Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Automatic Keystroke


  • This topic is locked This topic is locked
23 replies to this topic

#1 Manikumarv

Manikumarv

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 30 November 2007 - 10:56 PM

Hi...

Automatically some keystrokes are coming(These are keystrokes QYTREW) and it is opening MS Outlook. I scanned it using Norton 2002, AVG 7.5 Free, AVG 7.5 Spyware, Adaware and Spybot. Nothing detected an virus occasionally this is happening,but if i remove my keyboard from computer it will not happen. I dont know what to do... :thumbsup: please help me.. :blink:

Here is my hicjack log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:20:51 AM, on 12/1/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Windows Defender\MsMpEng.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\WINDOWS\Explorer.EXE
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\Program Files\COMODO\Firewall\cmdagent.exe
E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
E:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\WINDOWS\system32\svchost.exe
E:\PROGRA~1\NORTON~1\navapw32.exe
E:\Program Files\Windows Defender\MSASCui.exe
E:\WINDOWS\RTHDCPL.EXE
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
E:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
E:\Program Files\COMODO\Firewall\cfp.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - E:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - E:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [NAV Agent] E:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Windows Defender] "E:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Google Desktop Search] "E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "E:\Program Files\COMODO\Firewall\cfp.exe" -s
O4 - HKCU\..\Run: [SpybotSD TeaTimer] f:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: &Winamp Toolbar Search - E:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://E:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS2\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - E:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: GoogleDesktopManager - Google - E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Apache Tomcat (Tomcat5) - Apache Software Foundation - e:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe

--
End of file - 7772 bytes

BC AdBot (Login to Remove)

 


#2 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 02 December 2007 - 06:17 AM

anybody is there...........

now it become even worse :blink:

ps;i'm typing this using on-screen keyboard........


pls help me :thumbsup:

#3 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 02 December 2007 - 11:37 AM

this is my combofix report

pls help me........
:blink: :thumbsup: :wacko:

ComboFix 07-12-02.5 - Mani 2007-12-02 21:40:17.3 - FAT32x86
Running from: E:\Documents and Settings\Mani\Desktop\ComboFix.exe
.

((((((((((((((((((((((((( Files Created from 2007-11-02 to 2007-12-02 )))))))))))))))))))))))))))))))
.

2007-12-02 21:40 . 2007-12-02 21:40 6,736 --a------ E:\WINDOWS\system32\drivers\PROCEXP90.SYS
2007-12-01 09:20 . 2007-12-01 09:20 <DIR> d-------- E:\Program Files\Trend Micro
2007-12-01 08:43 . 2007-07-30 19:19 207,736 --a------ E:\WINDOWS\system32\muweb.dll
2007-11-30 00:24 . 2007-11-30 00:24 54,156 --ah----- E:\WINDOWS\QTFont.qfn
2007-11-30 00:24 . 2007-11-30 00:24 1,409 --a------ E:\WINDOWS\QTFont.for
2007-11-25 22:00 . 2007-11-25 22:00 <DIR> d-------- E:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-24 08:42 . 2007-11-24 08:42 <DIR> d-------- E:\Program Files\COMODO
2007-11-24 08:42 . 2007-11-24 08:42 139,008 --a------ E:\WINDOWS\system32\guard32.dll
2007-11-24 08:42 . 2007-11-24 08:42 79,096 --a------ E:\WINDOWS\system32\drivers\cmdGuard.sys
2007-11-24 08:42 . 2007-11-24 08:42 23,672 --a------ E:\WINDOWS\system32\drivers\cmdhlp.sys
2007-11-20 00:06 . 2007-11-20 00:06 <DIR> d-------- E:\Documents and Settings\Mani\Application Data\Notepad X
2007-11-19 06:49 . 2007-11-19 06:49 <DIR> d-------- E:\Documents and Settings\Mani\Application Data\Grisoft
2007-11-19 06:14 . 2007-11-19 06:14 <DIR> d-------- E:\Documents and Settings\Administrator\Application Data\Lavasoft
2007-11-19 00:28 . 2007-11-25 13:43 664 --a------ E:\WINDOWS\system32\d3d9caps.dat
2007-11-19 00:16 . 2007-11-19 00:16 <DIR> d-------- E:\Documents and Settings\Administrator\Application Data\AVG7
2007-11-19 00:12 . 2007-11-19 00:12 <DIR> d-------- E:\Documents and Settings\Administrator\Application Data\Grisoft
2007-11-19 00:11 . 2007-05-30 17:40 10,872 --a------ E:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-11 22:13 . 2007-11-11 22:13 <DIR> d-------- E:\Documents and Settings\Mani\workspace
2007-11-11 21:15 . 2007-11-11 21:15 <DIR> d-------- E:\Documents and Settings\Mani\Application Data\Ahead
2007-11-10 18:10 . 2004-08-03 23:08 31,616 --a------ E:\WINDOWS\system32\drivers\usbccgp.sys
2007-11-10 18:10 . 2004-08-03 23:08 31,616 --a------ E:\WINDOWS\system32\dllcache\usbccgp.sys
2007-11-10 18:10 . 2004-08-04 00:56 21,504 --a------ E:\WINDOWS\system32\hidserv.dll
2007-11-10 18:10 . 2004-08-04 00:56 21,504 --a------ E:\WINDOWS\system32\dllcache\hidserv.dll
2007-11-10 18:10 . 2004-08-03 22:58 14,848 --a------ E:\WINDOWS\system32\drivers\kbdhid.sys
2007-11-10 18:10 . 2004-08-03 22:58 14,848 --a------ E:\WINDOWS\system32\dllcache\kbdhid.sys
2007-11-10 18:10 . 2001-08-17 13:48 12,160 --a------ E:\WINDOWS\system32\drivers\mouhid.sys
2007-11-10 18:10 . 2001-08-17 13:48 12,160 --a------ E:\WINDOWS\system32\dllcache\mouhid.sys
2007-11-09 08:22 . 2007-11-09 08:22 <DIR> d--hs---- E:\FOUND.002
2007-11-04 11:50 . 2007-11-04 11:50 <DIR> d-------- E:\Documents and Settings\All Users\Application Data\SongbirdVLC
2007-11-04 11:48 . 2007-11-04 11:48 <DIR> d-------- E:\Documents and Settings\Mani\Application Data\Songbird1

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-30 18:36 --------- d-----w E:\Documents and Settings\Mani\Application Data\U3
2007-10-28 11:07 43,602 ----a-w E:\WINDOWS\system32\xvid-uninstall.exe
2007-10-28 10:47 --------- d-----w E:\Program Files\Free Registry Cleaner for Vista
2007-10-28 10:38 --------- d-----w E:\Documents and Settings\Mani\Application Data\AVG7
2007-10-28 10:38 --------- d-----w E:\Documents and Settings\LocalService\Application Data\AVG7
2007-10-28 10:37 --------- d-----w E:\Documents and Settings\All Users\Application Data\Grisoft
2007-10-28 10:37 --------- d-----w E:\Documents and Settings\All Users\Application Data\avg7
2007-10-26 03:34 8,460,288 ----a-w E:\WINDOWS\system32\dllcache\shell32.dll
2007-10-24 16:34 --------- d-----w E:\Documents and Settings\All Users\Application Data\Protexis
2007-10-23 18:24 --------- d-----w E:\Documents and Settings\Mani\Application Data\WinAmp Control
2007-10-21 19:30 --------- d-----w E:\Program Files\Winamp Toolbar
2007-10-21 19:30 --------- d-----w E:\Program Files\Winamp Remote
2007-10-21 19:30 --------- d-----w E:\Documents and Settings\All Users\Application Data\Winamp Toolbar
2007-10-21 19:30 --------- d-----w E:\Documents and Settings\All Users\Application Data\OrbNetworks
2007-10-21 19:20 --------- d-----w E:\Documents and Settings\Mani\Application Data\Winamp
2007-10-07 08:46 --------- d-----w E:\Documents and Settings\Mani\Application Data\Comodo
2007-10-07 08:46 --------- d-----w E:\Documents and Settings\All Users\Application Data\Comodo
2007-10-06 18:03 --------- d-----w E:\Documents and Settings\All Users\Application Data\TEMP
2007-10-02 17:32 --------- d-----w E:\Program Files\Common Files\xing shared
2007-09-08 17:08 566,784 ----a-w E:\WINDOWS\system32\gpedit.dll
2007-09-08 17:07 117,760 ----a-w E:\WINDOWS\system32\fde.dll
2007-08-01 17:39 92,064 ----a-w E:\Documents and Settings\Mani\mqdmmdm.sys
2007-08-01 17:39 9,232 ----a-w E:\Documents and Settings\Mani\mqdmmdfl.sys
2007-08-01 17:39 79,328 ----a-w E:\Documents and Settings\Mani\mqdmserd.sys
2007-08-01 17:39 66,656 ----a-w E:\Documents and Settings\Mani\mqdmbus.sys
2007-08-01 17:39 6,208 ----a-w E:\Documents and Settings\Mani\mqdmcmnt.sys
2007-08-01 17:39 5,936 ----a-w E:\Documents and Settings\Mani\mqdmwhnt.sys
2007-08-01 17:39 4,048 ----a-w E:\Documents and Settings\Mani\mqdmcr.sys
2007-08-01 17:39 25,600 ----a-w E:\Documents and Settings\Mani\usbsermptxp.sys
2007-08-01 17:39 22,768 ----a-w E:\Documents and Settings\Mani\usbsermpt.sys
2007-07-25 09:03 25,200 ----a-w E:\Documents and Settings\Mani\Application Data\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-05 01:36 1135968 --a------ E:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= E:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-05 01:36 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= E:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-05 01:36 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="E:\WINDOWS\system32\ctfmon.exe" [2004-08-04 12:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NAV Agent"="E:\PROGRA~1\NORTON~1\navapw32.exe" [2001-08-16 17:52]
"Windows Defender"="E:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20]
"Google Desktop Search"="E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-10-01 01:02]
"AVG7_CC"="E:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-10-29 08:36]
"!AVG Anti-Spyware"="F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 14:55]
"COMODO Firewall Pro"="E:\Program Files\COMODO\Firewall\cfp.exe" [2007-11-24 08:42]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Picasa Media Detector"="E:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-28 06:47]
"AVG7_Run"="E:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-10-29 08:36]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2007-06-01 16:51 257088 --a------ E:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
E:\Program Files\Messenger\msmsgs.exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
E:\Program Files\QuickTime\qttask.exe -atboottime

