Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

virusburst.com - annoying flashing icon in taksbar

Started by jollyr , Nov 05 2006 12:49 PM

  • This topic is locked This topic is locked

#1
jollyr
Posted 05 November 2006 - 12:49 PM

jollyr

    Member

  • Member
  • PipPipPip
  • 128 posts
Am running Spy Sweeper and have also recently loaded AVG Anti Spyware 7.5 30 day trial.

I ran all programs as recommended before posting logs in forum.

Please advise course of action to get rid of this annoyance.

Thanks in advance for your help!

SmitfraudFix scan log follows.

- - - - - - - - - - - - - - - - - - - - - - - - - -

SmitFraudFix v2.118

Scan done at 13:35:43.24, Sun 11/05/2006
Run from D:\Documents and Settings\USER\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» D:\


»»»»»»»»»»»»»»»»»»»»»»»» D:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» D:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» D:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» D:\WINDOWS\system32

D:\WINDOWS\system32\rrtcany.dll FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» D:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» D:\Documents and Settings\USER


»»»»»»»»»»»»»»»»»»»»»»»» D:\Documents and Settings\USER\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu

D:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND !
D:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» D:\DOCUME~1\USER\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» D:\Program Files

D:\Program Files\VideoKeyCodec\ FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{27321538-5739-4aa1-b84c-7d18e4383f1f}"="ferrateen"

[HKEY_CLASSES_ROOT\CLSID\{27321538-5739-4aa1-b84c-7d18e4383f1f}\InProcServer32]
@="D:\WINDOWS\system32\rrtcany.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{27321538-5739-4aa1-b84c-7d18e4383f1f}\InProcServer32]
@="D:\WINDOWS\system32\rrtcany.dll"



»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End
  • 0

Advertisements

#2
Mr_JAk3
Posted 07 November 2006 - 06:15 AM

Mr_JAk3

    Visiting Staff

  • Member
  • PipPip
  • 95 posts
Hi jollyr, please post a HijackThis log to here too.
  • Please download HijackThis to your desktop -> HijackThis 1.99.1
  • Create a new folder named HijackThis to your desktop. Move Hijackthis.exe into that folder.
  • Run HijackThis.exe
  • Click on Do a system scan and save a logfile
  • Wait for the scan to end, a logfile will popup in a notepad document
  • Please copy that log and paste it to you thread
:whistling:
  • 0

#3
jollyr
Posted 07 November 2006 - 09:26 PM

jollyr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
Hi Mr_JAk3,

FYI. Since my last post, I ran repeated scans with Spy Sweeper and during the the last one, it appeared to remove the annoying icon in the taskbar. I ran Hijack This (HJT) anyway, just in case there's more.

Thanks for checking this for me!

Regards
JR

- - - - - - - - - - - - - - - - - - - - - - - - - -

Logfile from HJT follows:


Logfile of HijackThis v1.99.1
Scan saved at 10:13:14 PM, on 11/7/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\WINDOWS\system32\CTsvcCDA.EXE
D:\WINDOWS\system32\hpb2ksrv.exe
D:\WINDOWS\system32\hpbhksrv.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
D:\Program Files\VideoKeyCodec\isamonitor.exe
D:\WINDOWS\system32\dla\tfswctrl.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
D:\Program Files\Windows Defender\MSASCui.exe
D:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
D:\WINDOWS\system32\devldr32.exe
D:\WINDOWS\system32\wwSecure.exe
D:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
D:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
D:\Program Files\VideoKeyCodec\isamini.exe
D:\PROGRA~1\VERIZO~1\HELPSU~1\SMARTB~1\MotiveSB.exe
D:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
D:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Microsoft ActiveSync\wcescomm.exe
D:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
D:\PROGRA~1\MI3AA1~1\rapimgr.exe
D:\Program Files\Webroot\Spy Sweeper\SSU.EXE
D:\Program Files\Mozilla Thunderbird\thunderbird.exe
D:\Documents and Settings\BJ\Desktop\HGT2\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O1 - Hosts: 66.98.136.25 auto.search.msn.com
O1 - Hosts: 66.98.136.25 auto.search.msn.es
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {8bf5b8fc-11cb-409f-8c91-4d4ca04a1b6d} - D:\Program Files\VideoKeyCodec\isaddon.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [dla] D:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [AVG7_CC] "D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [CamMonitor] "D:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] "D:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] D:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] "D:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] "D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SpySweeper] "D:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [RemoteControl] "D:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] D:\PROGRA~1\VERIZO~1\HELPSU~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [gcasServ] "D:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DVDLauncher] "D:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [Xwoo] D:\WINDOWS\system32\?hkdsk.exe
O4 - HKCU\..\Run: [AIM] "D:\Program Files\AIM\aim.exe" -cnetwait.odl
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cp...ddObjSigned.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1128863012750
O16 - DPF: {DB0474CC-8EF6-47FC-905B-23FC58A70817} (RegPropsCtrl Class) - http://download.veri...tWebInstall.cab
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - D:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: HP Status - Hewlett-Packard Company - D:\WINDOWS\system32\hpb2ksrv.exe
O23 - Service: HP Status Print - Hewlett-Packard Company - D:\WINDOWS\system32\hpbhksrv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - D:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - D:\WINDOWS\system32\wwSecure.exe
  • 0

