Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Operating memory Win32/Agent.ODG virus unable to clean [Solved]

Started by agent odg , Apr 19 2009 01:35 PM

This topic is locked

#1
agent odg

Posted 19 April 2009 - 01:35 PM

Member

Member
18 posts

EACh time i do a scan i get that message:4/19/2009 10:21:03 PM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean George-PC\George

AM desparate as to how to get ridof this trojan

Attached Files

vrus.txt 7.32KB 643 downloads

Edited by agent odg, 21 April 2009 - 05:40 AM.

#2
agent odg

Posted 19 April 2009 - 02:05 PM

Member

Topic Starter
Member
18 posts

also i had downloaded avenger and did run a scan for rootkit

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "ovfsthbgrqetfyusceujmewnytcvknoxvotvqv" found!
ImagePath: \systemroot\system32\drivers\ovfsthqwubigfbxnopokktafmdcmplqiuwwvkj.sys
Start Type: 1 (System)

Rootkit scan completed.

Completed script processing.

*******************

Finished! Terminate.

pls help.. tell me if my system is clean

#3
agent odg

Posted 21 April 2009 - 05:08 AM

Member

Topic Starter
Member
18 posts

I am very much aware that all the Staffs at geeks are very much busy and are doing there best to help people get rid of problems that they are facing .Sir I had earlier posted a forum on 19th asking for help.And since i didnt get a reply and am facing yeta another prob i needed start another forum.

the day previous to that i did download a ps software using torrent and from that time i am in trouble.I downloaded the latest Nod 32 with which i scanned and got the following log..

4/19/2009 10:21:03 PM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to 4/19/2009 10:21:03 PM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean George-PC\George
4/19/2009 8:56:20 PM Real-time file system protection file D:\MP3\New Folder\HIN\HIN.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:56:01 PM Real-time file system protection file D:\MP3\MP3.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:55:52 PM Real-time file system protection file D:\MP3\New Folder\Xara 3D 6 + serial\Xara 3D 6 + serial.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:55:38 PM Real-time file system protection file D:\MP3\New Folder\fast tracks\fast tracks.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:55:18 PM Real-time file system protection file D:\MP3\New Folder\bit musik\bit musik.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:55:18 PM Real-time file system protection file D:\MP3\New Folder\New Folder.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:41 PM Real-time file system protection file D:\01 YESUDAS-5\01 YESUDAS-5.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:41 PM Real-time file system protection file D:\pop songs\pop songs.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:41 PM Real-time file system protection file D:\Nod32\Nod32.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:40 PM Real-time file system protection file D:\munna bhai mbbs\munna bhai mbbs.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:39 PM Real-time file system protection file D:\Masti\Masti.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:38 PM Real-time file system protection file D:\Malayalam\Malayalam.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:38 PM Real-time file system protection file D:\Main hoon Na\Main hoon Na.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:37 PM Real-time file system protection file D:\kal ho na ho\kal ho na ho.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:37 PM Real-time file system protection file D:\03 SURESH WADHKAR-5\03 SURESH WADHKAR-5.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe.
4/19/2009 8:54:14 PM Real-time file system protection file D:\Murder\Murder.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe.
4/19/2009 8:53:20 PM Real-time file system protection file D:\02 S.P. BALASUBRAMANIYAM-c\02 S.P. BALASUBRAMANIYAM-c.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe.
4/19/2009 8:53:20 PM Real-time file system protection file D:\New Folder.exe Win32/Hakaglan.B worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe.
4/19/2009 8:53:20 PM Real-time file system protection file D:\fxotowvr.exe Win32/AutoRun.E worm cleaned by deleting - quarantined George-PC\George Event occurred during an attempt to access the file by the application: C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe.
4/19/2009 8:49:51 PM Real-time file system protection file D:\Autorun.inf INF/Autorun.gen trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Windows\System32\svchost.exe.
4/19/2009 8:49:14 PM Startup scanner file C:\Windows\system32\config\SYSTEM~1\protect.dll a variant of Win32/Rootkit.Agent.NIZ trojan cleaned by deleting (after the next restart) - quarantined George-PC\George
4/19/2009 8:49:13 PM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean George-PC\George
4/19/2009 8:49:11 PM Startup scanner file C:\Users\George\protect.dll a variant of Win32/Rootkit.Agent.NIZ trojan cleaned by deleting - quarantined George-PC\George
4/19/2009 8:49:05 PM Startup scanner file C:\Windows\system32\autochk.dll a variant of Win32/Rootkit.Agent.NIZ trojan cleaned by deleting - quarantined George-PC\George
4/19/2009 8:46:06 PM Startup scanner file C:\Users\George\protect.dll a variant of Win32/Rootkit.Agent.NIZ trojan cleaned by deleting (after the next restart) - quarantined George-PC\George
4/19/2009 8:46:05 PM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean George-PC\George
4/19/2009 8:44:05 PM Startup scanner file C:\Users\George\protect.dll a variant of Win32/Rootkit.Agent.NIZ trojan cleaned by deleting (after the next restart) - quarantined George-PC\George
4/19/2009 8:44:00 PM Startup scanner file C:\Windows\system32\autochk.dll a variant of Win32/Rootkit.Agent.NIZ trojan cleaned by deleting (after the next restart) - quarantined George-PC\George
4/19/2009 12:43:41 PM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean George-PC\George
4/19/2009 9:26:57 AM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean
4/19/2009 7:19:11 AM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean George-PC\George
4/18/2009 6:35:49 PM Startup scanner operating memory Operating memory Win32/Agent.ODG virus unable to clean
George-PC\George clean George-PC\George

Now seeing all this i panicked and googled and found this site.

from here i came to knw that if i use avenger i might be able to solve the problem. hence i used avenger.the result was
Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "ovfsthbgrqetfyusceujmewnytcvknoxvotvqv" found!
ImagePath: \systemroot\system32\drivers\ovfsthqwubigfbxnopokktafmdcmplqiuwwvkj.sys
Start Type: 1 (System)

Rootkit scan completed.

Completed script processing.

*******************

Finished! Terminate.

SIR now i rescanned with NOd 32 but didnt seem to alert me about operating system being with win32

