bde7c8ef8402f8ec722516d3b6a9f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43d88b44a97bcdfe39f6fcc70a7b79da_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43fbf17dde84a253adbf75d2c44174ac_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\440ed102828f86ddb1fd88f52a9ba6a6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\441981e60dd17f89fda2097a4e77213b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44267dab823e172373e66a1cafbdc480_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4436ae3e7d29604bddb3cc59a0ed75a8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44adab0b284b11b66473530a3dc35ca7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44ffc5ec15bb692b857bca218abb5853_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\457ebb0b13a20d22a180a0b56dd7c26c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\458e2c21181a2cd7213af0f036fec63c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\46da1b3eaf436b4c67d1dc07f51aba93_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\470b9a72b3a55abf99cbb81d23ad346c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\474870fb9ab3be57e6db523a2963594e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\477a3085602453d681283674786c3044_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\47b1937e0a7b04e919070487f630ae5f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4802bb2fc2fbe9afe53952b19031f581_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\491e6ced6b10e887bb3da5fb11bbba20_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\496325fb0808fc3abd6059c5a1bbe012_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49adaebfb43a6587140e1611c2945db4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49fd2acedf98beb3918c67488806001c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a13563d5bb0aa8f267dcd673670eae6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a24bb69dd55a5e9c0220f896cc631f8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a68db58c6b4f9a9004e93f0c6df4630_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a70f3a040785470f5374b39aea6b2da_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a7c65f786b3c3cf52b2ba3bad971336_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4b3bdd7fdf656745e584f269a2dab1bb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4bbac1c8a88e54aa7993cac736ff4b99_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4bc080c0b192bc77036145b71debd987_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4c22461b1bfbc60e8eede002f96bfd34_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4c689b35e8d06b31eb6f07528f16304f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4cad078120076244899299cda7bb1427_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d312ad7d69c6951aff3c4f65febe4bb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d41ec0edc72aee7ea707c57a5b0440c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d56a087cafedf4fffa14ce53ee920c2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4db2439062c33bb432db60cb3448edc1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4de8bdbb2ea6c1346fce1dbf8fbf2c75_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4df8b2d0f2367c132b5cb5f916fec020_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e443246765e2d5fc2980b326552c5d7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e498aeb26b429759e68d0a96ec5c37c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e59be1af3fe59f4a43a01b6fab018f8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ed7886b9925e324fac49e0ed7434f29_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4eec7bfb697c0e1c77bb04c32b4bee41_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4efe5790014bc2615aea1df3d01ae524_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\500b48dfbcf0520adcf3c66aec9943ba_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5074e82ee5b6badc50f3f0c97ac9e978_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5081dd702a6f6e6f870b7cd82a4bc6b6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51b952e5864945e442e26fdb1a982059_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51d75e1080904e469a68f9ec107bab81_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\520253e972ad5aec3598750dcbb56349_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52413e50aa44c263bd40a3d94be69609_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5283e372a8a02e3f329bb85461938603_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52a1c680a557afbabd1ffcf1015354eb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52da8e5c9f12217bd87ddd1a1bb8744f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52dd979411a8ae2d2b51b6c58359ff80_7a50628e-de8e-4
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm

kaspersky.txt did not fit in last post

Unread postby jonked » June 21st, 2007, 7:06 pm

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
2007-06-21 23:47
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 21/06/2007
Kaspersky Anti-Virus database records: 350724
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
M:\
N:\
O:\
P:\
R:\

Scan Statistics:
Total number of scanned objects: 135467
Number of viruses found: 14
Number of infected objects: 41
Number of suspicious objects: 3
Duration of the scan process: 02:15:07

