Options
Win32:Adan-094 (or078) [Adw]
Hi, I also am getting the heebies with these two trojans and have not yet managed to be rid of them. Some help would go a long way preserving my sanity. I suppose a place to start would be good. By the way I am running Sygate personal firewall, which has a backtrace function. I ran a trace on another attack and found that an ISP called Inhoster.com holds the range of addresses 85.255.112.0 to 85.255.127.255 As you can see the 85.255.117.124 address that these viruses list in the avast on access scanner is right in the middle of that group. I have a screen shot of the trace if you want to see it
Regards Neil_1956
Regards Neil_1956
0
Comments
http://downloads.subratam.org/Fixwareout.exe
http://swandog46.geekstogo.com/Fixwareout.exe
Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts.
You will be asked to reboot your computer; please do so.
Your system may take longer than usual to load; this is normal.
Once the desktop loads post the text that will open (report.txt).
Download HijackThis self-extracting zip version from here. Once downloaded, double click on the file & it will install into it's own, permanent folder.
Start HJT & press the "Do a system scan and save a log file" button. When the scan is finished a window will pop up giving you the option of where to save it. Save it to desktop where it is easy to access. Open the log file and copy the entire contents of the file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.
Thank you for your reply and offer of assistance. I am at the tearing my hair out point. Adaware wil NOT run. I tried reinstalling it and it refused to do that. Below is the logfile from Hijackthis. I have not got any others at this time. I have run Spybot search and destroy as well to no avail
Thank you again
Logfile of HijackThis v1.99.1
Scan saved at 6:58:36 PM, on 7/23/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
F:\Anti vrius\smc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
F:\Anti vrius\Avast\aswUpdSv.exe
F:\Anti vrius\Avast\ashServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
F:\Anti vrius\Avast\ashMaiSv.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
F:\Anti vrius\Avast\ashWebSv.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\WINDOWS\Explorer.EXE
F:\ANTIVR~1\Avast\ashDisp.exe
F:\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
F:\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\General\Local Settings\Temp\Temporary Directory 3 for hijackthis.zip\HijackThis.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R3 - URLSearchHook: (no name) - {2077E341-BFF8-0F75-5DA7-CDD85925FEA3} - runload32.dll (file missing)
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - f:\Adobe\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SmcService] F:\ANTIVR~1\smc.exe -startgui
O4 - HKLM\..\Run: [avast!] F:\ANTIVR~1\Avast\ashDisp.exe
O4 - HKLM\..\Run: [OpwareSE2] "F:\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "F:\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [links] links.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [TForm1] iesetupdll.exe
O4 - HKLM\..\Run: [newbreed] AliceSD.exe
O4 - HKLM\..\Run: [deelb.exe] C:\WINDOWS\System32\deelb.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Testimonials] borlandg.exe
O4 - HKCU\..\Run: [teqq32] ABCXYZ.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: Toki Toki Boom - http://download.games.yahoo.com/games/clients/y/vto_x.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: Yahoo! Reversi - http://download.games.yahoo.com/games/clients/y/rt0_x.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.com/turbo_lister/AU/install.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://chookaforever.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145797639327
O16 - DPF: {7D731A83-6C80-4EA4-9646-5E06A0513274} (Sandlot Loader Control) - http://www.shockwave.com/content/ballistik/sis/slgwebinstall.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{29314E08-EF15-4152-92D1-5DFCAC0162FF}: NameServer = 85.255.115.22,85.255.112.101
O17 - HKLM\System\CCS\Services\Tcpip\..\{D1C8924C-7816-4C84-AEAB-E19056F0C7B3}: NameServer = 85.255.115.22,85.255.112.101
O17 - HKLM\System\CCS\Services\Tcpip\..\{E86CDADD-92DF-4C67-8455-EFFA1F6E343F}: NameServer = 85.255.115.22,85.255.112.101
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.22 85.255.112.101
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.22 85.255.112.101
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.22 85.255.112.101
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - F:\Anti vrius\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - F:\Anti vrius\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - F:\Anti vrius\Avast\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - F:\Anti vrius\Avast\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - F:\Anti vrius\smc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}70E761ADB3C6-463A-4E34-EC9A-D8CC6620{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}8E4CBB9BF5D6-1089-97E4-E3CD-2B4D50A1{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}AC56D980E1B1-48A8-F754-8D2A-2E4921C5{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}9F717C38087C-F878-F214-06A4-E45057B6{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}EDE488714E09-14B9-B734-18BB-2C625467{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}91CDD9F5A11A-8749-7064-F4F4-0261F841{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}7FB0B6451CB2-6BE8-5374-EA19-75EE7A18{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}26C8AAC8262F-FBC8-D714-54B5-A2FC8215{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}6809C7A71577-AC98-1D74-2D83-134CBEF6{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\etumd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}B2AC712E5D84-BB5A-9B24-53B3-3C0956D3{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}92D1F1999833-0E59-88F4-24F8-13C44AD1{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\swen
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ogol
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\eno
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\llun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ruof
