Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

My documents have been dissapeared, possibly a Crypto virus.


  • This topic is locked This topic is locked
7 replies to this topic

#1 rderiu

rderiu

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:10 AM

Posted 03 April 2015 - 04:42 PM

Hello,

 

This is my first time posting on this website following what seems to be a very friendly and helpful environment.

 

I came home to my computer today to discover that my desktop and taskbar icons and files (including very very important documents) had dissapeared. I also noticed that My Documents and Pictures etc had all gone missing.

 

There are however 343,000 new files in my User folder (called UU2780, UU2781 etc) all 100kb in size totalling about 30gb. This is the amount of memory i expect i have "lost" from the pictures and documents i once had. I am guessing that i have some sort of virus that has encrypted my files into these new smaller files.

 

I did a bit of digging and i came accross a Crypto virus (which i think I had seen in one of my folders). Aftet searching I have found RSA and Crypto appear in numerous places on my computer which from what I have read suggests I have a virus.

 

It is so important that I get the documents that I had on my desktop back and I am willing to try anything that could help.

 

I have so far ran a few virus scanners (Malwarebytes, AVG Free) and nothing is coming up even though something quite clearly is going on!

 

I am relatively new to virus detection and removal but have a lot of experience with computers in general. Any help at all would be greatly appreciated

 

Regards

Robert



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,456 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:10 AM

Posted 04 April 2015 - 08:33 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

This ispossibly the infection we are dealing with - CryptoWall and HELP_DECRYPT Ransomware Information Guide
http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information

Other than paying the ransom if it's not too late there is nothing we can do to restore your files.
I know one thing I would not trust them, your call.

I hope you have a good backup of your important files.

If you want us to clean what has been left over the the infections please run these tools and submit the logs for my review.

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
===

Wait for further instructions.

#3 rderiu

rderiu
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:10 AM

Posted 04 April 2015 - 10:15 AM

Hello,

 

Thank you for your response. I am not that interested in making my computer squeaky clean so much (as im happy to format it and start with a fresh version of Windows).

 

What I am extremely interested in is trying to recover just one document that has dissapeared from my desktop. I have read a lot about the Crypto viruses and I am not getting any ransom messages. The only thing that seems very strange now is the 340k of new random files in my user folder that have no file extension and were all created at the same time. Is this something that has been seen before? I cant seem to find any reported cases of this which makes me feel like im completely alone in this!

 

I have run various scanners (I have pasted the results from an AVG scan i did not long after all the problems came). And it looks like my system isnt infected (could well be that the virus cleaned up after itself). There was only one system restore point to go back to (which was only 3 days ago and after I had the virus i expect and im fairly sure i should have more restore points than just one?) and i cant find any older files on Shadow Explorer or on Recuva. I ran "ListCWall" which was available from this website and it said no encrypted files were found in the registry.

 

 