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=f:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;E:\WINDOWS\system32\DRIVERS\cmdguard.sys
R1 cmdHlp;COMODO Firewall Pro Helper Driver;E:\WINDOWS\system32\DRIVERS\cmdhlp.sys
S3 Tomcat5;Apache Tomcat;"e:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe" //RS//Tomcat5

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{04c92574-e05a-11db-b3ea-806d6172696f}]
\Shell\AutoRun\command - E:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL NETSVCS.EXE
\Shell\_\command - O:\NETSVCS.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3be92e68-62fe-11dc-9363-0016ec87e996}]
\Shell\AutoRun\command - O:\SSVICHOSST.exe
\Shell\Open\command - O:\SSVICHOSST.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-12-02 16:28:06 E:\WINDOWS\Tasks\Symantec NetDetect.job"
- E:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
"2007-04-01 11:12:20 E:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer.job"
- E:\PROGRA~1\NORTON~1\NAVW32.exe
"2007-06-17 09:54:22 E:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- E:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-12-02 16:05:50 E:\WINDOWS\Tasks\MP Scheduled Scan.job"
- E:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-02 21:58:17
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-02 21:58:52
E:\ComboFix2.txt ... 2007-12-02 17:20
.
--- E O F ---

#4 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,530 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 17 December 2007 - 03:09 PM

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please post a brand new hijackthis log. If we do not hear back from you within a couple of days we will need to close your topic.

When posting your logs please post them directly into the reply. Do not attach them.

Also make sure you have already followed the steps outlined below:

Preparation Guide For Use Before Posting A Hijackthis Log

Thank you for your patience.

#5 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 18 December 2007 - 12:56 PM

Thanks for your reference..

Problem
Automatically I was getting key strokes....


Here is my HiJack...
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:24:46 PM, on 12/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Windows Defender\MsMpEng.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
E:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Windows Defender\MSASCui.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
E:\Program Files\COMODO\Firewall\cfp.exe
E:\WINDOWS\RTHDCPL.EXE
E:\WINDOWS\SOUNDMAN.EXE
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
D:\Program Files\Winamp\winamp.exe
E:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
E:\PROGRA~1\MOZILL~1\FIREFOX.EXE
E:\Program Files\Trend Micro\HijackThis\anayzeee.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - E:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - E:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [Windows Defender] "E:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Google Desktop Search] "E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "E:\Program Files\COMODO\Firewall\cfp.exe" -s
O4 - HKLM\..\Run: [PCDrProfiler] "E:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe" -r
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: &Winamp Toolbar Search - E:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://E:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1197134050375
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS2\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: GoogleDesktopManager - Google - E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Apache Tomcat (Tomcat5) - Apache Software Foundation - e:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe

--
End of file - 7459 bytes

#6 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,530 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 18 December 2007 - 04:32 PM

  • Download Combofix to your desktop.

  • Doubleclick combofix.exe

  • Follow the prompts.
Don't click on the window while the fix is running, because that will cause your system to hang.

When finished, and after reboot if it asks for one, combofix will open again to gather the necessary information for the log. This may take a while so please be patient. When done, Combofix will close and a log should open called combofix.txt.

Post the contents of this log in your next reply along with a new hijackthislog.

Please do not post the ComboFix-quarantined-files.txt unless I ask you to.

#7 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 20 December 2007 - 10:24 PM

My hijackthis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:50:28 AM, on 12/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Windows Defender\MsMpEng.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Windows Defender\MSASCui.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
E:\Program Files\COMODO\Firewall\cfp.exe
E:\WINDOWS\RTHDCPL.EXE
f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\WINDOWS\SOUNDMAN.EXE
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\COMODO\Firewall\cmdagent.exe
E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
E:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\WINDOWS\system32\wuauclt.exe
E:\Program Files\Trend Micro\HijackThis\anayzeee.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - E:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - E:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [Windows Defender] "E:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Google Desktop Search] "E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "E:\Program Files\COMODO\Firewall\cfp.exe" -s
O4 - HKLM\..\Run: [PCDrProfiler] "E:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe" -r
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: &Winamp Toolbar Search - E:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://E:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1197134050375
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS2\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O20 - AppInit_DLLs: E:\WINDOWS\system32\guard32.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - E:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: GoogleDesktopManager - Google - E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Apache Tomcat (Tomcat5) - Apache Software Foundation - e:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe

--
End of file - 7541 bytes
------------------------
combofix log

ComboFix 07-12-19.7 - Mani 2007-12-20 8:06:08.5 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.519 [GMT 5.5:30]
Running from: E:\Documents and Settings\Mani\Desktop\ComboFix.exe
.
The following files were disabled during the run:
E:\WINDOWS\system32\guard32.dll


((((((((((((((((((((((((( Files Created from 2007-11-20 to 2007-12-20 )))))))))))))))))))))))))))))))
.

2007-12-10 00:35 . 2007-12-10 00:35 <DIR> d--h----- E:\WINDOWS\ie7beta3
2007-12-10 00:11 . 2004-08-04 17:30 1,875,968 --a------ E:\WINDOWS\system32\dllcache\msir3jp.lex
2007-12-10 00:10 . 2004-08-04 17:30 13,463,552 --a------ E:\WINDOWS\system32\dllcache\hwxjpn.dll
2007-12-10 00:09 . 2004-08-04 17:30 1,817,687 --a------ E:\WINDOWS\system32\dllcache\bckgres.dll
2007-12-10 00:08 . 2007-12-10 00:08 488 -rah----- E:\WINDOWS\system32\logonui.exe.manifest
2007-12-10 00:07 . 2007-12-10 00:07 749 -rah----- E:\WINDOWS\WindowsShell.Manifest
2007-12-10 00:07 . 2007-12-10 00:07 749 -rah----- E:\WINDOWS\system32\wuaucpl.cpl.manifest
2007-12-10 00:07 . 2007-12-10 00:07 749 -rah----- E:\WINDOWS\system32\sapi.cpl.manifest
2007-12-10 00:07 . 2007-12-10 00:07 749 -rah----- E:\WINDOWS\system32\ncpa.cpl.manifest
2007-12-09 23:58 . 2004-08-03 22:31 20,992 --a------ E:\WINDOWS\system32\drivers\RTL8139.sys
2007-12-09 00:39 . 2007-12-09 00:39 <DIR> d-------- E:\WINDOWS\system32\CatRoot2
2007-12-07 08:04 . 2007-07-06 20:16 8 --a------ E:\WINDOWS\system32\drivers\rtkhdaud.dat
2007-12-07 08:03 . 2006-12-08 15:20 10,528,768 --a------ E:\WINDOWS\system32\RTLCPL.exe
2007-12-07 08:03 . 2007-10-26 11:20 4,124,352 -ra------ E:\WINDOWS\system32\drivers\alcxwdm.sys
2007-12-07 08:03 . 2002-02-05 13:54 141,016 --a------ E:\WINDOWS\system32\alsndmgr.wav
2007-12-07 08:02 . 2007-12-07 08:02 <DIR> d-------- E:\Program Files\Realtek AC97
2007-12-07 08:02 . 2006-07-31 11:19 315,392 --a------ E:\WINDOWS\alcupd.exe
2007-12-07 08:02 . 2006-07-31 11:27 217,088 --a------ E:\WINDOWS\alcrmv.exe
2007-12-06 23:35 . 2007-12-06 23:35 <DIR> d-------- E:\Program Files\Realtek
2007-12-04 23:54 . 2007-12-04 23:54 <DIR> d-------- E:\TempEI4
2007-12-03 09:01 . 2005-11-19 01:21 28,848 --a------ E:\WINDOWS\system32\drivers\USBkey.sys
2007-12-03 09:01 . 2005-11-19 01:28 13,440 --a------ E:\WINDOWS\system32\drivers\pcdrndisuio.sys
2007-12-03 09:00 . 2007-12-03 09:01 <DIR> d-------- E:\Program Files\PC-Doctor 5 for Windows
2007-12-01 09:20 . 2007-12-01 09:20 <DIR> d-------- E:\Program Files\Trend Micro
2007-12-01 08:43 . 2007-07-30 19:19 207,736 --a------ E:\WINDOWS\system32\muweb.dll
2007-11-30 00:24 . 2007-11-30 00:24 54,156 --ah----- E:\WINDOWS\QTFont.qfn
2007-11-30 00:24 . 2007-11-30 00:24 1,409 --a------ E:\WINDOWS\QTFont.for
2007-11-25 22:00 . 2007-11-25 22:00 <DIR> d-------- E:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-24 08:42 . 2007-11-24 08:42 <DIR> d-------- E:\Program Files\COMODO
2007-11-24 08:42 . 2007-11-24 08:42 139,008 --a------ E:\WINDOWS\system32\guard32.dll.vir
2007-11-24 08:42 . 2007-11-24 08:42 79,096 --a------ E:\WINDOWS\system32\drivers\cmdGuard.sys
2007-11-24 08:42 . 2007-11-24 08:42 23,672 --a------ E:\WINDOWS\system32\drivers\cmdhlp.sys
2007-11-20 00:06 . 2007-11-20 00:06 <DIR> d-------- E:\Documents and Settings\Mani\Application Data\Notepad X