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\evif
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\onisacputes
...
Microsoft (R) Windows Script Host Version 5.6
Random Runs removed from HKLM
"dmute.exe"=-
...
PLEASE NOTE, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Example ipsec6.exe is legitimate
»»»»» Search by size and names...
C:\WINDOWS\SYSTEM32\IPSEC6.EXE
C:\WINDOWS\SYSTEM32\DMHQJE~1.REN
C:\WINDOWS\SYSTEM32\CSJCPE~1.REN
* csr.exe C:\WINDOWS\System32\CSBCU.EXE
* csr.exe C:\WINDOWS\System32\CSWNS.EXE
»»»»» Misc files
»»»»» Checking for older varients covered by the Rem3 tool
»»»»»
Search five digit cs, dm and jb files
This WILL/CAN also list Legit Files, Submit them at Virustotal
C:\WINDOWS\SYSTEM32\CSBCU.EXE 51,266 2006-07-16
C:\WINDOWS\SYSTEM32\CSWNS.EXE 51,266 2006-07-17
C:\WINDOWS\SYSTEM32\DMUYJ.EXE 62,019 2004-07-08
C:\WINDOWS\SYSTEM32\DMUTE.EXE 62,017 2004-07-08
Other suspects
Directory of C:\WINDOWS\system32
{3D6590C3-3B35-42B9-A5BB-48D5E217CA2B}.exe
{6FEBC431-38D2-47D1-89CA-77517A7C9086}.exe
{5128CF2A-5B45-417D-8CBF-F2628CAA8C62}.exe
{81A7EE57-91AE-4735-8EB6-2BC1546B0BF7}.exe
{148F1620-4F4F-4607-9478-A11A5F9DDC19}.exe
{764526C2-BB81-437B-9B41-90E417884EDE}.exe
{6B75054E-4A60-412F-878F-C78083C717F9}.exe
{5C1294E2-A2D8-457F-8A84-1B1E089D65CA}.exe
{1A05D4B2-DC3E-4E79-9801-6D5FB9BBC4E8}.exe
{0266CC8D-A9CE-43E4-A364-6C3BDA167E07}.exe
{FC809AC1-9C3A-431F-BBD0-8BC44FD7F02E}.exe
{6DA459BD-73A9-4218-8C17-031A0D5E0CC9}.exe
{D6BF119E-A9AE-4316-AD36-78EDF9A88132}.exe
{A4D77D47-65FA-49DF-99C9-6C4E95020FF5}.exe
{06A5411E-0DD1-4AE0-8080-286D335C5E39}.exe
{283FEC03-040C-4FF9-9DD5-BA14B50081F4}.exe
{5487A72A-297C-4D44-908E-D11992082CC2}.exe
{3E0D06EF-D609-4D0F-96E1-0CA4843B4BCA}.exe
{D68F1B29-DF73-4C84-B157-A03B8B440489}.exe
{AA768813-40FF-499B-AB4E-4AEC8E97335E}.exe
{3AD81AE0-D772-4D3A-8B8F-E58DB0C5A48E}.exe
{C11F0EA4-1F9E-4E7B-80AB-474A4609E721}.exe
{06A34CA7-A5A5-4AE0-86A7-780C98C57725}.exe
{F9136DC4-849F-4208-97E8-7F2113704798}.exe
{7310F738-E10D-4DC5-9334-BC4C636DA4B4}.exe
{C7634B1A-8CFB-4A07-93EE-7E3848BB6E19}.exe
{34726225-6474-4A57-A66A-B179C80CAB5A}.exe
{671C5739-51EE-4005-80CE-5AA7ACFAC972}.exe
{9D609346-DE79-4832-90B3-668E52A34397}.exe
{54B94BB3-6C79-4983-8BE0-C245AB44ED26}.exe
{DF85A664-204D-43B3-BE01-7E10FA46CAD8}.exe
{FF8E786E-7536-47E4-AD2A-7AFAFD999724}.exe
{79D1B62C-EC9C-49E3-84F1-00FE1A92DA89}.exe
{D249676F-6F01-43DE-B108-53E6A456710B}.exe
{5BC530A6-1220-4813-87F5-0230AD112802}.exe
{070D27D0-310A-4A42-9E20-1E6E935FC04C}.exe
{4BF687C9-958C-462A-9575-EC5FC55A52FD}.exe
{8FF40381-5726-44B6-9A9F-D8E45C3B23D7}.exe
{71FDEBBE-7BB5-4889-B9C6-79AADB66DE88}.exe
{57AF6130-52F1-4FB7-AC0F-D3BEED7AABA5}.exe
{97E9FE91-9124-4701-B2FA-1C5BA1F8C053}.exe
{2301A2F7-A235-4FF5-A0BD-1FC35DCEFB47}.exe
{6809C947-C006-46A1-A9D5-ED958A0636C5}.exe
{BB27EC26-7216-48DF-BEB2-06B2CF7E13AD}.exe
{FE1DD4F6-B316-42BE-90C9-E875651D32A0}.exe
{6242F1D0-8371-491F-8F99-28948CCBAB2F}.exe
{B06F6877-64B7-4D59-8171-EFE260A99EB5}.exe
{3A105C56-4C65-438F-B3DF-D57DF0C9199A}.exe
{133663AB-48A8-4B1B-BBA6-17D4540EBC20}.exe
{97368882-9832-4B59-B53C-E0E73683682B}.exe
{270D481F-4B35-462B-9E22-CCABD3513070}.exe
{9641DEA5-7DB0-471C-AC90-6B99DDB8B451}.exe
{FFA44C4B-AD0A-4742-B6D3-068BA0BC1BA7}.exe
{2E39A37C-A575-4BEE-9EB9-BC9A68EBD3E5}.exe
{C0FE59B6-1257-492C-9950-F04DB0F70AA9}.exe
{E49FD9A0-3860-4114-96D3-5F3C74434604}.exe
{F6A1A32B-342D-431D-BAAD-37808250FBAA}.exe
{4A45814A-5D2C-478B-B72D-50E71AD95A5D}.exe
{17E75447-F838-488C-916B-1F9EA7C0C085}.exe
{80DF93F9-9402-478C-A7C0-AD5E20210A5D}.exe
{0D405504-F515-4A91-B852-5A5838FAB195}.exe
{DB731790-E3B8-40F5-9647-7E357B22F80E}.exe
{C1E4A2C9-73DE-4313-9E42-EF244488D4AD}.exe
{5704CBFA-AEB5-482F-A0FB-2959391A51CD}.exe
{1BA575FD-B9BE-425D-AB68-9AAE83F859D4}.exe
{E1DFC081-F42C-496D-B426-EA06B9A6C29C}.exe
{BCCD5736-F159-4A34-93EF-FC5F8E7865CB}.exe
{47ADCC6C-DF8C-4B81-894E-7DF1E43E8F1B}.exe
{A9FC0B71-7E80-4FE7-80B4-46E8E12A5039}.exe
{720037B4-2115-4BF0-BD5E-4BF2CF3202A4}.exe
{C4E8C921-189E-4FA0-8D88-14EC46234618}.exe
{617AF51E-5EAB-4D53-9DE8-D25663555ED7}.exe
{ADC15B0F-7D02-4D17-8BD5-2E43C7864270}.exe
{D6EBA702-6051-4417-B774-C8585948991D}.exe
{0E183DD3-D145-4F2C-ADD4-AF3523445856}.exe
{AE4E4325-772B-45A9-9BF9-F8460AE016A6}.exe
{77101934-F191-4148-9753-86358C6DEFA6}.exe
{C5BA6D20-557D-4F3E-9C79-3F0BF32F6D44}.exe
{B9B43617-17A6-4B54-A41F-AD2A66B38DF5}.exe
{5B356817-A028-4276-A1FC-6DF2523D0BC2}.exe
{86B70572-7958-433D-B75C-9ABB6940319F}.exe
{E2258BB9-D043-4438-8779-C849F26E9194}.exe
{C26A91C7-1B1D-431E-AE53-020CDA3B76C7}.exe
{0FF2FF26-14C0-409F-B903-4E4BFFF48A19}.exe
{4AD64192-D020-4F98-9232-0546889DA2CD}.exe
{1F1B6339-315A-4A0A-AA86-AE7D8594EA0C}.exe
{53D3A0AA-55DE-43D1-A7D9-C42F7D739421}.exe
{B6C4E549-BC9F-4253-8791-4D5F29598B35}.exe
{ACD6A2BE-4461-47AC-81E4-29A14C8F682D}.exe
{A1C820D7-DE2B-45F4-9D66-9D29B6EB947F}.exe
{B52AF27D-C809-419B-B68C-80EF49C8E80E}.exe
{837CCCA5-CBF4-443C-9333-B8922AD15461}.exe
{B37A218A-5AD9-4AFC-9706-F51F89D1FD2F}.exe
{A724F2AE-130F-401F-84A9-ABF2AC6ED8C0}.exe
{11689DBE-96CE-4E87-9C5B-C05060FCE6A0}.exe
{E67BD93C-FF44-4140-B4AD-F0B3F3114255}.exe
{D599283D-4140-4522-ABC1-B0B3202A599D}.exe
{35F5B073-DD16-48B9-8B51-7605E6A93CD0}.exe
{59A51C56-3698-4F20-B4D0-84ABB6F26EE4}.exe
{1630CE7C-50B8-487B-9FE8-FECC99FF9D62}.exe
{1E8E398C-A1C2-4927-BC42-8AEBFA8681DE}.exe
{EC5C76CD-42C0-419D-B640-9926C11E3485}.exe
{FD9E3AC3-EC60-4FAB-B088-1E7325E01205}.exe
{CB9DD2CB-FB22-412C-8106-B9964CAB2B50}.exe
{E0AD91F1-8D2B-4901-82B2-9C0D5A54394B}.exe
{9C2C567D-2E12-4940-87A2-407C765F7867}.exe
{C2390F98-D2A8-415E-8CF2-C7C09BAE6394}.exe
{DEF4EB31-1DFE-4367-9D75-94DB064E2FAC}.exe
{236E7B98-B5A3-4FB2-BBBF-5C84BB66331A}.exe
{BBFC581E-51E7-42EF-A5DC-163DDD1B7031}.exe
{1172F92D-C4DB-449C-BD21-90C5D51343D4}.exe
{91537CC8-9764-4A39-94EA-96ECE4430F00}.exe
{5495569B-23DB-4A81-B53E-17D899A5D022}.exe
{AF8A2DAD-D83F-46D1-9843-6877EA2D1480}.exe
{118CDC42-17C2-4AC5-AE25-45C96386A9B1}.exe
{1C582507-51B3-4574-B2A0-7EA37716A994}.exe
{54DB1907-9D30-44E8-83F0-7572BA3BF8B8}.exe
{309E94A7-0867-4F6F-8889-4C2EFD3C4E9A}.exe
{BC164992-62E8-4882-B536-3522EC1B3549}.exe
{EC174781-932E-4022-8E2B-8B492B00F7AC}.exe
{6865C2C0-EF39-46AF-A435-21361A0D3809}.exe
{AEDC1959-3659-482B-830A-DEEFCBCFC727}.exe
{E05D4C33-BB47-4738-9401-7F35D2B5A217}.exe