The scan report looks like this aftr the attack

C:\hiberfil.sys - error opening
C:\pagefile.sys - error opening
C:\Avenger\backup-Sun 04.19.2009-23.55.00.05.zip » ZIP » avenger/avenger.txt - error - password-protected file
C:\Avenger\backup.zip » ZIP » avenger/avenger.txt - error - password-protected file
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Python Libraries\Lib\email\test\data\msg_38.txt » MIME » MIME » MIME » part000.txt - error reading archive
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Python Libraries\Lib\email\test\data\msg_38.txt » MIME » MIME » - error reading archive
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Python Libraries\Lib\test\testtar.tar » TAR » test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/ - archive damaged
C:\Program Files\Gabest\VobSub\uninstall.exe » NSIS - bad archive
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\01462431f7ab0502cb0084b166cdfd05_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0252874eccc0ceca1b1d724b1078cffa_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\02a99378721111fadf5573d104bcff60_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\03725cfed421187f7662ab1e1e54c178_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\04e551e43b72ffe66a8e1ce80d7a275d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\05a50852cd6b8e65f9893e30dc21f60e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\06bb61e94614b25a5cba6b9f0f0adfcf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\06c669a9160fedde47ab8938512c89be_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\080dcc9d3f95037cf41a28e2394fde5f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\09b2141c600b5d453278770348d109d8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0a928c3a9508a04e11a35679b26e1978_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0ab3a81b39963577cb5315102c96ebd2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0adbddc72d99af08d00cc590face5ba1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0b9381a7d76dcbab39af09aae6262aa5_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0c511d707646b9f9f4f3c2fba8d893d4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0d227d336a91f149c31a6ac2410357c6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0e7bbc7d0265b299194963f4dbeceb92_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0ed5d3a2867785f243ca443b9696d424_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0f046063e2a91e12e69b14b8a112ec39_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0f6ee2f42b7f4ed846747154fd0ea13a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\10be3924a6e089341e3b53d0ac37c8cc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\117ac6274f4ff3408478f00a36a845e9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11ea8787974b3ce51c6cccfbe83b59c1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11fad08ce21e774c1c9c979d539c07da_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\12ec65ca0b4dc7a39fc873d7a8334758_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\14d7151365220697e01446c2331a48de_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\17170d5439dc63fbfe7d9a01b24cbd0b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1906361c735ed85e3002427b5afc6fee_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1b31a956b6d65f21446a70694f57ee3f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1c30e777e03c2b63f7db28417f1ea6c9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1c6938451ab4d2660f0353d25e8fc79e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1c74a85035a294bf3bd022ab9679ecce_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1d394163466f4f47c24ae76694f4f692_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1d8080a6421b77d518a0d39690f117a3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2024cf921903b20bf47c41d9740c3266_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\202d845415b66212c73834f04b383ad1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2068c978a95ad9e114d4142d959aaa5b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2205713767ca66bead588d7833d22e50_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\22e61a8e4b8046683088d4e8449a106d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\22ee7b28976a6765b06a066988c49033_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\247c1dd793d5e6d8b6757be1ff2c8365_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\25e9790682c9c6862c778b2c4bf64f64_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2885b252c81ce7e3ced61ee963317593_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2b21ed17765a5779a68007bd688779bf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2b8cb6a9884b5488f68a95a8cce9975d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2babd0df50d4a50204834daf1ea0f037_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2e99955b22fe2fbdf253778284935243_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3091c10d1127b07c9b3d6c40eb780532_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\311d8b72206c9f60f2b5e7f2a3d19957_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\31defcc8f078a48ff7c33966c5914ef2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\342fdaf7afb61960191a2bcd456be94b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\34c592dd8c5dd9aa1600ba090527c963_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\366da7df63cacafd712dc2746b05f4a6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\36e196f3d9e8a83aca7d2298837cd318_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\37e322861235e5ecb71faa447797d03f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3ad254b2c9edd1e0e2f40453a23b9087_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3b62481765519857c7f03a479a989c5f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3bb6f3b1ffd9c096e9060ad55d075dfc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3cac492b105a40b572ae43d1d9de13a5_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3d9f8ded96876770d24101baa2de226a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3da8b0d63e00465c616c2f4f9f2481df_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3dafed130ed131169806595dcd34e02c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3f5af56007bc2eff351eb50195cd044d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3fb5121cd8e2c525a904f1b870f33d9e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4039e2598f9eb903086300a9c6db041e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\403b1646305ad99d2efc55673ef4cd0f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4041de8429e0b4a9f85c48d086a2050e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\40a3753eea7add6cc04f93ef563e55b3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\40b1789f757ab11a9252b6bc57c12907_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\42c7f6f32037aa64f5db4232633c7689_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\438da6d474f49e14896c6f20f11dd696_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\43d803ae99aa8503d714175a99a33cde_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\46792d604c794034d6c90248720c5060_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\468f75fd7d03c4e5ee8511b06b0c333d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4717a3fcdf96191fca0c7995c2c28508_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4873834fe544307f22cbf6dbc1bb9f45_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\48b1ed4cce1b3df4b053db1a590ab2d8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4a663f70c0e61a34652dc602230f2d78_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4cab74f92f292516e1f59408c6a81c3a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4cf814226643478fd1a64c4612d62221_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4e7f23cc01ae7eab009c435ddc8ed0bf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4f0b1847bc0f0687a464bb10fd09c2fa_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4f9086b2347c1ec8745b4c3823c950e3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\500aaf9688555eacea03cccd558e4932_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\514163a908d66bb2161440b5fab26ac4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\52fe54bc3d404a254249d01ac145bdbc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\53eeddca772ed25e82e909ae9052d9a2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\53fabe3d7dd7f8dc43430c91f43ae72e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\544f68048c0f1bf94a5801ac75274f16_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\554bfa9ad782fcca74fe35c5800f4fe6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\572496d13bee67438d511c0fdd01f644_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5758dcc887ce0641c201db997b5923f6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\57bb5ff8ae08fb2444787ee289f7bd94_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\58b4353cca270f29e22680f4ccf8be60_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\59e7dd76b5166e4b98bcfae4175ecd41_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5c0634c8b5ecfe048e3605ece42f93a0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5e77262e100576e40258001fef5e568d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\60ba1dcec30d19355158d2a659677611_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\60c1e6bc557ee7033511bcaf2fab9673_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6378cc8869f7134554676d82aa47832e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\638261fb0f1a9874ae4f4984ebf774af_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6469e196190104784e78724ae88f4dc2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\655626dc24da4ec5ea315e292a903e79_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\66bd3f8ffe47519f121291291078dcb0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\68661eb08e326b653a0676d4b2c46c87_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\687775a2c89743706529dd57cd74aa45_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\687ac046a2f578214c7a690ab07ed85c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\69511a50b9c8571a78876147b4349d94_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6d7ce655e760ca9d6495ecc53f1ebf46_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6d8061ad20e96988dfddcbb79cb53f06_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6e11099b7bf73429804c01369d53fb35_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6f023cd3a7af7a0030cab64776f170a0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\72d7e54ac9079a90de4ae808c3d2b40f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\73cd33aeac0f70fecc720aa816122585_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\74ab98d356527222f52b734cf233fdcd_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\77e4bc490169bdecdf78ceb65f1bf72e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\784346ec965d6dbe405a0aa65074eb27_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\795c52297b762ec2bf11da19ce87ecbb_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7bc4d1203952ace6b46813b956caa2c4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7d723e81af9b16fdc158bd6d6adec6d7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7e32dc4a425f1c33bac1868371cd8d8d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f27601f6c7cb74c94faf6fd9d35a90c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f882567c076a8d4cdd355ad6c877edc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7fa7235a17a8a7910cb20c0c84d49389_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8044cc238080e32e8e51784ee495578d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8060d79e74056a4bdc549091798234f6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8140226998613836724c2f02f9bcf9c2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8152ca39db35609fa75e1b866af32ec0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8254b5ed7a725c7d639b860d28853399_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8915ed066dcc354cbcd5f188d1479376_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\89a104cf9a7e83504147f88e302776d3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8a2c0c3169169789081670813cd0482f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8a8dcfa1f1fc01ec5eefdd596896b2c7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8f052fc2c871c8cbe3f66bdec1e9e323_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8fd13808bacbdb8af4b12f9c91594fbf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\91324c37610277e6014316cdac7126eb_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\92bdcd2a5295e674198b67f729bd55b7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\92da1bdb02ed2da0d0438da01f575812_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\932c96fca938024695e9b52db8c3b62b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\969df32d767dbc8d531eff00c210c499_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9770c30c14e6b48c338023341e2396c1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\97ce4fe66d03a20aca682b78a8199b0b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\983005c700cff6ddd5ee721f4a0fa8cb_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\996d84c320a49a80ff46eeb5fbc59ee4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\99f14e9c6cb60ec5c2c29e45037ba7ea_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9a88ba18ed14988f01bc9f7bfa51bfc7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9abcfb3094b458b02ad5087f32fbd09f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9d44257bc7872b5f1293ab3df21c6a29_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9e07b45f615723e8d7de3e392f7d24f8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9e537c5e83cdad744fda7f6ff823e0e0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a002efd2ceae1ff7906b31d54d361a67_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a57fe250b94eaf30e4d900078cd71acf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a593436f62691833e27faadba79a03c7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a67113218c3b6ff700802a7a8266338e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a78fea41e2fa788b0a648161c5741e46_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a7e751a1c9193e8f55aac4dcfe72cfb9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a96972df0064d8118dd60ff63f383b34_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