#4
Mr_JAk3
Posted 08 November 2006 - 08:14 AM

Mr_JAk3

    Visiting Staff

  • Member
  • PipPip
  • 95 posts
Hi again, we'll continue :whistling:

You should print these instructions or save these to a text file. Follow these instructions carefully.

Open AVG Anti-Spyware
  • On the main screen under Your Computer's security.
    • Click on Change state next to Resident shield. It should now change to inactive.
    • Click on Change state next to Automatic updates. It should now change to inactive.
    • Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
    • Wait until you see the Update succesfull message.
  • Right-click the AVG Anti-Spyware Tray Icon and uncheck Start with Windows.
  • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
If you are having problems with the updater, you can use this link to manually update ewido.
AVG Anti-Spyware manual updates.
Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that AVG Anti-Spyware is closed before installing the update.

Disable SpySweeper's realtime protection.
  • Open Spysweeper and click on Options
  • Choose Program Options and uncheck "load at windows startup".
  • On the left click "shields" and then uncheck everything.
  • Uncheck "home page shield".
  • Uncheck "automatically restore default without notification".
  • Exit the program.
Disable Windows Defender's realtime protection.
  • Open Windows Defender
  • Click on "Tools"
  • Click on "General Settings"
  • Scroll down to "Real-time protection options"
  • Uncheck "Turn on Real-time protection (recommended)"
  • Click "Save"
  • Exit the program.
Download ATF Cleaner by Atribune to your desktop.
Do NOT run yet.

==================

Open Control Panel -> Add/Remove programs -> Remove all the of the following programs if found:

Oin
Yazzle by Oin
Purityscan by Oin
Snowballwars by Oin
or anything similar with Oin or Outerinfo in it.
Zolero
Tizzletalk
MediaTickets
Cowabanga
and any other programs you didn't install or don't recognize - if your not sure please ask first


Run HijackThis, click Do a system scan only, and check the box next to each of these entries if still present. Close all other windows and press Fix checked. If something isn't there, please continue with the next entry in the list.

O1 - Hosts: 66.98.136.25 auto.search.msn.com
O1 - Hosts: 66.98.136.25 auto.search.msn.es
O2 - BHO: (no name) - {8bf5b8fc-11cb-409f-8c91-4d4ca04a1b6d} - D:\Program Files\VideoKeyCodec\isaddon.dll
O4 - HKCU\..\Run: [Xwoo] D:\WINDOWS\system32\?hkdsk.exe

Restart your computer to the safe mode:
  • Restart your computer
  • Start tapping the F8 key when the computer restarts.
  • When the start menu opens, choose Safe mode
  • Press Enter. The computer then begins to start in Safe mode.
Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Warning : running option #2 on a non infected computer will remove your Desktop background.

Restart to the safe mode again.

Run ATF Cleaner Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

Close ALL open Windows / Programs / Folders. Please start AVG Anti-Spyware and run a full scan.
  • Click on Scanner on the toolbar.
  • Click on the Settings tab.
    • Under How to act?
      • Click on Recommended Action and choose Quarantine from the popup menu.
    • Under How to scan?
      • All checkboxes should be ticked.
    • Under Possibly unwanted software:
      • All checkboxes should be ticked.
    • Under Reports:
      • Select Automatically generate report after every scan and uncheck Only if threats were found.
    • Under What to scan?
      • Select Scan every file.
  • Click on the Scan tab.
  • Click on Complete System Scan to start the scan process.
  • Let the program scan the machine.
  • When the scan has finished, follow the instructions below.
    IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
    • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
    • At the bottom of the window click on the Apply all Actions button. (3)
      Posted Image
  • When done, click the Save Scan Report button. (4)
    • Click the Save Report as button.
    • Save the report to your Desktop.
  • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
Reboot in Normal Mode.