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-19 01:19 --------- d-----w E:\Documents and Settings\Mani\Application Data\Grisoft
2007-11-19 00:44 --------- d-----w E:\Documents and Settings\Administrator\Application Data\Lavasoft
2007-11-18 18:46 --------- d-----w E:\Documents and Settings\Administrator\Application Data\AVG7
2007-11-18 18:42 --------- d-----w E:\Documents and Settings\Administrator\Application Data\Grisoft
2007-11-13 10:25 20,480 ----a-w E:\WINDOWS\system32\drivers\secdrv.sys
2007-11-11 15:45 --------- d-----w E:\Documents and Settings\Mani\Application Data\Ahead
2007-11-04 06:20 --------- d-----w E:\Documents and Settings\All Users\Application Data\SongbirdVLC
2007-11-04 06:18 --------- d-----w E:\Documents and Settings\Mani\Application Data\Songbird1
2007-10-30 23:42 3,590,656 ----a-w E:\WINDOWS\system32\dllcache\mshtml.dll
2007-10-30 18:36 --------- d-----w E:\Documents and Settings\Mani\Application Data\U3
2007-10-29 22:43 1,287,680 ----a-w E:\WINDOWS\system32\quartz.dll
2007-10-29 22:43 1,287,680 ----a-w E:\WINDOWS\system32\dllcache\quartz.dll
2007-10-28 11:07 43,602 ----a-w E:\WINDOWS\system32\xvid-uninstall.exe
2007-10-28 10:47 --------- d-----w E:\Program Files\Free Registry Cleaner for Vista
2007-10-28 10:38 --------- d-----w E:\Documents and Settings\Mani\Application Data\AVG7
2007-10-28 10:38 --------- d-----w E:\Documents and Settings\LocalService\Application Data\AVG7
2007-10-28 10:37 --------- d-----w E:\Documents and Settings\All Users\Application Data\Grisoft
2007-10-28 10:37 --------- d-----w E:\Documents and Settings\All Users\Application Data\avg7
2007-10-27 12:09 230,912 ----a-w E:\WINDOWS\system32\wmasf.dll
2007-10-27 12:09 230,912 ----a-w E:\WINDOWS\system32\dllcache\wmasf.dll
2007-10-27 12:07 2,109,440 ----a-w E:\WINDOWS\system32\dllcache\wmvcore.dll
2007-10-26 03:36 8,454,656 ----a-w E:\WINDOWS\system32\dllcache\shell32.dll
2007-10-24 16:34 --------- d-----w E:\Documents and Settings\All Users\Application Data\Protexis
2007-10-23 18:24 --------- d-----w E:\Documents and Settings\Mani\Application Data\WinAmp Control
2007-10-21 19:30 --------- d-----w E:\Program Files\Winamp Toolbar
2007-10-21 19:30 --------- d-----w E:\Program Files\Winamp Remote
2007-10-21 19:30 --------- d-----w E:\Documents and Settings\All Users\Application Data\Winamp Toolbar
2007-10-21 19:30 --------- d-----w E:\Documents and Settings\All Users\Application Data\OrbNetworks
2007-10-21 19:20 --------- d-----w E:\Documents and Settings\Mani\Application Data\Winamp
2007-10-10 23:56 824,832 ----a-w E:\WINDOWS\system32\dllcache\wininet.dll
2007-10-10 23:56 671,232 ----a-w E:\WINDOWS\system32\dllcache\mstime.dll
2007-10-10 23:56 232,960 ----a-w E:\WINDOWS\system32\dllcache\webcheck.dll
2007-10-10 23:56 105,984 ----a-w E:\WINDOWS\system32\dllcache\url.dll
2007-10-10 23:56 102,400 ----a-w E:\WINDOWS\system32\dllcache\occache.dll
2007-10-10 23:56 1,159,680 ----a-w E:\WINDOWS\system32\dllcache\urlmon.dll
2007-10-10 23:55 63,488 ------w E:\WINDOWS\system32\dllcache\icardie.dll
2007-10-10 23:55 6,065,664 ------w E:\WINDOWS\system32\dllcache\ieframe.dll
2007-10-10 23:55 52,224 ------w E:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-10-10 23:55 478,208 ----a-w E:\WINDOWS\system32\dllcache\mshtmled.dll
2007-10-10 23:55 459,264 ------w E:\WINDOWS\system32\dllcache\msfeeds.dll
2007-10-10 23:55 44,544 ----a-w E:\WINDOWS\system32\dllcache\iernonce.dll
2007-10-10 23:55 384,512 ----a-w E:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-10-10 23:55 383,488 ------w E:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-10-10 23:55 27,648 ----a-w E:\WINDOWS\system32\dllcache\jsproxy.dll
2007-10-10 23:55 267,776 ------w E:\WINDOWS\system32\dllcache\iertutil.dll
2007-10-10 23:55 230,400 ----a-w E:\WINDOWS\system32\dllcache\ieaksie.dll
2007-10-10 23:55 214,528 ----a-w E:\WINDOWS\system32\dllcache\dxtrans.dll
2007-10-10 23:55 193,024 ----a-w E:\WINDOWS\system32\dllcache\msrating.dll
2007-10-10 23:55 153,088 ----a-w E:\WINDOWS\system32\dllcache\ieakeng.dll
2007-10-10 23:55 132,608 ----a-w E:\WINDOWS\system32\dllcache\extmgr.dll
2007-10-10 23:55 124,928 ----a-w E:\WINDOWS\system32\dllcache\advpack.dll
2007-10-10 10:59 70,656 ----a-w E:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-10-10 10:59 625,152 ----a-w E:\WINDOWS\system32\dllcache\iexplore.exe
2007-10-10 10:59 13,824 ------w E:\WINDOWS\system32\dllcache\ieudinit.exe
2007-10-10 05:46 161,792 ----a-w E:\WINDOWS\system32\dllcache\ieakui.dll
2007-08-01 17:39 92,064 ----a-w E:\Documents and Settings\Mani\mqdmmdm.sys
2007-08-01 17:39 9,232 ----a-w E:\Documents and Settings\Mani\mqdmmdfl.sys
2007-08-01 17:39 79,328 ----a-w E:\Documents and Settings\Mani\mqdmserd.sys
2007-08-01 17:39 66,656 ----a-w E:\Documents and Settings\Mani\mqdmbus.sys
2007-08-01 17:39 6,208 ----a-w E:\Documents and Settings\Mani\mqdmcmnt.sys
2007-08-01 17:39 5,936 ----a-w E:\Documents and Settings\Mani\mqdmwhnt.sys
2007-08-01 17:39 4,048 ----a-w E:\Documents and Settings\Mani\mqdmcr.sys
2007-08-01 17:39 25,600 ----a-w E:\Documents and Settings\Mani\usbsermptxp.sys
2007-08-01 17:39 22,768 ----a-w E:\Documents and Settings\Mani\usbsermpt.sys
2007-07-25 09:03 25,200 ----a-w E:\Documents and Settings\Mani\Application Data\GDIPFONTCACHEV1.DAT
2003-03-21 08:07 16,056 ----a-w E:\Program Files\owcstp16.dll
.