Infected Object Name / Virus Name / Last Action
C:\data Infected: Trojan-Downloader.Win32.IstBar.nh skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\FirewallService06-21-2007--21-17-45.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\Fw_Session.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\SafetyConsoleLog06-21-2007--21-19-06.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\ServiceModel06-21-2007--21-19-04.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00190b31baad4001b39d55479cda0f14_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\002c1c35706fe7ba99a4df322447f291_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\002ed1f641792f689e8a3a9d2c06b130_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\008b754678b0538a2e3b1d06482d0011_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00e05790f6cf5d9064208a22a03ac04a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00f543450598ff63be271af4b92757a5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0106eaf486d6319d6c38673e1c52158e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\012e4c50f585677663a8ed30c6f47107_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\01f23019a3249620c4db48cc226a1801_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0206c0bd91efb8cfb1a2053fc8bb67de_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0253f93d8ac85eec0b2b6c6389cf600b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0299da5594a00b6b0bc33b17e2cef27c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02d25db8e3725e2bc1b299e8f88e43c0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02def71f5580b401933c46dac1277331_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0399c193b36661999f48a2a4d9200922_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03be10277f1a08f5b017ce699b844d16_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0446d44463b35330a5774201d9568a2e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\046f77677401307548a8ad8bdc4cfe67_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\050c982df2824e1b66fb98cdbdae3d01_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\059f5ed1162dbcbb25d66dc3c7e819d2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\05c22c478574ceb9a7fc8ef79af72216_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06645b85e34c07e0540c765abe537e68_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\079631f440a493c086c2ae10d5102c7b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08428d788d87732ea28fbfdc512e6827_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\087bec683495802ae6f6b0e38d557763_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0886ad58607aa7b646cd68dccc0b886d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0894648c533f1f5424259489b3c10590_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09464675a8e0d8df494b9f2c9766486f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09735c6bcfd4507d780787dc1e89f150_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09909b66f8fe3acb9aad9ed1ef42ab24_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09c652e0f8bd3617658bd1526027243b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09e3be2e69c4e0297395d8b2808c2dce_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09ee2f32bda6b0ab76a8352a2849e0d2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a7d1aab16b7e1c3722af376de96b5b1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ace511459ced9136a3e1e9f3a2eb539_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b5d788a381924b5bf7c381257ed4920_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0bdad133882d0878a1559f17b51086a3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c2c3d3c37c1d2a038862cdb04c35c80_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c65f054e21abb4fb1fcad8912699537_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c94918ef6808a27217f6b46990e8c48_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d66ced4aeda574b435b0bac20f17190_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d6ae64487605e0f4a645c76621fbf85_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0dd16ffdc9bf1c1f5bad25d5a68de7bf_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ddc512357706fe5df98fe1677b0bf46_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e4774e42c585bc5c25bc74cb54df029_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ed276ebd73a7e74578a754cc4298d4a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ee1141ff9c406ea0a337b8c87b245a7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f44f385aaf57409a4196e5bd4891b76_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f6201d92afe4bab71766d0a2162a589_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f6b6aa13c5f8f409e926d5300529034_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f966163bc05c6438842bcaa49699685_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\103a23b5fc2baa3a7eded2585d4fc54a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\110b68b648b9b2c2cefb229fc6a0288a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\111591084cf7d416779db314e3d9068b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\11858af651905eabd367a7d438fc1c1c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1241c8209f3839443d1834703ff4fdf7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12b4c02f982591991d364c3039858c5e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12c9dd4800c6f26e22805cc98de53680_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12faa4560b27743898b94f70378c5b79_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13670aa924de77fbf7058a26f8f77252_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13a121dbe9a192270a40eec65655ed57_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13abf5ace5d380a05a0722ad0682a176_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13edae527435327a0b51936a5fedba34_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\144e4f5fe3a2610c7992da2aea7ca988_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1454615ce4ea85c897ab2ac5dd6d916d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\145cad87b0825f74c9c9cb1b61ac5a09_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1474cd803aea6618883ddb7ae2adee4d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\14cc25d2f3272f4c23f9bcc5c524a55b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15800fc8c362012ea830226d6208976e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15a6459690d78ca2c0aa214d239be1f6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1623570e9c50379a17fe4e333936285f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\16b6df2966b2f8e52d6aed08ecb3caa4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17165eee8229fccdd6775131f2a98f33_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\171d5fd7944f4c4f202e8182e4d982a3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1732a68d99f5abe3667f184a36ee8aa6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17d8defccfd698c11f1885bdbb71efa7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18028226f4862e77f7fc7007a3a0bf0b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1845444aed08f1bdad6bebb5baa4a20a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18f118409934f214c79aac3636a37900_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\190940bcdaebf5cc323f1acdaa346bc8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\191c08d77db4371db108c6c014b59d0e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a091a88095871f5451634b4b5a7e8ff_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a197b5d5a2778746dc0e56d50b55f0b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a75543349e44d0d9b768de0cb44c3e0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