================

When you're ready, post the following logs to here:
- AVG's report
- a fresh HijackThis log
- contents of C:\Rapport.txt
  • 0

#5
jollyr
Posted 10 November 2006 - 07:33 PM

jollyr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
Well, Mr_JAk3, I kinda messed up and made a few changes to boot. :)

To make a long story short, everything went OK until I ran AVG. It took all night to scan and in the morning, I was half awake and rushing to finish up. I did not follow your instructions but just deleted the found problems and did not save a log file before exiting the program. To further confuse things, I uninstalled spysweeper and bought AVG antimalware (combined anti virus and anti spyware). I have attached a fresh HJT log for your review. The instructions you gave me are not completely applicable to the package I bought from AVG so I think we need to start again. (?) :help:

Sorry about this, but with the weekend coming up, I'll have time to work on my PC. :whistling:

Thanks for your understanding and help. :blink:

Regards,
JR

-------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 8:30:01 PM, on 11/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
D:\PROGRA~1\Grisoft\AVG7\avgemc.exe
D:\WINDOWS\system32\CTsvcCDA.EXE
D:\WINDOWS\system32\hpb2ksrv.exe
D:\WINDOWS\system32\hpbhksrv.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\dla\tfswctrl.exe
D:\PROGRA~1\Grisoft\AVG7\avgcc.exe
D:\Program Files\Windows Defender\MSASCui.exe
D:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
D:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
D:\PROGRA~1\VERIZO~1\HELPSU~1\SMARTB~1\MotiveSB.exe
D:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
D:\WINDOWS\system32\devldr32.exe
D:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
D:\PROGRA~1\VERIZO~1\HELPSU~1\VERIZO~1.EXE
D:\WINDOWS\SYSTEM32\3cmlink.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Microsoft ActiveSync\wcescomm.exe
D:\WINDOWS\SYSTEM32\3cshtdwn.exe
D:\WINDOWS\SYSTEM32\3cmlink.exe
D:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
D:\Program Files\Common Files\Verizon Online\ConnMgr\cmisrv.exe
D:\PROGRA~1\MI3AA1~1\rapimgr.exe
D:\WINDOWS\system32\wwSecure.exe
D:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\Program Files\Common Files\Verizon Online\AppMgr\vzOpenUIServer.exe
D:\PROGRA~1\MOZILL~1\FIREFOX.EXE
D:\Documents and Settings\BJ\Desktop\HGT2\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet

Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =

127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program

Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program

Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [dla] D:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [CamMonitor] "D:\Program Files\Hewlett-Packard\Digital

Imaging\\Unload\hpqcmon.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] "D:\Program Files\Hewlett-Packard\HP

Share-to-Web\hpgs2wnd.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef

/Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] D:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] "D:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] "D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [RemoteControl] "D:\Program Files\CyberLink DVD

Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] D:\PROGRA~1\VERIZO~1\HELPSU~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [gcasServ] "D:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DVDLauncher] "D:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [A Verizon App] D:\PROGRA~1\VERIZO~1\HELPSU~1\VERIZO~1.EXE
O4 - HKLM\..\Run: [3c1807pd] "D:\WINDOWS\SYSTEM32\3cmlink.exe" RunServices \Device\3cpipe-

3c1807pd
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Program Files\Microsoft

ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [AIM] D:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0

\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2

\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program

Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

D:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} -

D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1

\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-

00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1

\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program

Files\AIM\aim.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky...can_unicode.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-

support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation

Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://update.micros.../muweb_site.cab?