AVG 2015 AntiVirus command line scanner
Copyright © 1992 - 2014 AVG Technologies
Program version 2015.0.5863, engine 2015.0.4321
Virus Database: Version 4321/9448 2015-04-03
c:\Documents and Settings\ Locked file. Not scanned. is OK.
c:\hiberfil.sys Locked file. Not scanned. is OK.
c:\pagefile.sys Locked file. Not scanned. is OK.
c:\ProgramData\Desktop\ Locked file. Not scanned. is OK.
c:\ProgramData\Documents\ Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\01b230e874031f9cd4f6c93e784330a1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\020ec5f7f2cc3fdf341278a719a2dacf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\02540e548485acdf087e3ffe9773c88c_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\028b53ea194c8d0b5bcb374fb7206341_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\029834213671228a6842c4d4d386305d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0404245b7c3b3f1796d1af2a91938d8e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\04eb3c71ade6f99751755d766ed6905b_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\05175c706f43006634c756ee67db16ce_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\07e3719fad13f3a3d522e3ab5e928270_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08810f58053cca209a773122713c7f3f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0a988ea147b6c2831678835bf76ab569_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0aadbd78126b99b2fe3f542840fb5187_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0b087e58de52435e23a91d7c7d286959_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0b66f6318392f497660dda6bc4452db5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0bb7adae1995ec4f88055f682eb42f1d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0cc5f7dce3bfd297550d7726a2ca56c7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0d5bda30831ef02a7c58f821ddcca798_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0e76810b8d13a36d46d9dbd264ce19dd_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0e9b0b03d9f07af52ef78bd72dadd9b7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0f1438cb7444a29c7489dc9dec80911a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\104e6ff123c9c27dcd9a6bd8bddfa251_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11323445fbba7e71d7f8424fe70acdfc_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11c974bd79414847859dc3a0727ca1c1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\120c38e959745a8877c01882093255f5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\13145f1a5db2484c31c379c06d0279e0_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\13ddf3c36e2898ab0af146126617a4aa_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\14528b55f0c5052d36325d09628d35cf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1532362a307147aef6883b2abc382fcf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\154cac508a87b7dbdd0f5afe81c9a5e2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\166d5e5eee83d903fb6459dcef5d4e31_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\16cb98460afc112db038238df3d32070_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\186223202109539933af9c7a35d54e04_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\192f01c6528bac291e9f451b06f428a6_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\19fb011def9b38d836ace35ece809be0_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1a2c96ff76cb513d0b3ce715eb4e319d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1aabf0094b9c231ab17b0849a008ea13_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1b6067b696003049b799e496faec7f24_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1f38fce0241c231a63b1633def38511e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2160d50a1018270fe7e3fdc2f91d4dc8_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\21f346e310509364300498c0f6c2e6bd_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\22700e2ecb413425ff3d3997ed291bdb_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2385609766a35b69401a8c1339e80e2e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\23cfbcac1e792a63d0e0e6c2c54cb048_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\241b4e84bfd76a88ef0633b309e65a03_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\245ee2a03e000aa2abe83d1a82811584_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\261f39581af365664c0a208783b9f233_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2cca6b2f9692172468799a2afe1ef815_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2cd1e06923dcd758c3803515d6634eea_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2cec177a3ae7e44c715f84b96f167269_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2d8235519d90d1d6c63ed328f9ee1a71_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2e86bed02ab6f9796c6aad9df863e663_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\322d39b6a71df7a4e3232147f10613f6_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\32afcceaab176f0d8eebb2287c005440_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\32c3fa8d21bf7d09985c61cda891f1d9_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\33bd2bf5e568c8dbb5d94beb6acad6b5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\35c164747b37cd424fce5d3fbba82c9a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\36ed4c21e381f56ff96afa49a371eeb1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\38e01a2bb33a200575a1261e14f67d8a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\39ddc8cd78833747d4c7b7df8da10c42_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3b41c2e0e434d84c1e45eb7ef9c03d74_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3c841aca8d014684a57fc71eebbdfde1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3d617e64139f1e3d2762cff94518c78e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3dbe6c656547d6b75d56f08399df8fa1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e3d56b98c3ac24482e8d40572f92ad7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e6c7cce81459c7e41e92c8495d4751e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e8190f7d