Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 


Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Resolved HJT Threads
Reload this Page Yet another VirusWebProtect infection
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


Resolved HJT Threads Resolved spyware and popup issues.

 
 
LinkBack Thread Tools
Old 01-21-2008, 10:36 AM   #1 (permalink)
Registered User
 
Joshik's Avatar
 
Join Date: Jan 2008
Posts: 7
OS: XP pro SP2


Roll Eyes Yet another VirusWebProtect infection
I have encountered more or less the same problems as user "Masterandy2" reports in his post http://www.techsupportforum.com/1177844-post1.html

I have followed the advise given by "Angelfire777" on how to solve the problem, i.e. running SDFix in safe mode (http://www.techsupportforum.com/1186176-post4.html).

My questions now are:
Do I have to "check and Fix" any of the entries in my HijackThis log? and use any of the other tools refferd to in http://www.techsupportforum.com/1187788-post6.html as advised by "Angelfire777" ?
Should I run SDFix on all user accounts in my PC?

Here are my SDFix and HijackThis reports:

SDFix Report

SDFix: Version 1.129

Run by Owe on 2008-01-21 at 17:12

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default HomePage Value
Restoring Default Desktop Components Value
Restoring Default HomePage Value
Restoring Default Desktop Components Value

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\Documents and Settings\Owe\Favoriter\Error Cleaner.url - Deleted
C:\Documents and Settings\Owe\Favoriter\Privacy Protector.url - Deleted
C:\Documents and Settings\Owe\Favoriter\Spyware&Malware Protection.url - Deleted
C:\DOCUME~1\Owe\LOKALA~1\Temp\ac8zt2.dat - Deleted
C:\WINDOWS\aslpmqk.dll - Deleted
C:\WINDOWS\bxsnvqt.dll - Deleted
C:\WINDOWS\fknxwqf.exe - Deleted





Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-21 17:42:17
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:00000055

scanning hidden files ...

C:\Program\Delade filer\Symantec Shared\SymcData\ipsdefs\lulock.dat
C:\Program\Delade filer\Symantec Shared\SymcData\ipsdefs\tmp13af.tmp
C:\Program\Delade filer\Symantec Shared\VirusDefs\lulock.dat 0 bytes
C:\Program\Delade filer\Symantec Shared\VirusDefs\tmp13c9.tmp
C:\Program\Delade filer\Symantec Shared\VirusDefs\tmp5b0c.tmp

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 5


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Sat 16 Jun 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Mon 21 Jan 2008 0 A..H. --- "C:\Documents and Settings\Owe\Lokala inst„llningar\temp\BIT74F.tmp"
Mon 21 Jan 2008 0 A..H. --- "C:\Documents and Settings\Owe\Lokala inst„llningar\temp\BIT772.tmp"
Mon 21 Jan 2008 0 A..H. --- "C:\Documents and Settings\Owe\Lokala inst„llningar\temp\BIT791.tmp"
Mon 21 Jan 2008 0 A..H. --- "C:\Documents and Settings\Owe\Lokala inst„llningar\temp\BIT7AA.tmp"
Mon 21 Jan 2008 0 A..H. --- "C:\Documents and Settings\Owe\Lokala inst„llningar\temp\BIT824.tmp"
Mon 21 Jan 2008 0 A..H. --- "C:\Documents and Settings\Owe\Lokala inst„llningar\temp\BIT852.tmp"
Sun 20 Jan 2008 0 A..H. --- "C:\Documents and Settings\Rodica\Lokala inst„llningar\Temp\BIT26.tmp"
Sun 20 Jan 2008 0 A..H. --- "C:\Documents and Settings\Rodica\Lokala inst„llningar\Temp\BIT27.tmp"
Wed 8 Aug 2007 400 A..H. --- "C:\Program\Delade filer\Symantec Shared\COH\COH32LU.reg"
Wed 8 Aug 2007 403 A..H. --- "C:\Program\Delade filer\Symantec Shared\COH\COHDLU.reg"
Sat 8 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\06b1618a842c7a03540c533475edc7bf\BIT58D.tmp"
Sat 8 Dec 2007 1,388,560 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\123dc4a6d131050e7b78bd02003232ef\BIT58C.tmp"
Mon 19 Mar 2007 2,068,992 ...H. --- "C:\Documents and Settings\Rodica\Application Data\Microsoft\Word\~WRL0203.tmp"
Thu 28 Sep 2006 101,888 ...H. --- "C:\Documents and Settings\Rodica\Application Data\Microsoft\Word\~WRL1794.tmp"
Sat 22 May 2004 10,839,320 A..H. --- "C:\Documents and Settings\All Users\Dokument\Mina bilder\Owe's Digital Photos\Naturbilder\04-05-21\04-05-21.zip"

Finished!


HijackThis Report


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:51, on 2008-01-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Delade filer\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program\Delade filer\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program\Delade filer\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program\DELADE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program\Creative\SBAudigy LS\Surround Mixer\CTSysVol.exe
C:\Program\HP\hpcoretech\hpcmpmgr.exe
C:\Program\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Microsoft IntelliType Pro\type32.exe
C:\Program\Microsoft IntelliPoint\point32.exe
C:\Program\Java\jre1.6.0_03\bin\jusched.exe
C:\Program\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
C:\Program\HP\hpcoretech\comp\hptskmgr.exe
C:\Program\Delade filer\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program\Personal\bin\Personal.exe
C:\Program\WordWeb\wweb32.exe
C:\Program\Webshots\Webshots.scr
C:\WINDOWS\System32\HPZipm12.exe
C:\Program\Delade filer\Logishrd\LQCVFX\COCIManager.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.se/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Länkhjälp till Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Delade filer\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program\DELADE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\sv\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\sv\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Webshots Toolbar - {C17590D2-ECB4-4b15-8820-F58798DCC118} - C:\Program\Webshots\WSToolbar4IE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar1.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program\Creative\SBAudigy LS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [type32] "C:\Program\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program\Delade filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program\Delade filer\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [swg] C:\Program\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Webshots.lnk = C:\Program\Webshots\Launcher.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Personal.lnk = C:\Program\Personal\bin\Personal.exe
O4 - Global Startup: WordWeb.lnk = C:\Program\WordWeb\wweb32.exe
O8 - Extra context menu item: &Webshots Photo Search - res://C:\Program\Webshots\WSToolbar4IE.dll/MENUSEARCH.HTM
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program\ICQ\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {2E12FB00-546B-4EE3-9CC2-057BF02E1C17} (Webshots Multiple Media Uploader - Container) - http://community.webshots.com/html/atx/wsaxcontrol.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2349a6da...p/RdxIE601.cab
O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1094151739812
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1161421843625
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {C3A57B60-C117-11D2-BD9B-00105A0A7E89} (SAXFile ActiveX Control) - http://kursnavet.cfl.se/broker/globa...ts/saxfile.cab
O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://www.tukati.com/software/4/1.7.20.20/tukati.cab
O20 - Winlogon Notify: wancp - wancp.dll (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatisk LiveUpdate-schemaläggare (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program\Delade filer\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program\Delade filer\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program\Delade filer\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program\DELADE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 11349 bytes


Many thanks in advance
Joshik is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here

Old 01-23-2008, 01:21 PM   #2 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,231
OS: 2000 Pro; XP Pro; XP Home


Re: Yet another VirusWebProtect infection
Every case is different, so you have to be careful about following steps outlined for other machines.