a97fb6638dfdcef814d737217304a423_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ac306c9068555370554e06a56d5c61c8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ac8911301c7e3cf65796bc2cda73c2a5_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ad40cce90c961b58917a460eb1829089_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\af1a1739d241f3e2c8ef593117443559_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\afa8ad06c976118b27edc7b26d6b0d4c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b00f9f83e130716d94ff5e65b8ea1a96_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b3572e6d5c4310ca3c6b2bc61e78ff28_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b40719de7c1bd7819330904ab5ca8b1d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b40b1223a0022568fcad06ab1e7c4726_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b571ccf9440956dfe064271b80b70c99_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b83c0c8c268c4ab4aae0ccc724b9b268_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b8d4ba64fa4fc41c8d4b59e9f790ea53_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b9b8747b855591ed9613d195177a4ad6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bb767c9d93ecbb3eb3f4ef3e24895fe8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bbb736decf033af91ed7e120f198cb25_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bc20a133f4c894b8fff63a071b8682f4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bc4c73fa7c3950eaaa11e03af2eea419_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bdf2d8d6294d877425a292fbf869d2f9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\befea0702609bbd1f15042a6d5be19fa_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c0c273911a48fd523b797410772eb0f1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c214be2b3b860f1f28884b5f062f4635_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c2a0f6211a4eb56f22cb931ed8371990_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c2b14147751bc549106773a75f81f869_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c47871a2720dda3475330abf13b3ccb8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c52a1a363e676cecc173dbbb36a079a8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c78815bac958233536f44bf299b9a419_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c79f41a757d92f8b118b92fc0ada994e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c7e6c1eaed2b17e7272c26a83f825058_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c8226d5d6b8ac663e37a3271610bce93_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c96ba38a43819624d3fcbd57358d16b3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca55db59a516f1b979d4e2a918e11d90_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca5c8d34b1ce82cadd34a5750aae0d32_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca77c972b608bc9c201ba125c34eaac1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca7de71172d5a523cfb010a052b0e99d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cabef4925bcd93c28952e5d2cb653f77_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cb251f141f85d7e28f0fc153692054fd_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cb50f3815981036bd5decb77fe11f219_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cb8ed761837f88f2dadb5d3fb7e1c794_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ccb9609b0d796a78905f7863b45b7916_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cd0c2c7a12822d3581f1f0b6f1832789_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ce11280e9103e07f07841358d95d773b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ce61668e8c0545d43da912a30bb05d94_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d08cf9411564c07e136e30d4d67358e4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d1593be9e4c7b076342d29fbe4b36d41_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d2be86fed57978ec236470dfcf5debc1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d2efab43f8987ec5e1a56cc7c47b22b6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d3360b00ce49f50257db189f30f9b7ce_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d45a6f36ef53eeb702c9805e7daa89b1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d515314e7f667c37193990adfd575e63_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d665e1c6d7dfad6b70dc599a1fa9be6a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d7741a6995a2b5d16a068730951ace11_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d93545d7dcaa894cb87dbb13a06c1457_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d93f03f5084453032a96af61614e339f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\da6ba76e7942a88bdd85732ab3b95fac_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dbbbd80fba47654fe4aa2f962558b514_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dbf454f2380e30f252db3bfa71d77a54_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dc8c63bc9c6a4e6c26e43d6efcbb2a45_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ddf29b1daa6d1c60f9ad23e52dc70e86_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\df0b2ebf1bfc85685f027fbe52296d55_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\df40deb2a6537ff1e53351245fb3cf41_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dff95b74d97443f10128ac8a578f6e68_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e02d094ed118349d6896fb2233a465d9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e1576b85ebf85f42209b221423a597a4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e1c05403d2077d121bed368ab3379968_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e8240e6548fffdff6ee512af638058fd_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ea366d32db8212b19018ef7f82cef78a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ebe4f732e3635613b06a3882968e2105_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\edb43b24e91d66509037f1caf0a643a6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ee5594464559cdac062cd39fc613871f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\efd29971970ad714057b66d94ca1045c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\efe531cbd10f4b113bd725d495a9c9c4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f27943318bec032ed6589b132c4bd771_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f52fc6910f3f2496aa0986459aae74ad_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f612b35b1e9f6910bc2f17ebf10e6f86_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f6ea0df14c0e1d8f6c5b3c9f7d65bbe7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f7eb76cb6dc9ee0c29140e0161814173_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f8a74fb094edae185e3c4b5cddf35997_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fa3604d6687e5fa08c8f06dbf951287f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fcd28629066ee4e769e4e0fc64dfa97a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\feeab3ee8323ba0deafb4952f871b5a3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\01462431f7ab0502cb0084b166cdfd05_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0252874eccc0ceca1b1d724b1078cffa_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\02a99378721111fadf5573d104bcff60_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\03725cfed421187f7662ab1e1e54c178_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\04e551e43b72ffe66a8e1ce80d7a275d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\05a50852cd6b8e65f9893e30dc21f60e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\06bb61e94614b25a5cba6b9f0f0adfcf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\06c669a9160fedde47ab8938512c89be_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\080dcc9d3f95037cf41a28e2394fde5f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\09b2141c600b5d453278770348d109d8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0a928c3a9508a04e11a35679b26e1978_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0ab3a81b39963577cb5315102c96ebd2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0adbddc72d99af08d00cc590face5ba1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0b9381a7d76dcbab39af09aae6262aa5_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0c511d707646b9f9f4f3c2fba8d893d4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0d227d336a91f149c31a6ac2410357c6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0e7bbc7d0265b299194963f4dbeceb92_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0ed5d3a2867785f243ca443b9696d424_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0f046063e2a91e12e69b14b8a112ec39_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0f6ee2f42b7f4ed846747154fd0ea13a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\10be3924a6e089341e3b53d0ac37c8cc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\117ac6274f4ff3408478f00a36a845e9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\11ea8787974b3ce51c6cccfbe83b59c1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\11fad08ce21e774c1c9c979d539c07da_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\12ec65ca0b4dc7a39fc873d7a8334758_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\14d7151365220697e01446c2331a48de_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\17170d5439dc63fbfe7d9a01b24cbd0b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1906361c735ed85e3002427b5afc6fee_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1b31a956b6d65f21446a70694f57ee3f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1c30e777e03c2b63f7db28417f1ea6c9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1c6938451ab4d2660f0353d25e8fc79e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1c74a85035a294bf3bd022ab9679ecce_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1d394163466f4f47c24ae76694f4f692_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1d8080a6421b77d518a0d39690f117a3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2024cf921903b20bf47c41d9740c3266_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\202d845415b66212c73834f04b383ad1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2068c978a95ad9e114d4142d959aaa5b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2205713767ca66bead588d7833d22e50_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\22e61a8e4b8046683088d4e8449a106d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\22ee7b28976a6765b06a066988c49033_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\247c1dd793d5e6d8b6757be1ff2c8365_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\25e9790682c9c6862c778b2c4bf64f64_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2885b252c81ce7e3ced61ee963317593_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2b21ed17765a5779a68007bd688779bf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2b8cb6a9884b5488f68a95a8cce9975d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2babd0df50d4a50204834daf1ea0f037_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2e99955b22fe2fbdf253778284935243_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3091c10d1127b07c9b3d6c40eb780532_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\311d8b72206c9f60f2b5e7f2a3d19957_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\31defcc8f078a48ff7c33966c5914ef2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\342fdaf7afb61960191a2bcd456be94b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\34c592dd8c5dd9aa1600ba090527c963_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\366da7df63cacafd712dc2746b05f4a6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\36e196f3d9e8a83aca7d2298837cd318_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\37e322861235e5ecb71faa447797d03f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3ad254b2c9edd1e0e2f40453a23b9087_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3b62481765519857c7f03a479a989c5f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3bb6f3b1ffd9c096e9060ad55d075dfc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3cac492b105a40b572ae43d1d9de13a5_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3d9f8ded96876770d24101baa2de226a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3da8b0d63e00465c616c2f4f9f2481df_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3dafed130ed131169806595dcd34e02c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3f5af56007bc2eff351eb50195cd044d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\3fb5121cd8e2c525a904f1b870f33d9e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4039e2598f9eb903086300a9c6db041e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\403b1646305ad99d2efc55673ef4cd0f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4041de8429e0b4a9f85c48d086a2050e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\40a3753eea7add6cc04f93ef563e55b3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\40b1789f757ab11a9252b6bc57c12907_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\42c7f6f32037aa64f5db4232633c7689_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\438da6d474f49e14896c6f20f11dd696_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\43d803ae99aa8503d714175a99a33cde_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\46792d604c794034d6c90248720c5060_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\468f75fd7d03c4e5ee8511b06b0c333d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4717a3fcdf96191fca0c7995c2c28508_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4873834fe544307f22cbf6dbc1bb9f45_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\48b1ed4cce1b3df4b053db1a590ab2d8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4a663f70c0e61a34652dc602230f2d78_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4cab74f92f292516e1f59408c6a81c3a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4cf814226643478fd1a64c4612d62221_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4e7f23cc01ae7eab009c435ddc8ed0bf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4f0b1847bc0f0687a464bb10fd09c2fa_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\4f9086b2347c1ec8745b4c3823c950e3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\500aaf9688555eacea03cccd558e4932_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\514163a908d66bb2161440b5fab26ac4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\52fe54bc3d404a254249d01ac145bdbc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\53eeddca772ed25e82e909ae9052d9a2