a9b5d2e3ed7bc50a7e946e8ea1c2f7b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1abbe7ac46b9042fdae45bbf67beb7cf_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ae676721ab65605e79bb6b8f8eabb24_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1af86907938dbfc87b1a4993701840b3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ba933dbbb312000c2c094970bd7032e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1bc2798fd8ca50263c2dffc38445b756_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1bfd82f70b5c027467aa1a4dee8e93da_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c165095051aea49146abfe26111a8d5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c5574ca11b55ad1aef69f7ed6e90d90_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d40c6f28d80840d8fa3d1a0baa829e3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d4eeb325d7ba5b48cc67114f2578c17_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d8d4c2a936cf6363257519dba508914_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1dff10a033c37c6cf14fb3885aff3e6c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e5844e9c9973b3522d7111ce1cfeee4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e7e3255a86bb3c7a0be9b6e35fac941_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e9efe5556eb89e56dc24a624bf3333c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f00d1e172e55547e8268714c92df244_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f92198967cbcfdbe4c464dee5a84ca7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fca3a07da2839cbefc80bcbb90e55ac_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ff41fdd2f6ea3775f12b1194238f2c0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ffe968b85e46421418440e89c865bf8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\20e2a425247514824f0c4d663e1d714e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\213fb25a8f6bacc8c4921ce7dea56497_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21d0ebf7bfb802cbaa96614b0d7a529b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21f9b0045aac4ef96cce60c3f338d906_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\227306f963dc4fed03e5a66126da7ed5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22feffbaa72e3cc4791c23a6d34107e3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\23039190d45a03a59ed0875f0f3a4416_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\235cca91806fa4da2b69e84380fb37f3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\239c01ab140057b5eafde8192010cbd7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\23faad866e961d0242c17dcf1c28b8f6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\241870a483f46d97d10e912f14af14c4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2538976a7c8536109d4b1f1aa17f7039_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25425867d83ee9d601c477439f33d4c9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\255c05ee1cbc0b5140250741af8520ab_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25bba288101bfe3525785e9a4932a738_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2638a2f3ca5084fe879bb66bb150227a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2663cd20b45f7bc495c7dab8016880df_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\269f1c2224707a694c2bcbd496f72be6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26cc0cbce6273bd93e7f949d25ed7376_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26d64a60b0ea69efc23f309c666efe50_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26e9e2a542fb5018205da6941193cb61_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26ea804400a9343b07f058f20b4bc608_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\271a9eb12be238d3e64f872a63f59669_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27284b6a83d4adc657655eb5f94694bb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27d4ff15d6be51cce4c4e1e89412a4ad_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\281b093f4f791aeefcde3b7db762eb67_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\286a7d917ed08c4ea9815fb48dd63632_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28703ecf161bb2c437851c65756a0fef_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2880b66a9b291c4eba0f7c26f8d844ed_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28ad4097fd496e69b34296390ffcfad9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28b4bf69534f969a07a2a317ce7ccc2f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29152cd795a59c4be6e921769da5b9d0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\291fa0e31696e53fbdb06c1b2edce3c5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\292e195bf6925041110d2b7218488791_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\293848a3a7b1715047bfcc46583a908d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2963c0eaaecca39274334472f6156441_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29a60831facb89553ac9b5059fe9450e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29befaa0137c2d51615cea43ff99d892_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29d34790f9bc1fb77d7810b93d3c980f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a664d0f45b22da9a0fe0c3a15c49b78_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a6bd7d960df722f9fb20262b05c514b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a8f675c5b2304f52b420f7f11715a17_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b16bde3e436db1c1b0c1003708925a2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b49cef12f79cbde93156690bd7e0834_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b9eae39d5a0ad9afaed7d2262e66835_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2be362b2779773fd4a8ab6505bf59ac8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2bf44ea88f3e676920c8f5137b1cdbff_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c1cb24f327bc3a799e27fca1932295c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c5a0bd01caecb7768c788246a1b6dd6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c605946c6fb7f532a0256ee2aaea468_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c64a8fb00db8e7bf67db62f89a5f605_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c97e22422d2d8acab07b4d1dc8267b0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d41d1103b141f72dff3bfd68fd5f2c5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d92ba4ee3b27d3ca07a9cacee84c386_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e26a89d7b1999fcf6c19ad7c38986ba_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e53f0525f8ebcc6dd4dc20ee782afcb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2eaa271d3022d3587e1ac0e745705aa2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ec602fb2d46ad0c8ff811a3c91ea601_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ee2ea9c2f7897f20678921c241efc36_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f2123d61753e7c455699dbccf643893_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f6af7cc473e536274415aacb4810aa1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2fe346504dcbfade8a72e5de8771743c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\300df73d9eb7874063f898664dae47f1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\301f977de6a63e984f8b56216b6abe19_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30892e17451338ccbc257f49dfffae6f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30a7ff900346683a0457ff374e9f44ee_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30b2b6c22732c69fa72f25f2fe817fa1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30c91fe7a33ef449b56aaecb84751692_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3125e653da9edcd3875e66f62ac3a54a