1128863012750
O16 - DPF: {DB0474CC-8EF6-47FC-905B-23FC58A70817} (RegPropsCtrl Class) -

http://download.veri...tWebInstall.cab
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Program

Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1

\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1

\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - D:\PROGRA~1

\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVG7

\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd -

D:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: HP Status - Hewlett-Packard Company - D:\WINDOWS\system32\hpb2ksrv.exe
O23 - Service: HP Status Print - Hewlett-Packard Company - D:\WINDOWS\system32\hpbhksrv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation -

D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - D:\Program

Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32

\ZoneLabs\vsmon.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. -

D:\WINDOWS\system32\wwSecure.exe
  • 0

#6
Mr_JAk3
Posted 11 November 2006 - 02:32 AM

Mr_JAk3

    Visiting Staff

  • Member
  • PipPip
  • 95 posts
Ok looks quite good :whistling:
How is the computer running ?

Please post the contents of C:\Rapport.txt to here.

Please do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
    Extended (if available otherwise Standard)
    • Scan Options:
    Scan Archives
    Scan Mail Bases
  • Click OK
  • Now under select a target to scan:Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
    • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post.

  • 0

#7
jollyr
Posted 11 November 2006 - 10:12 AM

jollyr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
Glad things look OK!

Here's latest rapport.txt file contents

- - - - - - - - - - - - - - - - - - -
SmitFraudFix v2.118

Scan done at 11:03:45.11, Sat 11/11/2006
Run from D:\Documents and Settings\BJ\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End
  • 0

#8
Mr_JAk3
Posted 11 November 2006 - 12:32 PM

Mr_JAk3

    Visiting Staff

  • Member
  • PipPip
  • 95 posts
Hi again :blink:

Please post the Kaspersky online scan results too :whistling:
  • 0

#9
jollyr
Posted 12 November 2006 - 10:25 AM

jollyr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
Ran the Kapersky Labs scan (took a long time to complete!). The resulting file is pretty long. The infections are found near the end.

- - - - - - - - - - - - - - - - - -
[font="Courier New"]Sunday, November 12, 2006 10:45:00 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 12/11/2006
Kaspersky Anti-Virus database records: 240770
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer

A:\
C:\
D:\
E:\
F:\
G:\

Scan Statistics
Total number of scanned objects 177450
Number of viruses found 19
Number of infected objects 40 / 0
Number of suspicious objects 2
Duration of the scan process 13:31:26