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\53fabe3d7dd7f8dc43430c91f43ae72e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\544f68048c0f1bf94a5801ac75274f16_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\554bfa9ad782fcca74fe35c5800f4fe6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\572496d13bee67438d511c0fdd01f644_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\5758dcc887ce0641c201db997b5923f6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\57bb5ff8ae08fb2444787ee289f7bd94_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\58b4353cca270f29e22680f4ccf8be60_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\59e7dd76b5166e4b98bcfae4175ecd41_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\5c0634c8b5ecfe048e3605ece42f93a0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\5e77262e100576e40258001fef5e568d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\60ba1dcec30d19355158d2a659677611_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\60c1e6bc557ee7033511bcaf2fab9673_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\6378cc8869f7134554676d82aa47832e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\638261fb0f1a9874ae4f4984ebf774af_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\6469e196190104784e78724ae88f4dc2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\655626dc24da4ec5ea315e292a903e79_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\66bd3f8ffe47519f121291291078dcb0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\68661eb08e326b653a0676d4b2c46c87_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\687775a2c89743706529dd57cd74aa45_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\687ac046a2f578214c7a690ab07ed85c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\69511a50b9c8571a78876147b4349d94_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\6d7ce655e760ca9d6495ecc53f1ebf46_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\6d8061ad20e96988dfddcbb79cb53f06_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\6e11099b7bf73429804c01369d53fb35_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\6f023cd3a7af7a0030cab64776f170a0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\72d7e54ac9079a90de4ae808c3d2b40f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\73cd33aeac0f70fecc720aa816122585_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\74ab98d356527222f52b734cf233fdcd_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\77e4bc490169bdecdf78ceb65f1bf72e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\784346ec965d6dbe405a0aa65074eb27_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\795c52297b762ec2bf11da19ce87ecbb_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\7bc4d1203952ace6b46813b956caa2c4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\7d723e81af9b16fdc158bd6d6adec6d7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\7e32dc4a425f1c33bac1868371cd8d8d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\7f27601f6c7cb74c94faf6fd9d35a90c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\7f882567c076a8d4cdd355ad6c877edc_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\7fa7235a17a8a7910cb20c0c84d49389_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8044cc238080e32e8e51784ee495578d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8060d79e74056a4bdc549091798234f6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8140226998613836724c2f02f9bcf9c2_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8152ca39db35609fa75e1b866af32ec0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8254b5ed7a725c7d639b860d28853399_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8915ed066dcc354cbcd5f188d1479376_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\89a104cf9a7e83504147f88e302776d3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8a2c0c3169169789081670813cd0482f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8a8dcfa1f1fc01ec5eefdd596896b2c7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8f052fc2c871c8cbe3f66bdec1e9e323_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8fd13808bacbdb8af4b12f9c91594fbf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\91324c37610277e6014316cdac7126eb_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\92bdcd2a5295e674198b67f729bd55b7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\92da1bdb02ed2da0d0438da01f575812_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\932c96fca938024695e9b52db8c3b62b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\969df32d767dbc8d531eff00c210c499_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9770c30c14e6b48c338023341e2396c1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\97ce4fe66d03a20aca682b78a8199b0b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\983005c700cff6ddd5ee721f4a0fa8cb_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\996d84c320a49a80ff46eeb5fbc59ee4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\99f14e9c6cb60ec5c2c29e45037ba7ea_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9a88ba18ed14988f01bc9f7bfa51bfc7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9abcfb3094b458b02ad5087f32fbd09f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9d44257bc7872b5f1293ab3df21c6a29_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9e07b45f615723e8d7de3e392f7d24f8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9e537c5e83cdad744fda7f6ff823e0e0_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a002efd2ceae1ff7906b31d54d361a67_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a57fe250b94eaf30e4d900078cd71acf_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a593436f62691833e27faadba79a03c7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a67113218c3b6ff700802a7a8266338e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a78fea41e2fa788b0a648161c5741e46_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a7e751a1c9193e8f55aac4dcfe72cfb9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a96972df0064d8118dd60ff63f383b34_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\a97fb6638dfdcef814d737217304a423_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ac306c9068555370554e06a56d5c61c8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ac8911301c7e3cf65796bc2cda73c2a5_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ad40cce90c961b58917a460eb1829089_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\af1a1739d241f3e2c8ef593117443559_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\afa8ad06c976118b27edc7b26d6b0d4c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b00f9f83e130716d94ff5e65b8ea1a96_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b3572e6d5c4310ca3c6b2bc61e78ff28_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b40719de7c1bd7819330904ab5ca8b1d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b40b1223a0022568fcad06ab1e7c4726_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b571ccf9440956dfe064271b80b70c99_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b83c0c8c268c4ab4aae0ccc724b9b268_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b8d4ba64fa4fc41c8d4b59e9f790ea53_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b9b8747b855591ed9613d195177a4ad6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\bb767c9d93ecbb3eb3f4ef3e24895fe8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\bbb736decf033af91ed7e120f198cb25_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\bc20a133f4c894b8fff63a071b8682f4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\bc4c73fa7c3950eaaa11e03af2eea419_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\bdf2d8d6294d877425a292fbf869d2f9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\befea0702609bbd1f15042a6d5be19fa_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c0c273911a48fd523b797410772eb0f1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c214be2b3b860f1f28884b5f062f4635_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c2a0f6211a4eb56f22cb931ed8371990_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c2b14147751bc549106773a75f81f869_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c47871a2720dda3475330abf13b3ccb8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c52a1a363e676cecc173dbbb36a079a8_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c78815bac958233536f44bf299b9a419_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c79f41a757d92f8b118b92fc0ada994e_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c7e6c1eaed2b17e7272c26a83f825058_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c8226d5d6b8ac663e37a3271610bce93_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\c96ba38a43819624d3fcbd57358d16b3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ca55db59a516f1b979d4e2a918e11d90_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ca5c8d34b1ce82cadd34a5750aae0d32_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ca77c972b608bc9c201ba125c34eaac1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ca7de71172d5a523cfb010a052b0e99d_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\cabef4925bcd93c28952e5d2cb653f77_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\cb251f141f85d7e28f0fc153692054fd_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\cb50f3815981036bd5decb77fe11f219_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\cb8ed761837f88f2dadb5d3fb7e1c794_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ccb9609b0d796a78905f7863b45b7916_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\cd0c2c7a12822d3581f1f0b6f1832789_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ce11280e9103e07f07841358d95d773b_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ce61668e8c0545d43da912a30bb05d94_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d08cf9411564c07e136e30d4d67358e4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d1593be9e4c7b076342d29fbe4b36d41_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d2be86fed57978ec236470dfcf5debc1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d2efab43f8987ec5e1a56cc7c47b22b6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d3360b00ce49f50257db189f30f9b7ce_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d45a6f36ef53eeb702c9805e7daa89b1_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d515314e7f667c37193990adfd575e63_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d665e1c6d7dfad6b70dc599a1fa9be6a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d7741a6995a2b5d16a068730951ace11_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d93545d7dcaa894cb87dbb13a06c1457_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d93f03f5084453032a96af61614e339f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\da6ba76e7942a88bdd85732ab3b95fac_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\dbbbd80fba47654fe4aa2f962558b514_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\dbf454f2380e30f252db3bfa71d77a54_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\dc8c63bc9c6a4e6c26e43d6efcbb2a45_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ddf29b1daa6d1c60f9ad23e52dc70e86_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\df0b2ebf1bfc85685f027fbe52296d55_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\df40deb2a6537ff1e53351245fb3cf41_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\dff95b74d97443f10128ac8a578f6e68_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\e02d094ed118349d6896fb2233a465d9_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\e1576b85ebf85f42209b221423a597a4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\e1c05403d2077d121bed368ab3379968_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\e8240e6548fffdff6ee512af638058fd_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ea366d32db8212b19018ef7f82cef78a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ebe4f732e3635613b06a3882968e2105_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\edb43b24e91d66509037f1caf0a643a6_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\ee5594464559cdac062cd39fc613871f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\efd29971970ad714057b66d94ca1045c_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\efe531cbd10f4b113bd725d495a9c9c4_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f27943318bec032ed6589b132c4bd771_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f52fc6910f3f2496aa0986459aae74ad_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f612b35b1e9f6910bc2f17ebf10e6f86_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f6ea0df14c0e1d8f6c5b3c9f7d65bbe7_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f7eb76cb6dc9ee0c29140e0161814173_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f8a74fb094edae185e3c4b5cddf35997_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\fa3604d6687e5fa08c8f06dbf951287f_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\fcd28629066ee4e769e4e0fc64dfa97a_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\feeab3ee8323ba0deafb4952f871b5a3_0e7e1d11-b7e6-49ff-a706-0bb65ea579ef - error opening
C:\Users\George\AppData\Local\Microsoft\CardSpace\CardSpace.db - error opening
C:\Users\George\AppData\Local\Microsoft\CardSpace\CardSpace.db.shadow - error opening
C:\Users\George\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\69VCN01A\OTListIt2[1].exe » PECompact v2.xx - unpack error
C:\Users\George\AppData\Local\Temp\NERO1001370\Data\E4060BF5.cab » CAB » rootFEAA0A71.img » GZIP » - archive damaged
C:\Users\George\Documents\photoshope works\Advanced Photoshop Magazine - Issue 45 + CD (Malestrom)\AdvPhot45Content.part1.rar » RAR » Disc_Content\Resources\Patterns\Imagine-Archived\IP-Pattern_21.pat - next archive volume not found
C:\Users\George\Documents\photoshope works\Advanced Photoshop Magazine - Issue 45 + CD (Malestrom)\APh45.part1.rar » RAR » Advanced_Photoshop_Issue_45_BBB.pdf - next archive volume not found
C:\Users\George\Saved Games\klcodec395f.exe » INNO » - unsupported option
E:\New Folder\photoshope works\Advanced Photoshop Magazine - Issue 45 + CD (Malestrom)\AdvPhot45Content.part1.rar » RAR » Disc_Content\Resources\Patterns\Imagine-Archived\IP-Pattern_21.pat - next archive volume not found
E:\New Folder\photoshope works\Advanced Photoshop Magazine - Issue 45 + CD (Malestrom)\APh45.part1.rar » RAR » Advanced_Photoshop_Issue_45_BBB.pdf - next archive volume not found
F:\ - error opening