((((((((((((((((((((((((((((( snapshot@2007-12-19_23.27.52.07 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-03-13 05:27:12 163,328 ----a-w E:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-05 01:36 1135968 --a------ E:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= E:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-05 01:36 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="E:\WINDOWS\system32\ctfmon.exe" [2004-08-04 12:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="E:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20]
"Google Desktop Search"="E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-10-01 01:02]
"AVG7_CC"="E:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-10-29 08:36]
"!AVG Anti-Spyware"="F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 14:55]
"COMODO Firewall Pro"="E:\Program Files\COMODO\Firewall\cfp.exe" [2007-11-24 08:42]
"PCDrProfiler"="E:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe" [2005-11-01 01:17]
"RTHDCPL"="RTHDCPL.EXE" [2005-08-26 16:23 E:\WINDOWS\RTHDCPL.EXE]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 15:28 E:\WINDOWS\SoundMan.exe]
"AlcWzrd"="ALCWZRD.EXE" [2005-08-23 13:47 E:\WINDOWS\ALCWZRD.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Picasa Media Detector"="E:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-28 06:47]
"AVG7_Run"="E:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-10-29 08:36]
"DWQueuedReporting"="E:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 09:01]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"= E:\WINDOWS\system32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2007-06-01 16:51 257088 --a------ E:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
E:\Program Files\Messenger\msmsgs.exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
E:\Program Files\QuickTime\qttask.exe -atboottime

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=f:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;E:\WINDOWS\system32\DRIVERS\cmdguard.sys [2007-11-24 08:42]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;E:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2007-11-24 08:42]
S3 Tomcat5;Apache Tomcat;"e:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe" //RS//Tomcat5 []

.
Contents of the 'Scheduled Tasks' folder
"2007-06-17 09:54:22 E:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- E:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-12-20 02:36:38 E:\WINDOWS\Tasks\MP Scheduled Scan.job"
- E:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-20 08:19:30
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: E:\WINDOWS\system32\winlogon.exe
-> E:\WINDOWS\system32\guard32.dll

PROCESS: E:\WINDOWS\system32\lsass.exe [5.01.2600.2180]
-> E:\WINDOWS\system32\guard32.dll
.
Completion time: 2007-12-20 8:20:19
E:\ComboFix3.txt ... 2007-12-02 21:58
E:\ComboFix2.txt ... 2007-12-19 23:28
.
2007-12-19 17:37:06 --- E O F ---

#8 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,530 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 21 December 2007 - 01:44 PM

You look clean to me. Please rename E:\WINDOWS\system32\guard32.dll.vir to E:\WINDOWS\system32\guard32.dll.

Then reboot.


Let's uninstall ComboFix

Please navigate to, and delete the following:
  • Click on : Start >> Run...
  • Type: Combofix /u and hit Enter
Then,

Do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
    Extended (if available otherwise Standard)
    • Scan Options:
    Scan Archives
    Scan Mail Bases
  • Click OK
  • Now under select a target to scan:Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
    • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post.
Please post the Kaspersky report together with a fresh HijackThis log for review.

#9 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 23 December 2007 - 05:05 AM

After getting the report. I was trying to format the D: drive.. But after the format System Restore folder is created and I dont have access. i have logon in Safe mode and add my user id in the folder access and then i deleted it. Still it is there...
I formatted three times... Still the folder exists..

Pls help me....

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, December 23, 2007 1:51:14 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 22/12/2007
Kaspersky Anti-Virus database records: 491874
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
M:\
N:\
P:\
Q:\

Scan Statistics:
Total number of scanned objects: 120841
Number of viruses found: 1
Number of infected objects: 9
Number of suspicious objects: 0
Duration of the scan process: 01:27:00