In your case, it looks like SDFix did a good job.

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries if they exist (make sure you do not miss any) and click Fix Checked

O20 - Winlogon Notify: wancp - wancp.dll (file missing)

Close HijackThis now.

---------------------------------------------------------------------------------------------

Please run this online scan to help look for remnants.

First, Go to Start>Control Panel>Add/Remove Programs and remove Kaspersky online scanner if present prior to downloading the most up-to-date one.

Next, establish an internet connection & perform an online scan using Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.
  • The program will then begin downloading the latest definition files.
  • Once the files have been downloaded click on NEXT
  • Locate the Scan Settings button & configure to:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK & have it scan My Computer
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
* Turn off the real time scanner of any existing antivirus program while performing the online scan

Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.

---------------------------------------------------------------------------------------------

Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.

---------------------------------------------------------------------------------------------
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 01-24-2008, 05:25 AM   #3 (permalink)
Registered User
 
Joshik's Avatar
 
Join Date: Jan 2008
Posts: 7
OS: XP pro SP2


Re: Yet another VirusWebProtect infection
Thanks for your attention

Here is the report from Kaspersky Online Scanner:

KASPERSKY ONLINE SCANNER REPORT
Thursday, January 24, 2008 12:59:18 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 24/01/2008
Kaspersky Anti-Virus database records: 529736

Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\
E:\
F:\

Scan Statistics
Total number of scanned objects 111944
Number of viruses found 45
Number of infected objects 134
Number of suspicious objects 0
Duration of the scan process 02:30:47