sir right now i seem to face a problem wit my internet explorer.. it takes a long long time to get connected n pages to be dispaly ..sometimes it even opens only web page cannot be displayed page.

Sir please help.and also i almost forgot is that wil there was this attack .. i had tried using system restore and was unable to do so ..

I am very much looking forward for getting help from ur esteem selfs .

THanking you all in advance .have a gud day.

#4
Rorschach112

Posted 21 April 2009 - 06:49 AM

Ralphie

Retired Staff
47,710 posts

don't run tools yourself

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you don't know how to disable them then just continue on.
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt log in your next reply.

#5
agent odg

Posted 21 April 2009 - 11:55 AM

Member

Topic Starter
Member
18 posts

Sir thank you so much for ur much awaited reply.Am really sorry on running things on my own .. well u know how impatient a lady can be. an dhow it freaks me to know that i got on a trojan running around .

well Sir i did as u told.. did try downloading combofix from each of the link and each time at the end of the download i get the message that

You cannt rename Combofix as combofix(1) please another name ..

well sir wht must i do.

and please tell me DO U think the system is still infected

thank u

#6
Rorschach112

Posted 21 April 2009 - 12:39 PM

Ralphie

Retired Staff
47,710 posts

rename it to abcd123.exe

work then ?

#7
agent odg

Posted 21 April 2009 - 01:08 PM

Member

Topic Starter
Member
18 posts

Sir I finally manged to get the combfix uploaded.it ran a log .but after that my system says i am not connected to internet.. but i am setting u this thru my system. anyway.. here is the log

ComboFix 09-04-21.A8 - George 04/21/2009 22:38.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2046.968 [GMT 4:00]
Running from: c:\users\George\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\George\AppData\Local\Temp\install_flash_player.exe
c:\users\George\AppData\Local\Temp\ppcrlui_4180_2
c:\users\George\AppData\Roaming\inst.exe
c:\users\George\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ChkDisk.lnk
c:\windows\system32\drivers\ovfsth.sys
c:\windows\system32\drivers\ovfsthqwubigfbxnopokktafmdcmplqiuwwvkj.sys
c:\windows\system32\ovfsthdmetxswvonptbgyovvotpvxvcuiqvuur.dat
c:\windows\system32\ovfsthjceregrsvitnkrqqvcctqmkrweewqeih.dat
c:\windows\system32\ovfsthkemisydpileswyniyfxmajtnvyptnxtp.dll
c:\windows\system32\ovfsthpxxjudcrbjuyhplwfqoljibjgqrcscip.dll
c:\windows\system32\ovfsthsqpghfxmsjtkueibnjppovovqpiixymx.dll

.
((((((((((((((((((((((((( Files Created from 2009-03-21 to 2009-04-21 )))))))))))))))))))))))))))))))
.

2009-04-20 05:28 . 2009-04-21 03:16 17408 ------w c:\windows\system32\rpcnetp.dll
2009-04-20 04:22 . 2008-06-19 12:24 28544 ----a-w c:\windows\system32\drivers\pavboot.sys
2009-04-18 12:41 . 2009-04-18 12:41 -------- d-----w c:\windows\Sun
2009-04-18 10:01 . 2009-04-18 10:02 110592 ----a-w c:\windows\system32\winsetup66.exe
2009-04-17 17:53 . 2009-04-17 17:53 81920 ----a-w c:\windows\system32\ftp_non_crp.exe
2009-04-17 12:41 . 2009-04-17 12:41 -------- d-----w c:\users\George\AppData\Roaming\Alien Skin
2009-04-17 12:36 . 2008-05-19 08:13 57344 ----a-w c:\windows\system32\ASTSRV.EXE
2009-04-17 04:24 . 2009-03-03 04:39 551424 ----a-w c:\windows\system32\rpcss.dll
2009-04-17 04:24 . 2009-03-03 04:46 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-04-17 04:24 . 2009-03-03 04:46 3547632 ----a-w c:\windows\system32\ntoskrnl.exe
2009-04-17 04:24 . 2009-03-03 04:39 183296 ----a-w c:\windows\system32\sdohlp.dll
2009-04-17 04:24 . 2009-03-03 04:39 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-04-17 04:24 . 2009-03-03 04:37 98304 ----a-w c:\windows\system32\iasrecst.dll
2009-04-17 04:24 . 2009-03-03 04:37 54784 ----a-w c:\windows\system32\iasads.dll
2009-04-17 04:24 . 2009-03-03 04:37 44032 ----a-w c:\windows\system32\iasdatastore.dll
2009-04-17 04:24 . 2009-03-03 03:04 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-04-17 04:24 . 2009-03-03 02:38 17408 ----a-w c:\windows\system32\iashost.exe
2009-04-17 04:17 . 2008-12-06 04:42 376832 ----a-w c:\windows\system32\winhttp.dll
2009-04-17 04:17 . 2008-06-06 03:27 38912 ----a-w c:\windows\system32\xolehlp.dll
2009-04-17 04:17 . 2008-06-06 03:27 562176 ----a-w c:\windows\system32\msdtcprx.dll
2009-04-17 04:06 . 2009-02-13 08:49 1255936 ----a-w c:\windows\system32\lsasrv.dll
2009-04-17 04:06 . 2009-02-13 08:49 72704 ----a-w c:\windows\system32\secur32.dll
2009-04-17 04:06 . 2009-03-17 03:38 13824 ----a-w c:\windows\system32\apilogen.dll
2009-04-17 04:06 . 2009-03-17 03:38 24064 ----a-w c:\windows\system32\amxread.dll
2009-04-07 14:37 . 2009-04-07 14:44 646 ----a-w c:\windows\PhotoBee.INI
2009-03-30 05:09 . 1996-10-30 05:35 32768 ----a-w c:\windows\system\plugin.dll
2009-03-30 05:09 . 1993-07-23 14:31 210944 ----a-w c:\windows\system\MSVCRT10.DLL