Infected Object Name / Virus Name / Last Action
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0254cc900363bedcd8aca4571183be93_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\037d72a5a4ca7861fa887c33fd66dee2_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03ee7402618f8ad92834ca61e3c41c72_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\047b3ce38af7308888e8e51387d1df49_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0504c97088c4ffc4bd72f95833dabf13_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\05e330fc9e5563d092d47b59c1624450_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0675e1fa46b4cb9148ccbc1a54a6e76b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06c1e173521955e988007cf2e1f19937_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06f9b7b083ac49d3ba3d3eccd8a87402_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0724644473ba72ecdb737dec5aa66759_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07a9f37c86d4a066cf22a64bef9b4335_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07c9ebb9296cfb3a8aa68c2ffc192102_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07d29cc17fd996ea1ce3d8c26ffc281d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07f556359ce9e05d15278fa1d4f2a525_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\084301b1cdd550344bd2df14fc791710_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\087ca5e2e8b31c35ef4ae06305f9e088_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08935b0824e6a9bb419e41f65630d61f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d923bdbf669dba6ba8de6e7efa25dd3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d98a12443da1696db953026ec856d89_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0de270ec5f93a6bf66d0d5179be365ec_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e276da0f4389e01133880b0ac74a3bf_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e737676fd13721db693db5fb6d95cb3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f23c26e7898763c20848f2a5544d71b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0fac5134b0d35360a60c197ec0b4195a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\10f1405feab6fcf04f02abb6fd3185d3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1262999659326c217e8ef808e373cccc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12a55154512febaf4c146ef353cef2a3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12daad66668741d06a70b017fedb5203_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\133016fab0dd68cf96fe88269079f01b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\134662d8443e5e3616f441d8d98ac0a5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1418b6628a756a3879b3b7f5fde5f6fc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\158a6f046739c30dc4e6ebf2b33b98aa_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1637a3b8d7dc856317e6b02cf2954db6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\165f02ca77d263a422d622f1aa194831_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1695d9a0618ea48a5a1951d2e8e04a0f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1712e4e6c21f05cd9e09d2e4aa5c3728_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1719506031f59cae76c2a61644217f58_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\171b409338d044a043c2f5af4d512bf2_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\176c14a859bb05c22e0d656472441907_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\17ace434d2cf963dfee4fe4b90d2d88b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\185b4be6e8138f51cf66aadd5d3e7015_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18b5555b15a5dd4b0e7d66af34df9e10_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\190c8e5ddcbbcc1895fc569a9b66b03e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19184dcc1c5cd5e32b12409c57b69476_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19da0be9ed2722b55c7ff33c7a666e1f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a0380725587c47e1b428ebe7dc17630_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a59bc3e13e9209176c757516ffc0d49_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a6baf6fe300920b679221da6eda9213_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a90e88501910f338b2a82d9eaade536_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ae399e195f350f1cfa3160472e0d4cf_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1bf08a03cb850703dca9a96970ba91b3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c0f037811dfec398b97f7c83fb5fa2e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ceb4fc1552bdce58ddb1072f0f5d7be_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1dbcd7b5a72c510ca74073a687ed35ae_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e23f3449cc213ad4b07c5fadc5e90ec_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e91cf877a77605c59718de97151de4b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ebac8cad39849b67ec69f4663a86a42_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f390d7b2dd6ad0dd1d8719966491d7d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f56b32027f91b288d0ed72eda6cd81b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f733bf85957a1c50040f134aa408c1d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fdf23b7c2364884596f61ce47ae3d31_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fe49c1288e358e17bcc89201a42c878_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1feb4b1c1d0a06fd51d63ecf656f15c7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fef9c162b6a9053f25168b08b471da1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\205a8e771eb95384be1d03aac97cd376_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2094044a6a7781930ab3babd6a756cfb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\211530d20a8ad2dcac00b9c4f68c29c1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\216f235051192e94345bc3ff802dd34c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21a9a98ac988c5e58879684aaa6d6c09_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21d24e039149cf2b99b10a272710411b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21e7b94fc862940217c7a9833e2abfd5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\220f3e7915d53e218bf363094bb15508_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2251b51c5875c3d6ed68ca432caf6dc9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2299a7f9c0b61ef28826830e0d554a7d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2342f57c40f3a066299375c8fee86d9e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\236ef5c7578890cdb81753f83ca4dbb3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\23737b89c2df9d7f18fa8cda9de9ab6d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24594d007a6c19e96b38917aad27095d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\249faf3ec1f8456fb09d493f886ad63e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\253365b0edb509ac9aae2ca84319f296_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\255bd4cc3ffc64a15e51c245d11cdf8e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\258626f50632393e13cf6a086a8c1d59_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2615961f1f6ed262283c4adadf7842f4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\262be95c99fa501b777c733e2e6fe88b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26a67759b407d6c8c0d5acf49a220797_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26eea45cedaa2679e8a2d033383ceef0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\270ecb1c385fa38cfeb74af1eb1b8225_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2724bdb6be6e8d2be86683c20d63ec8f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27b1af816fabb65d98983e25fd8cc778_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27cca23675dc8cb9acf541d9c2ab6b27_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27cfbe67a265d9c69fd2c9c201e61626_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27eb5272b7c06350f59e9c26d6189d11_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2805c9c3be021073bbf9ea4a65db7e82_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\284ed22ab989c73adb5db7b072fe6e7d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2890094c480ecb24f8e9511dac13d984_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2894c271976d36fb9c2e11d2e62db4ee_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29829be7ea2d3f2060de6672527dbb0f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29eb95190145533eccf51fa613133de7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a122bd656599fdb58331ba41c34e4da_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a2a3f43064d3ea4a37b7d8a1c8519b0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a3249d9b00bc7acf37547549981f106_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a79c315c8e49fe746596e1adf035a4f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2adbedf86680e1dfd0f976b90e8fd8e9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c4fc077066bc4a50331f02e2a4168bb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ccc21665d30cdb9a5fe61ed4f3afdff_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d459432a009a8fc4657257fb2142f40_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d93dedb5c86f5c42afe88bfe01ea14c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e544c4fe8f902a2af68a4acd1f1faf1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\310f02570d196cb903ae6b69d6cc8728_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31bd835451f1a20ac5c8318ebbff2f9c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3258e4c06b97560c6fb3ffe44c63cb8b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3346a7d32922662ce01cf8c147c39642_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3387b2394a2c935a7599183839e83aa5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\341bd3619f46f91b5aa72b329d2e66a2_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\344dbea2005edcc0c2648a4791529b9f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34f36cf01452b41100bbc5a963462ddd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3533ac9560ee6c24ac458065fa88301f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\366bd88939f2f0d1d96d077a1336fbd6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36b3985fc49956bed0ebc03b6208141a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36ce97a3ae680bbe10570a667691b645_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36d75b8112f436c88e6697f9575dd100_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3761285a1e76b5d24e71559ad72bcaa6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37ac8cc87cf804916b83a653bb3c5b0c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37b16ffa8c7360239cccf620c0762a8e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37cd41b436897327bd75d1a9c2ad0540_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3871ca3ede74977096fe11ad47617b54_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3a2c3b8c3e0f41a35bc2013d3996790b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3a44cb333add985638fb8cd768439443_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3a8aaa3f31a853cf4ba29b972fe9ba90_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3af19f1bc6363d5c1052e4c9e9775521_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3b058de580113dd4c14bba454d34b63c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3bef17d5e3ee0d285cbab5b0be265e38_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3bf9f6e448c44099856510fe507375db_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c98bc78108a237d14b68c6a2b179dee_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3cbc6fd0fa7e2435b1568cbeac195591_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3cfa8955f0dbe55759395685fcca2788_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3d355f85f6e89ccae9cd096ae9a3b1f9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3d75441dd1328627b23450bdb7a7c3ec_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3d8d29dd4a909830c08f960353b55678_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ea8f7b39b6047962d7331e975840f2f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ee19aeba34506dbfb6720621ceb46af_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f4ee1d7e05cde40e90fce1c14bbe0e3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f852b114593ada0447ba0e04bfe6223_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4021fea5bf7283a99868c75dba0fedab_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\40ae21a7739d2b64ed03f6dcae780d08_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\40c7dafe2e2394a932853dac232ceb9c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\40da88ce19ee6b050831fbd16f9b9534_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\417bc770329cfe9a46d129fb7a9f558a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\41a6566f863769ce0573bd4e50a48c3c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42170d22e269737038ebe121a0615f2a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\422f236fe83114f4bfec4bb0f50fbd6b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42e0b99859329c57586f424b1f831bdd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\432b81a57a53a51b3b15bf46732d0e59_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\432ca4143a5dbfac032b77e72245175e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4394385859d8386882b482ba47fbe9ed_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\441620a1fa55bb2215a65ef2d01e12f6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\451a52bc430d001c0ffd81df1cb04903_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\45d594143ce00e630f0ded08e976e851_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\466220d91114e18c9a6bc27d7ab234f3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\470e888cd9111dafd4b114f245007af7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4776ff642801723f4167e165925ab6fe_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\47da560d9e92466b4a613f74763dd382_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\47eb7a9905b36956abd273d9f7a9b0ed_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4854df42b829d501f235046de52ca151_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\487da1fb50838d525d843326345fb545_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\488e8bb42fb9f7d55d71d1129b0d1bb9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48bc509bb1c7ea936a472d41181b94cc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48c08d1165042796e9d452295a803f63_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48eda8fd011b0a6f2d668b47f1949abc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49026be64b1e22e8dd3b01c657d02088_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\490a43ec2341730eeb08e9f9ed18c8b8_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4941c21c75b8c819d8e9f9ad35ef28c7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a3b2675d14e1bceee1afb87ba2adffc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a8016978069a2578bd863f72cc10e83_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4cdad8727ab81c6fd25c42f84fcdbdc3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4cfc573d07e2f0f168db58592be0676d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4db109b15e8e99264096b4fcdd179bab_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4deb4912469d867869b3fefc29e620ec_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e5180ca89084ecb0f609841b414e7d0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4f7fbe22621f98ebfb97dd0c9203ee0a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5187e1c21797be9f6649a9b0348c583d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\537f762f24d8ac42a0b93865fde2cf67_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\53e53a3c4c00f39d4cbe9ab851433588_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5514069321920d1faaf78f8b87c97bd4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5579f3d4ff7a3e853385fb92f44c2fa9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\559728e0e419f6fd3ed8c01a3c138b67_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\55b973bea89ebcc7e90134ea1ac39de7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\564e71e4c7af43d36ff0eabbb1a1c7ee_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5676d06a1f12578a5a21e1b58e435d1a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5785f47c435260d62fc5aed21ca9bb3e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\578e70f7b5e0476ebdb7d8d76575ab92_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57e3b8029d987af6bc5bd26b65aee4b6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57f67bb75aa79d67c4797d39fd616aa8_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5818517e705b73ee7598f8bdfa747a99_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5877e97157e16077d21f7eb8b79b7452_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\587b4041d46d23af9ff8c800c2cd7e08_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\58ffeb66a2fa283ce97d8be046aa9412_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\592a32edfa2460fd2012c806cffa4d44_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\598f6a4071eed15f7a254b81efffff84_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\599e1c8884f02dd36ee87271cfdfcd96_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\59b6902f531eaa4a60b7879d923d9389_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5b681aacbb54a7c2ae04acedd891e124_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5b6d681a2c6b9a214331c80269429221_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5c021bfa2e1343a55f885914dd2e02f9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5cbd91541698bd4b226c9d234453e548_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d11b218fb164fa80fef20fef6d4b8d5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d32913967935c8be5faacf8e47e71e7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d8ac81883668403d96b625c7b589a85_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5dd066fc5cbac66e3110d413912baf4f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5df3f16764b5e4de66bd9f6acaa1a077_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e0590f7affe4c6186ce91fc9af101a7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e340ae40ff8b963cfb7df3639cb2026_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e3eea57f9825dad020d3d9b74b77e4e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e70defd0e9e7b059ddbfd66607716c5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fa74133e33bfa725a7e46f6288e9e05_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fe6ea58f5d61df9c63abb6b3135b95d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fea1abdd71b30af9bded17b216b98ec_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5feccc4d2f00c6965475a2463cd1a408_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\606bbea8fc10f2a2e4c680467a410c87_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\60cfcad2d658f9a80f5a668612e9be8f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\60fc49093f7dcdaf59cc78112595fd7e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\615b6907ead27b37c01e9aa0d35f1f90_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\617d6769be7705aee26425ed57d84107_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\622139e979afcf35d30b44182018a6ff_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6301f77fff31b35aae7fd3a18a43e919_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\634dcca5681aabe79662518a0ef48409_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\637265ffee8095634e6dbe0951c1da4f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6381a2f11410d3a58749716d49f4f1b1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\639aa6107081e0334496bc0dcd