Infected Object Name Virus Name Last Action
C:\Documents and Settings\Administratör\Skrivbord\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Administratör\Skrivbord\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Administratör\Skrivbord\SmitfraudFix.exe RarSFX: infected - 2 skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\003aa805980cf4a2564a93dd72fa4a3f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\029d311be43496e0bf18bb07534f6e04_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02a7c76ef942daed4ceaf32282690506_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02bf852812ae57e1a0277cfb836d9f74_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03156fdc29307d5c597fb21470880d8b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\035689e39f0372d58f28412311e89acb_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03f7e7edbd922b60c5ae9b04f2bca680_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0496437c1b9a542ab91d67bba3e9b012_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04ec134d482d3a1e6fbd9f44e1f1778b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\05a9c95869712e96fd5fc389ff44c82b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0627e0c5cd69f8756f6ce6f161ba4326_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06eb662998bd58485f9dc9f2c91392f9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07c8670b71021e66ba140ebdc449c76b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07fe8ef5a21a2a618fac7b8bec778a49_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a347ad5361ad8b261ae221071762ecd_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a93a1c79676e5ae51ec6958c443f6e4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ab2428c6f2ec6de19f054d1c97b51dc_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b1a31f6a54c99f7ab69630fc9f2d670_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0bd0bff0adf0dcd5e5f8373807fb1227_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c60fb068f292814b9f742fe30c95c30_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c98533e832b989358c1d1bc1aa4bd47_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ca7a9471eb12b360b4f30f93346693e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0cccdb6aaae59c41f895321bb7dbdeb7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d32e8b2835910d1392e6b6a6a8cabcc_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d623150c199d0ddc1c94359ea9c4150_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e3b1105832fc4ff917e3babb22e62e6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e6145dbf3c40f18324ed7f9185ec519_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f2c983560a8d32ea13c98fbc92b581c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f2e32dbe400b1a0987970aeb5823f25_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0fe6e04e1e4ece4ee586d9d718006a7f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\11408a2604cadc197668e3165d7e078b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\11b3456ab9749be0d05ad2454cdf9af9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1225909e7e0904734dfc67b021603fee_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12361f2bddf64f1882b2f59cdaef7fd5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12442d0a8c880dd6e37a5c2c29325a98_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12a5bcbc4f68ade3987521776d8ee338_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\138cca117116caf6d9ac141166ffa702_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\139ac936704c4211911a530aea174c1e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\142d77b791ee0379734d059979811a75_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\149030a85b5bae83f4137d5c7fe02ee4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\167d4c7a7160b7fadd8cc5e53b27134d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\177b9350d7dbebd7b9c307140bebdff0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18153989abbf340762db7a6d579d96f7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\187fc8c68e7df7dc5e449d4b49fabc22_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18b3a11baa46e6126daddb9ac4fbec43_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18be4cf54588ac121a6c436c4c6cffe2_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18e1fcc1ef060f808349ab0330c82fa5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ac3ae935e58d7011fb0cf26179467df_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1baf267713a4123a3b0d9d7187611be1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1bc041ff5fd14f08d4706a38851ed1e1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1be01549e86434925f14f750b7c2f9eb_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c410789164973267173660f0dad9468_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c636792a8a1b18f99acbad94a25991c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c6b98d548a437fc0915b1acc8df7b89_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d64c8b8cb300fe1994bccb7842296c4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1db46fb127e81a7e7b7d96b81218e6ce_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ded0206f38ec8aa8f1e43e65c25f3ec_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e65c3b7d5154ee6c5ba7918d3f831b3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1ec60cf210434c13ae222da717059493_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1efe7f16da88dc8fe1b55add68038228_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f9bc3b3c17220b86f4d05f970d9dc3b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\203db0ca145de5487f297abcb6395976_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2064be1048b7be473140b9309c46af55_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\209c7a07d1b00b1cdedcc2b76f406e82_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\212450fb93d54684e87de49c942ef05d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21f370eb1e5ae84b1c76f1d645f7e9a8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21fe75327701fc4e7cac394642dced89_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22153348a8a9d0b8fd82c948539e2e9e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22992edebd138a503fd5802f32b5c340_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22e6fd6984ca35cfce56f39627ee897c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2312c6a0d9a94ec6ddfe0928e3309df7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\236120b64e1e7ba29893a7954f164156_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24492dc6838dc48b00d23a138d6be3e5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25ebdd3aa823e0fe2e7de6da8103e3b8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25f4b7a81734427953f925357221e67f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26a1ff6047b82009509685ce1f11503a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\278e36e4d7302d03128c20c0e4f0ca04_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27d7c7bc06d80872ad25a614a9019d95_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2992af35b8d69d02ca374f1752969de0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b93422810ba7904f59c65de14076e4a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2bdc1f0d114fa30abfb3d495ee816ec7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c0fd535bf0b3e264b2cb791a247f89e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2c52793f548d11b1b877840637b9e992_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2cacb2ec3aab29883d02e8d8bf2c1e83_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2cba5117a91b55de2d83eada38408277_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2cd3abdbc98a08daf90c7ddf312ecf66_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2cf47612d0d961f50fac094b61145a0f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d4ec852f452272164a2a811eceb6230_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e2e9d5825840aab2594b35e3040188e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e5d1657e48f060c6119f8087a6be209_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\300b84021bcda008940c63a49c513255_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\302f1cdf44e5bd219b6b437cbb63b228_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3087cb790cea84181238a5733270373e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3092cd12beb561655c3639196232d01e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3149c0c884ab7118e4ccc19114bda559_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3155ff0472ddfcf151fb31e8c6578e12_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31914e79d239e075b84d347239b50e25_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\329e1065081e537e4ce4e9fbbdc62a10_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\32ef2789413d69c81077c5559cae3dfe_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33386a1f09f97a4d9177562586ff2ec4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3391e9c04fc88556147ec4b679e3d764_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34599fbde20db47cfd9724a2ba07e0ba_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\349d64655ada61ff93e58536ed4ecdf4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\34d64144a5055479fd6f4dfc19a13aab_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\355d630c36e2e950db74f59ebe65d237_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37876a0c5e139dfa304496682f6baa4e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\38d4977f918637cbdba53f40e0eb5b85_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3aa0d88cb9a7c29011b2f18bc960b250_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3af76537cc7506923d908d73c3197145_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3b8c1fc2f3fd19c982757cdcd30bdf7e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c126245ecc6e76bb05e6d6f41abbed6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3d202e0b7c6e82c5a30f7a5624a1f07f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3d5ecaaf665c0f002f0ebc876c1c172a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3de2f59b916cdcafdd715267f77d7d38_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e662ffba52c9fa291ec807764eb712c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ec3c876b4baed67c42e3fb1cffb56be_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ecb760c1bf74aae385f4592f10044c7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ef0514706503d52bec58e2f75687e37_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f2c0d3a5c46a79a9d6c1c203c90a6a5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f3d3197c49c8c8252ab413070bc1122_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f81f9c001e942583433395af9065f7b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\401d7ee8abede097a38f97bb87a52e0f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\40289bb5a1585b896ef6b4f0d3050014_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\40d56ceb8185a6a9b03d3781fddefd76_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42334d98babcc8d53283d94dc792a3f9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42789a2ea5f61c5d7384bd92d15b0d87_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42d3cbcbb253975f40eeab0946072514_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43f670921afff58f8b318d338d423c15_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4441b09b6f6f81c0bdd074792990b4d6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44fe2cb4f899c9c5e9b47a0dbac02419_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\458fd305f6593f76c95d9ceac8cfe6c4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\46d10f6e58c5486514aae607e4788c40_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\47060388086768d919ce007d2058f67e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\471346f01301ef421e10dea7b56401db_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\47762eb4901ab12d634e83569315bbd8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\486fcf0126c619f1b73416e311672466_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4959aa81bbaf5294ad270be36c7a4a91_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a00828e6a725ad28bd820c855322a4b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4b0a956cae6a914828110cfcd5c81011_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4b891ebf496b9752ec3d7cc085b93bb6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4bfc7cbec820164b9e56f3d74e381f18_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ebc2f03bf01e391b97c04caf37669c0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4f0f7a9235f140b533b563782ae45ef0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4fad0dd5e8c6dc08fd722b575418c50e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\500d1b91163219032d90f073a12c7de6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\504a916ad83815a4980b0f41a5102900_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\50f7ce8eedb1899729c06df90aa6806d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\515f2b6516b83e49a6a91b96b3e17ea9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52117cfa2380c033cc9a765ab3988946_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5277816a6b3d76412cf8515f0e3bccb8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52b14ba832cfb5879f6ece399f69c404_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52f4f8aae7bca6f91e14e851a638e89f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5334ce32feabae9bc56ff2c4242fa7f8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5389d9e1a1a7f53e9e07b4970b56097a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\53fcb8c700c9362e75635f696949499d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\556996c24c72c0f2ed54b2b3c96c0d5d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\55b210a3b35b6e94ec9d6001e181ffca_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\561196b2046b1620f8bf6a22de8fa1e9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56a1594c811eae444bd4aed21b9cf08d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56e99a2e92dca7cd2c084e7cbd4f9b03_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57351a7df1e498f12841fd22404c2a6e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57c16210dfcb95e3e9195335279e6d12_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\58e76d19b62b18b536b83f2c06a31d02_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\59a8ca12896e50768612ddd94ad46867_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5a49ec64f8cfb0289192e06d12da4fa3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5a69266a82479ee75fe17bfde809fc7f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5acadacd3ffb351f4e0bb87abf7e3053_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5b4984a86f05e06f6e636eb1c1e063b2_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5ba40f07d7960a7f853504f4a69f3521_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5bc7846ecb6f7e9f214afb493321e4a3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d137828204df2d0b792080ec8ee3f76_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d18e11a7ed1a22641c35052c400050a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f1a936403868303ecd1bfaa6f71c476_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f2861227bd4ef62f875e3615ecf1cd2_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f296175edd4a1f2def39a7855f88012_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fb29cbeba031fadea03763a90415e0a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\609c1beff24b7afdf3a0276ec13c5b3e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\609ced133bdc9fdcf1cfb33204bfbd4f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\60a52119a4f92be95f318a0e3803ffb6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6111a8099e7555de7a593bcf77230304_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\61aeb118e6ea085bd57c81c682757822_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\61b6af74d4983302c62225205319af08_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\62b257f83a0cac941ebec0ffb59d2203_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\633f6e7ffe7d53d58751c7acd562e2d0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64555efbb5ecc378ec881eb7283ca88d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\648dc8e4a9b41de88d0a3fc9719dc1a2_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\64dae5557626690f00da802c99ea7d79_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65c1cd8a8b84fee62e7120867511e482_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\66837896892c308d72d7aec619b40232_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\67f9cffc20f05a600a34f219909ac1f9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\68432598318bdfcb35392b6f749db7bb_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\698f498a0c462860cd5c58e6ab676a56_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6a0304770fe5df6436fc336b461d5c55_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6ab5b3d1c193b77138adde7182b3fa67_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6b28590bb0ef8735c8d2f89d9a8bf701_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6b8ec9a69a38dfcd7109b81f05c632b8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6bcf13600b8344590bbd80e6e0d3e812_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6d3328fe300a1ed5b0be4a91656e5f2e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6df29886b998201ebb049f8ef7680d4e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6e5776f6803b6b8f7c687eaf08e2c8b7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6fbb3fb4ade80f1bf9c97267a985fc53_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\71051d3300901a6acc2063b72e80ad70_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\710c2fae0686e6382b67a8a44eccb005_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7194b9b5810f13f89b0512b99002ec97_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\71c4287267f5a48e96f1d4867a428e9c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\72f6705e42b7f16560a7d7057470393e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7328177e6d372ce08ca1853727d826d9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\737d067ef5b3d6404c5f88fab8d6f2bf_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\742b6f4c30e3973cc10f987a0cc2caec_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\756236e3cb2de77bd9306f5658b06e22_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7577df43771017c9026ca1ae632df968_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7637a6ab8c73e0ee8e69ce6429ca6630_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7637fb7ecb72ac33a2e18a3130391f95_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7838ed68bcd788c1f52b672cf5c7b620_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\783f8a8024bc2daa02ec2f5dc139fed6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\79f9660ffe9ac038f2f0d10abe1d476a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a0f1a13d92a1b3b86d63278a2cd3079_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a49b2949b18d61a41d173461c31a4f4