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-21 18:38 . 2008-06-18 04:11 -------- d-----w c:\users\George\AppData\Roaming\uTorrent
2009-04-21 06:24 . 2008-12-01 20:45 2828 --sha-w c:\windows\System32\KGyGaAvL.sys
2009-04-21 04:38 . 2008-10-24 09:55 44544 ----a-w c:\windows\System32\agremove.exe
2009-04-21 03:16 . 2008-06-19 04:22 -------- d---a-w c:\programdata\TEMP
2009-04-20 04:22 . 2009-04-20 04:22 -------- d-----w c:\program files\Panda Security
2009-04-19 19:54 . 2009-04-19 19:49 3264 ----a-w C:\avenger.txt
2009-04-19 08:04 . 2009-01-08 20:20 268 ---ha-w C:\sqmdata04.sqm
2009-04-19 08:04 . 2009-01-08 20:20 244 ---ha-w C:\sqmnoopt04.sqm
2009-04-17 17:48 . 2009-01-19 08:58 -------- d-----w c:\programdata\FLEXnet
2009-04-17 13:19 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-04-17 12:36 . 2009-04-17 12:36 -------- d-----w c:\program files\Alien Skin
2009-04-08 05:41 . 2009-02-03 06:01 -------- d-----w c:\program files\DCETools
2009-04-07 12:48 . 2009-04-07 12:32 -------- d-----w c:\program files\DynamicPhotoHDR4
2009-04-03 08:19 . 2009-01-08 20:14 280 ---ha-w C:\sqmdata03.sqm
2009-04-03 08:19 . 2009-01-08 20:14 244 ---ha-w C:\sqmnoopt03.sqm
2009-04-01 20:50 . 2009-01-08 20:06 268 ---ha-w C:\sqmdata02.sqm
2009-04-01 20:50 . 2009-01-08 20:06 244 ---ha-w C:\sqmnoopt02.sqm
2009-03-31 08:36 . 2009-03-31 08:35 -------- d-----w c:\program files\virtualStudio
2009-03-27 12:18 . 2008-02-15 13:42 -------- d-----w c:\program files\Java
2009-03-26 06:25 . 2008-07-20 08:06 680 ----a-w c:\users\George\AppData\Local\d3d9caps.dat
2009-03-21 03:20 . 2009-01-08 16:37 244 ---ha-w C:\sqmnoopt01.sqm
2009-03-21 03:20 . 2009-01-08 16:37 232 ---ha-w C:\sqmdata01.sqm
2009-03-21 03:17 . 2009-01-07 19:37 244 ---ha-w C:\sqmnoopt00.sqm
2009-03-21 03:17 . 2009-01-07 19:37 232 ---ha-w C:\sqmdata00.sqm
2009-03-20 15:18 . 2009-01-17 11:37 244 ---ha-w C:\sqmnoopt19.sqm
2009-03-20 15:18 . 2009-01-17 11:37 232 ---ha-w C:\sqmdata19.sqm
2009-03-20 03:22 . 2009-03-19 18:44 -------- d-----w c:\users\George\AppData\Roaming\gtk-2.0
2009-03-18 16:27 . 2009-01-15 21:26 244 ---ha-w C:\sqmnoopt18.sqm
2009-03-18 16:27 . 2009-01-15 21:26 232 ---ha-w C:\sqmdata18.sqm
2009-03-18 16:07 . 2009-01-13 09:33 244 ---ha-w C:\sqmnoopt17.sqm
2009-03-18 16:07 . 2009-01-13 09:33 232 ---ha-w C:\sqmdata17.sqm
2009-03-18 16:03 . 2009-01-13 09:21 244 ---ha-w C:\sqmnoopt16.sqm
2009-03-18 16:03 . 2009-01-13 09:21 232 ---ha-w C:\sqmdata16.sqm
2009-03-17 03:38 . 2009-04-17 04:06 40960 ----a-w c:\windows\AppPatch\apihex86.dll
2009-03-09 01:19 . 2008-11-27 03:46 410984 ----a-w c:\windows\System32\deploytk.dll
2009-03-03 04:40 . 2009-04-17 04:23 827392 ----a-w c:\windows\System32\wininet.dll
2009-03-03 04:37 . 2009-04-17 04:23 78336 ----a-w c:\windows\System32\ieencode.dll
2009-03-03 02:28 . 2009-04-17 04:23 26624 ----a-w c:\windows\System32\ieUnatt.exe
2009-02-23 10:34 . 2008-06-19 04:21 -------- d-----w c:\program files\DAP
2009-02-16 04:53 . 2009-01-13 01:56 268 ---ha-w C:\sqmdata15.sqm
2009-02-16 04:53 . 2009-01-13 01:56 244 ---ha-w C:\sqmnoopt15.sqm
2009-02-15 13:55 . 2009-01-12 20:55 268 ---ha-w C:\sqmdata14.sqm
2009-02-15 13:55 . 2009-01-12 20:55 244 ---ha-w C:\sqmnoopt14.sqm
2009-02-14 18:45 . 2009-01-12 15:19 268 ---ha-w C:\sqmdata13.sqm
2009-02-14 18:45 . 2009-01-12 15:19 244 ---ha-w C:\sqmnoopt13.sqm
2009-02-13 19:37 . 2009-01-12 08:16 268 ---ha-w C:\sqmdata12.sqm
2009-02-13 19:37 . 2009-01-12 08:16 244 ---ha-w C:\sqmnoopt12.sqm
2009-02-13 03:30 . 2009-01-11 14:02 268 ---ha-w C:\sqmdata11.sqm
2009-02-13 03:30 . 2009-01-11 14:02 244 ---ha-w C:\sqmnoopt11.sqm
2009-02-12 21:58 . 2009-01-10 13:15 268 ---ha-w C:\sqmdata10.sqm
2009-02-12 21:58 . 2009-01-10 13:15 244 ---ha-w C:\sqmnoopt10.sqm
2009-02-12 11:08 . 2009-01-10 02:00 268 ---ha-w C:\sqmdata09.sqm
2009-02-12 11:08 . 2009-01-10 02:00 244 ---ha-w C:\sqmnoopt09.sqm
2009-02-12 09:06 . 2009-02-12 09:07 151552 ----a-w c:\windows\System32\nvRegDev.dll
2009-02-11 17:00 . 2009-02-11 16:59 13160 ----a-w c:\windows\System32\Upgrd.exe
2009-02-11 14:46 . 2009-01-09 19:52 268 ---ha-w C:\sqmdata08.sqm
2009-02-11 14:46 . 2009-01-09 19:52 244 ---ha-w C:\sqmnoopt08.sqm
2009-02-11 12:10 . 2009-01-09 08:28 268 ---ha-w C:\sqmdata07.sqm
2009-02-11 12:10 . 2009-01-09 08:28 244 ---ha-w C:\sqmnoopt07.sqm
2009-02-10 18:28 . 2009-01-09 07:49 268 ---ha-w C:\sqmdata06.sqm
2009-02-10 18:28 . 2009-01-09 07:49 244 ---ha-w C:\sqmnoopt06.sqm
2009-02-10 13:02 . 2009-01-09 04:28 268 ---ha-w C:\sqmdata05.sqm
2009-02-10 13:02 . 2009-01-09 04:28 244 ---ha-w C:\sqmnoopt05.sqm
2009-02-09 03:10 . 2009-03-11 11:08 2033152 ----a-w c:\windows\System32\win32k.sys
2009-01-19 09:03 . 2008-06-12 08:04 73288 ----a-w c:\users\George\AppData\Local\GDIPFONTCACHEV1.DAT
2008-09-25 10:27 . 2008-09-01 18:29 47360 ----a-w c:\users\George\AppData\Roaming\pcouffin.sys
2008-01-21 02:43 . 2006-11-02 12:50 174 --sha-w c:\program files\desktop.ini
2008-11-03 11:29 . 2008-06-17 09:30 16384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2008-11-03 11:29 . 2008-06-17 09:30 32768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2008-11-03 11:29 . 2008-06-17 09:30 16384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
2008-12-01 20:45 . 2008-12-01 20:45 88 --sh--r c:\windows\System32\D6DB8633B4.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2008-11-26 03:57 204248 ----a-w c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2008-08-22 268592]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-02-04 4363504]
"DownloadAccelerator"="c:\program files\DAP\DAP.EXE" [2009-02-23 2807296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-28 75136]
"Desktop SMS"="c:\program files\IDM\Desktop SMS\DesktopSMS.exe" [2007-06-18 1507328]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-11-29 1029416]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-25 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-10-31 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-01-22 712704]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-06-14 185896]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"Corel File Shell Monitor"="c:\program files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe" [2007-10-30 16200]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"Corel Photo Downloader"="c:\program files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" [2007-10-31 531784]
"NDSTray.exe"="NDSTray.exe" [BU]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-6-15 113664]
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2008-1-25 2938184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1182246402-614739377-1702356926-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{A2A01508-F6D5-49CB-AAD7-4ED12D8D2728}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{5ECFFED7-9210-442C-BC12-D3886D9E585E}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
"{D65888A9-D065-4BA7-9137-BBF88D26C048}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{778F8B71-419B-4347-B8F6-52A845C1EDE3}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{6870AC83-F3C1-428D-852D-B6A19D1590D6}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"{EAAF71BF-24C1-45C0-BFEE-28BFE2F2B717}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"TCP Query User{35F3181B-966A-4E18-B9BA-9EE38070BD1D}c:\\program files\\ares\\ares.exe"= UDP:c:\program files\ares\ares.exe:Ares p2p for windows
"UDP Query User{98C18009-9C0D-406D-9E42-0A256DDEC67B}c:\\program files\\ares\\ares.exe"= TCP:c:\program files\ares\ares.exe:Ares p2p for windows
"TCP Query User{B0CF17BE-2218-417F-96EB-D0F189861779}c:\\program files\\ares\\ares.exe"= UDP:c:\program files\ares\ares.exe:Ares p2p for windows
"UDP Query User{6152C51C-740D-4C0D-85F8-B66E95978CA6}c:\\program files\\ares\\ares.exe"= TCP:c:\program files\ares\ares.exe:Ares p2p for windows
"TCP Query User{30F9A181-D146-4591-AFC2-3815D72223AA}c:\\program files\\utorrent\\utorrent.exe"= UDP:c:\program files\utorrent\utorrent.exe:µTorrent
"UDP Query User{323FE001-31B7-4199-8107-661E2C5BE4F2}c:\\program files\\utorrent\\utorrent.exe"= TCP:c:\program files\utorrent\utorrent.exe:µTorrent
"TCP Query User{2804501D-CDCC-452B-8BB9-C6778968D84B}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= UDP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"UDP Query User{8CB0ADE0-0F4D-49EA-A0DD-496AED6988D5}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= TCP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"{56E2839F-ACDC-4532-82EE-6DD74646F1D3}"= UDP:990:LocalSubnet:LocalSubnet|IF={6454CA18-E241-4140-9F72-449F6794F6B4}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdSync.exe,-4001
"{101F2FF7-53B7-4A6E-8796-DED1393581C0}"= UDP:c:\program files\SpeedBit Video Accelerator\VideoAcceleratorEngine.exe:VideoAcceleratorService
"{12A11790-0F3E-4E08-82F0-C1DC6941D9BD}"= TCP:c:\program files\SpeedBit Video Accelerator\VideoAcceleratorEngine.exe:VideoAcceleratorService
"{6EB59590-4E85-40F0-A839-B0B613B093AE}"= UDP:9666:127.0.0.1
"{0EA664C0-3644-4F96-8CA3-8B03131F54A9}"= UDP:c:\program files\SpeedBit Video Accelerator\VideoAcceleratorEngine.exe:VideoAcceleratorService
"{98D35641-1988-42F1-B8B4-A2DF44E32F3A}"= TCP:c:\program files\SpeedBit Video Accelerator\VideoAcceleratorEngine.exe:VideoAcceleratorService
"{2ECFF351-F3A6-4318-8659-06E20EA33078}"= UDP:c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe:VideoAccelerator
"{6A948C2A-8D8D-45E8-B116-9C8538B49D11}"= TCP:c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe:VideoAccelerator
"{24457C19-7209-4BCB-9D2F-4D5F6A67593E}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{4993FBA1-7D9B-4654-A769-F7A28839D5AE}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{1C9CA728-33EA-47C6-BC6D-D22671621DC3}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
"{517558EB-64FC-4179-B012-FBA4245D5AC4}"= Disabled:UDP:c:\program files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server
"{4F46A19A-E82F-4B67-9456-DA63E03B2680}"= Disabled:TCP:c:\program files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server