{3FECDA87-6547-4517-AAD1-437BFA09730E}.exe
{5D8D5968-4AA6-4E9B-BFF6-11AF9057D9E2}.exe
{77C8B8A8-693A-4E82-8E03-8801FC453591}.exe
{D230F1BD-E9A3-4FF3-A6EF-33EC79561E24}.exe
{FE928F68-F861-4849-B261-8486B3560746}.exe
{81C61152-5CD0-45A3-9F86-05F3513F976E}.exe
{D1AF7875-35CB-4D86-90B4-A7AC84A49541}.exe
{B8F6C83E-F141-452B-95C9-A6B16949990F}.exe
{08D5AAFF-B274-4F8E-BC84-790E09AFBFDD}.exe
{71B0D1E7-0085-4745-9400-74829D321A31}.exe
{DAB801BD-DA47-411A-ADE8-3BE6D183A45B}.exe
{D92EED9B-A7E9-400D-ABA8-4776B2C518EE}.exe
{2494E14F-6B20-4173-929D-33CD98217F1D}.exe
{E75EBA9E-7BAB-4469-8CC8-E4D0E0EABE84}.exe
{62B96BE5-A2D9-4817-BA26-395795EE7118}.exe
{9C8BC462-8ECA-4CD0-9147-D2B1263B9FEE}.exe
{C908BCD7-09D9-41C5-91F0-5D745250464C}.exe
{DB8B07F8-D444-4BF3-A2C8-CC2B2B405E69}.exe
{D7CBA2E6-727E-46B7-ADAC-6B67356A832E}.exe
{4E5F187A-10DB-4EFB-99D2-00867BD0FE2F}.exe
{6FC96DF9-26BB-4DCB-AA50-70D0597EFC8B}.exe
{4D47C13B-AC94-4851-902F-4AC11723CCBD}.exe
{C7B0DE14-F50F-4AA5-B5AD-CA73615395B7}.exe
{A7CE8FDB-91B2-497C-A517-6C442647C8DD}.exe
{7CC1F00E-80BA-46B1-9686-1A882EBD7D77}.exe
{92D298CA-C372-46E3-A2B5-8D996401EAA6}.exe
{FC94C328-233C-4246-8EFD-E5858E52D250}.exe
{50D60D72-66F0-4D49-A295-BF21AE310382}.exe
{1EF719E4-D492-4F22-ACE1-AAFFA08F4691}.exe
{D91FF640-0071-4168-B72E-617D633559DA}.exe
{0716ADC6-C26B-4F9D-AA62-6DC3E47344AE}.exe
{B3A99355-7329-4B5C-9594-AB57DD2A5A7E}.exe
{ECAE967A-C115-40F0-B926-F1505D7D53B0}.exe
{2D8EA0CB-B016-48F3-AEA5-46EF00A3A81F}.exe
{1DD3F50A-1164-4037-A4EE-B36067790710}.exe
{F652FEB4-41F2-4AB4-ACF6-6D9A3644CB87}.exe
{9FAB9D2A-4F06-4645-A33F-2100E1AECAB9}.exe
{10976676-1E57-4E0F-A6EE-FD390D88BDE7}.exe
{36FF69CF-E096-4AD0-94CE-EEC99D663F51}.exe
{50E06666-CFC5-4CBC-83AB-A4CBA092B8A1}.exe
{2B0DAAAD-A189-45CF-BADB-DB7D7F37BA31}.exe
{3FFFD418-2DB0-4DB5-BB8D-2DEACEB13559}.exe
{B4EABCE3-27E8-4368-932D-145614F74BC4}.exe
{79B729AB-81C2-4295-BE66-BA9DB0C6CE07}.exe
{99FEF9FE-561B-40E4-8CB2-F480A42B8101}.exe
{1AF78254-81D5-4B65-8836-EFF456B0B2B3}.exe
{AAEC6753-70D3-4A78-B753-2496781D8618}.exe
{2915E281-246D-4379-9FFF-C96C3C82A9F9}.exe
{4928ABDE-15AF-47B5-8B72-31A878A0B963}.exe
{74A54E06-8179-4B2E-8FFB-1775C29444B7}.exe
{1EF4766D-D49C-49F6-9402-A704804BDA49}.exe
{0E29D515-F574-4782-9EBF-7593441BE278}.exe
{B0A9C08B-A048-4152-BEE9-1AB3F4B01303}.exe
{FE84E0F9-344D-443E-99AB-12C38201FAD8}.exe
{64BAA6C1-224E-4744-B167-76944D3A6896}.exe
{062DA817-16C9-44E2-9DBB-148F31AD7BFD}.exe
{034965F5-12D4-49E5-8B68-B20460389912}.exe
{BE0DF582-8929-430C-A1DF-B1242D2BA65F}.exe
{C6468094-367D-4624-8363-F7B6BC1FABAC}.exe
{02A728C1-9CC5-4061-A008-E1FE0EC3ECA8}.exe
{5CEE2A8A-1C0D-460C-B284-C32F20AD39E8}.exe
{20BD2175-0357-4402-A6CA-5BFB94B0715C}.exe
{EA209E26-4F2E-4F3A-A39A-E93C1EF5208C}.exe
{A10A7E84-99B4-41C6-8BD1-A55D588C773D}.exe
{7C782EF2-B5C3-46C8-90A3-E44C137F88D4}.exe
{AD2EC398-E414-43C2-8DDE-3248F576DE16}.exe
{23EAFDE7-AB8A-4F92-A6A9-0683A0D4FB73}.exe
{87FB5AAE-7D02-4FF4-A1E3-CE2A2CEDA21B}.exe
{AD11AACF-41BC-460B-B0BA-67A09FE7E317}.exe
{C1806C53-38D4-4A64-B75F-019C1A547B32}.exe
{B740B77F-7471-40AE-BB62-FAD7FAA872E7}.exe
{2BD8066D-13E5-4818-B795-4A71ECF3D51C}.exe
{ACEC95A6-9816-44B7-9BE1-560D7CA3D541}.exe
{E3933A62-E941-4307-89DF-3174BA736343}.exe
{03D744A7-DA41-47E7-9E20-CBDEFD6BAAE4}.exe
{417A41D8-D4DD-4510-BE6F-8ACA07B7EB86}.exe
{B5B90BDB-FEB0-4E58-A936-2CAEE55E6243}.exe
{F92E1489-C9AC-407C-A320-F720F70D08C5}.exe
{A5898942-8AC5-4A49-96E8-949F136873EC}.exe
{546A2D92-0F36-4AAA-8B6E-A0876D01D1CD}.exe
{E08FD896-204F-41F0-BE08-AD5A80F2C69C}.exe
{AA5597A9-7F90-49B9-AC43-78B5449ECC25}.exe
{887ACC7D-5726-42BC-BF0D-5081C29497B7}.exe
{D1B74E53-585A-4704-8A9D-C14BF864EF0A}.exe
{85467794-5BD4-4D70-B965-91F0BEF8F2AB}.exe
{544D8809-00A3-437A-A8E8-2B96B5D2A943}.exe
{E4DF3F3E-2A90-4971-A571-E0D262C54D9D}.exe
{4962FB14-04E0-4E17-BC25-3723BD61FD6D}.exe
{633CDA51-B60F-4F9D-8376-61B9C855A95C}.exe
{73840DEB-7760-4932-8469-8296FD9FB3C6}.exe
{643915B3-75CD-45CE-AF2F-A7412F398C0D}.exe
{E8453593-A733-42DC-B760-65E7403A893A}.exe
{FA1B6F76-53FF-456B-A734-AE0B89197E2A}.exe
{EA3D14BB-D7D5-452F-BDF0-E992E29E43D7}.exe
{2815CFE0-0A84-4F65-A8B9-92E8CDF5F1A2}.exe
{7ACF1F11-25EA-445B-B93D-24E3105EC4E4}.exe
{1E23F069-6EEB-471D-B90A-8F7E24AAC15C}.exe
{32E412CD-C530-4408-869D-05B7EC5ADC76}.exe
{024A52CA-01C3-4E3F-A5FA-8AA92E4631DD}.exe
{4445A408-6F44-40B1-9B8F-AF9D016BD372}.exe
{3F9C9E34-96DC-454B-9675-8D28B530E7C8}.exe
{0BAEEC2E-CDA1-4ACE-BA28-3BA97AE1FE94}.exe
{55980419-C903-443B-929A-0F1F8BE216FE}.exe
{9E3E64F0-EFC2-4BD1-A058-68A24EC243A6}.exe
{68C00509-77F3-495E-8182-255922221E39}.exe
{DBFE48D7-39DA-47D0-A79B-9EFFBABBEA54}.exe
{F02ED4BB-0604-4552-BF00-F038D18A9755}.exe
{A43199C0-BED6-4516-8393-A94D4F3DFAF5}.exe
{5E1D1600-084B-49CF-9825-C611CA5E1BBA}.exe
{9CF124B6-0B74-4DDC-A41E-15BC81F143BB}.exe
{1B97F9CB-438C-450A-B9C5-CFD281913585}.exe
{FDA0DD40-BFDA-4516-B8A3-CDC53F5DFB7E}.exe
{1EBCB167-0E10-4FD0-94DF-DB79CCBEA91A}.exe
{ACF7FC09-2715-4BF3-B7EF-AEC485EA169B}.exe
{90DEB821-07D1-43A6-8DCB-8A0C46519A03}.exe
{809E5011-999A-4933-944B-BFC3849F5804}.exe
{40921A74-A268-4CA1-A7F9-61BB08FA7CED}.exe
{F9852463-4E28-43AF-9E35-5AB5E4DF445F}.exe
{2C49B55B-B8A5-4609-B57E-2D1A04C8EB00}.exe
{EFDA9C71-C55D-4EC9-A969-5CB99ACA9E26}.exe
{83130068-6ADE-4C30-BA02-DFDEE1F52B29}.exe
{0EDBA8AA-F77B-4592-A44D-13104B2ADCE3}.exe
{568D0182-C13D-4AD4-AA39-1DE6A0FAF254}.exe
{9CBE03F4-C3A5-4EB1-93F5-6797904D59F9}.exe
{603746EE-0742-4595-87B4-AE44235405F8}.exe
{288E812C-F0FB-48AB-B755-7E3D3A2210C8}.exe
{7031F10D-844E-4F9F-82E0-5702872B6A10}.exe
{49E41D57-C8F6-4BCF-BD95-9A469DB915CE}.exe
{8150396A-822B-4A52-B577-D3E4B4349E71}.exe
{09D7B641-B791-4F2D-AA7D-CCF7CBEAF0FA}.exe
{54E362FA-BB25-4FEB-8BDC-5083F33C2E19}.exe
{8DA65704-BCFF-41B7-911D-7CA074E2572A}.exe
{29A2ED1A-FE3B-4762-BA80-470E95EAD8EF}.exe
{4B58FE5D-834D-40B0-9EEE-F2FE960A3106}.exe
{31981FCF-138F-473D-8F8B-A0191436B50E}.exe
{4E21CB62-CB85-47CB-959A-3C20D37E12E2}.exe
{D2321E19-F6FB-49BC-90E0-E906DD47699F}.exe
{A25D5999-FE03-4EA7-B971-8ED2709A2475}.exe
{95CB4A44-CF63-480E-A4A9-214031DA6BC1}.exe
{4AA1CE9A-9614-4EAB-91E3-5FA38C9925A9}.exe
{5B692CF1-8F0C-45AA-8CF6-B092B7AF2172}.exe
{8258F1DE-2555-4B8E-B69D-EE967066FD71}.exe
{1B5EDBA8-199F-4E5B-9DB1-856415E1D467}.exe
{DA4C2DAD-47DD-4940-83E8-F8D0B9CABB99}.exe
{4492AFCD-BBFC-40E8-9164-264F33A64B30}.exe