037bbe_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\63a7562fb1c29e5025abe5f9e617413d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\645b57e39232449c785c98900b527f8f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\648a92b89528e5133051de2df3e65fc9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64968e3bbe684893ce434e07bc35d640_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64a851d8cbbce35ba756f07ded8557e1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64ff8ebc978f04090677fa1584928169_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6503b39d88af7a599370263c0ea9dd09_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\665c7c554fcada02570cdb18c61a7bd7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\66a2f9e6b20adbf59d58d8d6c4f64305_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\66dfab9dadaffef062aac445be475f4c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\67f53a513e50759341680b428ccbc18e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\683b74805a56b5dd31dbe16dcf9c934b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69655fcd3c15166114225c3d774ac9a9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6991a4e06403686a0679585807d822a5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6c33df7b3a101385043b2979402b10de_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6c75af367f071c2d4b9e990573c5bc45_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6d140da6feb14c7220e66a4c41277591_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6e29c065a3aaa73d8ca4a702d1ded568_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6e65aa81fd07e41148d22ed29584756e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6f394a2f816d2361fb1eff949884ff9f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6f7df2f0891ef26a6bde3707bc1abd8f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6fdce2055f15eae3989d5c6b189f00b5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\70332459832fc3948c5780b92007a3cd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\708fbbc721380382ba0299e7aebe8202_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\70e52e9ea2c9e6805cb7554fabbfd540_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\711e3e67f7b7935d0516925cfd983d24_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7162e368650e7ca75ac23cf7fa62e01e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7211f5e948d52973560d88d0c4bd8c91_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\72b3ecc5eaf94568f45f75cef66c705f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\73fc3571905f950a6a8358df9ec43f94_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\740b3faaec0fdf7f0966d446d7f0d7ea_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\74f569b5ec8ab7d055557c2af9fde5e1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\75b31660cef0bc78c4a22d6db1b35cac_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\75cbe8d1e83e0c8f09e1404c68f1ccf6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\76a0b4d10dab0e14f8dfa84f7d143650_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7777b384f7679d8fc717bbb086a07080_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77d28b80b04381848125af9fef4c2001_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77dd40f80c62e0593c235e3bc0478add_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77f4e7b3fc8fd5689b7a7efa3594b0be_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\780a4401bebca14540efbf91a58f017a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7849772ea3ebd5dfa96f5aff1440a225_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\786cb8a7ae62d46d225469e1fadff64f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\78789d576b0515531511c88187ff3621_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7883728272aa50fd5b1d1693ef25ccc5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\78cb5bbbcd7a07b22a4256c1674c9cdf_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\79a6eed35800f221daa6fbc39d1944e4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\79b764813035e4d7045084145bc50ade_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\79e6cdc084cc025ee7fcaa22a3c74bfb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a10eb1b937b256255f660ddb732ce53_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a47767ced6c9ee7bbea28367a74457e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7aa94b0fb047cd55ec6797b9c9601fa4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7b1e4bbed742e00ec665aa720dfce62e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7b2fafcdb99821463eea9ce21bc2baa0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7b8c48d1942550ec732be2612dad12dc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7c6c72b8c40b43768ad41494358fa64c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7d283e44571c0905269593da88f1bfa8_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7d4913077face0267e03194e9e4d38b4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7fa865f46680ea8b71e4bd7530d4e97e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7fc728175d1a90425d50358e601140eb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\80628dd58c5c05015f229bd68352a309_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\80de9ce1859082e0f3d4fa362e161c10_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\813bef1d796fdcdb99636e4341425103_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\81641edd5e846cfd4aeb7163488bde55_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82152bb6589936d672e89fb758b5937d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\823c964b834b2be6e402625643872d7f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8252f07abff54a4f5fca9d59863dfb6e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\828e550ffc9f6e1ec903d79ca883eacc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82aab04ace9efba8715bdc0e5ecb30f0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82afe78662e8c35402bbe915f80be923_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82c981a1ae9279153482b0b41b4d62a1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\831a2ba28aad1117187487ba946f2197_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\833fb5dd64f628f226f8e5cf5e533feb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\83d94102842e92d87032862653783194_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\849c95d1996399c79cf5c28fe470e28e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\85182857cd7b8ed7a87471df75902601_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\857de59da3b21155268c4cef29eed173_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\85b92aac923be85a9b245a330facf442_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\85eb1d27bec3a8be5486fe4df28dc708_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\85ee188c6bdc44f033d8ec7c0415674a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\87f4b8f8033c42da551fc42ac6c6ba96_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88d5be1b8e1ef932d67b0bbba39f8675_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\891e238b4c7c597c2cc6a350aba3089c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\89934911b294245246f5030ad847daba_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\89c21f67f20ca0897052d5ba6ab7eaa7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\89f02890a89628222144a9ba0a75b98e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8a08be178fc8e40d42dcb8fe81ed219d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ac327ccb14af1ed1afd0a7d8f618f00_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ad318307e267c91e09a4b114947de4d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8bfac2deaf7dffac659aa28b7a7fd195_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8cc917fad985fae289e9b90db30aeb63_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8d474faf80a4434ada2f86b8bf0ff034_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8d54d0fb615fc78c73773aa5a60bc1fb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8dc045ed89127d4ab599417195138cf4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8dc1db81b18ab55fbdab259d8d5b8c9d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8dd91b27c06e5cc8dcbf16a12905049f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e0929a0c907f542af835f3627e44b9a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e0f3b727c27ceddd436aa0425756171_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e160a957f4ba14fba6ccda3c9d62585_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e5260c85d59f5abe906f3b1b1bd285a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8f4056ec71b58b71b6d8ab08153ddb1c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8f8a82d26c55fc7574f441d971188e76_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8f9e6a7ee310d837d59c24c385d91a9f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9015f0ef8723618d4d022c40747ee92e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9091ae876f534b3a250af3491928b6dd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90a38aed50c3034b9857830928c44387_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\910c2619339646e0cc78c0dad39e416a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\912330b5f372a3ce1d3a90977f6a102c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\912ee0a5f6e1c7d864fe6b57ee8ac9e0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\91a850d91e2b7b1d4a1780ac80c4fb6e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9229b8e16e65551ef3fcefa34518b8ac_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\92f489a246082a59eeb3a51a3d28df0b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9312f65edb867b84a90062d41f0382f5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\931c234e3ef6c361e5cffaefe062a21e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\931ce03c8cd9d47186f2d65536110656_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\932a2a194b46e4cac567765fbd21d64f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\949f830ceae74e7133ae1158dfaeb4d1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\951cab6517b8c821e2a1aebf966a7056_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\95a0535ba1545ef91fb1481c25f7ecef_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\95bc6c415db5646718900927d0054b44_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\95f8370af99888a514239d6254b5e1b3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\961909b6d9110fc4a0c21fe055d1d6b9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\964f51343894cb5eefeaae8762424d4c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9719b9d6110043a32c59c2c6dd8391fd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\975eb7adeb6b6c7c49fcedc8d6126ef0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9784c83c5e1155940017b7d5ecbb3a30_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9842353dd02e762042d7a16467bee2ff_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9887f0de718bbf9e6dfd4b4b5196b4d2_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\99b43b45c6c17023813be933e7265f6d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9ae1407117b0ba0d54d3398689d6f026_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9b271f1b0d099be3eda3b53ac891532f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9ba95ec8bf07dcdfd77658af0df8be0a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9c3b034b4af31f277fce7a55f6b25c7e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9c524a44be01793518016756d8b85408_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9d214250e95b6523e8d827a9ce42b5de_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9d5d5e91d0c1a79df413f1d0e48a8688_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9d9aee978ed4df4f8331ec265678a754_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9dcec9cfb04be2c26a5e216c07fb60e4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9e83ee687795b0b36dc863e99704c3ff_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9f3b5bad29f05c5d67ae6dafb9a1d3c1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9f9a1ecf27482f4f6af22b089ae769c0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9fe400a85e821bad4beb7f0511081db8_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a032ceda83548a253dfa7a2b636a460e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a04e9504778d5aaa55ed61a58bb74a56_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a0f9b9a420ab8368373a10084660b4bb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a20aa6c8bc2277c3bb0421ffd6133f36_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a3083fc8e2b8de24210be1f76377b6d8_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a3096122e67512c1f9808df7af224361_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a3c71aa534590b93acbec23fdb648860_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a40263ab1eb38115fdcc48391e5e1021_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a50e33d2b0111767a7fe645d5a8998ef_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a5eb02aea3b041bacddfa26cdbb92fcd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a618b005e8648f58f0be5d8f10d10d15_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a668c4b5b06ccfc1ae7d88512ce36ac5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a6f22f62e733043706db417a247934f3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a70286cba7605cf7f27ab1a2a9c0bbfb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a75fc3062d072c0d68751b44e42ce6b5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a7ab0141707f84c9816e94779ab2c472_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a88772f45f47ae4c7ecbd63035e6c7dd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a9c44acfc3089e688fa57da75d448bff_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aadc4cf3323741c2e4b82c2449fd2c18_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ab7e1793b0778eee7a585416e2916c96_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\abd4d7f99347537d44608621b054de6d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ac487282cccaaabfcdda59974e454ed9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ac61f476678a68e377c0056c1577cb42_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\acca5243488c87d16a238dd4b2f53335_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae2ff1b9b1da04ce21070ed8a01c13b7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae9b3b2e7d82d1dcbdff8ee908c9fd48_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aeffa4a0abf9fa9e232db3f946796d08_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\af7dd14b1bf823bf9e74bb4e41611936_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\afa3bb1d7e2b3c537ee1be57d04ca265_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b0887e64406808badcce2c6b23df8fee_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b0ed91d119ca8cf995a2d2bf30511bfa_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b13a08ad331f81d444af32dfe47cb754_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1883c2b72cdade289b23266323e633e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b188d0a7c0abeee9440d67091d7aab2b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b238f8de11ffbe34c2438b6c0f687aae_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b28a4861088f7b13c5a8c14af8693482_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2ef72ada72c5c66ca709752588d5420_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b3a5abf4946a455e28ec2f4ba6840e43_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b42d3a01dc53ef182929ef0b73666699_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b430d668037a18bdddc18580b50da256_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b497ee2c4491edf8c042183dc13e75ec_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b526ec4d6708d9fdd967d333f0aa2b05_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b5a60e421344f1e864493d2535a5e57e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b627c9a4ae4f9d0e52ef750cc90aabd0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b6bfcdfe6e684a49f369560f62fe838f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b722129105515c436fea683da59a030e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b74090bb6a0b1da61d2402797d35d64c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b76ccb77a4ffa5ceda9c36cb31aacb77_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7d8c91e65e65decd22420c23cbf2e66_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7fce1499e8275e2955530177d1917f1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b8ae3d1a45179e78a0b742c57512019e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b909cff9cf9d0eacb4e55e5a1a7d610f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b985d3be4759910a194ad518a37e8c5b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bb639a23be51a714c952dffdd8b3e847_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc18c147c4db8193dfaed06502c3c762_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc36aec8ed892ad4cd307c9516c22856_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc9028b1044d0ac3d53acfe6842a3353_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bcd3adab5d8bf7ced955e05c0f39a3b3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bd131d4666b61c56d38742dc9be916f5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bda774dfa1fe87591e4685fccc06b98c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bdce72ea2403cde40bbeaeb6f40fa0f0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bde2d59d1c491992bea324bb69e70b73_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\be7970962cf2f2c285ac9cc70657e687_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\be9e33b37e7f14e0e53877cb1bfb0c6b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bea345d44626c1fd03f8f2ab2fc0026c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf40b01386b15e4bdefa69c0ba7f7048_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf4fd28f05f367fe6365247412031f63_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf5ac0d8e73bf1436955ae8e324eaa70_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf5e85560cf036b31bb76afd6b07b13b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf5f9d66b3e454747d9c69ebda793bbf_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c037d9c7ee543e51efa953398033f314_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c18ee891b8c9cc3a2f5a0c5bbd6f4723_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c19c562150d426ba23c11756ad152aee_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c1f41a0c4b73b6c11c19ee5edac26b4f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c25d739bac91db9978c6a1e2660c69bd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c2b4d7e6537bb89c1dada0979267427e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c2c811e6b2140769e341b01f9128249b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c4168cc2f8d5140238b4c3a15d7ad7d4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c45a08e983cc8ca05c8679163a8b58a6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c478dbb047ff007b1132b857e72ba98f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c5121448ca84205f8012b91d35142677_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c52e020011218bb7428bef4d95eae361_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c560118ca792cff77d85490ee8d27fcf_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c64490a5235b61348b663aec084b9fb7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c705083a24aad67f47f7b4d18d67d54c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c70a1aee11d6bce591c3f7eca8ba1627_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c7153d51877ef959f9401deb173b62b2_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c7271442a3052c6d7bea6636d9ee35e5