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a52903e6bc8ed2141fe05d25597e9cb_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a6f8bc6fd932b60fb8bb612658b90b4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a7e39d757abeca532575dbc2050da65_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7b4a045be50e9620075e3299145826e4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7cfe243ce5e2adbdce12717feb4fb1e7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7d451d488f57dbca88f65583fc063647_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7db1af1174ded6a7ab00654067e0527a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7ecb307523c5ad01eb39d6d996b8fdd8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7eebeb43c1a81781ed6c2df22aead59c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7f3bebdad5a76c75f55d0eeb2befbbcd_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7f955c8d2023e6b182ce7627aa9e7cd1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\80daa608e7177aa2da7ebb5e79183058_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\813ab4909b8b517c89a75317180b3f96_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\81ab8ef258e387d14e4064f4539018ee_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8257804c43fb5563a4bea1cc14e09fcd_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\839c29e20e86e9a977341270089149ef_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\840fffb109f7ca16ce03789091e789e5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\85744849750fe5b95e1963b5ee69d049_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\85f16384d46f235fd46dedf47b067ddf_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\866cf058621b77a8316992f2493d66f7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86b113086fe585f3888e6171930964d1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\87a4c839b234d64e2a9a5aefee353ea1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\87ce09da137963484adf0346d06e8649_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88a88fcbdc930e4695490844f263b086_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88b24fd994cb7bbb119057fcb7251b58_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88c6fb17fbbfa8a87736ae5a5b235272_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88d0909763700aa4e75f64283abc7187_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8aebc1938b9f73667c883c84c77e20d0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ba3269ac4ca7c6ff337782ff4bde2fa_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c10b6c6f042706f2ece6619fa77bcbd_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c54a78ad36570719802858ed4fd5be5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c6a135a834f62156b1a2d9c4693b2a9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ca0cf17f94eb068aa29bc0fb7afd8ac_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8cac39f606ad64345c128d991fe8754d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8d2adc33d063e167a213d8fa384aecd9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8df28307ce7201f72fdf7af30fb92895_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8fb29bbed1f2a9633be6035df6a50ea8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\921cc18e6ae9020aa8031a42a48cb1ad_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\93318bef0f469e3bc77a34a6f2d27588_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\93a7ce5fcadfe7a2836ace01b4218074_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\93d01ad745a00099c534ed80f50c1dcf_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\943aa86040097c68f88afe4cfbccba78_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\95442eb7ad338e7263fc167e3ef91028_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\966bddcb0946b1969b11f034b3747633_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9673721da0ec3e985fd32ea4ec7c68a2_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\973024204c995c023c6e440bb78215b9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\97e38818b43098ea7229225b7fcf6871_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\987e11c61ae5dc9228d7bb067bf62bef_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\98a655c4dac3039b46ab5a63354e9904_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9979847f628fe61adaf512c4219683b9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\99b990400546311446f9f92c204ca690_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9a68b84012da17a01008ac116cf1402b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9ad56e9525e907e017e6b48d4151b57f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9ad64b155bea440968b8a35e588ea1d3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9afca8d85c4f6d38fc1db49efcd123b9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9b40d13dc4bb95feb574faa9e7f00750_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9bce55546efcce6e5bf4971dcec2fda9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9cadbeccacdb16f112004cc4b6aee339_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9dbe781f73f4b6fb16d84676c79a6df0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9eae3fc65ff2fed89ecfebbcdfa29fd5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9f2edd95d76a67daf3063f5440c2eaaf_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9f5190f62a0739ffe2fd339bb9f1f6ae_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a026670a17abb39870d020d99d26df79_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a055e3fc3247d75424d9aece903ae2c6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a0a17fd870cf26c6063b9e9ac53e65c5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a134c7ca51a1000c218e8e2dc9b315ee_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a1daf50b41d571a684fc1b6a547de7a3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a1e6999d8e0bf81d5a9f1fba3c60a1f5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a47ca4ec03d8ef633a900d47f2dc1c73_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a48a78f129ad856b6736ad9be085e58d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a501485cbfc7ce9edf47d38952d49be5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a5217f1b7afc206d37c65bb4346f4ce3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a56cef5950ce1af727519dcffd575907_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a59b7bfe3c72689fe82bcc1b1b9175cb_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a5b3c5a9551a8f939139a779ee7efb6e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a65407f51e4242091604a6abc6059584_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a7861120d32948453b92df544af1a27d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a829d58e7bccc37066dfd93a588360bf_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a959f297b0784272277bd71aba57d072_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a9a75215212ed2396c8b5e3f7292ce36_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aa1d099071ba07e5850bb4cf299c008d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aa707b6852b6a90837457689f34ddfd1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aaa1dba54be902d9b24f3d4ed6c10491_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ac36d59db925d839a32de85a032b0647_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ac9f137b3611606387b8a448c0a520ea_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ad017db2a96e8d3d6d9b3f07c55acf4c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae2603fb414c9bce96b0f356b4d2c84f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aeba12b8e880152869dcb5f47b6c5683_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\af11bcbe5245d5d899561c7ea0c415a7_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\af9e067bff2616e7c88867ae490d2d49_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b0cd26fa4b441804c77d8e98e68ab1c6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1488ec251680d30537837ab5441f747_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b15486614e94c41f17769e900221770c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b186bce87ca3d88666f7f156ddfc4014_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b18d2268ffdb76e59075062d9911c00e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1e687a8f35a41519b2dfb4d89a29438_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1fed25c866a0b9953a26c6c726cd551_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2197a49a7641035b60a1f76194f5758_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2aa20a0324b63bd88598a3cee4996de_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2b2928aa43f907453f07399e6e803c1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b43d610774a50dc5e43e08cad4f3e87b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b45a5f608f95c85b52d75c891c94b73f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b54ca1a7b789c23d9fcfd05f1462ae5a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b5e4f74202d5c0b39ccaa47d5e5d2d9c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b671050991d17f5de7eac3ece84e77b8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b72e7517e16a7515d9b402f343e4b110_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b73c4ba4cda6162af2785b1bce898596_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7c061a8bbbc315a406cd9c4a99294f1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b8d4926548c394891574437066c5428a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b9589def1143429032bb60303811c8b0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ba301bf83f3ba249f807d999b53db81f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ba6ef67e35db3baf7d351708885197a9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc0e3966718ceade3d95c0536a83acac_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bdc90b84a288c519dfb80d1745d42d1d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bde61153c8f641d76066ade688d0b75f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\be9205947408cff31351acb480311c9b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\beb4cc0f80719681e7ecf5bc2d6aeb1d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf982b30678cf77a8013f66dd6adbdba_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c01cda61c5116c7bfbab4666fc683e8a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c04a6b432abea49ea1d8aad59413006d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c120d4e9458dc1458df550badaadc9e9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c1877b4627f497aadc6f4c68f0b5666f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c2398bc50610f00b2dd611b3d646238d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c2cfb0089d7dc1cd2378471ebdad1cc1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c39880aa4a8f081a0dad66507fbbc206_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c3bdeaa941dcdc815ef43bc8dc821270_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c4132df7c9da9a336307ad0132533568_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c438efcaa1d23ecf78e6e21b342dabb8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c4b83c11bc240b3d7086015b862f881e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c856b92246ea54260e6e414838ade29b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c92067b3ab0ba3755fc845ab85d6a874_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cbc8889580f6244f5031ce3fab2ec849_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cbc99954b944a742e5b506f0f436e9f8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cc413a369d74704c8d0f268bfc25ff53_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cccfc2c097116aec1cdbe56793f84ef8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ccd2c6169a1ef52d30eb7a5702d2a1e0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cd2b42aea085bca8f595910b14178a42_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cdf3de1faa7a6ebb337bde841df3b55a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ce0be40b631938a1ec60d97e26c2782c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ced6f7b87749f9f0b5e42bb8bd3317d2_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cf1b3d39ef8502a5ab70cfdeb83e71a8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cf2e74cc2ca10639dcc2a762e09cbd7d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d00785ffb8363a31170dca75b7e8775a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d031818bd06bbe063fd79dadee424a0c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d0359669f8c3633e81d718aeb3c04b76_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d09f4230b9ffe1e80b0c823e0f859d1f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d1f65f1bbb3cd19645a62fb3d2453c0c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d3f4291dcd47f2e66341066b8af08434_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d429995a6b82864711afdd641cf38d0e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d4aad7f9997bac57fbf18466762c1ddb_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d4e5433ebe2d2157f516105f6eb7a197_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d53cd6f7ce5484b304cf774053f72be8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d64bbe29c62462a333d4eee5d1c71f04_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d7bab6d2b53ecc62a6acaed9586799d4_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d81e6898ad50075d718aa25ea24d7351_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d9904845f88f6647303dc415a052c744_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d9d4d7e2183e1c0538daac8b4216c663_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\daefffa6c17074e35e3c87c33c726ee3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\db3e26e512b2b221c33dd73b579cb85f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dc0b76d7bfc735b8c2f0166e3646774f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dc214eef68307468d19c339f2e919e22_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dc8f393bd7c3a15a03752eb05c7045e3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ddb08a6880e549a2934da73c9757fc70_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ddeae0137b72f26e8fd911e68c5019ea_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e161fc9cf820d1cb57f230ceea51a903_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e19c262d3bd40c81f8a28e4940c58055_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e1ddae9e36aa7039b81bcab8a4bc76af_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e2cbecc854040acd0b05a5c9554a7459_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e36e2ed773da87809682520966839d78_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e3dcf4a04647920865a89dd9b73785b8_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e44e18bbd850f455391fdf9eeaf48e5f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e46a2cc23b6f3ed94eccab3576ade0ee_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e47a712d401996ee104e68f982c1a76f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e62aede2f53f6907f474cf13aedb37b1_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e6d4eb1d8df99087e17dbc80ecfb0e2e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e6fd8e02882198e7b2d4eab57ebddcfb_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e718e1ddecdbabad383ed57ae934f991_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e7ad141ef25c9fa2606b06773fa05f0e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e85b14e0648b31a63542f909c9d68217_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e8bb6f1c361adf144811bdf6f885dd4c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e921d30ef90483ed3434654ffaa4a69b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea43312f147cdd7238287a4b518abd3e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ebd825ce847810f692ddaf121517f771_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ec295fa4f261d53459c0cb18c6544e17_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ec2bbf7922773cc347d2e41db9a45d0f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ec4df9f4fcdc6d09e76a0899ab2786a3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ecb5939abfe01a1d7408cbfeb871918c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ee36411ef4b364c3cefcaba65b44952d_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ee7d835025f7b82c318d12e60cb216ae_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\eef88edd42ced6f2a3f68f3071379ba6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef0134b59370f768a701b64c6a6245ba_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\efc90039353ccac6e93f650bcc4f2276_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f0983b98fba84efccbe39df26aa6930f_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f1705ba8a357758efd03113275e9c33b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f1eb1232e6f5f65518d3aae0b1e6ecf5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f1fee37e353e2a3c14629a010be29419_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f2d551446a2cf8e5aa4c730c496e139c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f2eb30e7c12dc516d29f0fd9f1ef04ec_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f307dcb83a91016d1a77b33a8b60cf1e_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f5356f7aee85fa9a9e040bbead6429d3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f619d203cdffa24dbfeab0661f115bc6_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6bb79cbc6bef81f6b7c4b4f687d487c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f8a6ae29937eebf968a06dc5a1007225_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f8b826f9c442c8a3f804f516178714ae_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f8e168d9f5a973038ca6d93b767e2ada_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f8fef9163da743e8f847332042058ddc_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f9211e286a4b0d4f71446ba1aeb4f56b_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f929dab4c0bf3cb1e9bef51e551b998c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fbbba17cabdd51ad3289faf96d3be69c_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc1662eef582ac125e065b1b87a58408_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc1fad8a9b45b5a85b3e3a241666fde9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc307e99cbb663230a943d23032899e0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc83d5583b68411f54184fda53da85cf_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fcd558ada30c99b66e5e190e9f70f8c3_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fcec9ff825e83c9dc4c0063fc80d7afc_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fd8836d1e7f798cf6e1b30c6698a8a09_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe3dfe3e7f83e43879ce1ef54147a8c5_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe557eed395e25f32b21c99abe952d30_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fee9e5fbcac7086044fe9e90e8f35d7a_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ff2679681a67f124009b8338a0fd2aa9_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ff5886d3862f037ffdfef7a6d83afcf0_fa1899ad-e94a-495a-b532-d62fc6709fbd Object is locked skipped