R2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2006-11-02 9216]
R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service; [x]
S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2008-06-19 28544]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]
S2 ASTSRV;Nalpeiron Licensing Service;c:\windows\system32\ASTSRV.EXE [2008-05-19 57344]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2007-12-25 40960]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-02-06 92800]
S2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
S3 CnxtHdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service;c:\windows\system32\drivers\CHDART.sys [2008-02-01 187904]
S3 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2media.sys [2008-01-15 48472]
S3 QIOMem;Generic IO & Memory Access;c:\windows\system32\DRIVERS\QIOMem.sys [2007-04-09 8192]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2c7b3f6-b85e-11dd-b840-00037aa6fd34}]
\shell\AutoRun\command - D:\jl.com
\shell\explore\Command - D:\jl.com
\shell\open\Command - D:\jl.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c646cc-c4fb-11dd-940d-00037aa6fd34}]
\shell\Auto\command - D:\fun.xls.exe
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\fun.xls.exe
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
HKCU-Run-ares ultimate - c:\program files\Ares Ultimate\AresUltimate.exe
HKCU-Run-ares - c:\program files\Ares\Ares.exe
HKCU-Run-Uniblue RegistryBooster 2009 - c:\program files\uniblue\registrybooster\StartRegistryBooster.exe
HKCU-Run-TOSCDSPD - TOSCDSPD.EXE
HKU-Default-Run-Picasa Media Detector - c:\program files\Picasa2\PicasaMediaDetector.exe

.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.co.uk/
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://www.yahoo.com
uInternet Settings,ProxyOverride = proxy1.emirates.net.ae:8080;local;<local>
uInternet Settings,ProxyServer = proxy1.emirates.net.ae:8080
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.co...-44557-9400-3/4
IE: {{8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co...e...1&site=home
Trusted Zone: hotspotshield.com\www
Trusted Zone: internet
Trusted Zone: yahoo.com\us.mg2.mail
DPF: {680285A8-96D3-43DA-9D3D-51DD987D0B77} - hxxp://www.nero.com/doc/NeroVersionCheckerControl.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-21 22:42
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2009-04-21 22:43
ComboFix-quarantined-files.txt 2009-04-21 18:43

Pre-Run: 61,824,049,152 bytes free
Post-Run: 65,308,389,376 bytes free

270 --- E O F --- 2009-04-17 11:05

So sir wht does all that all say.. is there a problem ????????? what may i do

#8
Rorschach112

Posted 21 April 2009 - 01:22 PM

Ralphie

Retired Staff
47,710 posts

plug your D:\ drive in for this if you have it

Download Flash_Disinfector.exe from here and save it to your desktop.

Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
Wait until it has finished scanning and then exit the program.
Reboot your computer when done.

Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you run it. Don't delete this folder...it will help protect your drives from future infection.