Infected Object Name Virus Name Last Action

D:\Documents and Settings\All Users\Application Data\Avg7\Log\emc.log Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00136bdb5ff7d0bd1a973e7f9088731d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\003505e65b965afb5b00918ff0bf28a2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\004d03cb9082c934f83cd19a54a8916b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00c8870909925d790deaf4eb9e46146e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00f9c136174ee31f23372afe4fa3fc84_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\01431de73ce15c17291ff3e6ec670494_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\01827f85a2e14a4a20251d030c3c4dcb_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0194385cd434fb86ede05098e8adeede_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\01aac7d0f6e0f4818488f14a678c753e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\01c2baba5e5bb5e569ce2902a216a93c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\01ef12aa0ef5954a3f377f8fb138e7d6_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0234aa7acb61caaec097eeb11314ee7e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\026a09c91ec9ae4ee5c5ccbba0a027f9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\028b2592fe44604be480a29cc1172397_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\031654d53cf4c239a20b2ed13766495f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0391340cea522b1ce1a9e2ff95eaa906_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03c1e1254348d14a9d8c2b2e62d4e3fd_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0460b8382ec5fe3673affd17cb2d42ee_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04731dda0e4664e7d19c8adb38019082_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04c866c23435682cac2e1781f17430bf_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04ff4b7cfb77d17b88fea92f2615c81b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\055bc1bd63f7c9dea3769be042daec3a_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\056adebf664ba0713c75e39b26ea5bd3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0579c37ec8d217d95d53c09cc89e8dfa_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\059838277a6b789678f538223c8d524f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\05a899116c59ac6e7d1d5241f18e1236_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0612cac920daebb5cdc3eba4fe8d4ebe_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\062099eb8cce47353d6eccc757e7bab8_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06c16443d9e834dc0e0e7d56d64f67cd_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\070174e8a60d4d00450949cf8c56c685_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07113ed4c2f87d53447dbf23df832f91_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07ffd2c25f32448fc1cfd81ea5672550_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\081d15adc732d548f0d9170969182920_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08dde99279010748dab33b0110f6bdfc_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08e5fc29b49d66fffded9b222a8ce4a9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\091c68532552743818051110c2ba912d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09267eead95c05faf4901db92ce012d0_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\098ffa67f6037924cf6143476d300610_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09903a984dc96fd950904efb86d51b7a_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\099ea86c654b2382fbb7bd9be79d4632_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09a478f3e034e212137ee3ced59dd94c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09ab6c4e4f358c9a7a6d4d53313dc8a2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09bce01643acfb1374c2558163e105c1_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09cc2999f10d8bf4ea8173f41da45aa3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09e4a1959710e2956a67bcbd9906beec_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a135dd280c2e68534ca44a54940230a_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a3aa5684a22169b5ab97c4bd7e9a190_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a474793b8da3b8a5f302fb80576e852_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a4df72d9dad11f7e707c77f06b3abb7_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a568f957c1fe2e2b67fdf8e4574fc91_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a7353c2578a46c4963dd00d0a113e7c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a7b4e3174dafa3d51134a1b3826d807_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a96739556356f90352892fb40dcaf92_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0aa86a99f4f0148f8dcd6f52e61dbc3b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ab7421a2fd02f764534b25156328b92_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0abbcc79868898a7d2658254383793f3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0afb1ca174293a0121cac673f5008e2f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b009f6bd532792f7ffedc0dbf0258ee_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b7133150a79f44b8a4c57a6f4fb5a24_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b8ac05ccb2c2a938c7b8879e17bb7e6_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0bebc062aed76590a7fd5ac6d465b6b2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c49133ea6135fe1f4a9136b08b435ac_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c63deeaa052a07d22f281c00fb15c1e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c827e6164be582b5b5780aafd29c517_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c9573b0946a5e19ef51d9158511ac4c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0cfa0aaad0576b590f5fb5e084c4e965_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d2cf8fa7ccec4150202219e492d8f97_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d7814f33a064dcf5bed31641676d15b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0da48cef06cd3e8ab7bb75bae1a4e992_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0dad0dfd5093902a45973f26b8b432c5_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e07cf77caac22141bfe49d7bd1eed42_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ea74c8a3cb4d11116cc301838e88ba2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ebb1be92996066fafb20904cc042156_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f349d57519a754d30c9e3ae55b3c61c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f838779d795304e6d8bf518cfba57e2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f89191abf9ed89d1f32382dbe0861a4_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f8e32479fe512535784151d7f77110c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0fbbc2dcce7e14bf4fd4d399cad185c3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\109365ecc22f1d35e4d903d2c427451d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\116bfdc7314e8b9648a4b3633cc0a602_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\117895fcfb500cca955c375e30256ec5_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\11826f8b55d6a65f4eb768a923e3ec69_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\11d9fc33bf88f380dbb79bcaf54165e3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1211c638881dd5db93a55085cda88584_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\123588d7a684f37edeacede1dc9a061b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12934d57bdb5d25919a3b0210ce80c63_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1295d6d91706620d44cd2b68a0c360b4_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\129a7d653818c8b9e682cb764af80885_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13080ae492d42ddd3bedabef01fc472e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1309419bd52e261fc4d44914377732af_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1321ecde96e0afa44162d992c16ba5ef_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1328055071eb2945df79920d069cc561_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13596d5f45d21a60736b72b146d31ec2