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\312d2397365918d30f65e0d0445811af_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\317d803a15e6df1430ff7b66aee4a4a4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31afefc3bdf28c606fb9d0474a9be4f0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3206625d7e2e547de40dcaeb4576e684_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3277d14189638bd34ac512c08b416520_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3337b6f050c5f40fa1157abafc5223d4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\334e894c2ea9f9582a8741071d471ab5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33a023a997af509f8ef27b5f44647a4b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33b275050e0464f05beb7536fa58815a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33e3975f85c47758458ae85b7746a3b9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3478bc1c9b429b95ace150b8aedf1374_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3488583dd9edaa0a6250d26c5734dd89_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34a043d3d8a416ad29fed96344844cff_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34d2e1ea0938e958d1b539e5aef3ef09_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3552ef6338bdd7a327f9009ada76ae6e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3617ca7dc55ec952c9b0178272baacb9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36422749b0b07fd827f4ce2c9fe90a53_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36466c6b9ed310e6c9435161d53e2642_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36668694ec29c7483859d76d3ff18a20_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37201b49bf408aa3dfbb1a199370dab8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37477e14f246302040e7e399b1d86c1c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37bfacb56b6b1ea61c986ceda60e6bb5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37da4c048ac2632f2ac0ca4f84b79675_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3881269439aed67fdf967df2110e3ce7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3886f1b31da63c229d94714d7cd71fd9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\38883040e4d5ae25bfa18a2db8a5fff8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\396e19898df9310e161f51c4d60222fa_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\398136ce068d6d0fe711656f6f729e28_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\39d40fc812447de6f6c2e94958464793_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\39d7cbf759dfb4669ef64a8d5129986b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\39e0467654ea15d45a25ec0fd752034b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3a328ba7c4cf03d92edb0d2554f52195_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3acf34f958c3c02538323077c8babaf2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ad7d759726c218bb818bc1d1fba9c2d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c23afa3699d340383492db93ef49056_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c362e8a2352f50bf903d943afff04fe_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c3f31a9849453f8c7c9ebd1091e7d8f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c8d3a5830e78d42406587e278f53544_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ccdffe01b92e39aa412642be07a47d3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3da61ca685546f57e6fa17aff86bb8ca_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e89db62a700a138cf6fcf4029b3955b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e8e9775a769ec845e54ab1ff1266552_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ea112b88f1dd6b2c1e82baf185304d2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f7e59dfc74b2c4cbe6b44dfe2e7d269_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3fdafd016943bcfdf47731dda8cdcacf_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42612b445cf1b0f678616aa9c1c5f6c3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4297d81bc335d3c082e369cf9ee7e550_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42c34d42aae99d7eabd265cc5a0ccd66_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42f4cce3957c6dab21cf5db172324cc1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\432bde7c8ef8402f8ec722516d3b6a9f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43d88b44a97bcdfe39f6fcc70a7b79da_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43fbf17dde84a253adbf75d2c44174ac_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\440ed102828f86ddb1fd88f52a9ba6a6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\441981e60dd17f89fda2097a4e77213b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44267dab823e172373e66a1cafbdc480_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4436ae3e7d29604bddb3cc59a0ed75a8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44adab0b284b11b66473530a3dc35ca7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44ffc5ec15bb692b857bca218abb5853_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\457ebb0b13a20d22a180a0b56dd7c26c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\458e2c21181a2cd7213af0f036fec63c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\46da1b3eaf436b4c67d1dc07f51aba93_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\470b9a72b3a55abf99cbb81d23ad346c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\474870fb9ab3be57e6db523a2963594e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\477a3085602453d681283674786c3044_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\47b1937e0a7b04e919070487f630ae5f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4802bb2fc2fbe9afe53952b19031f581_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\491e6ced6b10e887bb3da5fb11bbba20_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\496325fb0808fc3abd6059c5a1bbe012_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49adaebfb43a6587140e1611c2945db4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49fd2acedf98beb3918c67488806001c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a13563d5bb0aa8f267dcd673670eae6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a24bb69dd55a5e9c0220f896cc631f8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a68db58c6b4f9a9004e93f0c6df4630_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a70f3a040785470f5374b39aea6b2da_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a7c65f786b3c3cf52b2ba3bad971336_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4b3bdd7fdf656745e584f269a2dab1bb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4bbac1c8a88e54aa7993cac736ff4b99_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4bc080c0b192bc77036145b71debd987_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4c22461b1bfbc60e8eede002f96bfd34_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4c689b35e8d06b31eb6f07528f16304f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4cad078120076244899299cda7bb1427_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d312ad7d69c6951aff3c4f65febe4bb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d41ec0edc72aee7ea707c57a5b0440c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d56a087cafedf4fffa14ce53ee920c2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4db2439062c33bb432db60cb3448edc1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4de8bdbb2ea6c1346fce1dbf8fbf2c75_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4df8b2d0f2367c132b5cb5f916fec020_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e443246765e2d5fc2980b326552c5d7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e498aeb26b429759e68d0a96ec5c37c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e59be1af3fe59f4a43a01