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c72dfb16d69bbdd38f2142801f36672a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c7d29710ed45d09b44ed57b42a33f1ad_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c856c3250645381afdb2ba2700eb19b4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c8fd0627db61294353d7cf3a2ffe3cbb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c99f46908ac0f529ad0abe8fa2338a1b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ca444ebc061654cc8d9126f82f103824_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ca6bde6843f9b4a4796d66a9ae79f445_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ca81643c9fca08f27023a2b1aa832bf4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ca91dd8025f949ec6d503495bbcdc1b2_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cb2897dcca71ea69692c6177f7e6bbb6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cb9baf3e5ac215684b353513b7363347_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cbd2b0e70a91e3ad48c354e647aa1a8b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cc15787fc323149eca6be712747ea861_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cc17829800094278b92fde019df4128a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cc20461d3ca4126a724ce00845089d00_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cc60b8c95728e27a18546627d5995349_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cce12ad1869f84febce9414e7528ca45_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cd150694f467e6142947f25016c7a3b9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ce31565396783a0f22f30685dcf582cf_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ce4949ee00d927eb2b335cba856995d6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ce62330b5c9c0b91d7563c3416bdd097_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cec3aebdd676ea194987707ec4ba6ccc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d0771f8dda121188e12892d159243f31_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d1267649226febabb5212244f7584c50_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d1b16537040b719e51a5731eeec41df6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d1bc0cab5b681dc4b48c968bf71a8884_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d22db1d1b4d5eb5ac7bd34927e243dcd_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d24b4315743fe4962096620d9965a319_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d26c21d75b1177d7d348e653ae6232ff_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d2ad0ec63bbcc37978bf821a5daf6d84_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d33313b62d70e5c131d316d111296417_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d3bc17100ed0df6918dc146c5d9f0424_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d3c989bcfe7090fb1cba644784bf4719_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d43eb8e0c7c1a0d75e8c8ad250eb9cd6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d4bbdb85f253ef189d7604fcbb1a6268_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d4be5b1c54c1600faec4504fe8288ac7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d567b61e62a9c5a5b4833227fe8da049_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d5aa6b2ad0b2218df3ce1d0edb88e029_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d621ee187310dce6867043d1876b5411_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d7d93b89988d094b13eaf2651f195496_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d7de1f2ab201004f99b1ed4908101e2b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d84fe9eec3aa8a0bdeb9add7c025e7b4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d8e15497db2e4a32311db9822719a779_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d998dbafcf51471d3b1adea3380315f3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d9b0142b043e383ec9c60a689d27f504_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\da0f0970814fe6278807deae42346702_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\da255c8be3993f836de91b3bbcb5bc6a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\da2640c741df32323625e22e3fbe4ae5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\daf42dbcec353c1f282cce271852c308_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dc7aef3a07451a005e5c6e971670c7df_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dca58d0d5ddd7c5f79ef42cd342d0140_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ddee5da3a8f4441fa6c0713dad1deeea_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\de969322eb56c156f4b2babf1b073aba_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dec117611a6bab4c5824cdde3bf52b66_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dec843f6bc24fcc765ec67928b29e370_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df3ceacebf3a4803616a9eb2edd9631d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df6407b37fa869ff62cb875969627dd4_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df9210d783a82e7e07a1cd6635bc0e38_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e0341dd7c22c69895f95f3af3f2504c9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e0553c9d678e8f80bc722c620d5bdf59_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e069789d06b33b460585685cbcbca3dc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e11ff5a33c43c657bed0f04e44d0fd73_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e21932bed9f4e54eb8c50d526f2e47a5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e34eeffcbd92815ebd6977e9f9962759_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e42fbbc75ac74a07d7a422f8d5064d52_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e4673a1d4e6ee155513250ba119f6c7e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5baf0bd1f7f42fcb519a1d09fe27c79_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5f14cf646d35c551349ccdd19057bf0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e6224d16ca6d3084c1060323dedb4913_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e72c8c4f87f446f59641b163f22c5b58_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e7ce4bcf5375443fc91975b94d505091_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e7d83b4939cd15acd3104ae8be0a6e1c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e80823c1609568095e0c098ee37536f6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e81534c8e9fe9c0666578143be22d3db_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e8b2018955bbdefe428675a42a042b60_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e8be21ce067fec42a38716921228f53b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e8d47711c369b1c3d6d58c50d60e565e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e90803280f2007f59fb536efd7fb911f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e91269d969926841048ff3b662b83c8e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9a86cb28f881be140393fc96254853f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9d33712a4c5960167a29809d5a2a8d9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9e7f375a3e19f0c6e5de6b5730ff42f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\eb6b4e750bded9297d79290239599468_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ebfb01fe0f6536084dc68440469f613f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ebfc38af1bd3ca9a6ee0838f64b58306_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ec10acb05d7629492523e1d349abc9d3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ec4010934b66bfed410c5ed540ffb3a1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ec7ef32c5f8d6265a624ceda8f2ab88e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed1d2a5b87576a25de749b20d9fb3a57_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed317f6726a6a29d8d198cf5a871218c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed3531f17c6b84668039fd4bf704c275_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\edd7c966e94f9656c31f7239fd0edc1d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\edf7312ea33760aeeffd929918f19431_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef202b89521c9a2bfa54b457fff5c75a_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef222aebf90e2bb809ef8523e767c36f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef3136f2588458e083d8fc1e3e52f8b5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f075db65a6b1f9992ca9a1b1574d3ce7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f0814725a843ac9785718c21d8fba588_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f09d15d947942d1316448250ceb9e8ee_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f0b6a617d33b3069a9008210d9b7f1c3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f0d7ec7dfe61df1c455f0c4a0a9c44fc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f16439430197bee38e6043fd7caaa621_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f1690eacf5779acdc394e579c1912ae3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f193f3ffdd8e8e7854dc5209f1704273_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f198b5a787b1ef82d7fa254182aa679b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f22bc99eb4daec8b627fb60554d9d8e3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f268d7dcfb2a02c32828aa02abaec161_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f273b8d14dfc88564e1329927ab57611_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f2fb0e5ba9b338961206c810af4c2466_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f39e5139a4216d7992512a521941feb6_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f3f6c6b45610096280d37895fd8a7b04_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f40c9b90d4596673e0259cfeea1a9b47_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f41c879f21229d5763bd220a06bbb8e7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f435a754db39b78055a8c19f5d84fdfb_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f44c2cacdca03ac01658b20a9fb6d27b_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f45aadcb4e9312dfaf104eb97fad51f8_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f5e4833cf0085f629565e22dbd8fc371_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6193f1a73ed6ff0b5a00ce2a9a9a3f9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6857403be088916e73bf089f0faddc8_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f7aee05e0cd6c79cca1482aac480b88f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f7af4affb6779d60e1d10f1872c3fa97_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f7bb06d4c535b704ef77b471c4c5106e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f818324fc795f67574ee2d852ee38e97_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f81f98946e2934eec49516b2d79a6a84_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f82d77dcea253f91a6e1634e0778a51f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f83933ac91049f6ff715316aed260be0_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f862f7e0d1a1910737bb8dd25f8b53dc_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f93d5a82b254c5ed2865997084b55808_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f94b3da8ea9a649904cba616b5ba3bbf_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f97e86df40a37c90874dc32822faaa52_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fa2408bd63a7855cca9576d0a4ad646f_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fa5f0b5ed58c83ee13a0701081ad95b9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fab3a3dc13a608193ebfc26b6b2baf29_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb3aebd2543e01c1eabc4447136c83fe_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb58de71e616edf7ad2316216e89c80e_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fba6a0a4d168cca5f32e2ef5456f89e9_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fbe382d5bdd0f391006cca90dcf5bb11_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc090acbc3f995115840caee97b7b535_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fcb6df872088a113efd6ef60b7ea27ec_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fcc13fa114df75c9c0730ebe41f39bd7_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fd368e2098d1fe861e8b94a974d12bf1_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fdd251ebd76921121ef53eb366d25a94_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe25e422babd3abd83f81c83ec65cad3_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe29b2220fa42e02a7e3b00b0bb87b5d_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\feafb73577978a331892c578cccf361c_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fed8f8660a6623996bf30fb3d4003ad5_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fff4cf23ed4145bf150f9a58456166f2_6b0b8295-2c47-4edd-abe8-f98857e842fb Object is locked skipped
D:\Documents and Settings\mani\Local Settings\Temporary Internet Files\AntiPhishing\07FB382D-AA75-4683-82F4-EAB265A275CB.dat Object is locked skipped
D:\Documents and Settings\mani\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP50\A0022708.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP51\A0022729.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP52\A0022846.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP57\A0023004.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP57\A0023005.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP59\A0023079.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP59\A0023080.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP61\A0024050.exe Infected: Trojan.Win32.Enfal.d skipped
D:\System Volume Information\_restore{B49B0882-DF0B-4302-B147-F671472B8AE2}\RP61\A0024052.exe Infected: Trojan.Win32.Enfal.d skipped
E:\WINDOWS\system32\config\system.LOG Object is locked skipped
E:\WINDOWS\system32\config\software.LOG Object is locked skipped
E:\WINDOWS\system32\config\default.LOG Object is locked skipped
E:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
E:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
E:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
E:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
E:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
E:\WINDOWS\system32\config\Internet.evt Object is locked skipped
E:\WINDOWS\system32\config\OSession.evt Object is locked skipped
E:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
E:\WINDOWS\system32\config\SECURITY Object is locked skipped
E:\WINDOWS\system32\config\SAM Object is locked skipped
E:\WINDOWS\system32\config\SYSTEM Object is locked skipped
E:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
E:\WINDOWS\system32\config\DEFAULT Object is locked skipped
E:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
E:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
E:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
E:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
E:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
E:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
E:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
E:\WINDOWS\system32\h323log.txt Object is locked skipped
E:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
E:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
E:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
E:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
E:\WINDOWS\Sti_Trace.log Object is locked skipped
E:\WINDOWS\wiaservc.log Object is locked skipped
E:\WINDOWS\wiadebug.log Object is locked skipped
E:\WINDOWS\WindowsUpdate.log Object is locked skipped
E:\WINDOWS\SchedLgU.Txt Object is locked skipped
E:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
E:\WINDOWS\SoftwareDistribution\EventCache\{3FEA3745-6F28-4EE2-B460-AF0E3AB09748}.bin Object is locked skipped
E:\WINDOWS\SoftwareDistribution\EventCache\{E8EECFC9-81D9-463C-94F5-238AD47F2A7B}.bin Object is locked skipped
E:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-04062007-001608.log Object is locked skipped
E:\Documents and Settings\All Users\Application Data\Comodo\Firewall Pro\cfplogdb.sdb Object is locked skipped
E:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
E:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
E:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
E:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
E:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
E:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
E:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
E:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
E:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
E:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
E:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
E:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
E:\Documents and Settings\Mani\NTUSER.DAT Object is locked skipped
E:\Documents and Settings\Mani\NTUSER.DAT.LOG Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Temp\~DF1929.tmp Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\History\History.IE5\index.dat Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{B26FAFE2-60B4-4575-B782-C6249874C2DF} Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\Cache\_CACHE_MAP_ Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\Cache\_CACHE_001_ Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\Cache\_CACHE_002_ Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\Cache\_CACHE_003_ Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbeam Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbeao Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbdam Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbdao Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbvmh.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbvm.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbm Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\fii.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\rpm.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\rpm1m.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\hp Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-black-urlm.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-malware-domainm.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-malware-domainmh.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-white-domainmh.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-white-domainm.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-black-urlmh.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-black-enchashmh.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\safeweb\goog-black-enchashm.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\fiih.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\rpm1mh.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\rpmh.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbu2d.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\dbc2e.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\hpt2i.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\fim1ih.ht1 Object is locked skipped
E:\Documents and Settings\Mani\Local Settings\Application Data\Google\Google Desktop\b866ac11bfc8\fim1i.cf1 Object is locked skipped
E:\Documents and Settings\Mani\Cookies\index.dat Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\history.dat Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\parent.lock Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\cert8.db Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\key3.db Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\GoogleToolbarData\googlesafebrowsing.db Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\search.sqlite Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\urlclassifier2.sqlite Object is locked skipped
E:\Documents and Settings\Mani\Application Data\Mozilla\Firefox\Profiles\wlqzrz1a.default\formhistory.dat Object is locked skipped