Please download OTMoveIt3 by OldTimer

Save it to your desktop.
Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).

Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

:Processes
explorer.exe

:Services

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2c7b3f6-b85e-11dd-b840-00037aa6fd34}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c646cc-c4fb-11dd-940d-00037aa6fd34}]

:Files

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
Click the red Moveit! button.
Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
Close OTMoveIt3

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

Download Rooter.exe to your desktop

Then doubleclick it to start the tool
A Notepad file containing the report will open, also found at %systemdrive%\Rooter.txt. Post that here

#9
agent odg

Posted 21 April 2009 - 01:40 PM

Member

Topic Starter
Member
18 posts

Am now done with the flash disinfector and ot move.the following is the result i got

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2c7b3f6-b85e-11dd-b840-00037aa6fd34}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c646cc-c4fb-11dd-940d-00037aa6fd34}\\ deleted successfully.
========== FILES ==========
========== COMMANDS ==========
File delete failed. C:\Users\George\AppData\Local\Temp\Mapi.log scheduled to be deleted on reboot.
File delete failed. C:\Users\George\AppData\Local\Temp\ppcrlui_1844_2 scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 04212009_233504

will be rebooting now and will run the rooter. and be sending u the reply .. sir but my system still says i am not connected to internet

#10
Rorschach112

Posted 21 April 2009 - 05:50 PM

Ralphie

Retired Staff
47,710 posts

try this for the net problem

Please go to Start -> Control Panel, and choose Network Connections. Then right click on your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and left click on properties. Double-click on the Internet Protocol (TCP/IP) item and select the radio button that says Obtain DNS servers automatically. Click OK twice, and restart your computer.

#11
agent odg

Posted 21 April 2009 - 06:22 PM

Member

Topic Starter
Member
18 posts

Wit the last scan ie otmove the internet problem was solved.hence i think i need employ the above said message.and abt the rooter scan.it was also done.. since i dozed

it took this much time.

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2c7b3f6-b85e-11dd-b840-00037aa6fd34}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c646cc-c4fb-11dd-940d-00037aa6fd34}\\ deleted successfully.
========== FILES ==========
========== COMMANDS ==========
File delete failed. C:\Users\George\AppData\Local\Temp\Mapi.log scheduled to be deleted on reboot.
File delete failed. C:\Users\George\AppData\Local\Temp\ppcrlui_1844_2 scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 04212009_233504

Files moved on Reboot...
C:\Users\George\AppData\Local\Temp\Mapi.log moved successfully.
C:\Users\George\AppData\Local\Temp\ppcrlui_1844_2 moved successfully.

Rooter scan

Microsoft Windows Vista Home Edition (6.0.6001) Service Pack 1

C:\ [Fixed] - NTFS - (Total:120359 Mo/Free:4054 Mo)
E:\ [Fixed] - NTFS - (Total:116613 Mo/Free:1033 Mo)
F:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)

Tue 04/21/2009|23:49

----------------------\\ Processes..

--Locked-- [System Process]
--Locked-- System
---------- \SystemRoot\System32\smss.exe
---------- C:\Windows\system32\csrss.exe
---------- C:\Windows\system32\wininit.exe
---------- C:\Windows\system32\csrss.exe
---------- C:\Windows\system32\services.exe
---------- C:\Windows\system32\lsass.exe
---------- C:\Windows\system32\lsm.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
---------- C:\Windows\system32\winlogon.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\System32\svchost.exe
---------- C:\Windows\system32\Ati2evxx.exe
---------- C:\Windows\System32\svchost.exe
---------- C:\Windows\System32\svchost.exe
---------- C:\Windows\system32\svchost.exe
--Locked-- audiodg.exe
---------- C:\Windows\system32\SLsvc.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\Ati2evxx.exe
---------- C:\Windows\System32\spoolsv.exe
---------- C:\Windows\system32\Dwm.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\taskeng.exe
---------- C:\Windows\Explorer.EXE
---------- C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
---------- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
---------- C:\Windows\system32\ASTSRV.EXE
---------- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
---------- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
---------- C:\Program Files\Hotspot Shield\bin\openvpnas.exe
---------- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
---------- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\PSIService.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
---------- C:\Windows\system32\TODDSrv.exe
---------- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
---------- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
---------- C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
---------- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
---------- C:\Windows\System32\svchost.exe
---------- C:\Windows\system32\SearchIndexer.exe
---------- C:\Windows\system32\DRIVERS\xaudio.exe
---------- C:\Windows\system32\taskeng.exe
---------- C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
---------- C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
---------- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
---------- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
---------- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
---------- C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
---------- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
---------- C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
---------- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
---------- C:\Windows\WindowsMobile\wmdSync.exe
---------- C:\Program Files\iTunes\iTunesHelper.exe
---------- C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
---------- C:\Program Files\Java\jre6\bin\jusched.exe
---------- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
---------- C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
---------- C:\Windows\ehome\ehtray.exe
---------- C:\Program Files\uTorrent\uTorrent.exe
---------- C:\Program Files\DAP\DAP.exe
---------- C:\Program Files\Windows Media Player\wmpnscfg.exe
---------- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\ehome\ehmsas.exe
---------- C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
---------- C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
---------- C:\Program Files\Windows Media Player\wmpnetwk.exe
---------- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
---------- C:\Program Files\iPod\bin\iPodService.exe
---------- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
---------- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
---------- C:\Program Files\Windows Mail\WinMail.exe
---------- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
---------- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
---------- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
---------- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
---------- C:\Windows\system32\SearchProtocolHost.exe
---------- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
---------- C:\Program Files\Internet Explorer\iexplore.exe
---------- C:\Windows\system32\wbem\wmiprvse.exe
---------- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
---------- C:\Windows\system32\SearchFilterHost.exe
---------- C:\Users\George\Desktop\Rooter.exe
---------- C:\Windows\system32\cmd.exe
---------- C:\Rooter$\RK.exe

----------------------\\ Search..

----------------------\\ ROOTKIT !!

----------------------\\ Cracks & Keygens..

C:\Users\George\Documents\photoshope works\Adobe Photoshop Elements 7\Adobe Photoshop Elements 7\Activation\keygen.exe

1 - "C:\Rooter$\Rooter_1.txt" - Wed 04/22/2009| 4:12

----------------------\\ Scan completed at 4:12

So whats the verdict on it boss????????

#12
Rorschach112

Posted 21 April 2009 - 06:38 PM

Ralphie

Retired Staff
47,710 posts

nearly done

Please download ATF Cleaner by Atribune.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

Please download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Go to Kaspersky website and perform an online antivirus scan.

Read through the requirements and privacy statement and click on Accept button.
It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
When the downloads have finished, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
- Spyware, Adware, Dialers, and other potentially dangerous programs
  Archives
  Mail databases
Click on My Computer under Scan.
Once the scan is complete, it will display the results. Click on View Scan Report.
You will see a list of infected items there. Click on Save Report As....
Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button. Then post it here.

#13
agent odg

Posted 21 April 2009 - 06:53 PM

Member

Topic Starter
Member
18 posts

Did the atf clean . the link for Malwarebytes Anti-Malware is nt working .tried that says the page cannt be displayed each tim ei click the download .

so wht shall i do

#14
agent odg

Posted 21 April 2009 - 09:38 PM

Member

Topic Starter
Member
18 posts

still am not able to download Malwarebytes Anti-Malware.shud i bypass it and go to kaspersky???

thank u so much for all the help that u have rendered.

#15
agent odg

Posted 21 April 2009 - 11:02 PM

Member

Topic Starter
Member
18 posts

Ok so here goes.. step 1 and 2 done and system rebooted and am on the kaspersky scanner now.

here is the mbam log and i will post in the kaspersky scan log ones that is done.

Malwarebytes' Anti-Malware 1.36
Database version: 2024
Windows 6.0.6001 Service Pack 1

4/22/2009 7:50:43 AM
mbam-log-2009-04-22 (07-50-43).txt

Scan type: Quick Scan
Objects scanned: 63968
Time elapsed: 3 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\desktop sms (Worm.P2P) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Windows\System32\ftp_non_crp.exe (Trojan.Agent) -> Quarantined and deleted successfully.

so far wht is the diagnosis