b6fab018f8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ed7886b9925e324fac49e0ed7434f29_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4eec7bfb697c0e1c77bb04c32b4bee41_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4efe5790014bc2615aea1df3d01ae524_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\500b48dfbcf0520adcf3c66aec9943ba_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5074e82ee5b6badc50f3f0c97ac9e978_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5081dd702a6f6e6f870b7cd82a4bc6b6_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51b952e5864945e442e26fdb1a982059_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51d75e1080904e469a68f9ec107bab81_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\520253e972ad5aec3598750dcbb56349_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52413e50aa44c263bd40a3d94be69609_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5283e372a8a02e3f329bb85461938603_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52a1c680a557afbabd1ffcf1015354eb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52da8e5c9f12217bd87ddd1a1bb8744f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52dd979411a8ae2d2b51b6c58359ff80_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5341384f0d32802b2acad88be6d5ba7e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5362a31107873f873890b2833a003319_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\53985e1cff6c67128b577a669b2c8dbd_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\53db7f09e4fb327b5392a16b70bc943d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\53f9a8d8027c793452b32ced0064b08b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\54badeae25fc7740b646828794b80fd2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\55587228539231066fb6f861cb3b4dea_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\555e26be477c02e00740b65bc478b6b1_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\55ae8ed2b27687c6b6ce3322c404db48_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56385cc42b5045cb62fed6a8f667b633_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\566aa617ca3e6d09a96edca454371136_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56f97c60ce154cc4580a85582ae5e406_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5753b854deaa506b01f842129d2caf9c_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5774276c1a1f59b4dabf16f99f6d6b5b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57f9609284782c18142917ef24579002_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5815549a36cceefaa8b5deb9208c52a7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\58981b9d4a6f11d7f6a43d1dc8f07e83_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\595a7587f7be7f1c1630c37dd8053fe8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\59ba2d9dc95158a04c6370e829017d4f_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\59bd0ea80369e56653fca411137c1914_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\59d3469f4f51588eb4e56fc489b4b35d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5aa85f32c259ae688cf4f2ae04bd3e66_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5ab20e06746e76f06a3b906038db4225_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5b2cd556b6c50d70db432cf5ec1a3df2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5c87f6983b36649856fa35d9243455a4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5ce208e38b735e55e6d6f38fd76d7583_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d02ec5b82c4ed82ed9572469842ffef_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d0c956be8a12feaa1ee488267b9ec30_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d119544e5b90844ce09f00fb77f66de_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d93a34dbdf7a63e7277b8311c8b15c8_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5dbc937bcaa7938a1f41372181ee4074_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e63bf03c479e1e8101573eac477ed74_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f26bdc0b923db17b203e0e972430e05_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f9feef42faeffbf0d3e230117fca45d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fc50b3091ff963e74e2a4da7ea61343_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fcebfa3fee5baddfff33423ab53cb12_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fff9f9bdc9e804aa47549bbc70c6e65_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\601baedffbfa5a98c6f4d562bd2a3e3a_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\60467a3b06f8d2725419156a9a2f88c0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\61410efa5666cbcfb724c48d8d1a0e18_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6151fd977f5b0cf2996c0d3a55de0437_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\61de65b7e7d33a747fd153d3bb7b2dc9_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\622dfca21bc6019a05ad9bd24c1868d7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\624efa98289ca399f25553456a61c156_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6262639259225df6bb01941c107a8491_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6293c2f8902308d9c3073695844389e4_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\62d84988cd04d7a154c96099789ca581_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\633b45868d7d919fd8274b7fbf87ff73_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\63db403ab896d9bbfc90e122ddc1f91e_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\641ba73fe3eab1a3bef0c32ca2253334_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64f22a9cbd69ea233bdf393ccbc4d510_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6540169baac31a0d0efd95ab6ca30bc7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\654bfba3e5b736b2ea9c58b2d82630b0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\658f350b52d1d10486215e8c503dae71_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65efce581b56e10b80c0f45fd3eeadc2_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\661a4f405a7ee0ef2ab5731e5f6227bb_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\661cd0274178ec23008e2fa418367583_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\66660dfd37f13c04ad9b9996aea2be48_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6709ee44f35e3725c0585619b8276f66_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6735973e4e528ed6f56617faa8662cb5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\673a4b342bf62e7fedbbecf3c7f3b73b_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\68200744967371b82baef92752f821ad_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6823848187c66e6e0b99c11e770d9bef_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6878a83f7c6ba921734edd02c465fda3_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\68943c53608f3d9e5efaa8bf5b6a7b14_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\68d080e322b7777313276a02114e09b0_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69026417c0ed5af638fba4be7bb40fb7_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6933c5cd5c53a2c782f25b8ed28181a5_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6977d8443d6700bdcc12c12ecf10f209_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69a051a7c263a77f5c11065a3a122bce_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69da35b2cf6a962e7980fa5dd016778d_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6a50156002c9a9d3386237e48cf97657_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6afe0ab78b904fe1d70227d845b9dfda_7a50628e-de8e-4d81-97b1-4a81867accad Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6b0cc58ee3b5b07ef
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm

Unread postby Shaba » June 22nd, 2007, 4:56 am

Hi

Kaspersky report is incomplete.

You can edit out all lines with Object is locked skipped if report is too long.
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

kaspersky.txt with Object is locked removed + highjackthis

Unread postby jonked » June 22nd, 2007, 2:29 pm

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
2007-06-21 23:47
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 21/06/2007
Kaspersky Anti-Virus database records: 350724
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
M:\
N:\
O:\
P:\
R:\

Scan Statistics:
Total number of scanned objects: 135467
Number of viruses found: 14
Number of infected objects: 41
Number of suspicious objects: 3
Duration of the scan process: 02:15:07

Infected Object Name / Virus Name / Last Action
C:\data Infected: Trojan-Downloader.Win32.IstBar.nh skipped
skipped

C:\Documents and Settings\John\.housecall6.6\Quarantine\antzom[1].exe.bac_a03800 Infected: Trojan.Win32.Dialer.qn skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\b122.exe.bac_a02496/stream/data0004 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\b122.exe.bac_a02496/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\b122.exe.bac_a02496 NSIS: infected - 2 skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\b122.exe.bac_a02496 CryptFF.b: infected - 2 skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\ipwins.dll.bac_a02496 Infected: not-a-virus:AdWare.Win32.Rond.a skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\khfggge.dll.bac_a02756 Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\nnnopml.dll.bac_a02756 Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\rpudgglo.dll.bac_a02756 Infected: Trojan.Win32.BHO.bd skipped
C:\Documents and Settings\John\.housecall6.6\Quarantine\UnInstall.exe.bac_a02496 Infected: not-a-virus:AdWare.Win32.Rond.a skipped

C:\Downloads\FridayDartsSetup-dm[1].exe Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\Program Files\Common Files\System32\PP2\AutoPlay\Docs\PartyPokerSetup.exe Infected: Backdoor.Win32.Delf.ahn skipped

C:\QooBox\Quarantine\C\WINDOWS\system32\cetigupt.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ebxsotrx.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\elgonhkf.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\evtfsjtg.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\fkplloge.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\guexyurq.dll.vir Suspicious: Packed.Win32.Morphine.a skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\hknbujkv.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\jmmrguub.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\khfggge.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\khhhf.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.fp skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\kqueplsp.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ljrqdchb.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\mllih.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.fp skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\msoeijok.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\mtejedda.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\mvkqmsnf.dll.vir Suspicious: Packed.Win32.Morphine.a skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\nwjfudum.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\paavwvml.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\qbqkupia.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\qdhigecw.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\qiofkugg.dll.vir Suspicious: Packed.Win32.Morphine.a skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\vuodonxs.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\woatfqra.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped

C:\WINDOWS\system32\dbxDgrevCheck.dll Infected: not-a-virus:AdWare.Win32.Agent.cb skipped

G:\BitTorrents\TexasHoldem\[2007] TEXAS HOLDEM PROFESSIONAL\TEXAS HOLDEM PROFESSIONAL.rar/Setup.exe/data.rar/AutoPlay/Docs/PartyPokerSetup.exe Infected: Backdoor.Win32.Delf.ahn skipped
G:\BitTorrents\TexasHoldem\[2007] TEXAS HOLDEM PROFESSIONAL\TEXAS HOLDEM PROFESSIONAL.rar/Setup.exe/data.rar Infected: Backdoor.Win32.Delf.ahn skipped
G:\BitTorrents\TexasHoldem\[2007] TEXAS HOLDEM PROFESSIONAL\TEXAS HOLDEM PROFESSIONAL.rar/Setup.exe Infected: Backdoor.Win32.Delf.ahn skipped
G:\BitTorrents\TexasHoldem\[2007] TEXAS HOLDEM PROFESSIONAL\TEXAS HOLDEM PROFESSIONAL.rar RAR: infected - 3 skipped

G:\test\Google Earth Pro Map + Full Crack\GoogleEarthPro.exe/data0000.cab/iexplorer.exe Infected: Trojan-Clicker.Win32.VB.in skipped
G:\test\Google Earth Pro Map + Full Crack\GoogleEarthPro.exe/data0000.cab Infected: Trojan-Clicker.Win32.VB.in skipped
G:\test\Google Earth Pro Map + Full Crack\GoogleEarthPro.exe Rsrc-Package: infected - 2 skipped


Scan process completed.

******************************

HIJACKTHIS LOG

Logfile of HijackThis v1.99.1
Scan saved at 23:59, on 2007-06-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaServer.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Cloudmark\SpamNet\OE\snoe.exe
C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [FLMLABTECMOUSE] C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [PVR Agent] C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [eFax 4.1] "C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [five Media Manager Tray] "C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe" /CustomId:five
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Freecom Personal Media Suite.lnk = C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Cloudmark Desktop for Outlook Express.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Search Using Copernic Agent - res://F:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/haphazard/rapti ... loader.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/ka ... nicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {164B406B-0FD6-4E7F-BA7E-64D227D4CA37} (dnlplayer Class) - http://www.digitalwebbooks.com/reader/dbplugin.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/house ... hcImpl.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/inflaterball/mi ... Loader.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/Reflex ... Loader.cab
O16 - DPF: {46431044-1B22-4EF3-B333-863AAF310153} (five Class) - http://www.download.five.tv/Download/five_3_4_0_8.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0, ... Portal.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2779681543
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7678277405
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} (MediaControl Class) - http://www.download.five.tv/Download/En ... Silent.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe (file missing)
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm

Unread postby Shaba » June 23rd, 2007, 4:40 am

Hi

Empty these folders:

C:\Documents and Settings\John\.housecall6.6\Quarantine
C:\QooBox\Quarantine

Delete these:

C:\data
C:\Downloads\FridayDartsSetup-dm[1].exe
C:\Program Files\Common Files\System32\PP2\AutoPlay\Docs\PartyPokerSetup.exe
C:\WINDOWS\system32\dbxDgrevCheck.dll
G:\BitTorrents\TexasHoldem\[2007] TEXAS HOLDEM PROFESSIONAL\TEXAS HOLDEM PROFESSIONAL.rar
G:\test\Google Earth Pro Map + Full Crack\GoogleEarthPro.exe

Empty Recycle Bin

Re-scan with kaspersky

Post:

- a fresh HijackThis log
- kaspersky report
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Unread postby jonked » June 23rd, 2007, 9:51 am

Hi,
The following would not delete:

C:\data
C:\Downloads\FridayDartsSetup-dm[1].exe

get the file in use message on both.

Highjackthis log.