9a48a430ff95bb59c029aef_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3eacaacc6ffd49b9b6cffa7cd8eb117d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3fa45d1d9b25a956b861c4b2219a883d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\40c846756733946fb68c5ecab4ad137e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\42a0c4f27cb59a28297138504d85cd03_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\432b2deb0f9dbc21007061c30c398809_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\438451863a4d685e685d383ea8eb6d65_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\438c8d465001c194bbbd02f7cd58b34b_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\478d0d20498e74ba7b2f52b7a1c6af38_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\47dea1f1d588d0ad97e4967cfc941f09_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\47ed6df436f3afed16e144775b43e410_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4a02a201b08c41e3090d53cbe5557ed7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4d372a7f4b1d5045062deda7ed12d43c_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4dec14702464153e15524135ef0c17d5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4dfbd3a84e14c3cb829057c2e0d95658_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4e33e8da75203196b0c3fb8132fe5890_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\50161b7d33aef7fd198650fdc0dadedf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5042e3be29aa511a267558832c278caa_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\51a86d1b555cd01ea6b4caacdd597172_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\51cd28970d8bf3e647d77fbc8c2a301a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5238837bb33bfc3d72edd9680de1225d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\55bf821d1e1f575d9a24d9532a3855b6_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\56345d7b97a010a628408e936e3b63e7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\572649cacdedce28908c9df7ce419da5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5741eb670e795a3079f625c7f1fec78f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\59a86a092e33ffbe54cbf1c13aa458c7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ab9ff6002075cd743c1e76a6a103a13_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5b3d7d41c88997bfd6d2ebc04b50e26e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5b56d9f139849580e0dc34b120508de2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5bfba38fa517b67380b1bb772fbf004e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5cad33109068a764ac412ed574877f5f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5cb1a084b58be68c41f4a0e7bdf9a9b2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5cee33663ce88d1799a9435addff24d0_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5de881264d9838acfdee9bb11c18644d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5e22a371b508658ef629460787bb99d3_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ebe59ccc4998ccfb921eded91e3056f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5fc27dec99b328a9af6c2fe154018e04_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5fe7c21ca110f773a3056e613ce5c4b2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\60f350e5e0c2a551dbfd3e121af3d3cf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6127489919a69c0c6c1f3ed0f65be375_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\622901dc259a93fcc6f1ff780af71c72_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\647bb696de9b8461393844a841de903a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\65e1c37725c656383c544f7fc341ccfe_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6717cb88d58d6c22f461e84dbd16118e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\671ded6bb68d7a587fe795f74a879ea3_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\68e9763e532aee638062b012dccc4fc5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6922e0e44e96cbf5ce5e918af0a2dc36_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6af6babe2ec384e66d4265bfdc4e57a9_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6b4be416a7728594992e81747d431256_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6c96ec9c884f241abb54f1a5c4fa547a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6daf177ca561a4470298273eb00dfed4_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6f8b31685de2f3964b14734987608180_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6f8d8b42c4b6cd6422e0fe63190ee074_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\71c8741d3120344bd42ad3234dd4f5bb_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\737ccbac8683facd371b7025c7180e63_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7568d81b507f44d8512df5b1d7d379fa_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\75e3199b60aba819577d9f47a48d7f7a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\760bd4cca85114f7abaf1ae1411d665d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\764f92e77e618b10b34e9237ef314098_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7c63edceec1b1784b34728e06438d575_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7c6a8481dad08f4f7ee903da3d0118f1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7d12bf1167061153c0cb5043b0b5a148_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7d7d799c7057fd592682099e62886aad_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7d82cccd2b19acad0bbba654adcb2751_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7dd2f5e21c2ddf68dbd22695115274a6_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7dd6a0b000955416ffb48de03e269381_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f0169309ae05694c9a5aeaeb5f700f9_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f593a98a346f7309e24ec8f57c75d1a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f8a439ae49eb705b587627b00498a3b_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7fcb28b107c545906e1bece5439ebcc2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\80e1bbeb7ba9d70e8a266c74a9ec5aad_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