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1387ac89402efaf75eb19226311ed703_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\139474a63509343453ea5edcf7a53083_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\14adfcca4f06edb8d4df09932b6ae232_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1524413310e2602337a1ea539c306371_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\155c7028a238fb50102c25a13ef0bd19_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1582c00da9fd73f1e8174e84cb02fc7a_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1599b9ca2083475824c0f30a789940ef_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15c422f120a2e5d58fe2a2c639ad79ba_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\160fd4c72c3a804c42e623d66c4dce96_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\162049ef6d2ec2c7d0bc6217d9e8e1da_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\16332ae9418e026d36456ac11fe3a8b0_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1657fb069d34ea16d7442f6b9f355405_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\165b28b254bec1a2b8d324323839540d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\169b21c56822b2bf01e987d1dd8d343b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\16b36020a9104c4fefaac2beae188d11_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\16c2d8ebf07763a042dd9fce012b6c7b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\16e5f6535d7f8116f976ae2d1c4eed7d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\16eabfbe99fac6a2f8119838534a81cf_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17280e9d25e62b1ea8b0e2d1d80614bc_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1734de8c7995fd84e0bb704133b56596_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\176323a6c37315d343c17eb6651aa571_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17b32e59f12aadbccbcd5453bc83b49c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17bca2a76916f29e4fdfa3a09b79e021_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\180baa3012592e761890cd07c7612884_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1872809f15f6d2e480c7adc97fc1e83e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\189a9e6c8954eedc3aa4d6d80283908b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18c437e194cbce9aa71ff1d1e17cca19_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18d4beb3c9f03408250318abad7bfba9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19003a19aad3b569c08b5446a008ba00_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1981d8c09eb723119c9b9dc2ebc3b838_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1986cdc18bbbf730b50035c7c4d9b13c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19bb9b49fba530ead9318a7114a95c7b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19c6dd6670e28b1fd71fef61228c3d95_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19e7fe62be45290a283fd90435debeaf_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a2a031aa196e5b3791c3f39636b01a3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a48183cac58c91fac1e8431582b335d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a9748d7745f68ffb0d46e007400f26e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ab63389cb89bcc049b39227c65b1630_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1b65d67b08c50da0acf4bff6ff707b17_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1b836c33b7440e331a3a744b0d7597ac_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1b95fc47aca171d7b298ea1e4b8881b5_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1bad62662f8dddfd683b519dd4b5463b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c2bcf677a5236c8c9a0db5d60e2ee91_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c37bac38ebb7c7e57f1ec5abce91f5d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c3970b09010a911716c125ebc33eaab_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1cc5f3ddbe58da989df2f4c8a7bdf738_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d1ca8db1f5251c43969733f7228d3f2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d447580679a14a22c6b07cc7adf7994_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d484afd25af33c030e796066e6936f7_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1dc403ac181e703c986b44012b79fa1b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1dd7a357b397de702f3fa52ac31fdb63_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e94c880657a7a05b57e993183f8d9d5_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ed1a9a2ff5925088cf66249797bda06_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f38dcc967606b4ae07efc30d6bd4d12_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f4dd7008d5e410bd801c19022485f38_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f74cc7576a19d4459002e1881ddadbe_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fd0f4493e4279f982eeb2bc3db3cf28_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fd3993d5a96cc0357b88732ff2a4e2b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fe5952c92bbfd0016cd10a954c7fa06_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ff266f82a7dd217af608328178a2bd3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ff70cbb495606caa0d3120be12d8589_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\200e902f202667d3afa07b7a8a36a97f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2011ad64a16fda192797890f85cab36d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\204070cc7a8156bf59040d375111968d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\206cdcbfaaedc6728555889c419451ef_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\20874bb807fac7bdc669ea6439cb8cba_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\20d07bfdeceefd99120183f81781ea11_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\20d5411bd6d51114a90ebe860afdef15_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2111bc8bfb5bfef7f265ddb12c3f7c60_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2111cde42b5ef21f5c633ca7dcdb74fe_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2115782f716effaec7fdf47ebf8d4ed9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\214986a9a80a95e1f0e8520812b738d9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21546f22f57c7cfc304adcce9664fecc_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\216d2e3ab88780a570c7a59866d19d85_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21865b4e8fb902f0277a648c2b06195b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\219dc148455806117d5e441433df0ad9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21b194a8b5396545bbc6159b048e3d9c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21bae18800eb0a47d36ae2116ded0ea8_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21cfc45f1dcb789317bc4cc4dd7ac644_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21f59393a1a6c7cfe26790a38837ca7c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2204f566421c11dd4269bf5b077a5c4c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22375b7dbf5b58d81066fd01dffc9d15_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\223b1417a54515e2e9b8d37c7148f4d1_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2246893bbb67acd7103c75f0b988147a_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22472ae3d1252a0953898f1acf1ddd9f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\226748c4654c03c86356abe2f8571181_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22c8046bb76b1f732636365edcfaf39f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22da3ff3dc05373672a0f43978ffa24d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\231674db17b4ff15765561480b8b00be_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\233b97552413c854f2d8b104cb04690b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\235a00587fd1077662541d1705178618_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2390f604db70a00911a82aaf9ebe96a0_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2414e70bc698cb5819b32a73eb5606cb_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24185feac5e4962fda645411482aa716_