To be continude ... report too long to go into one post ...
Joshik is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 01-24-2008, 05:29 AM   #4 (permalink)
Registered User
 
Joshik's Avatar
 
Join Date: Jan 2008
Posts: 7
OS: XP pro SP2


Cool Re: Yet another VirusWebProtect infection
... continuation of Kaspersky report ...
------------------------------------------------

C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.DAT Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\volatile.DAT Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-01-24_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\index.qbs Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBConfig.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDebug.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDetect.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBNotify.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBRefr.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetDev.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetLoc.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetUsr.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBStHash.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBValid.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\Shl_{0E84052B-942D-4265-9F4E-95A97E9AC416}.ldb Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\Shl_{0E84052B-942D-4265-9F4E-95A97E9AC416}.sds Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPPolicy.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStart.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStop.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtErEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\60B6C2C6.TMP Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtScEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtViEvt.log Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Lokala inställningar\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Lokala inställningar\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Lokala inställningar\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Lokala inställningar\Tidigare\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Lokala inställningar\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Lokala inställningar\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Lokala inställningar\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Lokala inställningar\Tidigare\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Owe\Application Data\Sun\Java\Deployment\cache\6.0\55\ee685f7-1d366f01/NewURLClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Documents and Settings\Owe\Application Data\Sun\Java\Deployment\cache\6.0\55\ee685f7-1d366f01 ZIP: infected - 1 skipped

C:\Documents and Settings\Owe\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Owe\Lokala inställningar\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Owe\Lokala inställningar\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Owe\Lokala inställningar\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped

C:\Documents and Settings\Owe\Lokala inställningar\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Owe\Lokala inställningar\Tidigare\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Owe\Lokala inställningar\Tidigare\History.IE5\MSHist012008012420080125\index.dat Object is locked skipped

C:\Documents and Settings\Owe\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Owe\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Owe\Skrivbord\Videofix\MitFraudFixIGEN\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Owe\Skrivbord\Videofix\MitFraudFixIGEN\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Owe\Skrivbord\Videofix\MitFraudFixIGEN\SmitfraudFix.exe RarSFX: infected - 2 skipped

C:\Documents and Settings\Rodica\Skrivbord\SmitFraudFix - Tools\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Rodica\Skrivbord\SmitFraudFix - Tools\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Rodica\Skrivbord\SmitFraudFix - Tools\SmitfraudFix.exe RarSFX: infected - 2 skipped