\810a060588f09762b2504f839bd7c5d8_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\81c24aa25126d23ed67556904297b135_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\84582d8e0044303e3a343f7611ed0bde_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\865cab0452832a126be117b101a79dfc_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\86ba710801b41d286cf1e48735596efb_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\86ff2bedfb0c9dc569bc86919cf6b4cd_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\878a6835d6873471f01678c429fe6334_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\87d404ada26b37fbaa50219630e06548_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\87ead0217c5d5237059aaf715076b345_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\87fcd72944fb63b9adc75825ebb09352_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\89dde65e7c6eef8b5e71b707d85f163a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8cd2d0e2df39a52c6d95cea1e49c7885_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8d914fb8c46c33869e82feca77ca23f4_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8d9deb3070bc7fcda54f6f6c0acf3dd2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8df11122a6a577a3a0018b1247de0856_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8e029a341560d6e935247f48485309a3_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8f24216ee394acd72b9f6ce8801044df_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8ff34844a1fec5d3770a1e14c40c228c_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\91b37701a2f2b0c93a44f3644db2b127_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\92b5c323f394c8e6bd6c018e8c1d6c24_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\937341cd0ab19c47e5d41954d0a1dfab_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\946fd3e727ce81640db81fad5d01bca6_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\965e6816f7fe6ff931cb78dba5958afc_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\969896dc6ddaa327b9fca98fab8d8665_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\98ac9999695c90e8fac409b6eae1a2b2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9b6ea4831df770b6d2ebe689f1a86025_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9b87ca57aac7975fb2d34d4cd52394f6_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9bcfd449dd7f32ca6b8f1f574d418df5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9bfa36d86ca8827722cca43ce6aa8f34_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9d4a8095e21f6ff31be31bf8ee38b541_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9df7a6d0a0d5f0aade306321506350f1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9e0b8eadf4836385248ab3407b980f8f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9fc93d0532c5081555c5112ec100ef3f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a04058406f861b38ce2c8ee94236994b_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a07b25f5dfeccbab61a53953f2e5baa5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a0dda244e4d39ae09a9f54d898917e41_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a145f850814bc94191d45c7512aa2e48_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a3dcb10dc5d4ff1f480a35e2d5b886b7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a400661a3abe2406188e155d0e0a93eb_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a61a2017180acc877a250e343075f50e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a63f68f0960fba61fe735e89ccfd0837_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a750c7bd236656b206520f4eb6915efe_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a90578fad63bb81f3054d181fd62c511_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\aa1dea471fb1824f1275062865fd44a0_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\aa3462efcd451fb7b9638453c75488da_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\aaba406caf8b8a5c0f674bb6705dee00_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\aadfc899cc55e3cc96ece0195d9739f8_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ac64b8c5dc752ec17bccbb5ad9d8183d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\acf69a8e0e5138126dcace18dfebbcdc_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ad325a9779070373f419e30eee7e2929_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ae0aae6f3b709561d5444835a0eb0ae8_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b0d0c63d5459ebb90e96e538469b382a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b2767234f41ed29b054ec014733eca11_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b2ae7f77297c974992e47efa9d72388f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b529d0fb9a3082ccbe2d8f4f516836d1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b555d4592311256d5b1c0bad1806a869_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b7edeb987c1b89590a10f698f1a1d1a7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b855f987d332e3a0d4e0c729e3d82495_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b8b37c20ac2f4ead2ade326e6e4f0049_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b96c9a3e58f24b1c99563f74df289400_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b9771c43398fe538171e5136c2f4f151_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b997d089e99db37a703973842effe725_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bb6f29c0f8ac7d0863cedaa36d6e5145_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bbf17a5081e56066ac1ff8c9106e12e8_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bbf33a2e546a7a9d000cbac6920b11ec_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bc08802eb5e44b5d782b93af5b18b547_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bc8d12e5b3d0803536dc06245db0d31b_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bca8f8d0f1dd2ce8d6dc3d922324f9f3_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bd8695a2e6ecd289c788094eea00ad8d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bdd191fc09527107c330476527e2c7c5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bf328f6749ab90e632e0d43fc2722999_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bfee263be8b58284babf126ef527cc63_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c19efabd7893e3a457a82ed8df6964b1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c1ea477e3af6c9b0a21080edf1ae865a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c2ec1c271ca4f0d328c776788e8df2f2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c4140af3ac1fc156dc74abf240df8def_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c570f445593ff0c4fe0623ebfa735d27_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c888c9923be2efe41c6333da4d0f2702_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c8ccd3fe4b56dded674e7629e503a5b7_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\caf2bf8b503d625582cde762482f1021_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cd75ae3b71ea361b845b7310bd0a0944_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ce22842f3896d58ec3ee8d861acb705b_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ce9035ef8f0225aab6f02b03634b47c3_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cf16395c91eff8ba8564550b94ccfa61_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d16a426a1137086c1d7e4931d318ab52_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d319075eb470f0f0a71edf2e6ca86869_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d38a4f18d993dc94a80e876be4bcab22_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d39bd0039a86eb6bb2e8531ab97731d1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6da8c485cf30ac0786f575b80c50c9a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6fb9dd491903738b4232bca44fec539_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d7e0b613053dc31fa6fdc68cc548930d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d80f76b8f24f336fc08a08bef00c56bf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d938e22589f03ca2cd8f8f58ef134f95_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\daa78bb5b91b992ba924e3899ba403b9_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dd2284d4babe63beef3b8f9e627a0b9e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dd67345dd90639997d2537f7dc78716a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\de8bd90660c528c9e19bfd1f82724eb5_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\df47435c06cb0b318b332053686923f8_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\df4b68b287826045a019b2c6a36310a3_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e0da7dc4ecb78d64092a06232139db8d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e111fb37e78c9bf1fa2325b659164d46_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e29798cba8bcda54f6c0ad841676770c_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e5a39fbca4fe46e78cad088a0b15b01a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e687ecaeab83c6a02050190f2ef57d59_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e8f9e7b0d7399335bb5554a5b15f52be_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e9b462cf220f1d96fbb25410ab977cd1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ea95ee728daa2ee909a147ce7953214a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ebc1d57f33b358e8e568be93834ff0dc_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ecb7ca2f09f56d2753114e3d7153581e_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ed09e5997a3637f43af2ef83b7d1ac54_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ee72bd66f8992404180fa1b53c2f3e8f_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\effd5619b3ffc4eb09e4f9d1270807c1_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f08113c7ca918fb51fddde45f80b9bbc_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f2d8984356193105cd78e047fdf00610_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f3e78994111b2a209acf75aa1d16f2eb_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f4c3f2827df570bc75c6cbc7c735cbaf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f58739686b6a0d97bad2d6ab263b634d_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f636ed55c94cc5687ac9ff498b7ea3fe_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f7f529f9918907239a503438fdcbe0ce_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f90a1d39c56910896de5fb79683a6cbf_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f92215f4397e417a46f551166e908114_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f9bb3a3f584a669d2df1c1389b4a7c92_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fa45fe6f4c0632f7c2df23807ae14e0a_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fae2060ec769fa5f945b0388b22e1956_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd07c68f93033a1d4fb3ffa46e37841b_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd71dad4c7a09d794ab6d8b9c22adadc_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd93f8a4b39d64e907e62685bd43c388_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fe3ed5a8122f1d70d4359cb3a4b5b52c_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fe5ea7f4adcc3a15eaa63e0cf811ab99_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fe80eeeec3165d62290c639fb3dc7717_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fe8e80099d4d1b1965b8efa179e6e9d2_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ffde92ddf60f272f5697115505138c38_39f2902f-1fe5-4e2a-85b7-37746ee1c59a Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Windows\LocationProvider\ Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Windows\SystemData\ Locked file. Not scanned. is OK.
c:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\MpScanCache-0.bin Locked file. Not scanned. is OK.
c:\ProgramData\Templates\ Locked file. Not scanned. is OK.
c:\swapfile.sys Locked file. Not scanned. is OK.
c:\Users\Default\AppData\Local\History\ Locked file. Not scanned. is OK.
c:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK.
c:\Users\Default\AppData\Local\Temporary Internet Files\ Locked file. Not scanned. is OK.
c:\Users\Default\Cookies\ Locked file. Not scanned. is OK.
c:\Users\Default\Documents\My Music\ Locked file. Not scanned. is OK.
c:\Users\Default\Documents\My Pictures\ Locked file. Not scanned. is OK.