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\242d77b25096b3dd71f0dcaad33298c8_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24a6bc8bf72e9183c9a693971c1f98e9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24b7b1f4a0dd8732d95b350b3b49fd83_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24ecc4eddc310be33cb934975aced492_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25220b8e0364e798d858c34f4b2eb49c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\255a5b7eb9d41874815a9dad6d48c1ad_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\255adb89cc8888a7e8402f11dd36b399_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2569b75b0ed231a4023f3297f9e8badd_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2592b21c8f2a9bb7e81a57adc0e806ca_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2599f4d34314da08a18b00dd96d575b8_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25c2cbf0604306fac2f30ab54482592d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25c342734a50fe15d63503f8ba08bd20_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25fdb5c1195d7c347540fd4a8f926ec1_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\264894b572083143b45f4ca1daa738e9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2666c4e6d0c42cb692ad95c3e795a699_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\268846144c35a09d3b3dab51a782462f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\269eeed85522ef450e2ad58735a94835_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26a0a6131474b56c33c2365a1ceeb260_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26a3aa1c78a98a2965172cd8bcfa8ab6_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26b0eeb66d33a1d7070d464254f1949b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26c0dfc8070232ea016fccb27567be03_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26c23c808e1702b555e02fa18f6a6e1f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27084df9ae562d8cf16fb8d44487ed0a_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\273f55b8a9f4bcb9a6ba60d6a5c63aa5_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27491008bfa052b265a98ae6ca563da1_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\274ca3c6ce203509c83709173d489559_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2792a2d9b5910e196e1b00898c492072_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27b0e80cfd90c4a3d7baf7258631dceb_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28326b27e443a1a368cb79bb1469a6b2_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\283a14bcdaae033031d46a373a234773_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28522718c362e18006d49dee20dc1428_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2869c4d2fbb811f408cc6e1f6088a7b8_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28877892ac6df54104194bd0ac9e024d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28adba37a19dcbcd9cf268ce49f3cdd7_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29040371e6693b45f4216c7fa25e28d9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2922ae6afc17c5bf69a861efa372caeb_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\292ed2a45cdb8c1b4dffb5447e42e1c6_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\294ffc751700bf5d2251e8e55f04726f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\295312bf7dedbb9077d6b1275fed6944_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2970359ede0604e0da5e6ba7fb294062_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\298fb13533e13f2fd1d82b0b0e48508b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a52a35eee0a498bbe6b9f8bb5ebeaf9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a7437e77299129541314456c9e1e201_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a82e0678d17a4c6a2e5be810d808f10_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a8b20b5949f4f2658de539d7345242e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a8f4f7284532b00948bf844c78bf0c9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ac9b633cbd247c5295e95d12b412c44_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2afb7971664c7013e48c1bfb8f4e1588_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b2baf6b7ce12749fb0974a9ede14345_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b4095277448ad6399f8b24b0f226c04_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b864214feb2202c20f445eafd734873_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b8bfcf4626e02100a8d51d7aae24d71_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ba2756ef56daa940656ae83a8005391_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c4cad975a01b15f13bd267c8873243a_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2cbe937957e30aa5900f325b1a68ebb4_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d0eedf78bcec061d0380b01a2d55dd6_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d526a56cac3155d29b2b7b7dbe30eff_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d9b1f6b8979070d1e5fe93459b6098e_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2db456862aa5e6f376a7be7372e646a5_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2dc21096a64c7f1877c36f7989186d40_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2de80f51fdeb14ffff795846bf1a7d34_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2de8d9b0bfb04f89deb0e01f15d9f92d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2dec7f492a6abf4eda3b743e9391cc0d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2df08f995a59aa95a1491640ddf7df3b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e079a69e93b009e417ce6251b62b5d9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e1e9b5d52dc5e5c21199e03844c4e88_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e3055c3d6398a78c92d15c23b352a07_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e8b5482d55ef2c7fbf43b02cd0ad28f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e98e0e59f4b0e9c3a214b6f9a313e1d_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e9e32653375764d80c24a13d5e477d0_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2eb83b796250955aed1e697ca67d5601_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f1f344fe3eaf62f75f52f496f1a061c_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f212ebc2ac3102ed990acbc4c90c015_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f77e2c7df345bf9d4f82270567a2f59_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f7922f04e9fd0c572b98ddd27e91ff3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f7c2b0191e572605c95c82acce4a634_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f886500d81dcf97a6b9f7373255f84b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2fc6d76f2065f1976d12f788d7fa1da3_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2fc7d0411fbe85f4655a247e28b6b632_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3001f6e57966809b1ef34abba90cefdc_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\300a99c82dff6d4696de96a5491168ad_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\307bfbe1dec14bd99c7df11c7eb13e3b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30a3db1a7ceecba254fe6514f846cd3b_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30f6afb812bc667568dde2483e46a5f6_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\312fecb4f575c447bac7df5332515105_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3154a22b76095a9a4cafaccd7ff97f63_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31d7424701af06a7758f5a0a873e4824_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31df8dd2b6a60c95196a1154bffa48b9_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31eae2e7531ed3fbe292f063fb43266f_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32449525a7453a978f535798b004bef6_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3265ccbd9494d65e333f55e25fa2aae0_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3292c2fde6e3d77639a9132022d4f0ce_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32a0cd92d9d2e432cfdb0f8bb4082dfa_af5efdd4-36ad-4f73-932d-96fe99739069 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32af918a44bfa9cd54959844367479b3_af5efdd4-36
  • 0