C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped

C:\Program\Delade filer\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped

C:\Program\Delade filer\Symantec Shared\NFWEVT.LOG Object is locked skipped

C:\Program\Delade filer\Symantec Shared\SNDALRT.log Object is locked skipped

C:\Program\Delade filer\Symantec Shared\SNDCON.log Object is locked skipped

C:\Program\Delade filer\Symantec Shared\SNDDBG.log Object is locked skipped

C:\Program\Delade filer\Symantec Shared\SNDFW.log Object is locked skipped

C:\Program\Delade filer\Symantec Shared\SNDIDS.log Object is locked skipped

C:\Program\Delade filer\Symantec Shared\SNDSYS.log Object is locked skipped

C:\Program\HP\hpcoretech\hpcmerr.log Object is locked skipped

C:\Program\Norton AntiVirus\AVApp.log Object is locked skipped

C:\Program\Norton AntiVirus\AVError.log Object is locked skipped

C:\Program\Norton AntiVirus\AVVirus.log Object is locked skipped

C:\Program\Norton AntiVirus\Quarantine\00A9233E.tmp/BaaaaBaa.class Infected: Trojan.Java.ClassLoader.ao skipped

C:\Program\Norton AntiVirus\Quarantine\00A9233E.tmp/VaaaaaaaBaa.class Infected: Trojan.Java.ClassLoader.ao skipped

C:\Program\Norton AntiVirus\Quarantine\00A9233E.tmp/Baaaaa.class Infected: Trojan.Java.ClassLoader.ao skipped

C:\Program\Norton AntiVirus\Quarantine\00A9233E.tmp ZIP: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\00A9233E.tmp CryptFF: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\00B64B2F.class Infected: Trojan-Downloader.Java.OpenConnection.ak skipped

C:\Program\Norton AntiVirus\Quarantine\05982C1F Infected: Trojan-Downloader.JS.IstBar.b skipped

C:\Program\Norton AntiVirus\Quarantine\063C4F1B.tmp Infected: Trojan.Java.ClassLoader.i skipped

C:\Program\Norton AntiVirus\Quarantine\069541A4.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\09327290.wmf Infected: Exploit.Win32.IMG-WMF.c skipped

C:\Program\Norton AntiVirus\Quarantine\09384689.exe Infected: Trojan-Downloader.Win32.Small.bmk skipped

C:\Program\Norton AntiVirus\Quarantine\09384689.zip Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\093C7086.exe Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\0B502C3C.wmf Infected: Exploit.Win32.IMG-WMF.c skipped

C:\Program\Norton AntiVirus\Quarantine\0B535638.exe Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\0BF06A0F Infected: not-a-virus:RemoteAdmin.PHP.RemView.a skipped

C:\Program\Norton AntiVirus\Quarantine\0C04125C Infected: Trojan-Downloader.Win32.TSUpdate.p skipped

C:\Program\Norton AntiVirus\Quarantine\103C641A.htm Infected: Trojan-Downloader.JS.Small.eo skipped

C:\Program\Norton AntiVirus\Quarantine\111123E7.wmf Infected: Exploit.Win32.IMG-WMF.c skipped

C:\Program\Norton AntiVirus\Quarantine\111777E0.exe Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\114F41A3.exe Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\114F41A3.wmf Infected: Exploit.Win32.IMG-WMF.c skipped

C:\Program\Norton AntiVirus\Quarantine\11C1686E.class Infected: Trojan-Downloader.Java.OpenStream.c skipped

C:\Program\Norton AntiVirus\Quarantine\11C4126B.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\11C4126B.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\12BB116A.class Infected: Trojan.Java.ClassLoader.d skipped

C:\Program\Norton AntiVirus\Quarantine\13985565 Infected: Email-Worm.Win32.Zafi.b skipped

C:\Program\Norton AntiVirus\Quarantine\141D568C.wmf Infected: Exploit.Win32.IMG-WMF.c skipped

C:\Program\Norton AntiVirus\Quarantine\14200089.exe Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\16B27DF0.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\18220020.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\18A6399C.class Infected: Trojan.Java.ClassLoader.u skipped

C:\Program\Norton AntiVirus\Quarantine\18D5055B.jar/BlackBox.class Infected: Exploit.Java.ByteVerify skipped

C:\Program\Norton AntiVirus\Quarantine\18D5055B.jar/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped

C:\Program\Norton AntiVirus\Quarantine\18D5055B.jar/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped

C:\Program\Norton AntiVirus\Quarantine\18D5055B.jar ZIP: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\18D5055B.jar CryptFF: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\18DC5953.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\19204B08.exe Infected: Trojan-Downloader.Win32.Small.atl skipped

C:\Program\Norton AntiVirus\Quarantine\19204B08.qtdfmp Infected: Trojan-Downloader.Win32.Small.atl skipped

C:\Program\Norton AntiVirus\Quarantine\19F14A22.wmf Infected: Exploit.Win32.IMG-WMF.c skipped

C:\Program\Norton AntiVirus\Quarantine\19F81E1B.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\19F81E1B.exe Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\19FB4817.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\1B6C5081.wmf Infected: Exploit.Win32.IMG-WMF.c skipped

C:\Program\Norton AntiVirus\Quarantine\1B707A7E.exe Infected: Trojan-Downloader.Win32.Small.bvv skipped

C:\Program\Norton AntiVirus\Quarantine\1D940822.jar/BlackBox.class Infected: Exploit.Java.ByteVerify skipped

C:\Program\Norton AntiVirus\Quarantine\1D940822.jar/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped

C:\Program\Norton AntiVirus\Quarantine\1D940822.jar/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped

C:\Program\Norton AntiVirus\Quarantine\1D940822.jar ZIP: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\1D940822.jar CryptFF: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\1D97321E.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\1E316775.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\1E4A419F.class Infected: Trojan.Java.ClassLoader.i skipped

C:\Program\Norton AntiVirus\Quarantine\1E4D6B9C.tmp Infected: Trojan.Java.ClassLoader.i skipped

C:\Program\Norton AntiVirus\Quarantine\23240A59/data0001 Infected: Trojan-Downloader.NSIS.Agent.p skipped

C:\Program\Norton AntiVirus\Quarantine\23240A59 NSIS: infected - 1 skipped

C:\Program\Norton AntiVirus\Quarantine\23240A59 CryptFF: infected - 1 skipped

C:\Program\Norton AntiVirus\Quarantine\2575338E.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\26E3202B.exe Infected: Trojan-Dropper.Win32.Small.amd skipped

C:\Program\Norton AntiVirus\Quarantine\275C77DF Infected: Trojan-Dropper.Win32.Agent.aac skipped

C:\Program\Norton AntiVirus\Quarantine\2BED689F.tmp Infected: not-virus:Hoax.Win32.Renos.dv skipped

C:\Program\Norton AntiVirus\Quarantine\327E1AC9.htm Infected: Trojan-Downloader.JS.Psyme.dy skipped

C:\Program\Norton AntiVirus\Quarantine\339D72AF Infected: Packed.Win32.Tibs skipped

C:\Program\Norton AntiVirus\Quarantine\35506876.class Infected: Trojan.Java.ClassLoader.u skipped

C:\Program\Norton AntiVirus\Quarantine\389B1EE1 Infected: Packed.Win32.Tibs skipped