c:\Users\Default\Documents\My Videos\ Locked file. Not scanned. is OK.
c:\Users\Default\NetHood\ Locked file. Not scanned. is OK.
c:\Users\Default\PrintHood\ Locked file. Not scanned. is OK.
c:\Users\Default\Recent\ Locked file. Not scanned. is OK.
c:\Users\Default\Templates\ Locked file. Not scanned. is OK.
c:\Users\Public\Documents\My Music\ Locked file. Not scanned. is OK.
c:\Users\Public\Documents\My Pictures\ Locked file. Not scanned. is OK.
c:\Users\Public\Documents\My Videos\ Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Avg2015\temp\avg-1294010a-cfa3-4e6a-ada3-3942a74d133b.tmp Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Avg2015\temp\avg-1779367c-56f6-4e5b-ac8b-332557c3477a.tmp Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Avg2015\temp\avg-1d11cd55-1ae6-4857-88e1-a21b2afed268.tmp Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Avg2015\temp\avg-3d15f904-d6d9-4e05-ae01-4a03cd13d453.tmp Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Avg2015\temp\avg-52cfa437-650a-4f50-b1d9-271370a21d4e.tmp Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Avg2015\temp\avg-c26c5439-0c79-4259-b75d-4817b458b60d.tmp Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\MFAData\logs\avguiru.log Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\UsrClass.dat Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\WebCache\V01.log Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Local\Microsoft\Windows\WebCacheLock.dat Locked file. Not scanned. is OK.
c:\Users\rderiu\AppData\Roaming\Mozilla\Firefox\Profiles\vui4gxip.default\parent.lock Locked file. Not scanned. is OK.
c:\Users\rderiu\ntuser.dat Locked file. Not scanned. is OK.
c:\Users\rderiu\ntuser.dat.LOG1 Locked file. Not scanned. is OK.
c:\Users\rderiu\ntuser.dat.LOG2 Locked file. Not scanned. is OK.
c:\Windows\CSC\ Locked file. Not scanned. is OK.
c:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_144.mss Locked file. Not scanned. is OK.
c:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_96.mss Locked file. Not scanned. is OK.
c:\Windows\ServiceProfiles\LocalService\ntuser.dat Locked file. Not scanned. is OK.
c:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 Locked file. Not scanned. is OK.
c:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 Locked file. Not scanned. is OK.
c:\Windows\ServiceProfiles\NetworkService\ntuser.dat Locked file. Not scanned. is OK.
c:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 Locked file. Not scanned. is OK.
c:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\catroot2\edb.log Locked file. Not scanned. is OK.
c:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Locked file. Not scanned. is OK.
c:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Locked file. Not scanned. is OK.
c:\Windows\System32\config\BBI Locked file. Not scanned. is OK.
c:\Windows\System32\config\BBI.LOG1 Locked file. Not scanned. is OK.
c:\Windows\System32\config\BBI.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\config\default Locked file. Not scanned. is OK.
c:\Windows\System32\config\DEFAULT.LOG1 Locked file. Not scanned. is OK.
c:\Windows\System32\config\DEFAULT.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\config\RegBack\DEFAULT Locked file. Not scanned. is OK.
c:\Windows\System32\config\RegBack\SAM Locked file. Not scanned. is OK.
c:\Windows\System32\config\RegBack\SECURITY Locked file. Not scanned. is OK.
c:\Windows\System32\config\RegBack\SOFTWARE Locked file. Not scanned. is OK.
c:\Windows\System32\config\RegBack\SYSTEM Locked file. Not scanned. is OK.
c:\Windows\System32\config\sam Locked file. Not scanned. is OK.
c:\Windows\System32\config\SAM.LOG1 Locked file. Not scanned. is OK.
c:\Windows\System32\config\SAM.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\config\security Locked file. Not scanned. is OK.
c:\Windows\System32\config\SECURITY.LOG1 Locked file. Not scanned. is OK.
c:\Windows\System32\config\SECURITY.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\config\software Locked file. Not scanned. is OK.
c:\Windows\System32\config\SOFTWARE.LOG1 Locked file. Not scanned. is OK.
c:\Windows\System32\config\SOFTWARE.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\config\system Locked file. Not scanned. is OK.
c:\Windows\System32\config\SYSTEM.LOG1 Locked file. Not scanned. is OK.
c:\Windows\System32\config\SYSTEM.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK.
c:\Windows\System32\LogFiles\WMI\RtBackup\ Locked file. Not scanned. is OK.
c:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat Locked file. Not scanned. is OK.
c:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat.LOG1 Locked file. Not scanned. is OK.
c:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat.LOG2 Locked file. Not scanned. is OK.
c:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat{e4638f6b-8873-11e4-824c-3085a999a441}.TM.blf Locked file. Not scanned. is OK.
c:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat{e4638f6b-8873-11e4-824c-3085a999a441}.TMContainer00000000000000000001.regtrans-ms Locked file. Not scanned. is OK.
c:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat{e4638f6b-8873-11e4-824c-3085a999a441}.TMContainer00000000000000000002.regtrans-ms Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\AppData\Local\History\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\AppData\Local\Temporary Internet Files\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\Cookies\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\Documents\My Music\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\Documents\My Pictures\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\Documents\My Videos\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\NetHood\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\PrintHood\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\Recent\ Locked file. Not scanned. is OK.
c:\Windows.old\Users\Default\Templates\ Locked file. Not scanned. is OK.
21:21:13 Error 0xe001003d:
    c:\Windows.old\Users\rderiu\AppData\LocalLow\PlayReady\