Scan was interrupted by user!

#10 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 23 December 2007 - 05:11 AM

Hijack Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:40:44 PM, on 12/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Windows Defender\MsMpEng.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\Program Files\COMODO\Firewall\cmdagent.exe
E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
E:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Windows Defender\MSASCui.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
E:\Program Files\COMODO\Firewall\cfp.exe
E:\WINDOWS\RTHDCPL.EXE
E:\WINDOWS\SOUNDMAN.EXE
E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Internet Explorer\IEXPLORE.EXE
e:\program files\winamp toolbar\WinampTbServer.exe
E:\Program Files\Trend Micro\HijackThis\anayzeee.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - E:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - E:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - E:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - E:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - E:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O4 - HKLM\..\Run: [Windows Defender] "E:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Google Desktop Search] "E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "E:\Program Files\COMODO\Firewall\cfp.exe" -s
O4 - HKLM\..\Run: [PCDrProfiler] "E:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe" -r
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "F:\Program Files\osCheck.exe"
O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: &Winamp Toolbar Search - E:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://E:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} -
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1197134050375
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS2\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O20 - AppInit_DLLs: E:\WINDOWS\system32\guard32.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - E:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - E:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GoogleDesktopManager - Google - E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - E:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - E:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Apache Tomcat (Tomcat5) - Apache Software Foundation - e:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe

--
End of file - 9657 bytes

#11 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,530 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 23 December 2007 - 01:42 PM

Update Java:
  • Go to Start > Control Panel double-click on the Software icon > add/remove programs.
  • Search in the list for all previous installed versions of Java. (J2SE Runtime Environment.... )

    It should have next icon next to it: Posted Image
    Select it and click Remove.
  • The current version can be downloaded from Sun here: http://java.sun.com/javase/downloads/index.jsp Scroll down the page to 'Java Runtime Environment (JRE) 6 Update 3' and press the 'Download' button. On the new web page, click the 'Accept License Agreement' button. Then select 'Windows Offline Installation, Multi-language' in the Windows Platform area just below the Accept button.
And post a new log.

We will clean those infected files after this. Do not worry about them as they are not affecting your computer.

#12 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 26 December 2007 - 12:10 PM

I uninstalled the j2se jre and sdk....
pls find hijack log...

FYI:I'm typing this using online keyboard......

----------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:38:13 PM, on 12/26/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Windows Defender\MsMpEng.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\Program Files\COMODO\Firewall\cmdagent.exe
E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
E:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Windows Defender\MSASCui.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
E:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
E:\Program Files\COMODO\Firewall\cfp.exe
E:\WINDOWS\RTHDCPL.EXE
E:\WINDOWS\SOUNDMAN.EXE
E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
E:\Program Files\iTunes\iTunesHelper.exe
E:\WINDOWS\system32\OSK.exe
E:\WINDOWS\system32\MSSWCHX.EXE
E:\Program Files\iPod\bin\iPodService.exe
E:\WINDOWS\system32\wuauclt.exe
F:\Program Files\Microsoft Office\Office10\WINWORD.EXE
E:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Trend Micro\HijackThis\anayzeee.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - E:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - E:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - E:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - E:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - E:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O4 - HKLM\..\Run: [Windows Defender] "E:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Google Desktop Search] "E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "E:\Program Files\COMODO\Firewall\cfp.exe" -s
O4 - HKLM\..\Run: [PCDrProfiler] "E:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe" -r
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "F:\Program Files\osCheck.exe"
O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] E:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: &Winamp Toolbar Search - E:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://E:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} -
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1197134050375
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O17 - HKLM\System\CS2\Services\Tcpip\..\{25C888FE-7A0B-4BF3-B415-764A8294F8BC}: NameServer = 218.248.240.23,218.248.255.145
O20 - AppInit_DLLs: E:\WINDOWS\system32\guard32.dll E:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - E:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - f:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - E:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GoogleDesktopManager - Google - E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - E:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - E:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Apache Tomcat (Tomcat5) - Apache Software Foundation - e:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe

--
End of file - 9755 bytes

#13 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,530 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 26 December 2007 - 01:38 PM

Now that your clean we need to disable and enable system restore to remove those infected files stored there:

Disable and Enable System Restore. - If you are using Windows ME or XP then you should disable and reenable system restore to make sure there are no infected files found in a restore point.

You can find instructions on how to enable and reenable system restore here for your particular Windows Version:

Managing Windows Millenium System Restore

or

Windows XP System Restore Guide

or

Windows Vista System Restore Guide


Renable system restore with instructions from tutorial above


Next,

This process will clean out your Temp files and your Temporary Internet Files. Please do both steps:

Step 1:Delete Temp Files
To clean out your temp files, click on Start and then run, and type %temp% and press the ok button.

This should open up the temp directory that your machine uses. Please delete all files that are found there. If you get an error when deleting a file, skip that file and delete all the others. If you had trouble deleting a file, reboot into Safe Mode and follow this step again. You should now be able to delete all the files.

Step 2: Delete Temporary Internet Files
Now I want you to open up Internet Explorer, and click on the Tools menu and then Internet Options. At the General tab, which should be the first tab you are currently on, click on the Delete Files button and put a checkmark in Delete offline content. Then press the OK button. This may take quite a while, so do not be alarmed with how long it takes. When it is done, your Temporary Internet Files will now be deleted.

Finally, and definitely the MOST IMPORTANT step, click on the following tutorial and follow each step listed there:

Simple and easy ways to keep your computer safe and secure on the Internet


I am closing this topic. Please message a moderator if you need it reopened.

Glad I was able to help and if there any other problems related to your computer please feel free to post them in the appropriate forum. Though we help people with spyware and viruses here at BC, we also help people with other computer problems! Do not forget to tell your friends about us!

#14 Manikumarv

Manikumarv
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 27 December 2007 - 09:35 PM

still automatic keystroke.... r coming....

#15 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,530 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 28 December 2007 - 08:40 AM

What happens if you attach a different keyboard? Does it stop happening?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users