C:\Program\Norton AntiVirus\Quarantine\3B716A2D.dll Infected: Trojan-Spy.Win32.Sters.l skipped

C:\Program\Norton AntiVirus\Quarantine\463B345C Infected: Trojan-Downloader.Win32.TSUpdate.l skipped

C:\Program\Norton AntiVirus\Quarantine\46AF2949.class Infected: Trojan.Java.ClassLoader.k skipped

C:\Program\Norton AntiVirus\Quarantine\48E90103 Infected: Trojan-Clicker.JS.Agent.e skipped

C:\Program\Norton AntiVirus\Quarantine\48ED2AFF/file1 Infected: not-a-virus:AdWare.Win32.CommAd.a skipped

C:\Program\Norton AntiVirus\Quarantine\48ED2AFF/file2 Infected: not-a-virus:AdWare.Win32.CommAd.a skipped

C:\Program\Norton AntiVirus\Quarantine\48ED2AFF/file4 Infected: not-a-virus:Monitor.Win32.NetMon.a skipped

C:\Program\Norton AntiVirus\Quarantine\48ED2AFF Inno: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\48ED2AFF CryptFF: infected - 3 skipped

C:\Program\Norton AntiVirus\Quarantine\48F37EF8 Infected: Trojan-Downloader.Win32.TSUpdate.n skipped

C:\Program\Norton AntiVirus\Quarantine\48F628F4 Infected: Trojan-Downloader.Win32.TSUpdate.f skipped

C:\Program\Norton AntiVirus\Quarantine\48FD7CED Infected: Trojan.Win32.Dialer.ay skipped

C:\Program\Norton AntiVirus\Quarantine\490450E6 Infected: Trojan-Downloader.Win32.TSUpdate.o skipped

C:\Program\Norton AntiVirus\Quarantine\49077AE2/WISE0009.BIN Infected: Trojan-Downloader.Win32.TSUpdate.n skipped

C:\Program\Norton AntiVirus\Quarantine\49077AE2/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.p skipped

C:\Program\Norton AntiVirus\Quarantine\49077AE2/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l skipped

C:\Program\Norton AntiVirus\Quarantine\49077AE2/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.f skipped

C:\Program\Norton AntiVirus\Quarantine\49077AE2 WiseSFX: infected - 4 skipped

C:\Program\Norton AntiVirus\Quarantine\49077AE2 CryptFF: infected - 4 skipped

C:\Program\Norton AntiVirus\Quarantine\548A542E.class Infected: Trojan.Java.ClassLoader.d skipped

C:\Program\Norton AntiVirus\Quarantine\54A644AB.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\55470C55.class Infected: Trojan-Downloader.Java.OpenConnection.ak skipped

C:\Program\Norton AntiVirus\Quarantine\5A436E7E.class Infected: Trojan.Java.ClassLoader.h skipped

C:\Program\Norton AntiVirus\Quarantine\5A46187A.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\5EC5480F.tmp Infected: Trojan.Java.ClassLoader.i skipped

C:\Program\Norton AntiVirus\Quarantine\640565C1.dll Infected: Trojan-Clicker.Win32.Small.jf skipped

C:\Program\Norton AntiVirus\Quarantine\64620ABA.php Infected: not-a-virus:RemoteAdmin.PHP.RemView.a skipped

C:\Program\Norton AntiVirus\Quarantine\68532A76.class Infected: Trojan.Java.ClassLoader.h skipped

C:\Program\Norton AntiVirus\Quarantine\6898690A.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\68EC6858 Infected: not-a-virus:AdWare.Win32.Maxifiles.h skipped

C:\Program\Norton AntiVirus\Quarantine\6B3D118E.class Infected: Trojan.Java.ClassLoader.d skipped

C:\Program\Norton AntiVirus\Quarantine\6C150CE1.txt Infected: Trojan-Downloader.Win32.Agent.aea skipped

C:\Program\Norton AntiVirus\Quarantine\6C3F2EB3.txt Infected: Trojan-Dropper.Win32.Small.amd skipped

C:\Program\Norton AntiVirus\Quarantine\6E756051.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\70A3204C.exe Infected: Trojan-Downloader.Win32.Tibs.cn skipped

C:\Program\Norton AntiVirus\Quarantine\70A3204C.qtdfmp Infected: Trojan-Downloader.Win32.Tibs.cn skipped

C:\Program\Norton AntiVirus\Quarantine\71605EAE Infected: Trojan-Dropper.Win32.Agent.aac skipped

C:\Program\Norton AntiVirus\Quarantine\747D2457 Infected: Trojan-Clicker.Win32.Agent.gp skipped

C:\Program\Norton AntiVirus\Quarantine\75E6400C.class Infected: Trojan.Java.ClassLoader.aq skipped

C:\Program\Norton AntiVirus\Quarantine\76263365.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\76263365.htm Infected: Exploit.JS.CVE-2005-1790.j skipped

C:\Program\Norton AntiVirus\Quarantine\76263365.wmf Infected: Trojan-Downloader.Win32.Agent.acd skipped

C:\Program\Norton AntiVirus\Quarantine\762903AB.class Infected: Trojan-Downloader.Java.OpenConnection.aj skipped

C:\Program\Norton AntiVirus\Quarantine\76295D61.class Infected: Trojan.Java.ClassLoader.h skipped

C:\Program\Norton AntiVirus\Quarantine\7703599D.class Infected: Trojan.Java.ClassLoader.k skipped

C:\Program\Norton AntiVirus\Quarantine\787E7851 Infected: Trojan-Downloader.Win32.Small.buy skipped

C:\Program\Norton AntiVirus\Quarantine\78954720.exe Infected: Trojan-Downloader.Win32.Agent.aea skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070537.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070537.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070537.exe RarSFX: infected - 2 skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070546.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070727.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070729.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070730.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070731.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070732.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\A0070733.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\System Volume Information\_restore{6390A370-AB00-4609-8098-1A1C6A7DE247}\RP428\change.log Object is locked skipped

C:\WINDOWS\$NtUninstallKB824141$\user32.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\colbact.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comuid.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\es.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\migregdb.exe Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\ole32.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\txflog.dll Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\EventCache\{60833757-5D14-4D7A-BE32-61043C8788E3}.bin Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\Temp\JETCBCB.tmp Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