#10
jollyr
Posted 12 November 2006 - 10:37 AM

jollyr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
This is taking too long. Am attaching the scan file (ZIPped) instead.

Edited by jollyr, 12 November 2006 - 03:03 PM.

  • 0

#11
Mr_JAk3
Posted 12 November 2006 - 01:54 PM

Mr_JAk3

    Visiting Staff

  • Member
  • PipPip
  • 95 posts
Hi again, it is looking clean now :blink:
The computer is running fine ?

Delete the following files:
E:\D_Back\Documents and Settings\BJ\My Documents\D-L\Old E D-L\kmd160_en.exe
D:\Documents and Settings\BJ\My Documents\Work\nwk\Doc Folder\Fax\My Docs\D-L\MISC\marinefree_249.exe
D:\Documents and Settings\SJ\Shared\Wicked Remix (punkrock).wma

Now you can clean AVG's Quarantine:
  • Open AVG Anti-Spyware
  • Click Infections
  • Click Quarantine tab
  • Click Select all
  • Click Remove finally
  • Close the program
You can remove the tools that we used.

You can enable Windows Defender.
  • Open Windows Defender
  • Click on "Tools"
  • Click on "General Settings"
  • Scroll down to "Real-time protection options"
  • Check "Turn on Real-time protection (recommended)"
  • Click "Save"
  • Exit the program.
Now you can make your hidden files hidden again.
  • Go to My Computer
  • Select the Tools menu and click Folder Options
  • Click the View tab.
  • Checkmark the "Display the contents of system folders"
  • Under the Hidden files and folders select "Show hidden files and folders"
  • Check "Hide protected operating system files"
  • Click Apply and then the OK and close My Computer.
=============

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:
  • Clear your system restore
    This will clear the system restore folders from possible malware that was left behind during the cleaning process.
  • Use ATF Cleaner
    Download and install ATF Cleaner. Clean your temporary files & folders with it regularly.
  • Use Ad-Aware
    Download and install Ad-Aware. Update it and scan your computer regularly with it.
  • Use AVG Anti-Spyware
    Update it and scan your computer regularly with it.
  • Use Spybot S&D
    Download and install Spybot S&D. Update it and scan your computer regularly with it.
  • Install SpywareBlaster
    SpywareBlaster will prevent spyware from being installed.
  • Install MVPS Hosts file
    This prevents your computer from connecting to harmful sites.
  • Use Firefox browser
    Firefox is faster, safer and better browser than Internet Explorer.
  • Keep your systen up-to-date
    Visit Windows Update regularly.
  • Keep your antivirus and firewall up-to-date
    Scan your computer regularly with your antivirus.
  • Read this article by TonyKlein
    So how did I get infected in the first place?
  • Stand Up and Be Counted !
    The site offers people who have been (or are) victims of malware the opportunity to document their story and, in that way, launch a complaint against the malware and the makers of the malware.
Stay clean and be safe :whistling:
  • 0

#12
jollyr
Posted 12 November 2006 - 03:02 PM

jollyr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
All Done! :whistling:

Computer seems to run more quickly and is more responsive.

Thanks for all your help (and prompt responses! :blink: :help: )

All the best. :)

JR
  • 0

#13
Mr_JAk3
Posted 13 November 2006 - 12:34 AM

Mr_JAk3

    Visiting Staff

  • Member
  • PipPip
  • 95 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :whistling:

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP