Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer Slows After Browsing


  • This topic is locked This topic is locked
18 replies to this topic

#1 fuzzytaint

fuzzytaint

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 27 August 2007 - 08:11 AM

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:43:56 AM, on 8/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Gilat\QMS\QMS.exe
C:\Program Files\Gilat\GSU\GSU.exe
C:\Program Files\Gilat\IBQoS\ibqossvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\StarBand\Mission Control\HsuGui\HsuGuiControl.exe
C:\Program Files\StarBand\Mission Control\TaskBarClient.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
C:\PROGRA~1\GILAT\INTERN~1\AS_Agent.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
C:\Program Files\Gilat\NetAgent.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\StarBand\MISSIO~1\evrep.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\mshearts.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:9877
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HsuGuiControl] C:\Program Files\StarBand\\Mission Control\HsuGui\HsuGuiControl.exe
O4 - HKLM\..\Run: [TaskBarClient] C:\Program Files\StarBand\\Mission Control\TaskBarClient.exe
O4 - HKLM\..\Run: [NettGain2000 Verifier] C:\Program Files\Flash Networks\NettGain2000\Bst\NettGain2000 Verifier.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [NettGain2000] C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - Startup: AutorunsDisabled
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1187653855140
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{70C320E7-6A90-463F-997A-E50366ED2562}: NameServer = 85.255.113.118,85.255.112.101
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.113.118 85.255.112.101
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.113.118 85.255.112.101
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.118 85.255.112.101
O23 - Service: Gilat Quality Measurement Service (Gilat QMS) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\QMS\QMS.exe
O23 - Service: Gilat host software update service (GilatHSU) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\GSU\GSU.exe
O23 - Service: Gilat Network Agent Service (GilatNetAgent) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\NetAgent.exe
O23 - Service: Gilat IBQoS Agent (ibqossvc) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\IBQoS\ibqossvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: RPAService - Unknown owner - C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WgwService - Unknown owner - C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe

--
End of file - 8170 bytes
Any help would be appreciated thanx fuzzy !!!!!!

BC AdBot (Login to Remove)

 


#2 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:04:41 AM

Posted 07 September 2007 - 06:06 PM

You may want to print out these instructions for reference, since you
will have to restart your computer during the fix.

Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe


Save it to your desktop and run it. Click Next, then Install, then make
sure Run fixit is checked and click Finish. The fix will
begin; follow the prompts. You will be asked to reboot your computer;
please do so. Your system may take longer than usual to load; this is
normal.

At the end of the fix, you may need to restart your computer again.

Finally, please post a fresh HijackThis log, along with the contents of
the logfile C:\fixwareout\report.txt

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#3 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 08 September 2007 - 03:24 AM

I ran the report you asked for after the download. here is the report--
Username "Owner" - 09/08/2007 4:11:05 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
"nameserver"="85.255.113.118 85.255.112.101" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{70C320E7-6A90-463F-997A-E50366ED2562}
"nameserver"="85.255.113.118,85.255.112.101" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{9F724477-3CAA-420F-A903-B7A6CBCF238D}
"DhcpNameServer"="85.255.113.118,85.255.112.101" <Value cleared.

Successfully flushed the DNS Resolver Cache.


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kdzvo.exe"
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"HsuGuiControl"="C:\\Program Files\\StarBand\\\\Mission Control\\HsuGui\\HsuGuiControl.exe"
"TaskBarClient"="C:\\Program Files\\StarBand\\\\Mission Control\\TaskBarClient.exe"
"NettGain2000 Verifier"="C:\\Program Files\\Flash Networks\\NettGain2000\\Bst\\NettGain2000 Verifier.exe"
"SSBkgdUpdate"="\"C:\\Program Files\\Common Files\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""
"VTTimer"="VTTimer.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"AAWTray"="C:\\Program Files\\Lavasoft\\Ad-Aware 2007\\AAWTray.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"ERS_check"="\"C:\\Program Files\\Common Files\\WinAntiVirus Pro 2006\\ers_startupmon.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"CanonMyPrinter"="C:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe /logon"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"AROReminder"="C:\\Program Files\\Advanced Registry Optimizer\\aro.exe -rem"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"Yahoo! Pager"="C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe -quiet"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"CyberDefender AntiSpyware"="\"C:\\Program Files\\CyberDefender\\AntiSpyware\\cdas4.exe\""
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~
Thank you for your assistance.Sorry it took me so long to reply.FUZZY !!!!!

#4 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:04:41 AM

Posted 08 September 2007 - 02:40 PM

Hi

Show hidden files
-----------------
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.

Search for kdzvo.exe file and delete if found. Reboot and run Fixwareout again and post its log together with a fresh hjt log.

Edited by Blade81, 08 September 2007 - 02:41 PM.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#5 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 08 September 2007 - 06:20 PM

here is the fixware report
Username "Owner" - 09/08/2007 19:07:01 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check

Successfully flushed the DNS Resolver Cache.


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kddzy.exe"
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"HsuGuiControl"="C:\\Program Files\\StarBand\\\\Mission Control\\HsuGui\\HsuGuiControl.exe"
"TaskBarClient"="C:\\Program Files\\StarBand\\\\Mission Control\\TaskBarClient.exe"
"NettGain2000 Verifier"="C:\\Program Files\\Flash Networks\\NettGain2000\\Bst\\NettGain2000 Verifier.exe"
"SSBkgdUpdate"="\"C:\\Program Files\\Common Files\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""
"VTTimer"="VTTimer.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"AAWTray"="C:\\Program Files\\Lavasoft\\Ad-Aware 2007\\AAWTray.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"ERS_check"="\"C:\\Program Files\\Common Files\\WinAntiVirus Pro 2006\\ers_startupmon.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"CanonMyPrinter"="C:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe /logon"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"AROReminder"="C:\\Program Files\\Advanced Registry Optimizer\\aro.exe -rem"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"Yahoo! Pager"="C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe -quiet"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"CyberDefender AntiSpyware"="\"C:\\Program Files\\CyberDefender\\AntiSpyware\\cdas4.exe\""
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~


Here is the hijack this report
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:17:51 PM, on 9/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Gilat\QMS\QMS.exe
C:\Program Files\Gilat\GSU\GSU.exe
C:\Program Files\Gilat\IBQoS\ibqossvc.exe
C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
C:\PROGRA~1\GILAT\INTERN~1\AS_Agent.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
C:\Program Files\Gilat\NetAgent.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\StarBand\Mission Control\HsuGui\HsuGuiControl.exe
C:\Program Files\StarBand\Mission Control\TaskBarClient.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\StarBand\MISSIO~1\evrep.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:9877
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HsuGuiControl] C:\Program Files\StarBand\\Mission Control\HsuGui\HsuGuiControl.exe
O4 - HKLM\..\Run: [TaskBarClient] C:\Program Files\StarBand\\Mission Control\TaskBarClient.exe
O4 - HKLM\..\Run: [NettGain2000 Verifier] C:\Program Files\Flash Networks\NettGain2000\Bst\NettGain2000 Verifier.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\RunServices: [NettGain2000] C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - Startup: AutorunsDisabled
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1187653855140
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Gilat Quality Measurement Service (Gilat QMS) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\QMS\QMS.exe
O23 - Service: Gilat host software update service (GilatHSU) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\GSU\GSU.exe
O23 - Service: Gilat Network Agent Service (GilatNetAgent) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\NetAgent.exe
O23 - Service: Gilat IBQoS Agent (ibqossvc) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\IBQoS\ibqossvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: RPAService - Unknown owner - C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WgwService - Unknown owner - C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe

--
End of file - 7743 bytes

#6 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 08 September 2007 - 06:22 PM

here is the hijack this report.The other report will be sent shortly thanx !!!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:17:51 PM, on 9/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Gilat\QMS\QMS.exe
C:\Program Files\Gilat\GSU\GSU.exe
C:\Program Files\Gilat\IBQoS\ibqossvc.exe
C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
C:\PROGRA~1\GILAT\INTERN~1\AS_Agent.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
C:\Program Files\Gilat\NetAgent.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\StarBand\Mission Control\HsuGui\HsuGuiControl.exe
C:\Program Files\StarBand\Mission Control\TaskBarClient.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\StarBand\MISSIO~1\evrep.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:9877
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HsuGuiControl] C:\Program Files\StarBand\\Mission Control\HsuGui\HsuGuiControl.exe
O4 - HKLM\..\Run: [TaskBarClient] C:\Program Files\StarBand\\Mission Control\TaskBarClient.exe
O4 - HKLM\..\Run: [NettGain2000 Verifier] C:\Program Files\Flash Networks\NettGain2000\Bst\NettGain2000 Verifier.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\RunServices: [NettGain2000] C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - Startup: AutorunsDisabled
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1187653855140
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Gilat Quality Measurement Service (Gilat QMS) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\QMS\QMS.exe
O23 - Service: Gilat host software update service (GilatHSU) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\GSU\GSU.exe
O23 - Service: Gilat Network Agent Service (GilatNetAgent) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\NetAgent.exe
O23 - Service: Gilat IBQoS Agent (ibqossvc) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\IBQoS\ibqossvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: RPAService - Unknown owner - C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WgwService - Unknown owner - C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe

--
End of file - 7743 bytes

#7 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:04:41 AM

Posted 09 September 2007 - 01:21 PM

Please do a scan with f-secure blacklight

* Load F-Secure Blacklight into a new folder C:\program files\blacklight.
* Start in this folder fsbl.exe and close all other programs.
* Click I accept the agreement, next, Scan.
* After the scan is finished close choose Close.
* The log will be fsbl-XXX.log in the blacklight folder, in place of XXX there will be some numbers.

Search for kddzy.exe file and rename it to kddzy.rem if found. Then delete renamed file.

Remove WinAntiviruspro 2006 (or something with similar name) thru add/remove programs if found.

Save text below as fix.reg on Notepad (save it as all files (*.*)) on the Desktop.

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\~\Winlogon]
"System"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ERS_check"=-

It should look like this -> Posted Image

Doubleclick fix.reg, press Yes and ok.

(In case you are unsure how to create a reg file, take a look here with screenshots.)

Delete following folder if found:
C:\Program Files\Common Files\WinAntiVirus Pro 2006

Reboot and run Fixwareout again. Then post fixwareout log together with a fresh hjt log and f-secure blacklight log (fsbl-XXX.log in the blacklight folder, in place of XXX there will be some numbers).

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#8 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 17 September 2007 - 07:18 AM

I'm stupid.I ran the f secure blacklight found the file you mentioned.I evidently removed the file or renamed it and now it and it's record are gone.I found no program named winantivirus or similar.Although I seem to remember doing a security update a few months back.Sorry to have messed this up.Is there anything else I can do now ? Thanx for your help fuzzy !!!!!

#9 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:04:41 AM

Posted 17 September 2007 - 09:31 AM

Hi

Can't you find Blacklight log file (fsbl-XXX.log xxx are some numbers) anywhere? Please post it if found. Run also fixwareout again and post its log together with a fresh hjt log.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#10 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 17 September 2007 - 08:44 PM

Thanx again,here's the numbers you want me thinks-fsbl-2007091711079-09/17/07 07:07:09 [Info]: BlackLight Engine 1.0.64 initialized
09/17/07 07:07:09 [Info]: OS: 5.1 build 2600 (Service Pack 2)
09/17/07 07:07:09 [Note]: 7019 4
09/17/07 07:07:09 [Note]: 7005 0
09/17/07 07:07:12 [Note]: 7006 0
09/17/07 07:07:12 [Note]: 7011 1752
09/17/07 07:07:12 [Note]: 7026 0
09/17/07 07:07:12 [Note]: 7026 0
09/17/07 07:07:14 [Note]: FSRAW library version 1.7.1022
09/17/07 07:12:56 [Info]: Hidden file: c:\WINDOWS\system32\kddzy.exe
09/17/07 07:12:56 [Note]: 7002 32
09/17/07 07:12:56 [Note]: 7003 1
09/17/07 07:12:56 [Note]: 10002 1
09/17/07 07:36:03 [Note]: 7007 0

the oter 2 to follow thanx for your efforts my computer seems to be a little faster after the file was deleted !

#11 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 17 September 2007 - 08:50 PM

hjt log
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\StarBand\Mission Control\HsuGui\HsuGuiControl.exe
C:\Program Files\StarBand\Mission Control\TaskBarClient.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gilat\QMS\QMS.exe
C:\Program Files\Gilat\GSU\GSU.exe
C:\Program Files\Gilat\IBQoS\ibqossvc.exe
C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
C:\PROGRA~1\GILAT\INTERN~1\AS_Agent.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
C:\Program Files\Gilat\NetAgent.exe
C:\PROGRA~1\StarBand\MISSIO~1\evrep.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\mshearts.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:9877
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HsuGuiControl] C:\Program Files\StarBand\\Mission Control\HsuGui\HsuGuiControl.exe
O4 - HKLM\..\Run: [TaskBarClient] C:\Program Files\StarBand\\Mission Control\TaskBarClient.exe
O4 - HKLM\..\Run: [NettGain2000 Verifier] C:\Program Files\Flash Networks\NettGain2000\Bst\NettGain2000 Verifier.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [NettGain2000] C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - HKUS\S-1-5-21-602162358-602609370-682003330-1006\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background (User '?')
O4 - Startup: AutorunsDisabled
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1187653855140
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Gilat Quality Measurement Service (Gilat QMS) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\QMS\QMS.exe
O23 - Service: Gilat host software update service (GilatHSU) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\GSU\GSU.exe
O23 - Service: Gilat Network Agent Service (GilatNetAgent) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\NetAgent.exe
O23 - Service: Gilat IBQoS Agent (ibqossvc) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\IBQoS\ibqossvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: RPAService - Unknown owner - C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WgwService - Unknown owner - C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe

--
End of file - 7490 bytes

#12 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 17 September 2007 - 09:02 PM

fixware

Username "Owner" - 09/17/2007 21:53:04 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kddzy.exe"

Successfully flushed the DNS Resolver Cache.


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "system"=""
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"HsuGuiControl"="C:\\Program Files\\StarBand\\\\Mission Control\\HsuGui\\HsuGuiControl.exe"
"TaskBarClient"="C:\\Program Files\\StarBand\\\\Mission Control\\TaskBarClient.exe"
"NettGain2000 Verifier"="C:\\Program Files\\Flash Networks\\NettGain2000\\Bst\\NettGain2000 Verifier.exe"
"SSBkgdUpdate"="\"C:\\Program Files\\Common Files\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""
"VTTimer"="VTTimer.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"ERS_check"="\"C:\\Program Files\\Common Files\\WinAntiVirus Pro 2006\\ers_startupmon.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"CanonMyPrinter"="C:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe /logon"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"AROReminder"="C:\\Program Files\\Advanced Registry Optimizer\\aro.exe -rem"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled]
"Yahoo! Pager"="C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe -quiet"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"CyberDefender AntiSpyware"="\"C:\\Program Files\\CyberDefender\\AntiSpyware\\cdas4.exe\""
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~
thanx blade81 !!!

#13 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:04:41 AM

Posted 18 September 2007 - 12:55 PM

Looks promising. :thumbsup: Better do a check with Kaspersky scanner.


Download ATF (Atribune Temp File) Cleanerę by Atribune to your desktop.

Double-click ATF Cleaner.exe to open it

Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache

*The other boxes are optional*
Then click the Empty Selected button.

If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

If you use Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Click Exit on the Main menu to close the program.


Please do an online scan with
Kaspersky
WebScanner


Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky,
Click Yes.
  • The program will launch and then begin downloading the latest
    definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
    Extended (if available otherwise
    Standard)

    • Scan Options:
    Scan Archives
    Scan Mail Bases
  • Click OK
  • Now under select a target to scan:Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been
    infected.
    • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post with a fresh hjt log.


Note for Internet Explorer 7 users: If at any time you have trouble with the Accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%.

If having a problme doing the above

Make sure that your Internet security settings are set to default values.

To set default security settings for Internet Explorer:

* Open Internet Explorer.
* Go to the Tools menu, then choose Internet Options.
* Click on the Security tab.
* Make sure that all four item (Internet, Local intranet, Trusted sites, and Restricted sites) are set to their default settings.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#14 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 18 September 2007 - 08:25 PM

kaspersky

KASPERSKY ONLINE SCANNER REPORT
Tuesday, September 18, 2007 9:19:21 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.1
Kaspersky Anti-Virus database last update: 19/09/2007
Kaspersky Anti-Virus database records: 420484


Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\

Scan Statistics
Total number of scanned objects 38205
Number of viruses found 7
Number of infected objects 26
Number of suspicious objects 0
Duration of the scan process 00:45:31

Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00f04d14e31828a31f63f94443186ff5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0147b0bac7e040bfe020c9e3e2d27f0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\017cf1e94e8cc280a6dca92742f4bb62_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02138aafbe3361c1926ac4233b9f2907_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02d017a4da25cffa6a935280273e00f6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0337b6a347df46ce945e33f9bcf232fc_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03747c6965dbbbab35c7ccf97ef0f78c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\037cf74fe255401be66e646b6c1781da_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04003533ab0a262ef0a9bdd0bd782ffd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\066613c9f2acc01de1479888a88658f0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06d361ff55a13327448a2029965e317d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0859eab0ce2436b6e4306c018df74a15_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b2d3c96bba7fb9a0f92be36e1441716_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0cb47d574da710351f060b166a325d19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0cb8097bd792118e714bbcc04dd243fb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d9182eab58f775835a4854debb27b7a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e5c0b9db9b2c0e460ebd3b9d148f071_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\108aeac45ae856adc750a9083bef5e32_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\109dc846bf3dd05e508651760e860839_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1281e57ce5328bce5c4d5e8a6149d614_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13c7f83f5532ad54a55b2b63db6564bb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\14b3cc274379302bf2f7f25d90bceb94_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\14eb1c44fc8d5b6acd00ec91feec6850_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15d46d1fd6e70ba450dd8d8a1714c519_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\160f31c392a3b17900c153ec6f989f12_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\170e3578b19e7410ac85e0ab9629799a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1837fe3b66e0d45623bbf1603b9ddd20_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19f22e186b523dc8d5332aee35507349_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1abcc2db349185db91366ed67841332a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ae50b5993fd047c07957986caab430b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d36a9c287ed4a6fdd1ecb794efea1d5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f20f3e245c45a6ca9a747e041c94008_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f26e12a799b43b9898b440884ca85ce_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f50f8c133277be1d1a94d7d179cd20e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fab89677065bf68f2c1f9e7b1073128_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fda143be12cec565198394a47289042_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21c85ee37c43e18a6fcb2c4a0fd6b6da_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\262788af2beaa9ad504b3b8ad6cf4a9f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2675c6c89d189da760c9b600c6c93913_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2742c9b142c68309cccb39bde01dcc3d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27d569973e8f12bef462a24837378ec9_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29fe0f18c8023b6a19bc97eeab7f8f5f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29ffd1152af27aabc320e9fe948c0c19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ca2e0b0151a5c4b7c55b66d13183061_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d051b79ddf9dd99020d80b2c1a22be1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e8730c2b784f49570301ee3d1a73444_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ecbdcf5f721d1a35532bcb028e8ccd6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f2957234afb39f30d0028af6d309ecb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3089303ca97bfbe09be44890c313f59b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31dcfdefec8e9ae12616f84ade01deeb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32bad0188bd49e1bafeae7bed0ec8a12_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32c60cb884f6cd431ab89873b041d8be_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3388c1206d82899c53f2d75896e717ec_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33b4731eb8cc92b5d7e99ed102e491dd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34a56b5505efdbba5554d3df9e90ec3f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3711912488cb0476106ba29c71dca2d8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3880ca935aca5b86428cf535be64959b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\38df5915f68ede78213bad535fc658d0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3927f04a1638088955d36fd58a5ea110_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\396982900c443cf3d62134704286e026_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3af51431478ce09c2c9b88867fed0ef4_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3cb943a789dc92a82b87cf1f937c907c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f9718eabd764c281df54c2c61cf477a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3fbd5cebe9d0135c92f8e8adb96e4c19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\400aba093cd391cd0ca35caf155ad559_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\413b53398a1e16f8382c84f245f4a980_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4227765f8bc8528f2f8ab3db0d6af09a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\422f0a486559af9b4e7a438183c929e0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\435f18cf296df21d21f7c24b1df57695_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43e36e2da350c07f3a1857e19fa6d16e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4489426a70585c2dbca989b11e00b273_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\468742a5f887371a1aa7bfdc4df825fa_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4841bc565b4c3c6cb306aa058d999da7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4854d5e7e50bd4428948b53ed6537664_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\489e70988657f7cea1cd68be8ce81a5e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48d94a1dee67b2c3f050c9659c2e8570_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a7af57a2c29b3b70038dd1b608eafaa_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4aefec0800b9c3b924f73ad0b9d7bbdc_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4c8dc626fb96df6fb778c0c85d486748_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d3032f8044c2cf08112808af8f1ae51_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4dbda8e9dabf2d2c91ba58c1bced9a4b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e0b4e246318b3a0f6906c2b289674cd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ea7f7f7d76646443afff8f8322ef1ad_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ed5199942efaf40c94517b8dc8951b6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4f6db653a96c336e4ffe98a6eaf27524_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\516d58b33239714e501b6e9a82afdd89_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51f589d70f25e981443d78d0e63bf7f9_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\54d02af1c6e3c3550c8f1f8ea0b36d50_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\552823c3aab40c8e400feab700e510c1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56e37429dd4b601e419c9acdcd9bc716_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57b86a6ebfe71a6e943f6e5e8e6c23c5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\58b87cf3bf6192076c8819e77ae8f0fe_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5945fa9d84a0555e1eb3aefd6f5af758_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5aa571b8612561dc313738d8a8082473_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5b5c3d7f02f79d4cfb07307db1412272_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5cabf2cc5c061b59f7aaec06185ce844_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5cbe6d0f500ffbfc799e704b0ab7e62a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5ce7d45b933a7f6d6f47b4f8716ad73f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e58ca5e3242406d79f30cb974428659_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6206c3a290337195a2b0b78fa7db83e4_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\632b1494225ca52ca9d04d59eb199ad3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64c7f883f769a570969865e10ea12709_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\667bd0d7e586f8d5040686c2a510c52c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\66e8646ccfbfe5fceacc5747a713c60e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\67049b91e90461df05a04fac7175f8c8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\675c1c44e6665b8f7ee6faeacb772752_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\682e3750b7d1805f5cca2f500bdabcf0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6870ff78ca63a8b24d3829cdb5529b0a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\68cbf0cd7985cbd05957c7d63e50a8bb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\690d7ebe66003063ad5393fd24ed9330_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6999866c1f626ad47dc4b1883db9c952_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69c57ba6ba98408a9530a21816033386_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69d092f96a14e546fa1b05d47ac1dfa6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6a021ef6c58c4b4ad3eb89ffcae8da25_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6fb3494ae71d9a72c29e9f40fe6510a4_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\70b9f4e62eb7af16246b2e346c0182c7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\730cdf86004d2311e2223e26d2cf8bc3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\760a4ea74a9df1d5c45fa83e4d736403_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7710cf31609e6b272aea4851fbb54a87_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77188de1d987d99f8e535261c836032a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7727f087a10315c7eefb50bdc7036ead_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77c71d1a04b212057b841bf40b225929_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7920ca6f80a69df68e698e4cfdff02a6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\792797513d5666617fb3064efa134c4d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\79bc0d58ec59da82492d852163c74c24_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7ac434c88ff84cfbfe031667dfd0a759_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7d4a9d4ca3339525c093a8735c87ee95_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7dfee9fd1f10b427a97a45fd421b94e3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7f60c2277b2c004f62f18829806ece0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7f7773d8928f4119ecad47798b867bc7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82a42943e826d0de9e7edd09041cea0e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82a8030aa7683189e109539d486b651e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8379e3a5867e6bfa4c77803d3dc57b6f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\83877cf58863105c82130a4dffb0e7d3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\849599ed0f34e3f9fb7d86846a9f65cd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86b6f29fb86cc964615c1d5320eeed40_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\87dab417127099036bd420d885a85d0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8979747241b46a4ae04776b47a892c39_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8988f4d5059f8a43e0c348a130a5b351_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8aec51a8b85697b84ae37b153c91542f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c7a2d163c837e245f33fa6c9026cc71_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ceedb7304792b0260f3d0985a8abd8b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8dc1a01af9faee7bf51b2dd8c5b0a057_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8dc5e1d27a4ec4e04afbe160edba3b87_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ebf32557fae58c5cbc9a10683a87c7e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90150d3727ae02874c36de17f26d9eb1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90631aa53f801e58178d0a96bd4bfd50_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90bf68eb6ebc1e0392c38cf4506a24b7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\918e94bbdb2d866b92823ce65b296dbb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\919593ba1ba346e72fe002951a80de3b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\926fdb5a17fe7cb41bac87dc71ad6382_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\94d1fea814133c5dca303665aab82874_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9659af5d79dcbd89a5d220abc1d093e0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\976b410d1c3afdb970eee9c6c60d4c50_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9849ce7334cbf1eef2de6da4fc689abe_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\98b314e49c0201d542969ea316a2ae48_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\99b2fc61e150c80c6e5b34862c600f56_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\99e9679e005206afa165b7cc69341d8a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9a6f7f69df4faeb62932b8bbc3d23f38_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9b772887ffc14a8c79c02fc41441e45b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9cdb35fba61c56d9694e6e5006928510_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9d465678ee19c0629192c9148bf7a717_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9db7efc9badd76d1ec09ee5cd536ac2d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9ee04b6591c620a0fdd929fec3383a76_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9f13b628623bd6aabd98dd6f83aa61e0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9fb40f85876be0e2dcf12db066806755_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a18f2bcef5c840e597f38b122174cfa8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a2c7ed92e5373e88a4d46f40df2464d1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a3baad9db74fda784ff5aa71f56afe6d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a5b5682bae7876d0ba61a71bd4153b51_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a6d39752cbc3576fde7e4b3a1c1f6c89_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a833dfdbd56e496da65536722472ee2e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a85ac8965e88d2f6a85f77c23362bc19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a91b2feb0d94bf55b516929e04a4965d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a9a08f81c2a206986f215ff8d2d350e6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aa3e7dd5de2060982d276a8ba754195c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae79c5445f13c62210c39e7c9fb570ab_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aec3edc4191cb27f3564f29e6dbd3bf8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\afb44396be436a0f813c31d64ce842b1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b0e1ced5db9e80738a4fffdb9d4d95d5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1177835636e68cb56ccc6767feaf686_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2cfeedcc5428957293369624c223e2b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b309acd598e4eb8b259327918a369982_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b35c659b7071b59b314bfc50f7971e0d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b4b442e9afbf1381c2fb715a5241b4ab_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b5cbde5b83891e5add5e2942b27e5a0d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7cde340a980f31ea2f5db674fd85e85_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b8ece026c5e22bb11699c5c20d41443a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b9e95f750a9a63475c815d27ab20f210_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ba353a02689e94f4ae604229f24cc118_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bb487523171d6d2661cf96c551d85dad_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc293abc764dc53f12ea2f0714661029_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bdbd67b6282c41cc24277d4716db573f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\be4d1d22d19b17875f1b2fdbbe28c8c2_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c158842a6d4f2e9346472ec84a8714a7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c32091978141fc64cb99d035fdfa284b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c419a8b76a9234184dd4036088a8495d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c455888a9d2da0ec91b97f4a0bf675ad_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c4952ef2f786f2266a6e6ab16df50980_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c49db632ffeab6947a7ffbd8d04d0281_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c4d31aaac0581849d2d0e65f7c657e76_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c66ac4b37d9545f83567bbf1a7fcc4dd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c816f8b70e42fef343e89049b7dc5cab_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c81acd845260c0c4ad17175035c369fe_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c83699728782ae3928bc4a64fee6acee_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c899617449e736b5d6e7639db2521782_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c8c0076b2d3874465a71979b414f14f8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c980a1069d98336217bee526ed232b24_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cb358204fa62c9616cbde673864c8c1b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cbad708175a0b9ebe5882cf4c639e5b5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cce6b6faaf3180c5eb8b27f59658781c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cd9d3f3a6798e5498ea358c4969fb7a6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d22391acc8d36a45fb6e9d991474b13c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d229d35fa58da02015badd87b05f753c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d89147e60bdc201ecc5bd66670385c6b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df445d61f36a3ed48aa7823a5352aa72_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e0d3797b0abeb1b84b83f07925026e23_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e3552c4078b20fe388a7b0a375ad9b57_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e37f6d3de8c9ac9fd6c91b2285a927f9_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e41d0cbec594b67bee6a2a8b9ec1bf0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e4563dbda237b897017b2a56a11d5237_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e56794c713f52547f8e27646d29e9e8d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e6f1736bfed186d25c4431c892bf2da3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e8e9882c58a1bd38827c5e7e1271de3e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9751d614d9e711a25a45240cca84a4f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9a858ac15970119893d2b53efc827d6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea07f6ce093356a1d9c3c3e2c6b0ba0a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea09296fbc339c3226384d2737c2c78e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed8878607a5d88993e1093c56f626ff0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef17b53716168c2aae3c89fe2fa65bd8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f173d7a401ef99a93b986b37665cda78_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f198395d7c6fbd5a4ac90edd9e3ce8bf_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f3ef0ac0d606d677db8ce37bab90435d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f4a6ef90ee09672774b2d6bc90bcec59_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f4d2bc57ffb0dff4ba95b4b46169d09a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6406419365b6462938b8095b5117c06_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6676b3f85d7c7aff029aa962a9cf582_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f823c05ef348673d525e462b17351817_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f8c8a9eb30c1049ad8f3dd684f33ea64_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f9eb479b05c584987c0be35e7e3a3496_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fa19eabaaf80615d380f894a23728e1a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\faa94262b3f02ba04364a62735d15c38_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb15525fa325f983a48b6cbccfe5fc94_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb9bacfaf1070d4da4ef72bfb5b527ef_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fd58cb89ff0d1f47ed52fd8480f4b606_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ff94a2cc46a99972708d2b78d6153d32_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx/[From ][Date Sat, 30 Oct 2004 07:14:02 -0500]/UNNAMED/message.zip/message.txt .scr Infected: Email-Worm.Win32.Mabutu.a skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx/[From ][Date Sat, 30 Oct 2004 07:14:02 -0500]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mabutu.a skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx/[From ][Date Sat, 30 Oct 2004 07:14:02 -0500]/UNNAMED Infected: Email-Worm.Win32.Mabutu.a skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx Mail MS Outlook 5: infected - 3 skipped

C:\Documents and Settings\Evan\ntuser.dat Object is locked skipped

C:\Documents and Settings\Evan\NTUSER.DAT.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844/Counter.class Infected: Trojan.Java.ClassLoader.i skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844/VerifierBug.class Infected: Trojan.Java.ClassLoader.k skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844/Beyond.class Infected: Trojan.Java.ClassLoader.k skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844 ZIP: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844 CryptFF.b: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844/BlackBox.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844 ZIP: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844 CryptFF.b: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844/BlackBox.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844 ZIP: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844 CryptFF.b: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844 ZIP: infected - 2 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844 CryptFF.b: infected - 2 skipped

C:\Documents and Settings\Owner\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012007091720070918\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012007091820070919\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Owner\ntuser.dat Object is locked skipped

C:\Documents and Settings\Owner\NTUSER.DAT.LOG Object is locked skipped

C:\NG2000.log Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{52A7F9A3-03E9-439D-B910-C810E09844F0}\RP26\A0006345.exe Infected: Trojan.Win32.DNSChanger.jf skipped

C:\System Volume Information\_restore{52A7F9A3-03E9-439D-B910-C810E09844F0}\RP35\A0008030.exe Infected: Trojan.Win32.DNSChanger.jf skipped

C:\System Volume Information\_restore{52A7F9A3-03E9-439D-B910-C810E09844F0}\RP37\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\kddzy.exe.ren Infected: Trojan.Win32.DNSChanger.jf skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.


kaspersky

KASPERSKY ONLINE SCANNER REPORT
Tuesday, September 18, 2007 9:19:21 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.1
Kaspersky Anti-Virus database last update: 19/09/2007
Kaspersky Anti-Virus database records: 420484


Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\

Scan Statistics
Total number of scanned objects 38205
Number of viruses found 7
Number of infected objects 26
Number of suspicious objects 0
Duration of the scan process 00:45:31

Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00f04d14e31828a31f63f94443186ff5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0147b0bac7e040bfe020c9e3e2d27f0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\017cf1e94e8cc280a6dca92742f4bb62_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02138aafbe3361c1926ac4233b9f2907_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02d017a4da25cffa6a935280273e00f6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0337b6a347df46ce945e33f9bcf232fc_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03747c6965dbbbab35c7ccf97ef0f78c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\037cf74fe255401be66e646b6c1781da_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04003533ab0a262ef0a9bdd0bd782ffd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\066613c9f2acc01de1479888a88658f0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06d361ff55a13327448a2029965e317d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0859eab0ce2436b6e4306c018df74a15_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b2d3c96bba7fb9a0f92be36e1441716_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0cb47d574da710351f060b166a325d19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0cb8097bd792118e714bbcc04dd243fb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d9182eab58f775835a4854debb27b7a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e5c0b9db9b2c0e460ebd3b9d148f071_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\108aeac45ae856adc750a9083bef5e32_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\109dc846bf3dd05e508651760e860839_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1281e57ce5328bce5c4d5e8a6149d614_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13c7f83f5532ad54a55b2b63db6564bb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\14b3cc274379302bf2f7f25d90bceb94_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\14eb1c44fc8d5b6acd00ec91feec6850_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15d46d1fd6e70ba450dd8d8a1714c519_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\160f31c392a3b17900c153ec6f989f12_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\170e3578b19e7410ac85e0ab9629799a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1837fe3b66e0d45623bbf1603b9ddd20_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\19f22e186b523dc8d5332aee35507349_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1abcc2db349185db91366ed67841332a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ae50b5993fd047c07957986caab430b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d36a9c287ed4a6fdd1ecb794efea1d5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f20f3e245c45a6ca9a747e041c94008_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f26e12a799b43b9898b440884ca85ce_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f50f8c133277be1d1a94d7d179cd20e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fab89677065bf68f2c1f9e7b1073128_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fda143be12cec565198394a47289042_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21c85ee37c43e18a6fcb2c4a0fd6b6da_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\262788af2beaa9ad504b3b8ad6cf4a9f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2675c6c89d189da760c9b600c6c93913_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2742c9b142c68309cccb39bde01dcc3d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27d569973e8f12bef462a24837378ec9_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29fe0f18c8023b6a19bc97eeab7f8f5f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29ffd1152af27aabc320e9fe948c0c19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ca2e0b0151a5c4b7c55b66d13183061_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d051b79ddf9dd99020d80b2c1a22be1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e8730c2b784f49570301ee3d1a73444_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ecbdcf5f721d1a35532bcb028e8ccd6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2f2957234afb39f30d0028af6d309ecb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3089303ca97bfbe09be44890c313f59b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31dcfdefec8e9ae12616f84ade01deeb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32bad0188bd49e1bafeae7bed0ec8a12_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32c60cb884f6cd431ab89873b041d8be_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3388c1206d82899c53f2d75896e717ec_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33b4731eb8cc92b5d7e99ed102e491dd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34a56b5505efdbba5554d3df9e90ec3f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3711912488cb0476106ba29c71dca2d8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3880ca935aca5b86428cf535be64959b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\38df5915f68ede78213bad535fc658d0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3927f04a1638088955d36fd58a5ea110_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\396982900c443cf3d62134704286e026_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3af51431478ce09c2c9b88867fed0ef4_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3cb943a789dc92a82b87cf1f937c907c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f9718eabd764c281df54c2c61cf477a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3fbd5cebe9d0135c92f8e8adb96e4c19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\400aba093cd391cd0ca35caf155ad559_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\413b53398a1e16f8382c84f245f4a980_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4227765f8bc8528f2f8ab3db0d6af09a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\422f0a486559af9b4e7a438183c929e0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\435f18cf296df21d21f7c24b1df57695_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43e36e2da350c07f3a1857e19fa6d16e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4489426a70585c2dbca989b11e00b273_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\468742a5f887371a1aa7bfdc4df825fa_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4841bc565b4c3c6cb306aa058d999da7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4854d5e7e50bd4428948b53ed6537664_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\489e70988657f7cea1cd68be8ce81a5e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48d94a1dee67b2c3f050c9659c2e8570_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a7af57a2c29b3b70038dd1b608eafaa_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4aefec0800b9c3b924f73ad0b9d7bbdc_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4c8dc626fb96df6fb778c0c85d486748_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d3032f8044c2cf08112808af8f1ae51_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4dbda8e9dabf2d2c91ba58c1bced9a4b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e0b4e246318b3a0f6906c2b289674cd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ea7f7f7d76646443afff8f8322ef1ad_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ed5199942efaf40c94517b8dc8951b6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4f6db653a96c336e4ffe98a6eaf27524_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\516d58b33239714e501b6e9a82afdd89_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51f589d70f25e981443d78d0e63bf7f9_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\54d02af1c6e3c3550c8f1f8ea0b36d50_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\552823c3aab40c8e400feab700e510c1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56e37429dd4b601e419c9acdcd9bc716_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57b86a6ebfe71a6e943f6e5e8e6c23c5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\58b87cf3bf6192076c8819e77ae8f0fe_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5945fa9d84a0555e1eb3aefd6f5af758_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5aa571b8612561dc313738d8a8082473_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5b5c3d7f02f79d4cfb07307db1412272_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5cabf2cc5c061b59f7aaec06185ce844_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5cbe6d0f500ffbfc799e704b0ab7e62a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5ce7d45b933a7f6d6f47b4f8716ad73f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e58ca5e3242406d79f30cb974428659_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6206c3a290337195a2b0b78fa7db83e4_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\632b1494225ca52ca9d04d59eb199ad3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64c7f883f769a570969865e10ea12709_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\667bd0d7e586f8d5040686c2a510c52c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\66e8646ccfbfe5fceacc5747a713c60e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\67049b91e90461df05a04fac7175f8c8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\675c1c44e6665b8f7ee6faeacb772752_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\682e3750b7d1805f5cca2f500bdabcf0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6870ff78ca63a8b24d3829cdb5529b0a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\68cbf0cd7985cbd05957c7d63e50a8bb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\690d7ebe66003063ad5393fd24ed9330_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6999866c1f626ad47dc4b1883db9c952_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69c57ba6ba98408a9530a21816033386_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69d092f96a14e546fa1b05d47ac1dfa6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6a021ef6c58c4b4ad3eb89ffcae8da25_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6fb3494ae71d9a72c29e9f40fe6510a4_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\70b9f4e62eb7af16246b2e346c0182c7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\730cdf86004d2311e2223e26d2cf8bc3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\760a4ea74a9df1d5c45fa83e4d736403_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7710cf31609e6b272aea4851fbb54a87_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77188de1d987d99f8e535261c836032a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7727f087a10315c7eefb50bdc7036ead_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77c71d1a04b212057b841bf40b225929_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7920ca6f80a69df68e698e4cfdff02a6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\792797513d5666617fb3064efa134c4d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\79bc0d58ec59da82492d852163c74c24_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7ac434c88ff84cfbfe031667dfd0a759_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7d4a9d4ca3339525c093a8735c87ee95_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7dfee9fd1f10b427a97a45fd421b94e3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7f60c2277b2c004f62f18829806ece0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7f7773d8928f4119ecad47798b867bc7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82a42943e826d0de9e7edd09041cea0e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82a8030aa7683189e109539d486b651e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8379e3a5867e6bfa4c77803d3dc57b6f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\83877cf58863105c82130a4dffb0e7d3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\849599ed0f34e3f9fb7d86846a9f65cd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86b6f29fb86cc964615c1d5320eeed40_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\87dab417127099036bd420d885a85d0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8979747241b46a4ae04776b47a892c39_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8988f4d5059f8a43e0c348a130a5b351_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8aec51a8b85697b84ae37b153c91542f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c7a2d163c837e245f33fa6c9026cc71_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ceedb7304792b0260f3d0985a8abd8b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8dc1a01af9faee7bf51b2dd8c5b0a057_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8dc5e1d27a4ec4e04afbe160edba3b87_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ebf32557fae58c5cbc9a10683a87c7e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90150d3727ae02874c36de17f26d9eb1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90631aa53f801e58178d0a96bd4bfd50_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90bf68eb6ebc1e0392c38cf4506a24b7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\918e94bbdb2d866b92823ce65b296dbb_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\919593ba1ba346e72fe002951a80de3b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\926fdb5a17fe7cb41bac87dc71ad6382_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\94d1fea814133c5dca303665aab82874_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9659af5d79dcbd89a5d220abc1d093e0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\976b410d1c3afdb970eee9c6c60d4c50_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9849ce7334cbf1eef2de6da4fc689abe_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\98b314e49c0201d542969ea316a2ae48_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\99b2fc61e150c80c6e5b34862c600f56_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\99e9679e005206afa165b7cc69341d8a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9a6f7f69df4faeb62932b8bbc3d23f38_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9b772887ffc14a8c79c02fc41441e45b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9cdb35fba61c56d9694e6e5006928510_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9d465678ee19c0629192c9148bf7a717_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9db7efc9badd76d1ec09ee5cd536ac2d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9ee04b6591c620a0fdd929fec3383a76_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9f13b628623bd6aabd98dd6f83aa61e0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9fb40f85876be0e2dcf12db066806755_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a18f2bcef5c840e597f38b122174cfa8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a2c7ed92e5373e88a4d46f40df2464d1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a3baad9db74fda784ff5aa71f56afe6d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a5b5682bae7876d0ba61a71bd4153b51_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a6d39752cbc3576fde7e4b3a1c1f6c89_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a833dfdbd56e496da65536722472ee2e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a85ac8965e88d2f6a85f77c23362bc19_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a91b2feb0d94bf55b516929e04a4965d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a9a08f81c2a206986f215ff8d2d350e6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aa3e7dd5de2060982d276a8ba754195c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae79c5445f13c62210c39e7c9fb570ab_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aec3edc4191cb27f3564f29e6dbd3bf8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\afb44396be436a0f813c31d64ce842b1_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b0e1ced5db9e80738a4fffdb9d4d95d5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1177835636e68cb56ccc6767feaf686_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2cfeedcc5428957293369624c223e2b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b309acd598e4eb8b259327918a369982_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b35c659b7071b59b314bfc50f7971e0d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b4b442e9afbf1381c2fb715a5241b4ab_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b5cbde5b83891e5add5e2942b27e5a0d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7cde340a980f31ea2f5db674fd85e85_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b8ece026c5e22bb11699c5c20d41443a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b9e95f750a9a63475c815d27ab20f210_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ba353a02689e94f4ae604229f24cc118_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bb487523171d6d2661cf96c551d85dad_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc293abc764dc53f12ea2f0714661029_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bdbd67b6282c41cc24277d4716db573f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\be4d1d22d19b17875f1b2fdbbe28c8c2_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c158842a6d4f2e9346472ec84a8714a7_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c32091978141fc64cb99d035fdfa284b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c419a8b76a9234184dd4036088a8495d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c455888a9d2da0ec91b97f4a0bf675ad_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c4952ef2f786f2266a6e6ab16df50980_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c49db632ffeab6947a7ffbd8d04d0281_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c4d31aaac0581849d2d0e65f7c657e76_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c66ac4b37d9545f83567bbf1a7fcc4dd_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c816f8b70e42fef343e89049b7dc5cab_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c81acd845260c0c4ad17175035c369fe_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c83699728782ae3928bc4a64fee6acee_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c899617449e736b5d6e7639db2521782_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c8c0076b2d3874465a71979b414f14f8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c980a1069d98336217bee526ed232b24_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cb358204fa62c9616cbde673864c8c1b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cbad708175a0b9ebe5882cf4c639e5b5_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cce6b6faaf3180c5eb8b27f59658781c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cd9d3f3a6798e5498ea358c4969fb7a6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d22391acc8d36a45fb6e9d991474b13c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d229d35fa58da02015badd87b05f753c_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d89147e60bdc201ecc5bd66670385c6b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df445d61f36a3ed48aa7823a5352aa72_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e0d3797b0abeb1b84b83f07925026e23_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e3552c4078b20fe388a7b0a375ad9b57_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e37f6d3de8c9ac9fd6c91b2285a927f9_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e41d0cbec594b67bee6a2a8b9ec1bf0b_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e4563dbda237b897017b2a56a11d5237_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e56794c713f52547f8e27646d29e9e8d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e6f1736bfed186d25c4431c892bf2da3_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e8e9882c58a1bd38827c5e7e1271de3e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9751d614d9e711a25a45240cca84a4f_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9a858ac15970119893d2b53efc827d6_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea07f6ce093356a1d9c3c3e2c6b0ba0a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea09296fbc339c3226384d2737c2c78e_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed8878607a5d88993e1093c56f626ff0_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef17b53716168c2aae3c89fe2fa65bd8_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f173d7a401ef99a93b986b37665cda78_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f198395d7c6fbd5a4ac90edd9e3ce8bf_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f3ef0ac0d606d677db8ce37bab90435d_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f4a6ef90ee09672774b2d6bc90bcec59_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f4d2bc57ffb0dff4ba95b4b46169d09a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6406419365b6462938b8095b5117c06_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6676b3f85d7c7aff029aa962a9cf582_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f823c05ef348673d525e462b17351817_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f8c8a9eb30c1049ad8f3dd684f33ea64_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f9eb479b05c584987c0be35e7e3a3496_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fa19eabaaf80615d380f894a23728e1a_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\faa94262b3f02ba04364a62735d15c38_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb15525fa325f983a48b6cbccfe5fc94_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb9bacfaf1070d4da4ef72bfb5b527ef_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fd58cb89ff0d1f47ed52fd8480f4b606_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ff94a2cc46a99972708d2b78d6153d32_a5be4c31-7cdc-4d1a-bdfc-2de4e3f0acda Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx/[From ][Date Sat, 30 Oct 2004 07:14:02 -0500]/UNNAMED/message.zip/message.txt .scr Infected: Email-Worm.Win32.Mabutu.a skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx/[From ][Date Sat, 30 Oct 2004 07:14:02 -0500]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mabutu.a skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx/[From ][Date Sat, 30 Oct 2004 07:14:02 -0500]/UNNAMED Infected: Email-Worm.Win32.Mabutu.a skipped

C:\Documents and Settings\Evan\Local Settings\Application Data\Identities\{44F00B65-EB9C-4784-8798-3D3CB65BE882}\Microsoft\Outlook Express\Hotmail - Deleted Items.dbx Mail MS Outlook 5: infected - 3 skipped

C:\Documents and Settings\Evan\ntuser.dat Object is locked skipped

C:\Documents and Settings\Evan\NTUSER.DAT.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844/Counter.class Infected: Trojan.Java.ClassLoader.i skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844/VerifierBug.class Infected: Trojan.Java.ClassLoader.k skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844/Beyond.class Infected: Trojan.Java.ClassLoader.k skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844 ZIP: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\arr3.jar-44f46a27-540a428f.zip.bac_a01844 CryptFF.b: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844/BlackBox.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844 ZIP: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-2a1c7c9f-532a95eb.zip.bac_a01844 CryptFF.b: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844/BlackBox.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844 ZIP: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\count.jar-70f99707-763e0cb8.zip.bac_a01844 CryptFF.b: infected - 3 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844 ZIP: infected - 2 skipped

C:\Documents and Settings\Owner\.housecall6.6\Quarantine\dsbr.jar-51e543a5-5e15a60a.zip.bac_a01844 CryptFF.b: infected - 2 skipped

C:\Documents and Settings\Owner\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012007091720070918\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012007091820070919\index.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped

C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Owner\ntuser.dat Object is locked skipped

C:\Documents and Settings\Owner\NTUSER.DAT.LOG Object is locked skipped

C:\NG2000.log Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{52A7F9A3-03E9-439D-B910-C810E09844F0}\RP26\A0006345.exe Infected: Trojan.Win32.DNSChanger.jf skipped

C:\System Volume Information\_restore{52A7F9A3-03E9-439D-B910-C810E09844F0}\RP35\A0008030.exe Infected: Trojan.Win32.DNSChanger.jf skipped

C:\System Volume Information\_restore{52A7F9A3-03E9-439D-B910-C810E09844F0}\RP37\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\kddzy.exe.ren Infected: Trojan.Win32.DNSChanger.jf skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

#15 fuzzytaint

fuzzytaint
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 18 September 2007 - 08:28 PM

hjt


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:26:01 PM, on 9/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Gilat\QMS\QMS.exe
C:\Program Files\Gilat\GSU\GSU.exe
C:\Program Files\Gilat\IBQoS\ibqossvc.exe
C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
C:\PROGRA~1\GILAT\INTERN~1\AS_Agent.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe
C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
C:\Program Files\Gilat\NetAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\StarBand\Mission Control\HsuGui\HsuGuiControl.exe
C:\Program Files\StarBand\Mission Control\TaskBarClient.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\StarBand\MISSIO~1\evrep.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\mshearts.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:9877
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HsuGuiControl] C:\Program Files\StarBand\\Mission Control\HsuGui\HsuGuiControl.exe
O4 - HKLM\..\Run: [TaskBarClient] C:\Program Files\StarBand\\Mission Control\TaskBarClient.exe
O4 - HKLM\..\Run: [NettGain2000 Verifier] C:\Program Files\Flash Networks\NettGain2000\Bst\NettGain2000 Verifier.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [NettGain2000] C:\Program Files\Flash Networks\NettGain2000\Bst\WgwMngr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - HKUS\S-1-5-21-602162358-602609370-682003330-1006\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background (User '?')
O4 - Startup: AutorunsDisabled
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1187653855140
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Gilat Quality Measurement Service (Gilat QMS) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\QMS\QMS.exe
O23 - Service: Gilat host software update service (GilatHSU) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\GSU\GSU.exe
O23 - Service: Gilat Network Agent Service (GilatNetAgent) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\NetAgent.exe
O23 - Service: Gilat IBQoS Agent (ibqossvc) - Gilat Satellite Networks Ltd. - C:\Program Files\Gilat\IBQoS\ibqossvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: RPAService - Unknown owner - C:\Program Files\GILAT\Internet Page Accelerator\RPAService.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WgwService - Unknown owner - C:\Program Files\Flash Networks\NettGain2000\Bst\Srvany.exe

--
End of file - 7160 bytes
Thanx again !!!!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users