------------------------------------------------------------------------

And here is the HijackThis report
------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:04, on 2008-01-24
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Delade filer\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program\Delade filer\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program\Delade filer\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Delade filer\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program\Creative\SBAudigy LS\Surround Mixer\CTSysVol.exe
C:\Program\HP\hpcoretech\hpcmpmgr.exe
C:\Program\HP\HP Software Update\HPWuSchd2.exe
C:\Program\Microsoft IntelliType Pro\type32.exe
C:\Program\Microsoft IntelliPoint\point32.exe
C:\Program\Java\jre1.6.0_03\bin\jusched.exe
C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
C:\Program\Delade filer\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program\Logitech\QuickCam\Quickcam.exe
C:\Program\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program\HP\hpcoretech\comp\hptskmgr.exe
C:\Program\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program\Personal\bin\Personal.exe
C:\Program\WordWeb\wweb32.exe
C:\Program\Delade filer\Logishrd\LQCVFX\COCIManager.exe
C:\Program\Webshots\Webshots.scr
C:\WINDOWS\System32\svchost.exe
C:\Program\DELADE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.se/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Länkhjälp till Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Delade filer\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program\DELADE~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\sv\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\sv\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Webshots Toolbar - {C17590D2-ECB4-4b15-8820-F58798DCC118} - C:\Program\Webshots\WSToolbar4IE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar1.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program\Creative\SBAudigy LS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [type32] "C:\Program\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program\Delade filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program\Delade filer\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [swg] C:\Program\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-4077350100-2935208554-4240909337-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Rodica')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Starta Microsoft Outlook.lnk = C:\Program\Microsoft Office\Office10\OUTLOOK.EXE
O4 - Startup: Webshots.lnk = C:\Program\Webshots\Launcher.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Personal.lnk = C:\Program\Personal\bin\Personal.exe
O4 - Global Startup: WordWeb.lnk = C:\Program\WordWeb\wweb32.exe
O8 - Extra context menu item: &Webshots Photo Search - res://C:\Program\Webshots\WSToolbar4IE.dll/MENUSEARCH.HTM
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program\ICQ\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {2E12FB00-546B-4EE3-9CC2-057BF02E1C17} (Webshots Multiple Media Uploader - Container) - http://community.webshots.com/html/atx/wsaxcontrol.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2349a6da...p/RdxIE601.cab
O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1094151739812
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1161421843625
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {C3A57B60-C117-11D2-BD9B-00105A0A7E89} (SAXFile ActiveX Control) - http://kursnavet.cfl.se/broker/globa...ts/saxfile.cab
O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - http://www.tukati.com/software/4/1.7.20.20/tukati.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatisk LiveUpdate-schemaläggare (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSvcHst.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program\Delade filer\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program\Delade filer\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program\Delade filer\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program\DELADE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 11776 bytes

Thanks again
Joshik is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 01-24-2008, 09:16 AM   #5 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,231
OS: 2000 Pro; XP Pro; XP Home


Re: Yet another VirusWebProtect infection
Most of the items found by Kaspersky are in Norton's Quarantine or System Restore points.

Please use Symantec's guide to remove the Norton Quarantine files.

Or...delete the contents of this folder, but not the folder itself:

C:\Program\Norton AntiVirus\Quarantine

---------------------------------------------------------------------------------------------

Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 only
  • Double-click ATF-Cleaner.exe to run the program.
    Under Main choose: Select All
    Click the Empty Selected button.
If you use Firefox browser
  • Click Firefox at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
  • Click Opera at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

---------------------------------------------------------------------------------------------


Your logs appear clean.You should be good to go. We still have a few items to address.

C:\System Volume Information\ is where System Restore's cache is stored. Whatever is in there can't harm you unless you choose to perform a manual restore. Nevertheless, we shall be resetting/clearing the cache in a little while.


Clear & Reset System Restore's Cache
  • click Start >> Run - type SYSDM.CPL & press Enter
  • select the System Restore Tab
  • tick on the checkbox - "Turn off System Restore on all drives"
  • click Apply
  • then untick the same checkbox & click OK


Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs if you don't have them already:
  • SpywareBlaster to help prevent spyware from installing in the first place.
    • Install & update SpywareBlaster with the latest definitions.
      After you have updated, click the button - enable protection for all unprotected items

  • IE-SpyAd - IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. An installation tutorial is available here.

  • MVPS HOST FILE
    The MVPS Hosts file replaces your current HOSTS file with one that will restrict known ad sites form serving you unsolicited advertisements. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is the IP of your local computer.
    • Download Host.zip to your desktop.
    • From your Desktop right-click (hosts.zip) and select:
      Extract All from the menu.
    • Click Next, click Next, select the option:
      "Show Extracted files", click Finish
    • This will open the newly created hosts folder on your Desktop.
    • Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine.
    • Once updated you should see another prompt that the task was completed.
  • ANTIVIRUS SOFTWARE
    It is very important that you have anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperative that you update your antivirus software at least once a week (even more if you wish). If you do not update your antivirus software then it will not be able to catch new malware that may have come out.
  • FIREWALL
    Using a third-party firewall will allow you to give/deny access for applications that want to go online. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. A tutorial on Firewalls and a listing of some available ones can be found here

    Do not install more than one firewall program because they will conflict with each other.

Here are some additional utilities that will further enhance your safety.
  • http://www.trillian.cc ? Trillian or http://www.miranda-im.com ? Miranda-IM - These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)

  • http://www.mozilla.org/products/firefox/ - Firefox - Use this alternate browser. While Internet Explorer is not a bad browser, almost every exploit crafted is targeted to take advantage of an IE weakness.

  • http://java.com/en/index.jsp - Sun's Java - It's much more secure than Microsoft's Java Virtual Machine.

  • http://www.aumha.org/downloads/erunt-setup.exe - ERUNT - A useful freeware utility for users of Windows 2000/XP. It's made up of two parts - ERUNT & NTREGOPT.

    ERUNT will create daily complete backups of your computer's Registry. Whilst System Restore does the same thing, a corrupt registry file may prevent Windows from booting & this effectively renders disables System Restore. With ERUNT, you're able to restore the damaged Registry.

    NTREGOPT works by recreating each registry hive "from scratch", thus removing any slack space that may be left from previously modified or deleted keys. In other words, it compacts the Registry to a small size which allows Windows to load & perform faster.


In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles
If you want to fight back the Malware Writers that have made your life a misery, please take a look here and read what you can do against it.

Please respond to this thread one more time so we can mark this thread as resolved.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 01-24-2008, 01:30 PM   #6 (permalink)
Registered User
 
Joshik's Avatar
 
Join Date: Jan 2008
Posts: 7
OS: XP pro SP2


Thumbs Up Re: Yet another VirusWebProtect infection
Thanx for all the help

I have executed all the steps in your last post, i.e.


- Emptied the norton quarantine - by deleting the items in *safe mode*
(did not work by using the program itself, probably because some items were put there by an older version of Norton Antivirus)

- Cleared the system restore cash

- Installed SpywareBlaster, IE-SpyAd and MVPS HOST FILE
Please Note: the original IE-SPYAD format that used .REG files to load and unload the Restricted Sites list is no longer available and will not be maintained. The same holds true for IE-SPYAD2. Both are replaced by what used to be called IE-SPYAD for ZonedOut. ZonedOut is a free utility that loads and unloads a plain text list of domains into the Restricted sites zone. You can think of ZonedOut as an improved replacement for the .BAT file utility used in the "original" IE-SPYAD. This new version of IE-SPYAD provides the same protection as the old version, but is easier to use and maintain.

ANTIVIRUS SOFTWARE: Norton Antivirus 15.0.0.58

FIREWALL PROTECTION: D-Link DI-604 Router & Hardware Firewall

------------------------------------------------------------------------
I've downloaded ERUNT & NTREGOPT, but not installed yet - want to give it a thought first same goes for Trillian and Miranda-IM
------------------------------------------------------------------------

All in all, my computer seems to be running OK

Thanks to Your Eminent Expertise

This site will be recommended by me to anyone who has a problem
- You Guys are "God's"
Joshik is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
 

« Previous Thread | Next Thread »

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -7. The time now is 08:08 PM.

Contact Us - Tech Support Forum - Archive - Privacy Statement - Top


Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85