{FB5976F0-613B-4F0D-9FC5-E21F497DFDC4}.exe
{F0743455-5A7C-4955-8FA2-787D398EDC7A}.exe
{1A566647-63E7-429E-AFCD-6D22535B41C6}.exe
{81816BD9-2BD3-46F0-9D8E-92B8EB98CC3E}.exe
{2CEDA782-D73F-47BA-B4F0-825F8B26CF26}.exe
{7486B6AF-B687-4D04-AD89-8CB0C15A635B}.exe
{D465889F-B7E3-45B1-8779-CAFE4622B995}.exe
{50E8B12A-B407-482E-9828-E9A85375F7CB}.exe
{F4680A42-653D-4CD8-BA98-E8BAB80F68C6}.exe
{A5251A55-CF68-4A37-A67F-52407A26349A}.exe
{D408521D-4C18-475E-A180-817202BFBC80}.exe
{3A26177A-9B91-4E58-B0E0-7F90A8EC7B03}.exe
{0A671855-4A58-4675-A6B6-DF1D3ED0D29E}.exe
{E2FF892F-018B-4FC2-A5E8-8734E7CDC66F}.exe
{2F62FB58-C212-4619-A88A-8ECD91970A20}.exe
{DCEAA12D-4DCA-4749-BED4-5640592CF551}.exe
{55108AF5-24A6-43C2-AD07-6AD1D198881E}.exe
{265A02A9-D557-4ECE-A53F-4CEDF8F6828F}.exe
{CF0770B8-83A4-4ECE-B951-98A3814EAE57}.exe
{E0E04BA8-FC2F-4E51-995A-4979F85E92FB}.exe
{75D2C82E-B6AE-4E0E-A206-29EA6D2D42FB}.exe
{0E2179EE-DCD8-4903-836E-DE75B0C89509}.exe
{833FB6D5-6113-468D-AA3C-1EB980EDBDFB}.exe
{5191BF15-6870-4BA7-809D-638BF577D422}.exe
{EF16A804-A55D-4367-9CDA-A86264AAAD30}.exe
{36880249-A4EA-442D-8773-63475F6D818A}.exe
{2768A454-D3EE-4071-9CD6-F66A8A9D8E58}.exe
{939209CE-D25F-46C3-982D-14EFDF8F92F0}.exe
{240C08BB-1BC5-46B2-890D-E0C9B8253EFB}.exe
{CDC7DCF0-7BEC-4093-BF6E-0A37E6CE3DA7}.exe
{CBA85BA1-A193-45C8-8835-E4ABF18E6840}.exe
{CC041904-AB7C-485E-BF15-5A8C63B0463F}.exe
{1A51ED5E-95A3-407E-94E3-D189DCA7A9B5}.exe
{20277546-12D3-4901-BE9A-CE6AD1D9A41A}.exe
{EB8B0EDC-E40D-4887-AACC-959E6C53A417}.exe
{77A12D9E-FD5B-4405-ABAE-6B4A7E9FCE0A}.exe
{AD657CFB-9EB4-4158-92DC-EA584D7C20A6}.exe
{3DACB2FA-CF0A-4314-B025-E921D5F65734}.exe
{B4273CE1-5BC7-4EB3-9326-5C0FD46D2C79}.exe
{EF76D696-45C0-406A-A68C-C964E9770895}.exe
{2E39AD6A-27E4-41D7-AA42-2FFC82A076C9}.exe
{FA7498EC-6CC6-415C-AF83-26DD96BBC65C}.exe
{AD904980-2ACF-49B1-B11D-F140CC586392}.exe
{24CFD025-793B-4734-9222-4AF7232FAF36}.exe
{167A56B2-2ABC-4F74-9721-183E0F0157D5}.exe
{A70BF88C-7885-45D9-A2AF-6254B5232C93}.exe
{24E5CBD6-D83E-47AB-9183-781EAE42509A}.exe
{07F50CED-C240-4E9B-9985-651A9D9598BE}.exe
{C53EBB23-2013-47CE-8848-E9B0DF09B9F8}.exe
{D82278DD-4284-4151-A8FC-3F19C1296D05}.exe
{73E2A8ED-0ED3-4E22-807D-DD510D544D31}.exe
{B21A2C57-D960-4A4E-A174-AE36FFD4C4BC}.exe
{26FBFF22-CE39-4186-A4BE-8E3E8E2D00C9}.exe
{3400A4D0-10B0-4950-B447-BFF8BB95B099}.exe
{331996BF-9D8D-4A58-8376-7945C3F56DC8}.exe
{AC1305AB-C23A-4A5D-8310-156A06C141E3}.exe
{95C0D025-7C08-46F0-A842-F044D728FC89}.exe
{3D8F223C-8E89-4603-A391-3D6A78EF990A}.exe
{B1AF5F76-A592-4731-A7A2-F762D5AD6E02}.exe
{99B34D18-F95E-48A0-98CA-DE28C8DDBF64}.exe
{962C5142-7E05-415E-A9C6-0FB896244632}.exe
{CE594B33-F5D4-4622-A08F-B1A1CC5B9F7C}.exe
{D103BE15-D7C4-4597-B52A-AF5A37DED219}.exe
{97F23DA9-CA58-4345-824A-277C9E03B651}.exe
{4347BE60-C31A-4475-A16D-6CD40AB91062}.exe
{16520C17-BBEB-44F6-8742-C018F578DAB4}.exe
{908D04B8-3246-4C8E-8B20-4EB008650384}.exe
{46800799-E663-4A9A-8F28-01086F575FFE}.exe
{7BAB4A27-73BF-4FA4-A477-F0C7F871DC72}.exe
{D52D9762-6CBB-4BC9-8F9E-19CD0280DF8A}.exe
{918EAC2E-344E-4287-958F-E92CDCEE8311}.exe
{0DDCA879-4589-47A8-B419-1E72B24F481F}.exe
{FFA37FDB-624E-4B14-BFB6-AF1AF9DDD1BE}.exe
{8DF2197F-7462-4391-9A05-E51F74998A87}.exe
{E650D6F2-2E7D-4D54-9C53-40A89B5E43F1}.exe
{AA6DBFDE-EB47-470D-9176-44F0F8542C6E}.exe
{6986D753-C847-47DE-BC5D-D29F3BF5F618}.exe
{E0CC653D-EE89-46E8-8C76-AB2583B48EA1}.exe
{628492D6-32DD-4751-98FE-FFC9D1CA56A2}.exe
{2AAF4B9A-54DB-47AD-B5B4-F90BFD54BD88}.exe
{C353899A-F522-4AC8-8945-B40A1D7F94E1}.exe
{DB63C290-35C4-4417-974F-499A6D3F0332}.exe
{D3F1524B-4C07-4823-866F-93658EC12DBB}.exe
{7D80E59D-CC04-4870-9C7A-E4CADC7B7F39}.exe
{29357D64-9E2A-4568-9E98-5D3832851C7D}.exe
{77CAC29A-B768-4297-9C3D-94BE109A8F77}.exe
{16AF70B4-E8B9-4BFC-9AB4-7E1050F29865}.exe
{53751B8F-3929-4A03-953C-6BABE91891CC}.exe
{E9EC0E69-9987-4E45-B734-8299F2BEB9E8}.exe
{197A4CD7-9073-4BBF-8273-28FC9F2952DF}.exe
{05AAFF66-2678-47B9-A2F6-4C24137110A4}.exe
{C646D3E5-99CB-4E92-9384-96345FEDAFE4}.exe
{C3130555-9F3D-4EA4-B354-0612A4A29D6D}.exe
{17D7D134-794F-4413-805A-671FAD6FDA73}.exe
{BD090362-E454-40C9-A0DA-64D38566CA20}.exe
{141C2617-1971-4164-9FA5-890B0F2F89B8}.exe
{E09B0640-302B-4278-82AB-05CCE95F7D36}.exe
{DFBDD0E8-A479-4BFE-B6A9-7CF67905DB99}.exe
{6D2652EB-6C58-4C2C-B4F9-F0084026002E}.exe
{73BCB5A9-EA82-45CF-83E6-FCB314E479AD}.exe
{149251D5-7284-4833-8B1B-FD0457543E62}.exe
{E2146D3A-D2D3-4CE8-8FC0-0720DBC7091E}.exe
{28A50D5C-4B54-4ED1-9A9C-FD58869843DB}.exe
{BF26EBEB-070B-42DC-B007-824EA91E1B30}.exe
{77378CBD-C8E4-45F9-91B0-C6C4FDBF960F}.exe
{EF777546-3ED4-4600-90CC-EF5B41A207EF}.exe
{B89BB6B0-0CCB-4C2B-928C-E118E31BEA8E}.exe
{A7692FBB-2663-43AC-8C53-4E9DCE974F26}.exe
{D5B36B4C-2EB5-482A-9CC2-37D7238F7635}.exe
{AA42CCAC-CE7B-490E-BD4C-A8638C96AFF8}.exe
{5A221662-8206-4A82-AD37-A1D0252CE1D7}.exe
{02EF4939-E74B-45FD-BC2A-9D3CC6420B97}.exe
{8089439D-09B1-4293-883D-B9AE36DE7FA0}.exe
{2D7D0D1C-04DF-4293-98C0-2C614E79C852}.exe
{0936D30E-9887-4FD5-A865-9A2E09CF46DB}.exe
{7EC10468-F298-4A5D-BB20-1DE8EF7211C0}.exe
{48C3668F-9026-4DC9-9C8F-B7D46124CC0D}.exe
{0EBEE828-F132-41A9-BBCF-078E62639719}.exe
{73CA7A3E-3082-4388-A4A7-20E59D95BF87}.exe
{46E54A07-383A-407C-A4E0-83ADBF3A0EE9}.exe
{4ED6F9B4-6D3B-4B97-AEF2-E8AD7068677A}.exe
{26EB64C2-DEFD-47DC-AD8E-D47316079921}.exe
{DE875DFA-23BB-40AF-B6A2-1B82B07D7402}.exe
{27B61EBF-DEA0-425F-B55D-81A6EBDF7FC2}.exe
{B17BDF73-47B5-4D9B-8955-DC68E30B1257}.exe
{3654DF23-011F-41E3-B452-BEC517A853FF}.exe
{C51970FF-74D8-4D3F-A6B5-F9601F82B452}.exe
{9C8FA38E-00B1-4ED3-BD47-F8D2E1CAFE24}.exe
{7C276BAF-C86E-4090-B73C-E3674BC9258F}.exe
{6BC60B0C-D3C1-4AC3-8A36-F1353E75036F}.exe
{01F65440-9422-42BB-B0C7-811A838CA38B}.exe
{935C9E90-EF1C-4D74-84FD-1E188FE5ABB2}.exe
{EA84E411-2B38-46F2-8143-9E3C847F3767}.exe
{FE0CC7FF-BA44-4A12-8B72-0EB96A7A9718}.exe
{DDF89E89-B093-44E5-A835-EE6A0C67D924}.exe
{BA4049B9-E1FC-4C81-92B6-4D13AC79A331}.exe
{E1327CE1-2EA1-4778-BA41-49B465F935F0}.exe
{158BA590-3B44-488E-BED9-61CBCDF53A21}.exe
{21AB5744-7D09-4197-8A35-A5CBEA04D00E}.exe
{C43CAE9A-2D7B-44B7-98FE-46BA85C87C89}.exe
{94613B9D-45D1-44D2-8788-F13F93917449}.exe
{35490975-C11F-4369-B0AD-D8FECD9EEA7A}.exe
{051ADB5C-2F72-4803-B48C-5C65036ED705}.exe
{39F62FF6-5274-476D-927F-B54D5B550E6D}.exe
{CE8C966E-9543-42F6-A7D3-5D132334D8CE}.exe
{00FC8DD6-DD31-487A-980C-B4EC8FDDC864}.exe
{4741CBF1-52E9-47F4-9B8C-B3A52DD02485}.exe
{587C679A-29DD-48B3-866E-C67CF788C048}.exe
{15FB20BD-9FF6-485E-A3E9-B1C42C4EC5C2}.exe
{978AF9C4-FEAC-456C-A214-F6C281931925}.exe
{45F16D1E-5D84-4C76-844D-B3108DB07359}.exe
{1542A3C3-28EE-452F-8509-F067C8691501}.exe
{46B4FA44-9EA9-42DA-B003-7EBB4C9895AB}.exe
{4F1D2D8F-FBBE-437B-86F7-5C6467FC358D}.exe
{8AC7A9D2-A05F-49C6-BB4B-ACAC6E472223}.exe
{83186EB7-547F-4028-BAE1-2E85CC1C0BEA}.exe
{DEED1574-4AFF-47F0-B35D-8A47359CCE13}.exe
{9E249C1F-5325-4B19-BB52-BF4FFF76AD18}.exe
{A4336F3D-4768-4154-8FE5-E83135CB9721}.exe
{44DCC142-9DC4-44AE-8434-FD164847F53E}.exe
{2F7B4BF4-746F-4E51-8B3F-01ED0C9A6016}.exe
{AD5BBF47-979B-46A4-902E-472405AD61FF}.exe
{E100C4CF-8561-493E-B360-23B586A8C1FE}.exe
{1347264D-E7FB-4DCD-9119-B60B9A9BE5E3}.exe
{5AB5EE0E-FA69-451F-95CC-81AD71A26D6D}.exe
{A0177589-73CE-41FB-9495-561451B7238F}.exe
{CC3E2FC7-2E8E-4529-9E89-85A7E8BE12DB}.exe
{5F355842-7840-42ED-82A3-01F5301F440B}.exe
{A9259A08-925D-43A7-910E-AFFFE3B95C7F}.exe
{B2A749D0-C356-402C-A11E-1F514A9AAC11}.exe
{6CD2B735-7F70-49D0-8E99-F420A02DBDCF}.exe
{ED2289D2-DE64-4695-9CFF-A75206988803}.exe
{C3386092-0C4A-45BB-9050-0BBD8A0276E8}.exe
{324D8D3E-CABF-4504-9A83-A311DEF504B7}.exe
{8E25E4D9-B419-4362-8051-719FBD00E844}.exe
{7FFCEB3A-A028-42DD-AC05-F37809E78463}.exe
{A5CE0F1E-BD19-4B6D-80A6-8AAF29A9D889}.exe
{559AEB5B-2FE2-4072-A281-425B3CD5B4FC}.exe
{59F48E6C-2AC6-4F4A-800F-647639DEA313}.exe
{E4E070F7-9B4B-4CA0-AD13-D9058953D9CE}.exe
{D2155BEF-3185-40FC-A8D6-8201DE7BF1DE}.exe
{81F6F952-32CC-41AA-9F4C-ADCB615009CF}.exe
{98363C6D-DD85-45A9-AFB7-521B73B6A552}.exe
{5668C363-9939-4BAB-8ADE-A39C6C75FA52}.exe
{09E14434-7C74-44B8-B8B1-C409DD3C458D}.exe
{84F31EA4-81FF-49D9-9009-E295695BF1FE}.exe
{B35964DD-D1F9-46D2-8FB5-7EE73CEA040E}.exe
{2C9BCB84-E15A-462E-A612-9FBFA8761F15}.exe
{85862E9E-6C54-4126-BF44-9AB976BA41D6}.exe
{D032567E-5ADD-486A-85AB-E446924D2347}.exe
{B0A41B7C-1529-4DB6-A50E-63C50748E0E0}.exe
{1B22ED94-4E05-4315-8431-5AEAA332CB4E}.exe
{A7BA6E30-8411-435C-8AD4-0F27E8193AD3}.exe
{765082A7-6936-4BDC-9ED5-C06A68BA4951}.exe
{72FB2BCD-BED2-469A-AC28-5CD22C2E7C55}.exe
{AA6C46D1-D22A-4898-818E-8AD9B0908C50}.exe
{9F758F58-1EF8-48C6-9FDD-C5AC55E0EE1A}.exe
{2CE1241D-003E-478A-A29A-EDCAB6F24769}.exe
{6F83AC4B-806E-4F9D-9764-F70369E5369A}.exe
{825BA5AB-D9B7-4F6D-9DD0-284E740E627F}.exe
{FE98EF68-B3B7-4172-8BFB-736515D9DBCF}.exe
{DDF833F4-4C10-4A76-A2CF-7F09280D9B7E}.exe
{C256F02F-3392-41CB-BE96-ED8D7240CB8F}.exe
{F1D7CF29-F947-4A53-8546-E85681272DD5}.exe
{B7ADAC33-3D9D-45C7-B195-554C724711F7}.exe
{9D7C2A0C-C82D-4E11-AC74-8517A4DDFB11}.exe
{B2032346-F844-4B3E-B28F-9907DDD7D2D8}.exe
{4ADEB1EC-CB1E-4A8F-BD98-EF3E3432765C}.exe
{361B2664-0EDB-4451-A467-2A9EEF63BF57}.exe
{DCDEEB05-2C64-4FAE-A824-3C5272A0867A}.exe
{38B5BA12-A9E4-4807-B180-3F8E062DF8CF}.exe
{0C97DBEB-EDE3-479C-9133-B1D08E16A26B}.exe
{70606A08-45A7-4A5F-AABC-3F2B88BEA11C}.exe
{4B6859AC-00F7-4BB7-A243-F7DF9E9C10ED}.exe
{BF59AFCB-DD08-4F09-9200-42BAC293A0CB}.exe
{3DE6DB33-5D41-4575-B676-11DC6641E543}.exe
{C0D313C4-4A19-4A00-82EC-04AEF11E5689}.exe
{10F1F13C-6786-4463-AD46-7CB04C55601D}.exe
{A496878C-81A2-4E01-8A9F-CCB9438DE27B}.exe
{CD221CFE-13C8-4D4E-93F2-9C7254E4822C}.exe
{0CFC730B-5E76-4257-9CDA-0C336ECF9C00}.exe
{5FC069E4-C82D-46B3-8A43-3F8327CD8E9D}.exe
{5293788E-7941-4849-BF06-6BF42DD51AFE}.exe
{EE1443BA-3AA3-4A24-9BD4-F735F46D870B}.exe
{BD41A0C1-D57D-4BC8-B54E-1E3D30A25B92}.exe
{C793F161-7AF1-459F-8C9A-75C9C3ADA68C}.exe
{152B1856-88E3-4BAF-B6AC-05CCB2DFD0AD}.exe
{F0C5A259-CBB2-4576-96B6-C84799351D88}.exe
{E7BA6178-BEEB-49D7-A718-291637FC762A}.exe
{A26FE6F5-4398-42CD-A721-768F8AD920B4}.exe
{8AE0DD78-ACEF-49CD-8C36-F1AD146BB9AE}.exe
{09C59336-D107-4FA3-B13F-047DE70994E2}.exe
{9C96EEA5-EB59-4C67-8764-A7356CDAF1C5}.exe
{882EEFE7-382E-4902-A9DE-59ACFC4D0243}.exe
{84C36F6A-9D14-43BA-BBC3-F6C1A8E6A969}.exe
{85E7EFC4-6868-4B17-8F29-E681D73D8C15}.exe
{5BA56FC4-D53F-47D5-B2AA-52F23D7E5057}.exe
{03038312-1410-4366-A116-D8C9672BFCF9}.exe
{7D77827B-2370-4E39-AD4B-A1F1A1C9D0B5}.exe
{190DFB70-646D-4E1F-8FCC-CEC1A796D584}.exe
{98E7214E-8940-435A-9A44-8CC31ACC1097}.exe
{5E247D91-3C07-425C-980D-51A613677DA7}.exe
{FA51CCBA-8910-4F0F-86A3-EA6F62EF0DDB}.exe
{2A68D0DF-0355-4206-A2D9-9B2411C75925}.exe
{6465B4B1-01D2-4CD4-A846-BE06ABEE6F8B}.exe
{F8A98546-64FC-42CB-9302-D7B5EE6572F2}.exe
{A583079A-30DC-401C-91D3-2FF333FE5302}.exe
{428D774D-CBC0-4E48-A725-56A36024BA5D}.exe
{D63969E7-062D-43C0-AB87-4695E36C9A0E}.exe
{67E75205-9EA3-4D7B-BF69-6CE7F1A17C41}.exe
{AE70B27C-C2CD-40A1-A0CB-24C1C958ACB8}.exe
{CC4CB5CF-7A5B-4DE1-802B-B07407E62F26}.exe
{CA4FEF4A-C1CB-4491-B9C0-96739FCC4A01}.exe
{D33F703E-7563-43E0-8AB5-471210D7FC82}.exe
{286531B0-7F91-41FB-93AF-9432AA44425F}.exe
{105498AE-D84C-43C6-B7E7-AC309FCDBFCD}.exe
{0E234C4D-6872-4003-8F42-04C322FFE79C}.exe
{F592F2C1-93BF-4031-BBDA-988B59D246DC}.exe
{4471ED19-6AAB-4554-A163-A052075506C1}.exe
{7208C7F5-EF38-4BAF-9D28-D0C2FEE258B2}.exe
{A82C7CF4-CE78-45DC-9C44-1F65C001E7C2}.exe
{E69391C1-3502-44F5-A7EB-BAF4678E952B}.exe
{8236EE7F-4395-4FBA-BDDA-CFCD55A9B7E6}.exe
{A5FEE4CD-AF16-4691-AF76-55C520D71301}.exe
{96E14E3B-656C-4A2C-B7F9-3D87E7A58029}.exe
{80387F17-9151-4EEE-A9A3-74F07F6358F7}.exe
{678A3759-0417-4677-940A-330D470EE9F8}.exe
{FA7044F9-2AA9-4EBE-BA06-574D21C1245D}.exe
{DEC37EB9-B4BB-4867-A673-154918ECCB3C}.exe
{BE0F6D6E-3FB4-4810-BDD0-6230CD1C7942}.exe
{B15AA6CE-B25D-4B2B-8F01-62DD3694DEE6}.exe
{26FAD0B6-108F-4B25-9F71-6CBF59EDD058}.exe
{8218A734-4E8A-4545-A1E7-12D3D002A4F1}.exe
{1A7D8B2D-AC6A-4A39-8F54-61D65677195C}.exe
{863131BC-A15B-4887-B37F-BD3846EC5B55}.exe
{3EF97609-BD5E-4F32-8CC4-ECEFEAD537C4}.exe
{02F209EC-57F1-44B0-9649-D84B25B02CD3}.exe
{47D0ECAD-CCA6-4402-8543-4B81E42F99A1}.exe
{C4FA07BD-1BDF-4B32-A4BD-7868BCB8DEF1}.exe
{E90BE29A-510A-446D-8BD7-3CF00E76F865}.exe
{5042C392-380F-49B1-B3F1-F552E813A34D}.exe
{FECDCAFF-65DF-4C90-AABA-A3CE8CE46B67}.exe
{E0A7A638-862A-405F-95B2-58A8860C195F}.exe
{1FB2E0DE-002B-477C-8E9B-BBAA6BB66234}.exe
{E8A772AD-2CAD-4CDB-9A99-9B341C81414F}.exe
{A5633836-F7A4-4938-AB2D-3F815FFFDB21}.exe
{2DE8EF2A-B785-46A9-8216-711A754FE4D6}.exe
{0CE63C60-ACB4-4431-96F5-B895A6790D4F}.exe
{C36F1064-A6E4-48DE-9BE8-53A5C4F89B13}.exe
{C28604F4-2F5C-41DC-921A-5C8EBF62F73B}.exe
{B3BC918C-4C28-4808-8670-A72ED906C29B}.exe
{C73288B7-521D-48F8-98F4-CFB025070AC9}.exe
{8186F55E-16BA-4CC3-A22E-1E33656FA13E}.exe
{EDF9654F-5AED-4E74-8697-F52D518DC148}.exe
{BD0AED2A-AFAC-45A9-BF4C-C495AB22EC98}.exe
{217D91A7-3DF3-402C-8425-A3D47F12EB26}.exe
{419D7C66-215F-47E7-8DB2-8FE2D79F5B7D}.exe
{AA53A147-7388-4D0A-A3F7-7FEF52876B6F}.exe
{C4E2358C-FF1F-463E-98A7-D73827AFB5E9}.exe
{0C02D387-4E11-489F-A6B3-F34172BDB6D2}.exe
{8AFDCE65-7593-4C04-8EA0-1671F2C66B8A}.exe
{06CFF595-329D-4D93-A87A-8169D88EF29E}.exe
{13334F61-5AAB-43F6-A7A9-2EAA100ECF54}.exe
{F1FD0EF7-2BBA-4C70-93E7-D4CAC6A12425}.exe
{9056B8E8-B452-4EEE-9113-769A79A89E07}.exe
{382C6229-C9F2-46C6-B76D-BA4BC5F9CD50}.exe
{DC59E6E5-5312-4536-BB3E-BA00700FAD12}.exe
{1C6317BB-AC8A-44E7-84D9-A3B5BE3E9E46}.exe
{D39EE236-02E7-4945-8094-2E8EE4B50A35}.exe
{AB01651A-E18A-436D-BBEA-96CDBC9A5BE1}.exe
{1E36467E-DFBE-484A-8C6B-B1F21AA3974C}.exe
{16A71834-320A-42EC-BB23-7674E0715D8F}.exe
{D991E85A-D2B5-4915-91DF-0C4CAC4060ED}.exe
{AE33F75E-0BCE-4770-AF14-67EEF954C473}.exe
{2E4A4B74-9E20-4E95-B100-C9209768657A}.exe
{F80242B4-8FA3-4B4E-B329-77A25A76135B}.exe
{85249A13-AB72-4CDC-B220-836EB6DF151D}.exe
{66BE7ADB-4C42-4DE6-BBBC-B129579B82AF}.exe
{05100DCE-27DC-4B4E-8CC7-EF24BBC11203}.exe
{9E8DEAA3-CAD5-4644-8DC3-665FD2C8F932}.exe
{1C1C25FD-D7FF-4238-ADEA-9BFB3B23DC11}.exe
{4D023045-BFEA-4744-8226-C97D5E6C7E62}.exe
{3778D913-D377-445D-BE7C-D4C94EB0778C}.exe
{E350BCDC-461B-4941-9D4F-AD2872933832}.exe
{D52AA71E-C55F-4CF2-85E3-A6B306899FDB}.exe
{769768EF-6068-4010-BDFF-ED4D8043B231}.exe
{D18F4483-0B86-4D37-BBD2-60FACF0A3ACD}.exe
{315EE093-8408-404E-A4AC-A67095891954}.exe
{41670E2F-6DCD-47B0-94F5-5DE2012F41C6}.exe
{53632BAB-F780-4F22-917D-546D09281D0E}.exe
{271F7999-E724-4DF3-B6CE-CFC06EE40A96}.exe
{DC397921-6D97-4C67-B94A-9236447E727F}.exe
{F7ECC360-9EBA-4A9D-9714-A82164E79C6D}.exe
{790D767F-64FE-4667-B608-C9F05B09F576}.exe
{EF99D17B-3CAC-493D-8DDA-3124F1675266}.exe
{D0ABD35B-DDF0-4DC8-A589-600883B63D86}.exe
{BDDCDABC-6162-455A-987F-F0E4944FCB97}.exe
{2B36B604-F546-4576-BADA-0FBFD8DA52F3}.exe
{34BF998D-BC39-4B16-9E65-3BC6E9DAD89D}.exe
{5F02C062-7D97-4DDC-8C32-377614669B13}.exe
{689E7CFF-0899-476C-8E3F-8E59A012884B}.exe
{79A66912-E66E-4F5D-80A9-E74F92EDC269}.exe
{6336D1A4-C06E-43AB-BEAB-3AEEF8A7B09B}.exe
{2F4A5816-3660-4531-AB2B-04CF2CAF6000}.exe
{08A7928F-393C-40E0-B026-428AE1A8536B}.exe
{6644BDFA-E008-4A3C-9FF4-17DB4D9CEE55}.exe
{254A94C2-5604-462A-B4DA-42FB11777CA3}.exe
{264C35EF-0DBC-40EA-A2F6-FA018BE974BF}.exe
{A7A84360-86F2-4E93-AB64-C1F3224D744F}.exe
{8ACFF92B-E930-42F3-AF31-AB9ADAAE8E2F}.exe
{FF076620-8DF1-4790-97F0-21ED478368EB}.exe
{E7F5B8F8-1626-44CE-9B91-EC0044AF77C9}.exe
{6B57A93F-C54A-4EE3-A1B7-DCB1396FB70D}.exe
{DA135CB0-E888-4042-836E-6EFF5BBE834C}.exe
{49AB8D01-D3BF-4D96-8906-7081A602E79B}.exe
{85231FD1-E01B-4D5E-8DE2-CFD54D73E2F8}.exe
{350BBA13-5318-43EF-BCBB-9C0CD0E86083}.exe
{C7C6378F-3AF4-49D2-A482-12486291EB49}.exe
{49589C80-D775-4FCA-89F3-D2B83BD5B0EF}.exe
{BEE03FF8-542C-46A7-8F20-0DA5748F7174}.exe
{E0922F09-113F-41A6-8180-7B7781A4FC84}.exe
{77B3D4D4-FCB8-4F1A-AE9D-8548186CAA13}.exe
{1DF2DAE7-8907-4D38-8F0C-5DC1BF1E5D7D}.exe
{E92C403E-5D14-43CF-A7A8-9A7392ACFF7D}.exe
{6A0889D8-A029-4DBE-A9CE-2690B50E2F85}.exe
{0AA6D4FE-E435-40F5-BA80-69757B09FEC1}.exe
{1D02A889-3620-454C-BC9B-306D8158B4BC}.exe
{6BE1E887-F9A3-42AE-BCE6-5E996FC6BE48}.exe
{C9F488F2-8EF2-4205-969E-2D73116939CC}.exe
{02E52104-ED06-413E-9A22-0201F3A0A28C}.exe
{9D2FE113-A406-4D8D-9EFC-36B037561AB8}.exe
{18D13648-42CF-43F4-9926-3F431E2ECF5D}.exe
{F64FCE7E-6C77-4104-B0CC-0716002C4046}.exe
{9E719CC7-9474-4888-B788-DAA835D8D0BA}.exe
{627D1ADB-027B-4B3F-9DE5-FD0163A099AD}.exe
{139498B9-EB6D-4C6A-ABAD-D521DD025679}.exe
{6255317D-D2F5-4BE4-A5D3-3009E1EE3303}.exe
{4C334DB6-E350-4478-A4CD-7D3A308EE88B}.exe
{0A3F177C-32ED-4BF7-B028-940D2ECAFCC7}.exe
{68B46960-483E-4E11-9B5A-7F13DEF7E56C}.exe
{FDA24849-875D-4D23-A37B-56AEFBD90766}.exe
{9C7A51B1-0EC7-4A3B-8A5E-9CCD7024244A}.exe
{F8314143-B743-486C-8B7C-6B6C651AC7D9}.exe
{00ED7479-85BD-4F42-9485-8BED6EF133CC}.exe
{C93B87D9-9CA0-43E9-9D7C-832F596558E8}.exe
{2F4FDD90-9858-49DC-80C1-BD4731682CAC}.exe
{7A075C7B-7212-4E1D-9F9C-5252FCEDF4BE}.exe
{2CCC26B9-B9F4-4B23-8C10-F986391C2135}.exe
{940CCB1A-F8A4-4F37-BFA9-2AE8AABC535E}.exe
{92CFBCD2-3EFB-4EF6-80A5-7172DFC638F4}.exe
{04DAE4E9-7384-4C1A-A28F-13D99F97E1BB}.exe
{1A7ADA0E-4040-4283-90DB-6FF64517DE38}.exe
{E9456B5D-7ADC-4D87-9D59-A48C02BA2619}.exe
{4FD9CEDA-C2D6-4E35-8152-035D0D1EFE78}.exe
{B6E85609-5589-4469-AAA8-BA54E3697BE7}.exe
{C39228AC-86B6-4245-9978-6ADA075EB040}.exe
{D782ECEA-69D2-4115-863F-BFBB71DFD77D}.exe
{51227162-4930-471B-8420-9F6A02CD7BFE}.exe
{5F1B3902-02D5-41F3-81BC-E91E9C13C395}.exe
{F553337A-B539-4BA8-A57A-C4B9DA4E997D}.exe
{1B543FB5-9A76-4A7C-A548-1088F418A550}.exe
{838BBC2B-A637-4164-B403-1C03546FAB7F}.exe
{E0BB0639-2E6F-4763-A072-5AA3083C653C}.exe
{B37599CD-2328-423B-88B0-02341726836E}.exe
{C7281E26-EC32-49E8-A3AF-FD90CA836F78}.exe
{94D4212A-E82F-45E4-BF6E-BDEBFAAD5D28}.exe
{C12AD1C9-130B-4C80-837E-1A1B4B04A531}.exe
{C3903938-6283-4F6B-B69E-8D2925E67D7C}.exe
{4A934EC2-9BA6-41FE-B06F-5AFB2D5844C3}.exe
{DFF57E71-4214-4906-A9BC-29CB5D153825}.exe
{9E155FDC-3CDD-41F9-910D-A50980D0A9C8}.exe
{852E36E5-F83E-49F7-911F-224DA8922B42}.exe
{AF819F28-EF88-4AD4-BA0E-8AB7B199FA51}.exe
{1745E3F6-6386-4692-869B-0A9445EA6F6D}.exe
{2D7DB2F9-50DD-4EE8-B2E1-63903391F7D9}.exe
{46156291-2353-4380-A753-3DFFFDBD4D17}.exe
{3D6C8490-5E66-4904-8729-3ED8B3568167}.exe
{DDA2B30C-678A-4943-AC90-F904AAF595E9}.exe
{FFFD5C90-31FF-40EC-9D1C-6D103D374F3A}.exe
{70069CCA-EAB1-4B8E-8A24-F98DD3D115D7}.exe
{8556FAD4-AEE1-4C49-8FBD-6B2768F72650}.exe
{2BC2B17D-4363-467F-9991-2292E4737B11}.exe
{B4CF063A-1806-449B-AE63-B70A4573B319}.exe
{D3FD30A8-0540-4C7C-8E5F-180523455182}.exe
{D493A79C-467E-460A-AEFD-FC80E8DC3D26}.exe
{CC06EAB3-C251-4427-97C3-00E9074F5B2E}.exe
{B93F3A4E-60C2-449A-8F7A-D93290BC8395}.exe
{F558AA3F-2411-4199-9DA4-89451C040586}.exe
{9261D2B5-FDD0-4DA5-88E1-4842648EB9D3}.exe
{0D7AC10A-91C8-4642-8637-9E1BB5BFA798}.exe
{D5993365-472F-493D-A64C-A6E6B8350052}.exe
{9C27AFE0-7B25-4C44-8308-4154F27916F3}.exe
{1EE80770-7068-4766-A742-C451319FFE78}.exe
{C5962BAF-72DF-4065-B796-4B1F0AA9B222}.exe
{EF8804B3-69C3-4A3A-B816-90F57707F91C}.exe
{7DC804DD-1916-48EC-A7B3-00B5B2E65E31}.exe
{4F71F114-28F6-4824-BB5D-8B595883ABEC}.exe
{88DBFEBC-EB21-494B-86FA-FBA7269A1253}.exe
{9E0E0784-3745-4713-8405-2969B12A3A20}.exe
{3D20E622-4773-4C61-83C7-A699CC2AF5D5}.exe
{96C99376-AEE2-42CA-93A5-BCB95F548AD0}.exe
{27ECC696-1C6A-4335-ABE6-0E7D17034C91}.exe
{74E613FD-9820-44A2-B585-F0D50C6A0635}.exe
{E4DBC62D-CBD1-415C-BAD1-66D0B89374D2}.exe
{2208A380-1119-41EF-8CEA-F7C00BCA36BC}.exe
{C95A82F3-809B-49D1-833D-7BD27CFA747B}.exe
{35E85266-212B-4295-9A4D-B934F8F198F9}.exe
{045694A0-9E17-4A88-A16F-F87CCEFCB349}.exe
{BCF8BF68-95B0-4A1C-B255-66B308F53ED6}.exe
{6CB8C236-4D36-4C8B-9ABC-3239B8C1BA6F}.exe
{162255DB-127F-4942-BA09-01AC18CF3105}.exe
{DFE66FDD-5C37-4CE9-99D2-BBE65FBEF4F8}.exe
{1281C8A8-C64D-42C2-BDD4-86A14F4E7430}.exe
{612AF71F-0092-4959-8A51-7C0D8AF159BE}.exe
{8FFA4343-8569-44C8-BC21-EFF908F7FADB}.exe
{13B123A3-A01F-489B-A037-CA1E8FDABC82}.exe
{EA23663E-644E-4DA0-996A-C27D764632EB}.exe
{18A54555-9E3A-4025-BA35-D531B3BBE9ED}.exe
{BA7C126F-C940-4359-99BE-B93A7D10057F}.exe
{43A7CFB0-7581-4EB7-9066-770DF608A634}.exe
{60AEA6B0-C028-4C60-97DC-06F452160D0F}.exe
{7885EC3D-57CB-44E5-89BE-BCE33061F19A}.exe
{1D83C770-FFF3-4F7E-B697-89AACFCE28AC}.exe
{A55DD8D1-EB32-4C1A-AF85-7B8752D7A252}.exe
{B3872FD5-C8CC-487D-A022-614A4588C96C}.exe
{E146FDF1-E6BF-4520-B755-7A955C2057DF}.exe
{65EB1166-8953-4C7F-AFEA-7C43CFF1D7A9}.exe
{4A91FCE2-B383-4EB3-BEA7-F7D72CC20BDE}.exe
{C8BAF7F7-56A6-4FF9-B3FF-A91F007A447A}.exe
{BBAFD540-CCE4-47A8-A9AA-3002F63E3094}.exe
{6143F5D7-8894-4359-A4BD-82773E20E3FF}.exe
{5593B3D8-957B-4EE4-93D6-9CEB6AC3F0E8}.exe
{7ABC11EB-2AE2-4314-811F-1ACEF75D4607}.exe
{C3F7EAD9-D6D1-4BD5-96CB-E84EE0A24D1E}.exe
{444BF9C1-5E9F-4C99-BE2D-746072755A54}.exe
{97A5B015-2917-4976-BB1E-00039DE19981}.exe
{E03A6657-EE82-4BB9-8FA3-344B4D85196B}.exe
{1162CDCD-C12C-45D6-8846-D4EC86EF7AA1}.exe
{61FAB017-89C7-4449-A7AB-D7892CA7E46A}.exe
{421EAD22-3757-4B09-9E6F-F74DC10880C7}.exe
{C05594C0-5A0D-47EE-BC2A-F2E2259DFA02}.exe
{69C00931-5492-40C4-BBC0-488698913694}.exe
{BF3B9268-1858-45EA-B16E-A7C3961F7484}.exe
{449EABFF-35D4-412E-88D2-93735D05AF40}.exe
{ED508143-2C6F-4474-A984-3928FD401724}.exe
{3D350462-8D77-4607-93D3-F13B09490676}.exe
{3E5F790A-D814-43E1-8C2C-F8FC4C764AD3}.exe
{379BF97C-4B4B-4060-BA83-C326C3B129C8}.exe
{82FE0EC7-33C9-4F36-8985-C99B3EF38565}.exe
{AFBF9F13-EB9A-49E7-98EF-B39EC78C5F6E}.exe
{AFAC359C-8C48-49E6-86D2-241D93FD1BCB}.exe
{F22157C2-6972-4A5C-9F2E-0F4DFCFE8FCE}.exe
{76E661F1-DF6B-4A7D-AD4A-5CDD23990361}.exe
{7DF14ADC-8D52-4B1B-9557-BA9F7A5CD42F}.exe
{A4B1BAD2-0B41-40DB-89A3-EF092B3A83CA}.exe
{10365DCA-4090-43C2-929F-FE76A6B81635}.exe
{722D4C95-59DC-402B-91EF-C1F9190E11C8}.exe
{11E2604F-8497-4A73-A62A-93A7E6742D25}.exe
{B43C7C83-7787-42AC-BB37-B5D35019A48E}.exe
{B6706469-6D5B-48D0-8383-730673338103}.exe
{065D566F-6962-4864-9446-0573B5B624D9}.exe
{940DC470-31BD-41D7-AF64-7C9079230442}.exe
{18B90DA3-3F7F-447C-9F1A-0877871ECC8F}.exe
{D7DED0FE-FDD3-4340-971D-DF1DE599DF8C}.exe
{1D2EB212-3A87-426F-8568-4B20D12C161E}.exe
{A128947A-E4C8-419C-A709-4F55048208F3}.exe
{88C7EBA7-08BD-4661-A07D-2AA05F179BC2}.exe
{FB67E8FD-2B90-431A-86F8-75D11A10D5C8}.exe
{34744AA2-F84B-449C-B78D-A5F22A554F7D}.exe
{847B938E-2891-4892-B343-940102585C85}.exe
{B9C6701C-3389-4CD2-A0BB-46F3ABC69538}.exe
{54E52E9C-180C-4310-9458-4F2A13035BF5}.exe
{17F4A20F-098A-47A7-8105-2DFE5D5C403E}.exe
{C714710D-A8D5-4A2C-98B6-E08916E6363F}.exe
{490A28B0-D12B-4CF2-8663-E2D47072A88B}.exe
{45C78F04-8F1F-4F58-86BD-775B1617D8A1}.exe
{43931CD5-E471-4961-B58E-6DACD02B1BA3}.exe
{9D03C53F-BCBB-460B-955B-B0C37D072FDC}.exe
{85C997A3-9539-47E0-BC88-700CD95575ED}.exe
{89B179C4-16C7-4B9C-BAAF-70EFD3044674}.exe
{3AB14E88-849E-47C4-82BC-1767D8A46D22}.exe
{B3AC17FB-C823-4BAF-BF79-1795A505F48E}.exe
{8752C4B5-F0FE-4F02-9DB8-4044B00C500E}.exe
{9CCAA24D-6D5D-4C7A-A4D1-0CBAFE73D11B}.exe
{2DFBB376-E995-46C0-8362-EFD191A86B3C}.exe
{EFDEBEEF-4878-4CFD-96CB-743D013F3A8C}.exe
{79B12C21-1973-4268-A471-9BDD9E768A87}.exe
{DACDFDE3-1526-438B-8C9B-8D3345BE4A52}.exe
{B6439ABE-CAFF-4CF5-BC19-18064B99A047}.exe
{EE6276B9-10F7-4C26-9060-5E62C917B3D7}.exe
{A0C68DED-F169-43CD-BE1A-3A9DAC0C6488}.exe
{FA38D884-EEFF-4316-B953-EF388C005CE8}.exe
{9EEAC158-5020-443A-B17E-1DDCCC51327B}.exe
{35EDF39D-6BD4-4A7C-84FC-CAD97D9940A3}.exe
{5D466249-3951-450F-BF0A-09BFD68EF40C}.exe
{79A1A1B3-8DB8-4E42-8AF4-3196E0C1AC8B}.exe
{DE259D54-38EA-4BBD-8009-5DAF0E4AD998}.exe
{A1D97D08-6FFC-4F6F-B101-907242821301}.exe
{5FB8064D-9D7A-435D-9B17-41CAD711D812}.exe
{9D8E3E20-6EFF-4587-97FD-35C6E9338501}.exe
{3BBFC7F7-3D95-4603-882A-D86E659A6B66}.exe
{455DA779-87C3-444D-904B-8BCD411ABF08}.exe
{DBAE2FA9-8BAA-4623-84E6-ECD154787F44}.exe
{AEC68C03-AB03-4043-9F9A-B029E78A83D1}.exe
{38900C6E-B1AD-4904-A890-E20A1B0C0C18}.exe
{D3B6F465-C932-44D7-B847-277D15B3EDA3}.exe
{6AB52F78-C725-4ECD-B02B-2BCD9E3F188B}.exe
{2547A62F-5B86-4AC1-B90C-4B2640F6F804}.exe
{BEC40927-BAD7-434E-9A9E-021CF5DB53AE}.exe
{AA1AC884-9E5A-4E25-B76A-AA461136CC16}.exe
{E79AA26A-76BF-46D5-9B72-0BFDED5ED297}.exe
{12BF7BB1-2AE1-4323-A584-76680FA1F140}.exe
{33EEC14F-1A98-46A0-82E1-555D8BCEA66D}.exe
{9E6FA9AA-5CFA-4E4D-8480-C97E6D122263}.exe
{96D28BCF-C53A-430D-B222-512DECBB20C8}.exe
{493DA38A-40FF-491C-AC81-99ECDF1B556E}.exe
{CFA7D940-A843-43E4-9CF2-A41B9ED8FDB9}.exe
{DC3F9BBF-8A10-4859-9D4C-B64162805CAD}.exe
{A4F8DF17-22E9-402E-AC1F-314A7F333920}.exe
{A59742F0-B0A7-40F5-A974-74B940FED013}.exe
{1D2D7A36-AB89-4630-BAC5-6A970DB5A898}.exe
{07C6237E-EDF5-4D0C-A6D5-1B9EC163240A}.exe
{CF97D52A-2E2A-4B8C-AAD3-32C3F95B20F5}.exe
{8882D61A-8B75-4AA4-BD30-B4EB7D081E2E}.exe
{03312EEC-5B0D-4238-A574-3F9932D80077}.exe
{A19471D8-F90B-4636-BBB3-F77B46955384}.exe
{372CDDA5-2A15-45D5-ADB6-DDB94DDF0978}.exe
{0A2024FE-1AF6-4DB0-AB9A-9E5D38D591F6}.exe
{65E5B60D-E304-4AE9-8BFD-D58BB6ACCAF5}.exe
{2EBEBD15-ABF0-42F3-9ACD-018CF35D531B}.exe
{70CAD40F-A63F-44BB-B252-0C8CD7851A70}.exe
{654B2406-CCE0-4F15-8016-3DAE739E8A8B}.exe
{9E7A8871-08F4-42ED-97C3-D6CE44A393B2}.exe
{E5F67946-AF0B-42BF-A067-3108F2081DE8}.exe
{F3EC33CD-0F4F-44D5-A27D-FB50A4323ED2}.exe
{EE105FCA-29D6-4A07-9414-179FB2136F2F}.exe
{06A99EDC-267B-489B-AFC8-DF84A4B402AD}.exe
{7A64E3C3-CBC5-4F23-99BD-A94C83D86ECE}.exe
{9F4A22AA-9D40-4923-8414-24CAC189B53C}.exe
{913C91AF-2695-4299-B250-A7C077E1AED4}.exe
{F3CDAC78-29F3-4D09-8114-AE882D161875}.exe
{BF450520-8D5D-4598-B755-51D8326A7675}.exe
{BD390277-1E55-4A8B-ACB7-B4C193B4501C}.exe
{612466AD-E83B-457C-9FD2-41E98FC34D15}.exe
{D8286CEA-F1C6-43A8-8959-9EF83CFA10AF}.exe
{5751F96A-0BC0-4C46-BEB2-4648F0853535}.exe
{6BA99352-F94B-492A-9B5C-BA1F7356FD8E}.exe
{E03DE903-28BE-46D5-9F02-BFBEBE40990D}.exe
{2052A9C7-E298-4F48-A748-5B3E6336E360}.exe
{A7F1FC64-63A0-44BF-9FC7-255F5F2AD632}.exe
{8F2965BE-1EB7-4FE9-8988-67D930A34BC3}.exe
{D06D8E72-CC90-47C0-A59F-BFE232B95A5C}.exe
{37EC57A3-6EEB-45C8-99A6-FDD5941DE17E}.exe
{5222F91F-3964-4D59-B8AD-EDD8082C1025}.exe
{BC8470C4-6120-495C-A9BB-91E2CBDE2016}.exe
{B659214C-6FF4-4744-8F20-B92BFA3136A6}.exe
{A96D5F8B-956D-4E86-A445-A79261AAA748}.exe
{B2EF7024-F824-4224-89BC-B8FBE64389B4}.exe
{EA50CFB1-1C51-4852-959F-2CF0D61F1430}.exe
{2437E21E-5A90-4867-A710-FA64E4411B44}.exe
{E831A609-94A2-4BA8-A172-7928EDFE7C82}.exe
{4FBE65BE-8598-4C84-8967-107AFBE5F43D}.exe
{889D9029-8352-4C04-8269-EF9265A00C63}.exe
C:\WINDOWS\SYSTEM32\CSBCU.EXE
C:\WINDOWS\SYSTEM32\CSWNS.EXE
C:\WINDOWS\SYSTEM32\DMUYJ.EXE
C:\WINDOWS\SYSTEM32\DMUTE.EXE
C:\WINDOWS\SYSTEM32\DMHQJE~1.REN
C:\WINDOWS\SYSTEM32\CSJCPE~1.REN
==
1. Please download The Avenger by Swandog46 to your Desktop.
2. Copy all (that includes the Files to delete: text), the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
3. Now, start The Avenger program by clicking on its icon on your desktop.
- Under "Script file to execute" choose "Input Script Manually".
- Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
- Paste the text copied to clipboard into this window by pressing (Ctrl+V).
- Click Done
- Now click on the Green Light to begin execution of the script
- Answer "Yes" twice when prompted.
4. The Avenger will automatically do the following:- It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
- On reboot, it will briefly open a black command window on your desktop, this is normal.
- After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
- The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply along with a fresh HJT log by using Add/ReplyDon't forget the virus scans from Jotti's
File: CSBCU.EXE_
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 c37cc35aa2edb073b3309d22dedd2a84
Packers detected: -
Scanner results
AntiVir Found Trojan/Dldr.Mohbpork.A.9
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Trojan.Downloader.Mohbpork.A
ClamAV Found nothing
Dr.Web Found Trojan.DownLoader.10960
F-Prot Antivirus Found Possibly a new variant of W32/SecRisk-ProcessPatcher-based!Maximus
Fortinet Found W32/ASI!tr.dldr
Kaspersky Anti-Virus Found nothing
NOD32 Found a variant of Win32/Small.FB
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Trojan-Downloader.Win32.Agent.uj
File: CSWNS.EXE_
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 c37cc35aa2edb073b3309d22dedd2a84
Packers detected: -
Scanner results
AntiVir Found Trojan/Dldr.Mohbpork.A.9
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Trojan.Downloader.Mohbpork.A
ClamAV Found nothing
Dr.Web Found Trojan.DownLoader.10960
F-Prot Antivirus Found Possibly a new variant of W32/SecRisk-ProcessPatcher-based!Maximus
Fortinet Found W32/ASI!tr.dldr
Kaspersky Anti-Virus Found nothing
NOD32 Found a variant of Win32/Small.FB
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Trojan-Downloader.Win32.Agent.uj
File: DMUYJ.EXE
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 c5ea17c4a6808971819e7fc14c69a7fb
Packers detected: -
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found MemScan:Trojan.Agent.QB
ClamAV Found nothing
Dr.Web Found Trojan.DnsChange
F-Prot Antivirus Found Possibly a new variant of W32/SecRisk-ProcessPatcher-based!Maximus
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found a variant of Win32/Small.FB
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Malware.Agent.11 (probable variant)
File: DMUTE.EXE
Status: INFECTED/MALWARE
MD5 ca334797a6ec42b6657a9043279a19c0
Packers detected: -
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found MemScan:Trojan.Agent.QB
ClamAV Found nothing
Dr.Web Found Trojan.DnsChange
F-Prot Antivirus Found Possibly a new variant of W32/SecRisk-ProcessPatcher-based!Maximus
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found a variant of Win32/Small.FB
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Trojan.Win32.Small.fb
File: DMHQJE~1.REN
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 c5ea17c4a6808971819e7fc14c69a7fb
Packers detected: -
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found MemScan:Trojan.Agent.QB
ClamAV Found nothing
Dr.Web Found Trojan.DnsChange
F-Prot Antivirus Found Possibly a new variant of W32/SecRisk-ProcessPatcher-based!Maximus
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found a variant of Win32/Small.FB
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Malware.Agent.11 (probable variant)
File: CSJCPE~1.REN
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 c37cc35aa2edb073b3309d22dedd2a84
Packers detected: -
Scanner results
AntiVir Found Trojan/Dldr.Mohbpork.A.9
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Trojan.Downloader.Mohbpork.A
ClamAV Found nothing
Dr.Web Found Trojan.DownLoader.10960
F-Prot Antivirus Found Possibly a new variant of W32/SecRisk-ProcessPatcher-based!Maximus
Fortinet Found W32/ASI!tr.dldr
Kaspersky Anti-Virus Found nothing
NOD32 Found a variant of Win32/Small.FB
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Trojan-Downloader.Win32.Agent.uj
Copy all (that includes the Files to delete: text), the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):
Now, start The Avenger program by clicking on its icon on your desktop.
- Under "Script file to execute" choose "Input Script Manually".
- Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
- Paste the text copied to clipboard into this window by pressing (Ctrl+V).
- Click Done
- Now click on the Green Light to begin execution of the script
- Answer "Yes" twice when prompted.
The Avenger will automatically do the following:- It will Restart your computer.
- On reboot, it will briefly open a black command window on your desktop, this is normal.
- After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
- The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply along with a fresh HJT log by using Add/Reply