------------------------------------------------------------
Test started: 3.4.2015 22:14:52
Duration of test: 6 minute(s) 27 second(s)
------------------------------------------------------------
Objects scanned     : 661093
Found infections    :  364
Found high severity :    0
Found med severity  :    0
Found info severity :  364
Fixed high severity :    0
Fixed med severity  :    0
Fixed info severity :    0
------------------------------------------------------------
 



#4 rderiu

rderiu
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:10 AM

Posted 04 April 2015 - 10:19 AM

Maybe one more relevant bit of information is that when I came home and found the computer in that state, I had no memory left on my system hard drive (there was a bubble in the bottom right telling me to make space). I dont have any idea how this virus works but maybe if i had no memory left it wasnt able to do whatever it was needing to do to finish and generate the ransom messages.

 

I am really clutching at straws now.



#5 nasdaq

nasdaq

  • Malware Response Team
  • 40,456 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:10 AM

Posted 04 April 2015 - 01:26 PM


I Googled this string.

Microsoft\Crypto\RSA\MachineKeys

These two topics are interesting.

http://answers.microsoft.com/en-us/windows/forum/windows_7-files/what-does-machinekeys-folder-contain/272e2e30-3161-40cd-96ae-ed6b71c8ffc0

http://superuser.com/questions/538257/why-are-there-so-many-files-in-c-programdata-microsoft-crypto-rsa-machinekeys

It might just be that the files in your system are OK.

Check the similar list of RSA keys on this topic.
https://forums.malwarebytes.org/index.php?/topic/126906-my-computer-is-infected-with-some-plauge/
===

I suggest you run the Farbar tool I suggested in first post.
It does not delete anything. It will only give a report to look at.

#6 nasdaq

nasdaq

  • Malware Response Team
  • 40,456 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:10 AM

Posted 10 April 2015 - 07:13 AM

Are you still with me?

#7 rderiu

rderiu
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:10 AM

Posted 12 April 2015 - 02:10 AM

Hello. Yes apologies for not getting back to you. Unfortunately I had to come to terms with the fact that my files were lost and I subsequently formatted my hard drives and reinstalled windows.

Thank you for your assistance! I will make sure to back up important files from now on

#8 nasdaq

nasdaq

  • Malware Response Team
  • 40,456 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:10 AM

Posted 12 April 2015 - 07:55 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users