Logfile of HijackThis v1.99.1
Scan saved at 14:35, on 2007-06-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaServer.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Cloudmark\SpamNet\OE\snoe.exe
C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [FLMLABTECMOUSE] C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [PVR Agent] C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [eFax 4.1] "C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [five Media Manager Tray] "C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe" /CustomId:five
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Freecom Personal Media Suite.lnk = C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Cloudmark Desktop for Outlook Express.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Search Using Copernic Agent - res://F:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/haphazard/rapti ... loader.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/ka ... nicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {164B406B-0FD6-4E7F-BA7E-64D227D4CA37} (dnlplayer Class) - http://www.digitalwebbooks.com/reader/dbplugin.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/house ... hcImpl.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/inflaterball/mi ... Loader.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/Reflex ... Loader.cab
O16 - DPF: {46431044-1B22-4EF3-B333-863AAF310153} (five Class) - http://www.download.five.tv/Download/five_3_4_0_8.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0, ... Portal.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2779681543
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7678277405
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} (MediaControl Class) - http://www.download.five.tv/Download/En ... Silent.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe (file missing)

***********************************
***********************************


kaspersky log with object is locked entries removed.


-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
2007-06-23 14:33
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 23/06/2007
Kaspersky Anti-Virus database records: 351367
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
M:\
N:\
O:\
P:\
R:\

Scan Statistics:
Total number of scanned objects: 136752
Number of viruses found: 2
Number of infected objects: 2
Number of suspicious objects: 0
Duration of the scan process: 02:15:25

Infected Object Name / Virus Name / Last Action
C:\data Infected: Trojan-Downloader.Win32.IstBar.nh skipped





C:\Downloads\FridayDartsSetup-dm[1].exe Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped






Scan process completed.
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm

Unread postby Shaba » June 23rd, 2007, 10:33 am

Hi

Boot in safe mode -> http://www.pchell.com/support/safemode.shtml
and delete those there.

Now successful?
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Worked OK

Unread postby jonked » June 23rd, 2007, 3:07 pm

Carried out deletes in safe mode and they worked ok.
Do you want another run of highjackthis and kaspersky?
Thanks for your patience.

Jonked
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm

Unread postby Shaba » June 24th, 2007, 5:17 am

Hi

Yes, please :)
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Final Highjaackthis and Kapersky logs?

Unread postby jonked » June 24th, 2007, 9:03 am

HighJackthis log
Logfile of HijackThis v1.99.1
Scan saved at 10:19, on 2007-06-24
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaServer.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Cloudmark\SpamNet\OE\snoe.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [FLMLABTECMOUSE] C:\Program Files\Labtec\Labtec Mouse Software\2.0\mouse32a.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [PVR Agent] C:\Program Files\KWorld Multimedia\HyperMedia\DTVR\Scheduled.exe
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [eFax 4.1] "C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [five Media Manager Tray] "C:\Program Files\Entriq\MediaSphere\Bin\EntriqMediaTray.exe" /CustomId:five
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Freecom Personal Media Suite.lnk = C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Cloudmark Desktop for Outlook Express.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Search Using Copernic Agent - res://F:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - blank (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/haphazard/rapti ... loader.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/ka ... nicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {164B406B-0FD6-4E7F-BA7E-64D227D4CA37} (dnlplayer Class) - http://www.digitalwebbooks.com/reader/dbplugin.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/house ... hcImpl.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/inflaterball/mi ... Loader.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/Reflex ... Loader.cab
O16 - DPF: {46431044-1B22-4EF3-B333-863AAF310153} (five Class) - http://www.download.five.tv/Download/five_3_4_0_8.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0, ... Portal.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2779681543
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7678277405
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} (MediaControl Class) - http://www.download.five.tv/Download/En ... Silent.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe (file missing)

******************

Kaspersky log with bypass this lines removed

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
2007-06-24 13:55
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 24/06/2007
Kaspersky Anti-Virus database records: 351868
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
M:\
N:\
O:\
P:\
R:\

Scan Statistics:
Total number of scanned objects: 136719
Number of viruses found: 0
Number of infected objects: 0
Number of suspicious objects: 0
Duration of the scan process: 02:13:59

Infected Object Name / Virus Name / Last Action


Scan process completed.
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm

Unread postby Shaba » June 24th, 2007, 9:10 am

Hi

Logs look good :)

Still problems?
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Looks good.

Unread postby jonked » June 24th, 2007, 9:19 am

I cannot thank you enough for the time you have taken in sorting out my problem. Much appreciated.

I will make an image of the clean system and use it as a reference in case I get problems again.

I'll make a donation to the site as a thank you.

Regards

jonked
jonked
Regular Member
 
Posts: 27
Joined: June 16th, 2007, 6:55 pm
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 301 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware