Zone-DL, Swizzor & other friends still hanging around...

Unknown

Hello,

I have followed Trogan's post about "Please Read Here Before Posting A HijackThis Log!". I have run everything to completion except the Bit Defender, which after two hours showed it had run through all files but than said it had another 11+ hours to run and was using all of my system resources. Even ran AVG's Anti-Virus and Spyware before restarting...will finishing running process later and post. System was already fully up to date with Windows Updates.

I kept finding different problems with each scan. Bit Defender did find 3 viruses and 28 infected files and deleted 26 of them. Was unable to get the program to stop running and had to force it to stop, in doing so lost the log.

Please help in eliminating these vermon!!!

Find Panda Activescan, Kaspersky scan, & Highjack This scan. Which will have to be seperated in three parts.

** Panda Activescan **
Incident Status Location

Adware:Adware/Lop Not disinfected c:\docume~1\braniff\applic~1\grimso~1\onestore.exe
Adware:Adware/Lop Not disinfected C:\Documents and Settings\All Users\Application Data\date acid keep itch\enc beep.exe
Adware:Adware/Lop Not disinfected C:\Documents and Settings\All Users\Application Data\date acid keep itch\LOCKS SHOW.exe
Adware:Adware/Lop Not disinfected C:\Documents and Settings\Braniff\Application Data\GRIM SOFTWARE VIEW\dlylxmqb.exe
Adware:Adware/Lop Not disinfected C:\Documents and Settings\Braniff\Application Data\GRIM SOFTWARE VIEW\hdrmehwb.exe
Adware:Adware/Lop Not disinfected C:\Documents and Settings\Braniff\Application Data\GRIM SOFTWARE VIEW\onestore.exe
Adware:Adware/Lop Not disinfected C:\Documents and Settings\Braniff\Application Data\GRIM SOFTWARE VIEW\uphhaprj.exe
Adware:Adware/Look2Me Not disinfected C:\Documents and Settings\Braniff\Desktop\Downloads\kill2me.zip[Kill2Me.exe]
Adware:Adware/SaveNow Not disinfected C:\Documents and Settings\Braniff\My Documents\My Downloads\bsplayer214.942_clip.exe[BSplayer_WhenUSave_InstallerInst.exe]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Weon-Kyung\Application Data\Mozilla\Firefox\Profiles\9zctloe6.default\cookies.txt[.2o7.net/]
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Weon-Kyung\Application Data\Mozilla\Firefox\Profiles\9zctloe6.default\cookies.txt[.did-it.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Weon-Kyung\Application Data\Mozilla\Firefox\Profiles\9zctloe6.default\cookies.txt[.server.iad.liveperson.net/hc/41409448]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Weon-Kyung\Application Data\Mozilla\Firefox\Profiles\9zctloe6.default\cookies.txt[.server.iad.liveperson.net/hc/68202908]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Weon-Kyung\Application Data\Mozilla\Firefox\Profiles\9zctloe6.default\cookies.txt[.target.com/]

End Part #1

All your help greatly appreciated

Cheers

Koheni

Here is Part #2a: (apperantly miscalulated the legnth of Kaspersky report and will have to add another piece)

** Kaspersky scan **
KASPERSKY ONLINE SCANNER REPORTKASPERSKY ONLINE SCANNER REPORT
Friday, February 02, 2007 4:53:25 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build
2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 2/02/2007
Kaspersky Anti-Virus database records: 264411


Scan Settings
Scan using the following antivirus databaseextended
Scan Archivestrue
Scan Mail Basestrue

Scan TargetMy Computer
A:\
C:\
D:\
E:\

Scan Statistics
Total number of scanned objects104353
Number of viruses found5
Number of infected objects11 / 0
Number of suspicious objects0
Duration of the scan process01:50:18

Infected Object NameVirus NameLast Action
C:\Documents and Settings\All Users\Application Data\date acid keep
itch\enc beep.exe Infected: Trojan.Win32.Obfuscated.bk skipped

C:\Documents and Settings\All Users\Application
Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\006e642bd18237b8b6c2f909914ac4a4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\00ba2f65ee265b89b41f6dfb49510b3d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\013729952c62c911f676652f5c2bbf97_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\01c1eeafa7e293c6ddecc96ca65297d9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\020ba742d797b25163c47ad1ff409e7b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0247c8e7bb38be27ce41fa9249869721_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\02697b881e1643ac538874f6aeef1906_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0269f764a438f1d5c9e751b2e5ee6968_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\02cd0e64ac7ff5f7e2cc3595f5aee136_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0389b55de553ffef65f6d6a589a4ab18_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0441a5e9e738fc807c44af099107279a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\060c226040671caafb79ea32bbebffe7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\064a877d83116180e2d84770b8a119ad_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\065b11185311c1b079477b363a320159_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\06eb51d22f21fe16f736bd429bc356bd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\06f52649530cd7b6b879e2eccda2c962_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0779d8160d84680cc1a6bd9716446bcc_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\08028e5bc27c4e368fb4c4096618eca8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\08e77bc26d65000e6d99a86b00523469_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\090a0d41774f678ee322075cabdd0bbd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\09202b4253fb2830bd717885b0ee5b59_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0a6d5542b25df967358dc3afa6aaa63d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0be65b2abcf5ddd699b395cbd4f6e0c2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0ccf23bb2a6aa540638ec9c2a750c24e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0d378caee9e26cfb21710bf0f6cec6f3_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0dc2e10a6c225581e3cbad41b8e58742_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0dfbabb198ac8c75ec3b77a8c828dc7b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0e54e520760e34657f10788aff0ad39f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\0ee5039c01fba175608f16fb340b4b36_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\103c355bfbb7f3dca682500626580068_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\104d077acb1ce9a68e5e85679a4af0c4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1052580aea73bfc5ea7f82d40523bf65_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1071e3e534c34ec75a4ef5cfc8be9f77_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\110aaadffa06c956385a396a0bd889aa_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1122778e61856e6e8e34b76862ffb878_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\118e2f537da0c8666d652c280670c30a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\119789d171e22e0bad9e2253be324cc6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\11f33e4d82d41d5f182141a0cdf0a704_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\120aec922e71783adfc5688d7a8cb099_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\12976a12a5540eeee5d7f5aff04ca43c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\13837ba82b5994f3f403e0614d354947_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\142001e87e0a83bbfd2f1fe647d358dd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\144dec42432e5a91ac4bd6ae4b6df7a4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\14780e2ce376bfc8f880e52a32f0a323_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\15ab8ad80e4aad47aa44f6aa32bfed69_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\16439c9389c6f319f4acaf4914ff979b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\16724a694df3ee2bc3b0d9c541555519_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\169ebc61c917fc53e59e6702561f4330_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\178eaa7e4ea5c389ac93b98d2a3fd25f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\18661f05848a93f1a582e1886688cf4e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\18ba41fabba897b449044b398d627709_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\192e35bfed0d04337450a8a68c26512d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\19974b7e35b35ffd1676ea3712adaee8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1aa6b237b346d5053e8f8fc188853f7b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1aa9a4a86e6552c81d0c0d8b1e1515cb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1b219ab6d5ed17c4b36923dc8b3ac1c5_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1b35117d45148469a6e53af6da1c47de_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1b99735ad411026861ad88d189524e67_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1c041accbb7af0754358c67df9b06f0d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1c37d252bc093fbd3c8c049294c78ab6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1c5dcc1d13333dae39faddb9ada2e932_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1c661c6b64461667b57f31aca24f97ab_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1c957e2be182158efbe0399192705875_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1e1faa7fd764e528c43385ed37796cf7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1e3615b48a8ade92d5aa29d3677ada2e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1edd66c8b85eff2dbe1a43d07c361247_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1f5d75b62501002d98ccef7e8b5af04a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\1f681a9a5021c12b98b0f674640df26c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\203fc9132375938ff1c5cd8ac26f01a0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\20cdf9b94b486b2bd8956814b1bdc875_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2130736cee199d89fc31479e6021cd21_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\223e7e61125682d2fbedc2d1d711e802_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\22b94e5653509daadfbedffc362b68ba_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\239fb9fba9ada09438990d15b2cb1fbb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\23cfc9abf353ffd4b490248ad81439f1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\23efc5cd5735fbc678e402451d17030f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\24bab484c46b5e8a048d6de06d4ad6a8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\24e73faaa1deb5fbe3ee40163cde9780_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\24f928558257b6d5054e12910791627f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\250489e29fed57f6f89495db6fcf9796_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\252d7f75004696f9151ef09db1158f6d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\25e32080e9c7dcf6c922a45a3daff19f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\26a0c57b7803b8142c1a40338e9e1477_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\26b75287b30737fff7807a42fdf60018_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\27406e52ee9956b406afcd6d23ba7763_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2a19325c5e6f13f4e44e8033b0e81cb3_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2a63fc4725ed11c97e4fcfaeefde20ac_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2b2b5df35de00b46194036f7e2a1f4bf_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2b8a90f5e84820d12b7d4d43ed944c43_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2cb0b5041768b63dc451988cca8f663e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2d7012cf5c0a4e4f773ca5bd0f430692_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2d7af73fe725893fd16486df564075b8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2dba2769c67c09fe361b5c2b120c8415_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2e0a8bfb8fa1daa6f57e5d692c68e6e7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\2ee26148d96dcc8c338f57c18818f618_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\308f93b501a966f898f18485e2b917e8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\327271459671a67244c4bcf9f6a02d3c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\328ae19acb1da002a4f21193a12b9bbf_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\32cadb20b28a8d75a0ca8fefee9c9063_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\330957b0b216d58cf516e91e1916f318_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\331e62fba368f24d3a92a2ac55e52215_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3359af0ce23943939c9e7913be648a0a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3437e43caf54c34373d3bbdefb3cea8e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3455c19d1a5d66caae4b68eb87802bbf_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\35703c0b97148852ed1d44c873d687c8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\35b25ece7a29e915a277a52b682f3e5a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\35b39e42f1fee8c62dd3b0939b02713c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\35e459e4d83388adf439db66acfb84b4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\36046f139e930d30ca9b69d8bdecbd86_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3607e57458d2517b3a6d28366a20d03f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3783c78878102cd58700d42d355d253f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\380afdf789cb95b971df7f5c4f33a137_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\388e3cce0b500bd1bf1a189fbfb05e46_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3895fcb26d0f3c101766f9e9e5ce1f08_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3909e7bbb8beeb16f06120c00065dd1e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\399d67bc09d7dbae7528498a80f8838e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\39eb23d673419dafe8093667945ba2f2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3aa1c9411c2864d7be59a5de5d695820_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3ad9164e1962ed000eb6920e8a5f708f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3b3ad7f0754cc2db00f930a12dee7750_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3b7a432b652bb96a64fe4f8dca2c8c09_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3b9c4e96753dceaff917ce9cee809699_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3c4996f435defb5fc0fbd6dcfe02bbee_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3caadc65eea6dac1a89e396408c69ab4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3cdcb14b6b179a890a922f9084e74d80_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3d57ace4f279bcc8e59eef4b9117359e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3d91a2e9e699c46c668ddd999481d17a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3d9533a0d2548601f1244ed644e3dce6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3df293d8f1e3e517c325d48221134480_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3e550a15fa2f7f643d88327cd229e5fa_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3ee7f1f0687803d78316fa47ae329936_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\3f10c226a9b8f7374b1757d172c590f4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\40469e20a4a098416e8fb2ecc808bf2b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4138e4849fccc07d6c69dd030edd1334_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4202fc2e67a99b7e355d49d0daa51a7d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\43c9ff79f70e6e4712dc512ba7d10d5e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\446ccf1818c4cf7e55a8deb885c2f1d8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\451ffea3cbf71e0ea2481f76527991b5_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\45475a809ac94b42784471fd24149e7e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\459f392a4abade2f809d1568dfe8d5b2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\492b91082eceaeb00f888443e15732e8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\498018915726dc80ef23f2225c0d69e6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4a4754c9858805f9278021bde2c213bd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4a9dafca36fc4c75f93ceebef902b0e9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4b1c290a7ed863818b58b8083dcc3b55_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4bda246d8f18a957fddb210306c56ecf_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4cc76a3c93a45cd096365c800925124f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4d5b994ef6e3bb4cec6554e010551565_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4e8f143942fdbd103cfef08aa379929e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4ef55ec6289b9997e06230040d60db04_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\4fed990cec83d570cdff45e95c20a9a9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\501480ea385a355c5aa6819329e2f357_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\50a7d563593ddd4c44eba1648ce78fb0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\513b5625da310c142ef643c2874535c8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\51d6005f932b64f34614a9d86ca383d2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\53695e8563aa48b4df1a45e5075d8580_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\53c899ab499e68dcb2b941f7833d63f4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\53d27b800151989a9419ee56b9d39dd7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5487cec29906b123406ec2c600ef32da_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5494db729a57a79b6274af3fb31ee682_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\555bf1e96284a909c480e7bf8e0f8ae1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\557d5583c478a80ec5d34236241a28b1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\55e1b321cf6b31b4bed0ed90df986881_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\56028173ea51461cbe8a3a33ff3eadab_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5636a42cbb8468f3b3c517a729cbea70_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\570f5ac88905520f75231ddf1596a133_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\575d80ca4198c4ce9247a127946f5764_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\57a1e7dae94076804ad1e8db649ff78b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\57bb068c816d012d10f628c14943f69b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\57e4e6d62086f9b827904f5c0a71ec0e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5811a6546f735b17833745f66edcecb1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\58205dcce9b52dff642fb15bcdc783e2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\595dc9d3c4b379eb9ef5c09ba7406b6b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\59791a821e8cd1e4f23002e1bf963d99_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5a0d8dd3386dc5886c9d75463a35ea5d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5aba65e15b3f0a496ace4429363ecb73_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5b610b52cc9c10e90a576a561c68f31c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5c1fd5b741be662d45a416526d38a105_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5c71ea4cde5505c35ed4876d9c594e24_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5ccadfa576f4e10fa402e0fadc3930eb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5ce4785a100f4e3461d149432a9a1cdb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\5ce7ad5229d6fd9296afab2e790714d2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\60130f1355731c189867d44473fe24c7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\60c338282e54577357c1ab2ba55b5df0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\60fcd822830310b87e7c361dec4bf72d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6155094bbcc11a580ffcf12856760957_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\62d2711dfe1cd4907c089a8e5791a87d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\62f592ae869e65c5fba07edc28fedb58_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6377284f71dcfc2053d4a36515aa8aaf_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6397082cf397144dfd10b75458415a33_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\63a3de4ba650eb640d308ba2be421c22_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\642f8baf906f66d175e5674dfa77899f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\649bb7d7cdde4ecaf3a5602863bdb252_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6524964365c91e0c3275f4d70ee11dc4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\652e937c03e10c577a64c043868f7972_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\655727e41bb583368ce957200cfb2959_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\65abdf04d12a11dcd1b00bfc38018fdd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\65c5eb6354cb482ac2dfd69053cd435d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\665b2d2b80b4bff16de82db9aa9b0d58_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\66c24b034d5efe7bba4515882f2f7a78_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\671b64af68b443ec29395bf98f3a674a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\67b8be540e93cbb4ebbccd8aca8868e9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\67e0872968e2f5b37fba772b627a23f4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\68115a5acac25747c000acbcb9fad6d1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\68bb5305cec93ee8055bec2334db9396_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\690e3d80df7c6178556295ea4adf53ea_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\697a43107a3305137b8d5a23c6935961_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\69bf107d29007721f161931bcc66191a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6ae46428835c4ef38d8b8b20d4ff48f4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6af5599ad67093eb9b71474e3930a259_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6b331850a886d8c71923de4b0852ebc7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped



End Part #2a

All your help greatly appreciated

Cheers

Koheni

Part 2b: Kaspersky report continued

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6b61ea37ce603ded0d67a8b47cb79fd4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6c403dbb5167aea9c15d3157af6dadfb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6c6ab96edb40258ffbd2b2644268200c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6c882887bddc9520c2e921ad98da4b6f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6c9352c0bf5d12ddfd03be34cac0212a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6cf72c69f152b1ce6034f5d769a071f0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6dfd4b02495d44a221a61525c5625182_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6e0ddb8720a31780c1cb94a58465c5f2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6eafa2a6d98d44bb59475e453048446f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6eecd9cdb035fb2a81f7ed89c336461d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\6f553910d1a65de88a23d9a35ebef689_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7142443bbbc7cb034ffa3f294c98507c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7189c4566926af4e9a11bc33c39e0d50_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\71a80bc808dedad003eea622d668a7c0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\71cf28ab657ed6e713a83e7a23e65930_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7212bf6916b39e74126054c2fd9d16fc_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\724479c959c77807b1f563b5d1fcc121_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\72be007ff61b56d2636e4fdfe9b211aa_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\74b91da4e10250c3a6fdc4c386673ba3_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\74c907dba8a9099c760ac00e23db716a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\74ca59e87c7dfcf4487709ccb4ce7dff_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\766412310e9baaa511cc67239b59d365_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\769441ee0a85350dc5c40d84ad83fb85_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\76aabf0b5776db27d92499f7f17079cd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\77e3a1dec2e94b09594e143422525e56_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\77fb9d4a9e2096722b8c90c606f9855e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\78201d7c43436dfbc25bd9b464524d54_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\78e9d934e25b6bcccc6a0911a7fcc704_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\79197cd082be35aba3206bc52494883f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7950de05c8f55e9d515d34d3300338fe_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7975b8ae8cf85cd2f3c30b6a1d1a213d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\798a0374c6e6a76aa3ec5847660b7bee_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7a697c6f782ebbe35dae1d01d50884fe_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7b7dab276f28613ef75d6b8f9150d00b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7ccf3a7951baeb2f055e33a5a49ccc05_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7d9709e84742a97eb16e9af2286c8c5e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7e5815a17840aa32a9e04cd601bb610d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7e633e28ae497bcdfdddc9c7230dc2a8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7f05d229a55bac3a16c710a8ab06b011_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\7f9978e2e1bed3d86e9ec4b54a905fe0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\802f5b5e843f97196640309cf9568fe2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\81855b2771ec4a00d089b00c6265e918_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8195a328882881bdd39cd3d1292c1426_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\82cd43863f714d520882a0ff7dea3afb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8345a48b637bd200ea4294b4bcbd2562_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8471e72787bde32e6126f599c8344a0b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\85b81deb9e8201ef6a601d85b314941c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8653e39d8350233df3850bbc3d15209b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\86e62489fc98bbe441b755d17e80192b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8780600afb0594e1748cd11dfaa67c2d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\87c782a27cf3938386a5784f6e252298_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\883b0c530c6ccfeb753e3cffaf37062a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\887ab3abec487ca808adbb7c01535076_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8931d49ae577f6395752dbde517b26e9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\89f2af57fdff93cfe58b415862e1fe3c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8a398a4e0d3ed8a7866e687c53c5e2c7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8a39e1097cfb394dae8ad1ce598b8b0b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped


C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8a41c7a3ab83101ddb3facc314f6f887_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8b525d6653e65c915d611b9e630d6d15_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8bdf99a9e184abc149c86436468a3054_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8c43ed8d08836d191befd697fc56885b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8f8301a450d582a523631f9f48c19cdd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\8ff9395c80555f8fb232e97442ea84c1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\906048612df7a5728ef721a09c66cc90_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\910bd8d6ba2f3304526085acb02de318_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\91834bc6ef05cb91507ded36b9e43feb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\919b95b2c4e9388b73d07f6d0a7d5e58_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9288b46dd33ef06471487859675b3c9e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\94817cdd9f4825409eeec64a4953de4b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\950e3b7b5add3a6a0229a3e42f8070b5_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\95498e2cff96c5cdf810569a94727298_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\955f2e86cb127b4a148d34eb7c4bea45_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\957664dd82af28dc8735ab1d6383ba7e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\963158774d53ed5699368111ee023a71_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9666e4b3d407d6cb3af769f609dd0f79_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9772bf86a90ad81326edeed0f6095937_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\98487f91d06a36060a5fb958bcacc41b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\98d8fb2de900996903271016b8b161f7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\99189739b0ac1521a5e30b20cb347d1b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9abf147d572189462efada610ee92b6b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9c581a942edc229ae3f94568f0b53787_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9cea8270dfe9bd765953994cdce16c64_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9d500014844f974575684c461a6df55e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9dfaf6853299ac5cada0224f459c0a15_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9e46780a2eb1a8915b41969ef4ac4973_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\9fe0446985f227d577cf14213c83bdb2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a033e86a768e5baee27898aaea0b0696_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a0b77a5f7bfe3b0fa21d6e899cd3699e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a1921ad806ed070178d4b46c3cccd2f5_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a1ad84be8014d4d51bc1d71c170d1f89_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a203d94001779774d67fd522f3410526_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a2b485d0f2347605b34e0d3968f521a4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a436b94d45d728a4bb84370caaf63dc4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a479de26a94fbec6081a672e5c54cbee_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a5dce4495eed12b1986cd7a91414b723_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a77b91158c99111b28ff4fb14488c1a7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a7d0e0dd14745cb82ed9ae67cbe31143_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a88622829a12765ceedd47f324535745_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a9043fbc4b83bd721a018a438d315781_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\a906db9de6083cf8adb1d15ca403c18a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\aa45896dfe74cd3690985f33710e6cc0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\aa639aaffa148232c7fab1148b385868_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\aaea6b9a64c18d5298a5068067d4f4d9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ab301d4aa8dda2316884ecb98beecb82_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ab99f927837e7e6f78bba2cd4cb34dac_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\aba908a703fc20492dc2913c5df27f74_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ac72095fddf8afcdbbcc692dc61ba170_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\acd223bb5c6ef35a6500a18cdfe6e2b0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ad76d1804724fa9f3c5af1c3ede4a981_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\adb5e5cfe39f6e974240deb9337cf87d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ae849ccbe990573d08c21a75cf6edf3a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\af3208453538cca185946949c0b6a473_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\afd00759e4b4d94406b7beac8dc36fb4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b0612641a2bdf15b0346287fd3a032e8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b10bcb6c74a6b3ef3916135be41789b7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b1b0438dbdb12e6d8a5881c3cd9c6492_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b259cf40d5cbf66b75e5f956dec1f452_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b27ce59c6657d23de06fc591078818c2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b29104d3e52fd00c9fcf0920291297e9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b34d4d7df04072bf0a22ca3d90cbd999_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b3824d479c1fe9541f813d9faa347267_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b3b513e786fc8979d678c807d626ada6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b4bbd333d395ab7781c47efd67375a50_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b528ef01cf8df233fa94358d9140c57d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b69f3945857a514c1c1565337234056f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b780f91bf703f8d7bc3387b13f908db0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b8c5ed2229b1641e9e73c691183d7067_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b8ec0aa414abeeadcb08fd157767d6ac_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b9237bb0cb33cd69b4c377eb6608e72a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b92bd4787e6cfce9be07eb1754b94a7f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b99367421c770d691947b7dd2c17f034_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b9ceeb3299e4dd1a65d0881b6bc06b48_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\b9dc6b439dba3345298a428f5db71639_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ba88014b79745d00495050b039479b43_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\bd3d6a346c5ef5b4381bcf1cce704882_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\bd877e22461f79b291426c9323d9e1f7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\be9d2ff130434b820654ea6d2ce85d4f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\bee96c903c97f84fb65d01446cc864ff_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\bfc5d15dd1e4cbaa00127850cc0fa7e1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\bfdbe2738264a0d479b0bb2ef37bb437_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c15be8f3f4ce6f6eb66ced24210bc0f0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c1b7b9e4c2b6173c2e0ca1e1e05e45d6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c24709274dc2b5eca5c5f59e7cecd12f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c2ed79d548307a8a050537483e0e3b66_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c2eec2fcf23f1f93f515ed2483b31342_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c66218f24ba3d61988608cbcecf57684_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c6af46091a8cbba5b3048c2d198bbe35_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c6dcd58d78f8bf12c76da33c97e3fa2c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c736fe001efe69185cd73d658d4cfad0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c7e679a37de9726bf34d963e3f8ffc63_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c8127591929b4dbdb6ad2438e07cab60_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\c865715b5ac1ded437305d0d849481a4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ca1f9798917ac49d6243bb06c295008d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ca7028def136439f03c1543212cefcde_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\cb6b7bb8ca4030c76482a97e6d00f6a1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\cc1db534938159566005aa71d909f36e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\cc2a9618862c763a16607e327db42b0b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ccfef89db0b46a07f3691a439452248a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\cd46de4666f5006a7a5e9b1aa1caa89f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ce11747566bf41cf348539ebaa952fb1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ce343fa093a33094e9b1a476fe3670af_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ce61110feea960a158cd39273a388c60_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\cf938baa138d04392a554a08a34a36bd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d03a3e233eb9ac55ceb89660eca3b88e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d059537f0941455615f221f72109ef64_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d0c9973eae7008b9e4a4c85da49a1f72_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d122d71af919297f69e624f21fc6bbe6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d1de11e677edf88d56740e0c8f76737c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d1e76f7b79f0201467fc305b7b7b3eb0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d2e11db23c43d0bc42a9eedc19b938fd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d361c7ca8c40c557a6608d1b9c959585_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d405224cd1c7530b540a294ef3443658_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d436da1b1e07e1597c3b57bbd555be68_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d5e27bde76bd770fb73476b803eab106_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d64c0d916f89fdf75f73b052f3f5906a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d68ae29403d2706545be90fcd5f874f9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d69e50c9d460ada5e2451dc198f40485_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d6e4ef2ebd40ac96d6854207949f9803_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d718ac996df9a5a3cc83eb4bfb155e55_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d7dadb96abc983df4195b2f8e00078fc_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d7dc62ae9bd0c98b047d5ecc61343078_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d7ec5d59fa9b289f3d3c7cff6b00d68c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\d9794deca6ded21ac1245990af79b695_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\da391fae6d3dd0b251f8b074d4b65de0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\dada5ff586b7236c244fddc1c6798be1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\db11d12cd5224385f98a9769dcc3b0cf_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\db7d7b109e57065c8371d12c6467553f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\db8c7184235d1299d6dd25adfce383a3_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\dbbbf665f5df6dca59dc021b0a5b8157_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\dc13ee5f1def01c5527c9f9402b14dee_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\dc858dae35298dc88a7c9ad60d3df5f9_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\dd14aaba3b021126f326aa2f6d540cf1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\dde46317dd62ab5ec400f01e3d046278_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\de4d9a0d67358c373ceeb18d10252f9d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\de64be86160dbc16f185d9ddd341e3bf_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\deea28fa23542b708ee4933a21de4d3b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e0122a2b2c90e0bc8767057baca11e49_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e0139cad052ae98eff89816edca1abcd_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e025649df1487f9f931cc62abe9881c1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e0917e653327065383b0ad636dffebdc_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e2a08a9b11be02e4c48d86943118ccd3_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e2eba2ec35b8982b19cebec2855cd95a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e3a0a773996f265defda777fbd7e8bc0_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e43ccdc38c8d0aef92b2603872d8103e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e440837fcdf8f5ed53c8d829da8950a2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e4637b480ad1ca8c2e211924e450941a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e4c433fb8fcdfcfca7d4ab60f64048ff_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e54799eb95abacf74e6f846a99db83ea_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e585b41af5e824623c14ee7209bb64be_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e58b6cf1c20aebb3e7f9a4ff4fe5d810_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e63ab2aa820786c23b52e9d3cf4f5bb2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e684a7149c59845df288edc53cb7e7ae_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e68c10c25268c5219405220e7e13809c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e6b3f4f75db11e29ef80128c7baa75cb_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e7b8996638e28e7a6509604a6da63f32_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e7de6b424cd234cc9baa6dbba571c783_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e88ccad8934233129ef83dbea017bf91_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e91721c87bd0046fe4b709bda1d697c4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e9481da0efff1ef4711eaf6db6dd7d99_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\e94cba49dd2858d7f1a47e2c138adca1_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ea4ea9a4867c0e8e040c95154b94b41c_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ea623fd21b7f5efc3f536e9e39117309_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ea6e16e04b1c363b6275362d5db69724_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\eb03f51b87bae582f4b5ed1a14b8f2ad_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ec0bfc0b680ffa5d0c0efb63fe3c7566_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ec901eff1823fa3a1d039d66a8eec50a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ed81ba52955c1b684fcd154cc95108ca_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\edbf73970f27d66574b48b2850bb46cc_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\eef3dd85d2dbdbd29fef4fb2a7bc5f5f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\eef49fa2f051b19242be07cd8e50a4f6_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ef8f737590b1ac93b02531beac367e83_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f0dde4bbeb395b102cb9bdf9f357c69a_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application


End Part 2b, will continue

Koheni

Part 2c: Kaspersky continued

Data\Microsoft\Crypto\RSA\MachineKeys\f2170b483947b3cca7296de2c494b314_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f246188087c0ad0bd62edb6f6c2721fc_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f2992d3cb5a315ccf6c0abb73e7a4e0d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f2e47051779ee39833d63fa56ec95693_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f418b79cb1fc37164bce14a6f378461b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f467f2c0eb4f22bd8e1d520736735d9d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f49b7e0e52594931d70d7314e49d2f4f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f4b573763609ffe1bf88fafedeae8b2b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f4d54691cb8907ddee0338c1903b2737_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f529af5c295cbf63664f17dd9fad8e4d_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f538facc0b4d38d0442abb448b1da841_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f63ce7bae20a31ef548ddcae4404bd65_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f678074ae24fd5b9ed20a7d0b3811329_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f6c1235c06b08b5b4b1971e812d8d2b3_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f80f122a5e5dcfb39c46abe88e5abd51_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f823ac09b8a9ed142190ccfb03d03aec_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f8b553645403616951cb735027ef3497_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f9782ae17af7729d13ad0f83d3a7edee_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\f9df6bcb077ff4f3788e25147b147df7_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\faaa20d2ac084c1ed5c7164ccac8b189_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fba3f5087ab0b173e8ba2c1f4cafd0f2_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fbe74095c12cf9581cc36a916d2a9f92_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fbf554bc273803276a1d5933408084ea_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fc78a6606f2aefd745e2c3eb432a85b8_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fcc8b0b2a6ff76fcf63ed9668dd05b1e_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fd2b029935a539261610e9023b694475_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fd5d3b126f70e31ca8b2bd071464709f_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fd8b2b2e50b20cbfe7977e29f6410071_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fde6d96331a30e7696abfe4a6332cda4_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fe15f73e2c8dc5b838f06df5a05a4e95_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\fe2306e207f0bfad621b07d972a93bad_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ff570c87f7c8cc99a19cb7a5d0cc0c53_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ff6e9b2d5904acedb767f3185c6e844b_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ff8d065f79531ecef5c89b0c35f91bd3_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys\ffd58ffd95ac46438646c1961bbb3790_32f3ac44-ef0e-4497-9cea-86f8acbb3c0a
Object is locked skipped

C:\Documents and Settings\Braniff\Application Data\GRIM SOFTWARE
VIEW\hdrmehwb.exe Infected: Trojan.Win32.Obfuscated.bk skipped

C:\Documents and Settings\Braniff\Application Data\GRIM SOFTWARE
VIEW\uphhaprj.exe Infected: Trojan.Win32.Obfuscated.bk skipped

C:\Documents and Settings\Braniff\Cookies\index.dat Object is locked
skipped

C:\Documents and Settings\Braniff\Local Settings\Application
Data\Microsoft\Business Contact Manager\BusinessContactManager.mdf Object
is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Application
Data\Microsoft\Business Contact Manager\BusinessContactManager._log.LDF
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Braniff\Local
Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Braniff\Local
Settings\History\History.IE5\MSHist012007020220070203\index.dat Object is
locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56118.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56119.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56120.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56121.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56122.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56123.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56124.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56125.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56126.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56128.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56129.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56130.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56131.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56132.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56133.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\jar_cache56134.tmp
Object is locked skipped

C:\Documents and Settings\Braniff\Local
Settings\Temp\toolbox_healer56127.log Object is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\~DFC459.tmp Object
is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temp\~DFC464.tmp Object
is locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temporary Internet
Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is
locked skipped

C:\Documents and Settings\Braniff\Local Settings\Temporary Internet
Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Braniff\My Documents\My
Downloads\bsplayer214.942_clip.exe/data0011 Infected:
not-a-virus:AdTool.Win32.WhenU.a skipped

C:\Documents and Settings\Braniff\My Documents\My
Downloads\bsplayer214.942_clip.exe NSIS: infected - 1 skipped

C:\Documents and Settings\Braniff\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Braniff\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Braniff\UserData\index.dat Object is locked
skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked
skipped

C:\Documents and Settings\LocalService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local
Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet
Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked
skipped

C:\Documents and Settings\NetworkService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked
skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked
skipped

C:\Program Files\Microsoft SQL
Server\MSSQL$MICROSOFTSMLBIZ\Data\master.mdf Object is locked skipped

C:\Program Files\Microsoft SQL
Server\MSSQL$MICROSOFTSMLBIZ\Data\mastlog.ldf Object is locked skipped

C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Data\model.mdf
Object is locked skipped

C:\Program Files\Microsoft SQL
Server\MSSQL$MICROSOFTSMLBIZ\Data\modellog.ldf Object is locked skipped

C:\Program Files\Microsoft SQL
Server\MSSQL$MICROSOFTSMLBIZ\Data\tempdb.mdf Object is locked skipped

C:\Program Files\Microsoft SQL
Server\MSSQL$MICROSOFTSMLBIZ\Data\templog.ldf Object is locked skipped

C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\LOG\ERRORLOG
Object is locked skipped

C:\Program Files\RealVNC\VNC4\vncconfig.exe Infected:
not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped

C:\Program Files\RealVNC\VNC4\vncviewer.exe Infected:
not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped

C:\Program Files\RealVNC\VNC4\wm_hooks.dll Infected:
not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is
locked skipped

C:\System Volume
Information\_restore{35BED47F-5B93-4747-BCE7-CF5CD0ECFDC3}\RP535\A0175329.exe
Infected: Trojan.Win32.Delf.rb skipped

C:\System Volume
Information\_restore{35BED47F-5B93-4747-BCE7-CF5CD0ECFDC3}\RP535\A0175330.exe
Infected: not-a-virus:AdWare.Win32.180Solutions.ac skipped

C:\System Volume
Information\_restore{35BED47F-5B93-4747-BCE7-CF5CD0ECFDC3}\RP556\A0177623.exe
Infected: Trojan.Win32.Obfuscated.bk skipped

C:\System Volume
Information\_restore{35BED47F-5B93-4747-BCE7-CF5CD0ECFDC3}\RP556\change.log
Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\EventCache\{46D8A1D7-C249-4D13-A435-A4294EE34DA2}.bin
Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked
skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked
skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked
skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked
skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked
skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked
skipped

C:\WINDOWS\Temp\Perflib_Perfdata_73c.dat Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.



***Begin Part 3: Highjack This ***

** Highjack This **
Logfile of HijackThis v1.99.1
Scan saved at 8:43:45 PM, on 2/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Braniff\Desktop\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://v4.windowsupdate.microsoft.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: WebManager Class - {D5792AA9-D373-4039-8670-2CDAB6A71F15} - C:\Program Files\BitDownload\TorrentManager.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Keep itch wave slow] C:\Documents and Settings\All Users\Application Data\date acid keep itch\Lite Type.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [COAL DALE] C:\DOCUME~1\Braniff\APPLIC~1\GRIMSO~1\onestore.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.turbotax.com
O16 - DPF: {04E7BADF-F3B9-420D-B82D-8D8CADEFE4F9} (CyImage2Ctl Class) - http://cyimg5.cyworld.nate.com/ImageUpload/CyImageUpload2.cab
O16 - DPF: {0B96BF84-DA5C-46F4-A7FC-5319CFF74163} (MnetLauncher Control) - http://player.mnet.com/package/cjmuset.cab
O16 - DPF: {0DD4ADBE-E91D-48CC-9A04-87EA1674E385} (PerfTesAXDemo Control) - http://gamer.ubicom.com/benchmarks/PerfTestCliActiveXproj_nov04.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) - http://www.crezio.com/test/leeyunho/AlwaysOn/AlwaysOn.CAB
O16 - DPF: {2029F1D2-90E4-49EF-9824-F666D238BFF6} (NHNComicViewer Class) - http://cdn.naver.com/naver/comic/viewer/2006/NHNComicViewer.cab
O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control) - http://s.nx.com/activex/public_new/nxpm.cab
O16 - DPF: {32D94A9F-9A18-4E12-863D-8AABA8CBDA78} (NateOnMMSAtx3 Class) - http://sms.nate.com/NateOnMMS_AX3.cab
O16 - DPF: {340CCF52-D65F-4A11-80B3-13DC23697B59} (BugsInstall Control) - http://player.bugs.co.kr/install/BugsInstall.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107fd.bay107.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {50640DA2-6367-400D-9B77-18F6969F1D47} (WebPriKTF Control) - http://www.ktfmembers.com/download/web_prt/WebPri_KTF.cab
O16 - DPF: {5066F781-0BDF-4A28-A7B5-5EF4F7DC6F21} (CyworldMovieUpload Control) - http://mptop.cyworld.nate.com/activex/CyworldMovieUpload.cab
O16 - DPF: {5390E935-5D32-4033-8E3D-64908F729965} (TouchBrowser Control) - http://touch.imbc.com/ocx/touch.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6AD92401-CE2D-452B-AA63-1291D60EC2D2} (AxINIplugin40 Control) - http://member.nate.com/initech/plugin/axINIplugin40.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1168279921421
O16 - DPF: {84C5DDDF-17BF-477D-AD63-8545715272F7} (Intech_Launcher Control) - http://www.certpia.com/upfile/ocx/Intech_Launcher.cab
O16 - DPF: {90051A81-3018-4826-8B38-DD60B6B53F9C} (Snapfish File Upload ActiveX Control) - http://www.costcophotocenter.com/CostcoUpload.cab
O16 - DPF: {913BF18F-672D-4676-9855-F9A192A88886} (IMBCContents Control) - http://touch.imbc.com/ocx/Online.cab
O16 - DPF: {92D0D610-A6FA-48D8-94CB-BD47FDF68655} (Launcher Class) - http://app.tubemusic.com/naver/naverx.cab
O16 - DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} (Cdmcco Class) - http://cafeimg.hanmail.net/cab9_1/dmcc2.cab?Version=1,0,0,10
O16 - DPF: {9487AF3D-2053-4914-B893-64F83F293544} (AquaPlayer Class) - http://download.mgoon.com/app/mgoon_player/Dist/AquaPlayer1009.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BED3AC7-E6D4-43E7-B8A1-1FA502F639E1} (XTools Control) - http://player.bugs.co.kr/install/XTools.cab
O16 - DPF: {9C33ABEA-52B6-4895-85B0-E3BAB337EE3E} (Pull0PlayerX Control) - http://pullshot.pullbbang.com/images/Pull0Player.ocx
O16 - DPF: {AF11AA64-87A5-4146-AF3B-A7BD0F278485} (SBStarter Control) - http://download.soribada.com/down/Soribada/Setup/20061206/SBStart.CAB
O16 - DPF: {AF60D574-F249-4243-8040-5521AAA5BB5E} (PandoraTVSet Class) - http://imgcdn.pandora.tv/pan_img/p3player/package/pdrtvset.cab
O16 - DPF: {B3260660-93AC-48D8-8DDC-2C22192CA2AB} (Naver Mail BigFile Upload Control2) - http://mail.naver.com/activex/NvBigFileUpload2_NT.cab
O16 - DPF: {B375275F-4705-4D2C-88C1-A891105B9ABA} (NetEditor Control) - http://bbs.nate.com/fs_jsps/NetEditor.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B9B38E70-EEF6-4E3A-AE84-DDE59A053B7C} (Daum ActiveX manager Class) - http://cafeimg.hanmail.net/cto/xman.cab?ver=1,2,2,0
O16 - DPF: {BAE923B7-8344-485E-B82D-82402F30B019} (DaumImageCtl Class) - http://cafeimg.hanmail.net/activex/DaImage.cab
O16 - DPF: {D8F001C6-43B1-4CFD-9DAF-C8BEAE0E2B6D} (Touch Control) - http://touch.imbc.com/ocx/test/Online.cab
O16 - DPF: {E1CDC08F-F464-4682-AE6A-7689451387C0} (CAFE multiupload control) - http://cafeimg.hanmail.net/activex/dmcm.cab?Version=1,0,0,21
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)

End Part #3

Cheers
Thanks

Trogan

Hi Koheni and welcome to Short-Media!

I need to see another log from HijackThis.

• Run Hijackthis.
• Click on Open the Misc Tools section.
• Next click on Open uninstall manager.
• Press the Save list button.
• Save the file to your desktop, with the default name of uninstall_list
• Copy & Paste the entire contents of that file in your in your next post.

Do you have a Firewall?

Koheni

I have tried today to run a scan with BitDefender and once again it has stopped...and, in fact it stopped at the same file as first attempt and once again jumped to 11:51:53 time remaining. I told it to stop after no movement for one hour. The only thing moving is elapsed time. Now some 3 plus hours later time remaining has dropped 4 seconds and is still trying to stop.

It stopped at C:\WINDOWS\_default.pif (states CLEAN). see attached screen print. And, latest HighJack This scan. And, there have been no problems found.
#1 - BitDefender (Detected problems tab)
#2 - BitDefender (Statistics tab)
- HighJack This scan prior to second BitDefender attempt, after running AVG Spy-Ware and Anti-Virus, etc...


I have found that the pop ups have stopped, but occasionally when I try to go back, I m sent to another unrelated site...when I use goback again it sends me were I wanted to go. Also, opening emails takes forever and websites take longer than normal.

Cheers!!!

Trogan

Could you post the Uninstall list asked for in my previous post, along with a fresh HijackThis log please.

Koheni

Kind of...I had been using Nortan Internet Security 2006 until my subscription ran out. Than, I started using Windows Firewall. I did down load ZoneAlarm and found that I was having problems loading web pages in Internet Explorer (latest edition). It would tell me it could not connect to webpage and after try retry it would connect. Even with pages I had added to safe sites, etc...

Here is what you asked for: (the first 5 are Korean programs: AllZip, chat program like MSN, Music player, and I'm not sure)

?? ???
??? ?????
????
¾ËÁý
Ä«Æ®¶óÀÌ´õ
Ad-Aware SE Personal
Adobe Acrobat 8 Professional - English, Français, Deutsch
Adobe Flash Player 9 ActiveX
Adobe Illustrator 10
Adobe Photoshop 7.0
Adobe Photoshop Elements
Adobe Reader 7.0.9
Adobe Reader Korean Fonts
Adobe Shockwave Player
AquaPlayer
ASUS Probe V2.22.04
AsusUpdate
AVG 7.5
AVG Anti-Spyware 7.5
AviSynth 2.5
BitDownload version 3.1.0.1
BitTorrent 5.0.5
BugOff 1.10
CAFEON
Calculator Powertoy for Windows XP
Canon CanoScan Toolbox 4.1
ÇÑ±Û ºä¾î 2005
Cool & Quiet
DVD Decrypter (Remove Only)
DVD Rebuilder
DVDFab Decrypter 3.0.7.2
DVDInfoPro
Easy GIF Animator 2.1
eFax Messenger 4.2
GdiplusUpgrade
HijackThis 1.99.1
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB928388)
hp LaserJet 1160/1320 series
HP Software Update
ICQ 5.1
IKEA Home Planner Kitchen
INIplugin 4.0
INISafeWeb 6.0
InterVideo WinDVD 4
InterVideo WinDVD Creator
iolo technologies' System Mechanic 7
J2SE Runtime Environment 5.0 Update 4
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
JX-Mail ActiveX
Kaspersky Online Scanner
Logitech Harmony Remote Client
Microsoft .NET Framework (English)
Microsoft .NET Framework (English) v1.0.3705
Microsoft .NET Framework 1.0 Hotfix (KB886906)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2003 Proofing Tools
Microsoft Office Outlook 2003 with Business Contact Manager Update
Microsoft Office Professional Edition 2003
Microsoft SQL Server Desktop Engine (MICROSOFTSMLBIZ)
Microsoft Streets and Trips 2005
Microsoft User-Mode Driver Framework Feature Pack 1.0
Mozilla Firefox (2.0.0.1)
MSN Messenger 7.5
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
Naver Player
Nero 6 Ultra Edition
NVIDIA Drivers
OmniPage Pro 9.0
Panda ActiveScan
PFConfig 1.0.127
PowerDVD
Quicken 2006
QuickTime
RealPlayer
ResumeMaker
Risk II
Scan Manager 5.2
Scrabble
Security Update for Microsoft .NET Framework 2.0 (KB917283)
Security Update for Microsoft .NET Framework 2.0 (KB922770)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB926255)
Shareaza version 2.2.3.0
SkillSoft Course Manager
SoundMAX
Spybot - Search & Destroy 1.4
SpywareBlaster v3.5.1
TurboTax 2005
TurboTax Deluxe Deduction Maximizer 2006
TurboTax ItsDeductible 2005
TurboTax ItsDeductible 2006
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
VIA Integrated Setup Wizard
VNC Free Edition 4.1.2
Voice Editor
WexTech AnswerWorks
Winamp (remove only)
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893086
WinRAR archiver
WinZip
Xvid 1.1.2 final uninstall

Trogan

Before we continue, can you tell me what these are:

?? ???
??? ?????
????
¾ËÁý
Ä«Æ®¶óÀÌ´õ
ÇÑ±Û ºä¾î 2005

You may be able to recognise them on your computer.

Also, whilst we are attempting to clean your computer, please avoid using any Peer 2 Peer program to download.

Koheni

I have suspended use of the P2P. Anything downloaded was scanned for viruses prior to touching it.

?? ??? MP3 player (Korean)
??? ????? Daum Communicator (instant messanger)
???? Music player (Korean)
¾ËÁý AllZip (i.e. Korean "WinZip")
Ä«Æ®¶óÀÌ´õ Nate On (Instant Messanger)
ÇÑ±Û ºä¾î 2005 HWP Viewer - Hangul viewer (i.e like MS Word, developed for Koreans)

The 1st and 3rd I am not a 100% on, but the others are accurate.

Cheers, Go Manchester!!!

Trogan

OK, thanks for confirming that. Could you post a new HijackThis log and then we can start on clean up.

Koheni

I have replaced Zone-Alarm with Comodo Firewall v. 2.4.16.174. Zone-Alarm is not what it once was and found it a disappointment.

Here is the Latest HighJack This scan:

Logfile of HijackThis v1.99.1
Scan saved at 9:18:46 PM, on 2/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet

Publisher\FNPLicensingService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Braniff\Desktop\Downloads\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1

\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-

0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: WebManager Class - {D5792AA9-D373-4039-8670-2CDAB6A71F15} - C:\Program

Files\BitDownload\TorrentManager.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program

Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32

\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-

Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-

Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft

IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7

\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0

\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common

Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Keep itch wave slow] C:\Documents and Settings\All

Users\Application Data\date acid keep itch\Lite Type.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware

7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program

Files\Comodo\Firewall\CPF.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = %SystemRoot%

\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program

Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common

Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common

Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program

Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program

Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF -

res://C:\Program Files\Adobe\Acrobat 8.0

\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF -

res://C:\Program Files\Adobe\Acrobat 8.0

\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF -

res://C:\Program Files\Adobe\Acrobat 8.0

\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program

Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF -

res://C:\Program Files\Adobe\Acrobat 8.0

\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program

Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1

\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-

00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%

\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590

-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%

\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-

f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-

00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.turbotax.com
O16 - DPF: {04E7BADF-F3B9-420D-B82D-8D8CADEFE4F9} (CyImage2Ctl Class) -

http://cyimg5.cyworld.nate.com/ImageUpload/CyImageUpload2.cab
O16 - DPF: {0B96BF84-DA5C-46F4-A7FC-5319CFF74163} (MnetLauncher Control) -

http://player.mnet.com/package/cjmuset.cab
O16 - DPF: {0DD4ADBE-E91D-48CC-9A04-87EA1674E385} (PerfTesAXDemo Control) -

http://gamer.ubicom.com/benchmarks/PerfTestCliActiveXproj_nov04.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) -

http://www.crezio.com/test/leeyunho/AlwaysOn/AlwaysOn.CAB
O16 - DPF: {2029F1D2-90E4-49EF-9824-F666D238BFF6} (NHNComicViewer Class) -

http://cdn.naver.com/naver/comic/viewer/2006/NHNComicViewer.cab
O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control)

- http://s.nx.com/activex/public_new/nxpm.cab
O16 - DPF: {32D94A9F-9A18-4E12-863D-8AABA8CBDA78} (NateOnMMSAtx3 Class) -

http://sms.nate.com/NateOnMMS_AX3.cab
O16 - DPF: {340CCF52-D65F-4A11-80B3-13DC23697B59} (BugsInstall Control) -

http://player.bugs.co.kr/install/BugsInstall.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) -

http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -

http://by107fd.bay107.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {50640DA2-6367-400D-9B77-18F6969F1D47} (WebPriKTF Control) -

http://www.ktfmembers.com/download/web_prt/WebPri_KTF.cab
O16 - DPF: {5066F781-0BDF-4A28-A7B5-5EF4F7DC6F21} (CyworldMovieUpload Control) -

http://mptop.cyworld.nate.com/activex/CyworldMovieUpload.cab
O16 - DPF: {5390E935-5D32-4033-8E3D-64908F729965} (TouchBrowser Control) -

http://touch.imbc.com/ocx/touch.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} -

http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -

http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6AD92401-CE2D-452B-AA63-1291D60EC2D2} (AxINIplugin40 Control) -

http://member.nate.com/initech/plugin/axINIplugin40.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit

e.cab?1168279921421
O16 - DPF: {84C5DDDF-17BF-477D-AD63-8545715272F7} (Intech_Launcher Control) -

http://www.certpia.com/upfile/ocx/Intech_Launcher.cab
O16 - DPF: {90051A81-3018-4826-8B38-DD60B6B53F9C} (Snapfish File Upload ActiveX

Control) - http://www.costcophotocenter.com/CostcoUpload.cab
O16 - DPF: {913BF18F-672D-4676-9855-F9A192A88886} (IMBCContents Control) -

http://touch.imbc.com/ocx/Online.cab
O16 - DPF: {92D0D610-A6FA-48D8-94CB-BD47FDF68655} (Launcher Class) -

http://app.tubemusic.com/naver/naverx.cab
O16 - DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} (Cdmcco Class) -

http://cafeimg.hanmail.net/cab9_1/dmcc2.cab?Version=1,0,0,10
O16 - DPF: {9487AF3D-2053-4914-B893-64F83F293544} (AquaPlayer Class) -

http://download.mgoon.com/app/mgoon_player/Dist/AquaPlayer1009.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -

http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BED3AC7-E6D4-43E7-B8A1-1FA502F639E1} (XTools Control) -

http://player.bugs.co.kr/install/XTools.cab
O16 - DPF: {9C33ABEA-52B6-4895-85B0-E3BAB337EE3E} (Pull0PlayerX Control) -

http://pullshot.pullbbang.com/images/Pull0Player.ocx
O16 - DPF: {AF11AA64-87A5-4146-AF3B-A7BD0F278485} (SBStarter Control) -

http://download.soribada.com/down/Soribada/Setup/20061206/SBStart.CAB
O16 - DPF: {AF60D574-F249-4243-8040-5521AAA5BB5E} (PandoraTVSet Class) -

http://imgcdn.pandora.tv/pan_img/p3player/package/pdrtvset.cab
O16 - DPF: {B3260660-93AC-48D8-8DDC-2C22192CA2AB} (Naver Mail BigFile Upload

Control2) - http://mail.naver.com/activex/NvBigFileUpload2_NT.cab
O16 - DPF: {B375275F-4705-4D2C-88C1-A891105B9ABA} (NetEditor Control) -

http://bbs.nate.com/fs_jsps/NetEditor.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}

(MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B9B38E70-EEF6-4E3A-AE84-DDE59A053B7C} (Daum ActiveX manager Class) -

http://cafeimg.hanmail.net/cto/xman.cab?ver=1,2,2,0
O16 - DPF: {BAE923B7-8344-485E-B82D-82402F30B019} (DaumImageCtl Class) -

http://cafeimg.hanmail.net/activex/DaImage.cab
O16 - DPF: {D8F001C6-43B1-4CFD-9DAF-C8BEAE0E2B6D} (Touch Control) -

http://touch.imbc.com/ocx/test/Online.cab
O16 - DPF: {E1CDC08F-F464-4682-AE6A-7689451387C0} (CAFE multiupload control) -

http://cafeimg.hanmail.net/activex/dmcm.cab?Version=1,0,0,21
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1

\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -

C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. -

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1

\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program

Files\Comodo\Firewall\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program

Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation -

C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program

Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - c:\Program Files\Microsoft

SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file

missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -

C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog

Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - c:\Program

Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i

MICROSOFTSMLBIZ (file missing)


Thanks!!!

Trogan

Comodo is an excellent Firewall. I've just switched over from Zone Alarm too.

Lets begin the fix:

Please Download NoLop to your desktop from one of the links below...
Link 1
Link 2
Link 3

• Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.
• First close any other programs you have running as this will require a reboot
• Double click NoLop.exe to run it

• Now click the button labelled "Search and Destroy"
  <<your computer will now be scanned for infected files>>
• When scanning is finished you will be prompted to reboot only if infected, Click OK
• Now click the "REBOOT" Button.
• A Message should popup from NoLop. If not, double click the program again and it will finish Please Post the contents of C:\NoLop.log along with a fresh HijackThis log

--If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered," please download mscomctl.ocx to your system32 folder then rerun the program. --

Post back with the NoLop log and a new HijackThis log

Note: Make sure Word Wrap is unchecked under the Format tab in Notepad before the new HijackThis log.

Koheni

Here is the NoLop report file and HighJack This. There was a file found and the mscomctl.ocx was not needed.

NoLop! Log by Skate_Punk_21

Fix running from: C:\Documents and Settings\Braniff\Desktop\Downloads\Utilities
[2/3/2007]
[9:57:00 PM]

---Infection Files Found/Removed---
C:\WINDOWS\tasks\AE2B99C893A81070.job

Beginning Removal...
Rebooting...
Removing Lop's Leftover Files/Folders...
Editing Registry...
**Fix Complete!**

---Listing AppData sub directories---

C:\Documents and Settings\Administrator\Application Data\Microsoft
C:\Documents and Settings\All Users\Application Data\Adobe
C:\Documents and Settings\All Users\Application Data\Ahead
C:\Documents and Settings\All Users\Application Data\Apple Computer
C:\Documents and Settings\All Users\Application Data\Avg7
C:\Documents and Settings\All Users\Application Data\Comodo
C:\Documents and Settings\All Users\Application Data\Cyberlink
C:\Documents and Settings\All Users\Application Data\Date Acid Keep Itch
C:\Documents and Settings\All Users\Application Data\Efax Messenger 4.2 Setup
C:\Documents and Settings\All Users\Application Data\Estsoft
C:\Documents and Settings\All Users\Application Data\Flexnet
C:\Documents and Settings\All Users\Application Data\Grisoft
C:\Documents and Settings\All Users\Application Data\Individual Software
C:\Documents and Settings\All Users\Application Data\Intuit
C:\Documents and Settings\All Users\Application Data\Iolo
C:\Documents and Settings\All Users\Application Data\Microsoft
C:\Documents and Settings\All Users\Application Data\Microsoft Corporation -- EMPTY Directory
C:\Documents and Settings\All Users\Application Data\Nvidia
C:\Documents and Settings\All Users\Application Data\Nview_profiles -- EMPTY Directory
C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
C:\Documents and Settings\All Users\Application Data\Powerquest
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
C:\Documents and Settings\All Users\Application Data\Support.com
C:\Documents and Settings\All Users\Application Data\Symantec
C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
C:\Documents and Settings\All Users\Application Data\Winzip -- EMPTY Directory
C:\Documents and Settings\Braniff\Application Data\Adobe
C:\Documents and Settings\Braniff\Application Data\Adobeum
C:\Documents and Settings\Braniff\Application Data\Apple Computer
C:\Documents and Settings\Braniff\Application Data\Avg7
C:\Documents and Settings\Braniff\Application Data\Bitdownload
C:\Documents and Settings\Braniff\Application Data\Bittorrent
C:\Documents and Settings\Braniff\Application Data\Canon -- EMPTY Directory
C:\Documents and Settings\Braniff\Application Data\Comodo
C:\Documents and Settings\Braniff\Application Data\Cyberlink
C:\Documents and Settings\Braniff\Application Data\Efax Messenger
C:\Documents and Settings\Braniff\Application Data\Estsoft
C:\Documents and Settings\Braniff\Application Data\Grim Software View
C:\Documents and Settings\Braniff\Application Data\Help -- EMPTY Directory
C:\Documents and Settings\Braniff\Application Data\Hnc
C:\Documents and Settings\Braniff\Application Data\Icqlite
C:\Documents and Settings\Braniff\Application Data\Identities
C:\Documents and Settings\Braniff\Application Data\Individual Software
C:\Documents and Settings\Braniff\Application Data\Installshield
C:\Documents and Settings\Braniff\Application Data\Intervideo
C:\Documents and Settings\Braniff\Application Data\Intuit
C:\Documents and Settings\Braniff\Application Data\Iolo
C:\Documents and Settings\Braniff\Application Data\Isolatedstorage
C:\Documents and Settings\Braniff\Application Data\Kazaa Lite
C:\Documents and Settings\Braniff\Application Data\Lavasoft
C:\Documents and Settings\Braniff\Application Data\Macromedia
C:\Documents and Settings\Braniff\Application Data\Microsoft
C:\Documents and Settings\Braniff\Application Data\Mozilla
C:\Documents and Settings\Braniff\Application Data\Officeupdate12
C:\Documents and Settings\Braniff\Application Data\Real
C:\Documents and Settings\Braniff\Application Data\Shareaza
C:\Documents and Settings\Braniff\Application Data\Spybot - Search & Destroy
C:\Documents and Settings\Braniff\Application Data\Sun
C:\Documents and Settings\Braniff\Application Data\Symantec
C:\Documents and Settings\Braniff\Application Data\Talkback
C:\Documents and Settings\Braniff\Application Data\Versiontracker Pro
C:\Documents and Settings\Braniff\Application Data\Winrar -- EMPTY Directory
C:\Documents and Settings\Default User\Application Data\Microsoft
C:\Documents and Settings\Localservice\Application Data\Avg7
C:\Documents and Settings\Localservice\Application Data\Iolo -- EMPTY Directory
C:\Documents and Settings\Localservice\Application Data\Microsoft
C:\Documents and Settings\Networkservice\Application Data\Microsoft
C:\Documents and Settings\Weon-kyung\Application Data\Adobe
C:\Documents and Settings\Weon-kyung\Application Data\Adobeum -- EMPTY Directory
C:\Documents and Settings\Weon-kyung\Application Data\Apple Computer
C:\Documents and Settings\Weon-kyung\Application Data\Avg7 -- EMPTY Directory
C:\Documents and Settings\Weon-kyung\Application Data\Canon
C:\Documents and Settings\Weon-kyung\Application Data\Estsoft
C:\Documents and Settings\Weon-kyung\Application Data\Google
C:\Documents and Settings\Weon-kyung\Application Data\Help -- EMPTY Directory
C:\Documents and Settings\Weon-kyung\Application Data\Hnc
C:\Documents and Settings\Weon-kyung\Application Data\Identities
C:\Documents and Settings\Weon-kyung\Application Data\Intervideo
C:\Documents and Settings\Weon-kyung\Application Data\Intuit
C:\Documents and Settings\Weon-kyung\Application Data\Iolo
C:\Documents and Settings\Weon-kyung\Application Data\Lavasoft
C:\Documents and Settings\Weon-kyung\Application Data\Macromedia
C:\Documents and Settings\Weon-kyung\Application Data\Microsoft
C:\Documents and Settings\Weon-kyung\Application Data\Mozilla
C:\Documents and Settings\Weon-kyung\Application Data\Real
C:\Documents and Settings\Weon-kyung\Application Data\Snapfish
C:\Documents and Settings\Weon-kyung\Application Data\Sun
C:\Documents and Settings\Weon-kyung\Application Data\Symantec
C:\Documents and Settings\Weon-kyung\Application Data\Winrar -- EMPTY Directory



Logfile of HijackThis v1.99.1
Scan saved at 10:04:49 PM, on 2/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Documents and Settings\Braniff\Desktop\Downloads\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: WebManager Class - {D5792AA9-D373-4039-8670-2CDAB6A71F15} - C:\Program Files\BitDownload\TorrentManager.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Keep itch wave slow] C:\Documents and Settings\All Users\Application Data\date acid keep itch\Lite Type.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = %SystemRoot%\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.turbotax.com
O16 - DPF: {04E7BADF-F3B9-420D-B82D-8D8CADEFE4F9} (CyImage2Ctl Class) - http://cyimg5.cyworld.nate.com/ImageUpload/CyImageUpload2.cab
O16 - DPF: {0B96BF84-DA5C-46F4-A7FC-5319CFF74163} (MnetLauncher Control) - http://player.mnet.com/package/cjmuset.cab
O16 - DPF: {0DD4ADBE-E91D-48CC-9A04-87EA1674E385} (PerfTesAXDemo Control) - http://gamer.ubicom.com/benchmarks/PerfTestCliActiveXproj_nov04.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) - http://www.crezio.com/test/leeyunho/AlwaysOn/AlwaysOn.CAB
O16 - DPF: {2029F1D2-90E4-49EF-9824-F666D238BFF6} (NHNComicViewer Class) - http://cdn.naver.com/naver/comic/viewer/2006/NHNComicViewer.cab
O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control) - http://s.nx.com/activex/public_new/nxpm.cab
O16 - DPF: {32D94A9F-9A18-4E12-863D-8AABA8CBDA78} (NateOnMMSAtx3 Class) - http://sms.nate.com/NateOnMMS_AX3.cab
O16 - DPF: {340CCF52-D65F-4A11-80B3-13DC23697B59} (BugsInstall Control) - http://player.bugs.co.kr/install/BugsInstall.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107fd.bay107.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {50640DA2-6367-400D-9B77-18F6969F1D47} (WebPriKTF Control) - http://www.ktfmembers.com/download/web_prt/WebPri_KTF.cab
O16 - DPF: {5066F781-0BDF-4A28-A7B5-5EF4F7DC6F21} (CyworldMovieUpload Control) - http://mptop.cyworld.nate.com/activex/CyworldMovieUpload.cab
O16 - DPF: {5390E935-5D32-4033-8E3D-64908F729965} (TouchBrowser Control) - http://touch.imbc.com/ocx/touch.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6AD92401-CE2D-452B-AA63-1291D60EC2D2} (AxINIplugin40 Control) - http://member.nate.com/initech/plugin/axINIplugin40.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1168279921421
O16 - DPF: {84C5DDDF-17BF-477D-AD63-8545715272F7} (Intech_Launcher Control) - http://www.certpia.com/upfile/ocx/Intech_Launcher.cab
O16 - DPF: {90051A81-3018-4826-8B38-DD60B6B53F9C} (Snapfish File Upload ActiveX Control) - http://www.costcophotocenter.com/CostcoUpload.cab
O16 - DPF: {913BF18F-672D-4676-9855-F9A192A88886} (IMBCContents Control) - http://touch.imbc.com/ocx/Online.cab
O16 - DPF: {92D0D610-A6FA-48D8-94CB-BD47FDF68655} (Launcher Class) - http://app.tubemusic.com/naver/naverx.cab
O16 - DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} (Cdmcco Class) - http://cafeimg.hanmail.net/cab9_1/dmcc2.cab?Version=1,0,0,10
O16 - DPF: {9487AF3D-2053-4914-B893-64F83F293544} (AquaPlayer Class) - http://download.mgoon.com/app/mgoon_player/Dist/AquaPlayer1009.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BED3AC7-E6D4-43E7-B8A1-1FA502F639E1} (XTools Control) - http://player.bugs.co.kr/install/XTools.cab
O16 - DPF: {9C33ABEA-52B6-4895-85B0-E3BAB337EE3E} (Pull0PlayerX Control) - http://pullshot.pullbbang.com/images/Pull0Player.ocx
O16 - DPF: {AF11AA64-87A5-4146-AF3B-A7BD0F278485} (SBStarter Control) - http://download.soribada.com/down/Soribada/Setup/20061206/SBStart.CAB
O16 - DPF: {AF60D574-F249-4243-8040-5521AAA5BB5E} (PandoraTVSet Class) - http://imgcdn.pandora.tv/pan_img/p3player/package/pdrtvset.cab
O16 - DPF: {B3260660-93AC-48D8-8DDC-2C22192CA2AB} (Naver Mail BigFile Upload Control2) - http://mail.naver.com/activex/NvBigFileUpload2_NT.cab
O16 - DPF: {B375275F-4705-4D2C-88C1-A891105B9ABA} (NetEditor Control) - http://bbs.nate.com/fs_jsps/NetEditor.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B9B38E70-EEF6-4E3A-AE84-DDE59A053B7C} (Daum ActiveX manager Class) - http://cafeimg.hanmail.net/cto/xman.cab?ver=1,2,2,0
O16 - DPF: {BAE923B7-8344-485E-B82D-82402F30B019} (DaumImageCtl Class) - http://cafeimg.hanmail.net/activex/DaImage.cab
O16 - DPF: {D8F001C6-43B1-4CFD-9DAF-C8BEAE0E2B6D} (Touch Control) - http://touch.imbc.com/ocx/test/Online.cab
O16 - DPF: {E1CDC08F-F464-4682-AE6A-7689451387C0} (CAFE multiupload control) - http://cafeimg.hanmail.net/activex/dmcm.cab?Version=1,0,0,21
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)


What is next, if anything?

Cheers!

Trogan

You have a new running Process which doesn't look to be good. I'll like to get it scanned please.

• Go to VirusTotal
• Copy and paste the following file path into the Search Box at the top of the page:
• C:\WINDOWS\system32\conime.exe
• Click on the Send button
• Please post the results in your next reply.

Koheni

Here is what was found:

Complete scanning result of "conime.exe", received in VirusTotal at 02.04.2007, 05:28:30 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.34 02.03.2007 no virus found
Authentium 4.93.8 02.03.2007 no virus found
Avast 4.7.936.0 02.03.2007 no virus found
AVG 386 02.04.2007 no virus found
BitDefender 7.2 02.04.2007 no virus found
CAT-QuickHeal 9.00 02.03.2007 no virus found
ClamAV devel-20060426 02.03.2007 no virus found
DrWeb 4.33 02.03.2007 no virus found
eSafe 7.0.14.0 02.03.2007 no virus found
eTrust-InoculateIT 30.4.3364 02.02.2007 no virus found
eTrust-Vet 30.3.3366 02.03.2007 no virus found
Ewido 4.0 02.03.2007 no virus found
Fortinet 2.85.0.0 02.04.2007 no virus found
F-Prot 4.2.1.29 02.03.2007 no virus found
Ikarus T3.1.0.31 02.03.2007 no virus found
Kaspersky 4.0.2.24 02.04.2007 no virus found
McAfee 4955 02.02.2007 no virus found
Microsoft 1.2101 02.03.2007 no virus found
NOD32v2 2035 02.03.2007 no virus found
Norman 5.80.02 02.02.2007 no virus found
Panda 9.0.0.4 02.04.2007 no virus found
Prevx1 V2 02.04.2007 no virus found
Sophos 4.13.0 02.02.2007 no virus found
Sunbelt 2.2.907.0 02.02.2007 no virus found
Symantec 10 02.04.2007 no virus found
TheHacker 6.0.3.162 02.02.2007 no virus found
UNA 1.83 02.03.2007 no virus found
VBA32 3.11.2 02.03.2007 no virus found
VirusBuster 4.3.19:9 02.03.2007 no virus found


Aditional Information
File size: 27648 bytes
MD5: 054df8f752497c6b74dd7b65cca61132
SHA1: f4dfd45a4e08f385277a1fde27878fa11eb6cc46

VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.
> Go to: Home Contactar En Español

---

www.virustotal.com :: ©Hispasec Sistemas 2004-06:: e-mail info

Trogan

That's fine. Thanks!

Please do the following...

1. Make sure you can view hidden files and folders:

• Click Start.
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View Tab.
• Under the Hidden files and folders heading select Show hidden files and folders.
• Uncheck the Hide protected operating system files (recommended) option.
• Click Yes to confirm.
• Click OK.

2. Open HijackThis
- Click the Do a system scan only button
- Check the following entries (below)

O4 - HKLM\..\Run: [Keep itch wave slow] C:\Documents and Settings\All Users\Application Data\date acid keep itch\Lite Type.exe

- Close ALL open windows (especially Internet Explorer!)
- Click Fix Checked
Close HiajckThis

3. Reboot back into Safe Mode

4. Once in Safe Mode, find and delete the following Folders in RED:

C:\Documents and Settings\All Users\Application Data\date acid keep itch
C:\Documents and Settings\Braniff\Application Data\GRIM SOFTWARE VIEW

And this File:

C:\Documents and Settings\Braniff\My Documents\My Downloads\bsplayer214.942_clip.exe

5. Reboot back into Normal Mode

6. Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update to the latest version...

Updating Java:

• Download the latest version of Java Runtime Environment (JRE) 6.
• Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications."
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement."
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove the following...
  • J2SE Runtime Environment 5.0 Update 4
  • J2SE Runtime Environment 5.0 Update 6
  • J2SE Runtime Environment 5.0 Update 9
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.

7. Please post a new HijackThis log and let me know how things are.

Koheni

So far, so good...Here is the latest HighJack This log:

Logfile of HijackThis v1.99.1
Scan saved at 11:31:13 PM, on 2/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Braniff\Desktop\Downloads\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: WebManager Class - {D5792AA9-D373-4039-8670-2CDAB6A71F15} - C:\Program Files\BitDownload\TorrentManager.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = %SystemRoot%\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.turbotax.com
O16 - DPF: {04E7BADF-F3B9-420D-B82D-8D8CADEFE4F9} (CyImage2Ctl Class) - http://cyimg5.cyworld.nate.com/ImageUpload/CyImageUpload2.cab
O16 - DPF: {0B96BF84-DA5C-46F4-A7FC-5319CFF74163} (MnetLauncher Control) - http://player.mnet.com/package/cjmuset.cab
O16 - DPF: {0DD4ADBE-E91D-48CC-9A04-87EA1674E385} (PerfTesAXDemo Control) - http://gamer.ubicom.com/benchmarks/PerfTestCliActiveXproj_nov04.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) - http://www.crezio.com/test/leeyunho/AlwaysOn/AlwaysOn.CAB
O16 - DPF: {2029F1D2-90E4-49EF-9824-F666D238BFF6} (NHNComicViewer Class) - http://cdn.naver.com/naver/comic/viewer/2006/NHNComicViewer.cab
O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control) - http://s.nx.com/activex/public_new/nxpm.cab
O16 - DPF: {32D94A9F-9A18-4E12-863D-8AABA8CBDA78} (NateOnMMSAtx3 Class) - http://sms.nate.com/NateOnMMS_AX3.cab
O16 - DPF: {340CCF52-D65F-4A11-80B3-13DC23697B59} (BugsInstall Control) - http://player.bugs.co.kr/install/BugsInstall.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107fd.bay107.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {50640DA2-6367-400D-9B77-18F6969F1D47} (WebPriKTF Control) - http://www.ktfmembers.com/download/web_prt/WebPri_KTF.cab
O16 - DPF: {5066F781-0BDF-4A28-A7B5-5EF4F7DC6F21} (CyworldMovieUpload Control) - http://mptop.cyworld.nate.com/activex/CyworldMovieUpload.cab
O16 - DPF: {5390E935-5D32-4033-8E3D-64908F729965} (TouchBrowser Control) - http://touch.imbc.com/ocx/touch.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6AD92401-CE2D-452B-AA63-1291D60EC2D2} (AxINIplugin40 Control) - http://member.nate.com/initech/plugin/axINIplugin40.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1168279921421
O16 - DPF: {84C5DDDF-17BF-477D-AD63-8545715272F7} (Intech_Launcher Control) - http://www.certpia.com/upfile/ocx/Intech_Launcher.cab
O16 - DPF: {90051A81-3018-4826-8B38-DD60B6B53F9C} (Snapfish File Upload ActiveX Control) - http://www.costcophotocenter.com/CostcoUpload.cab
O16 - DPF: {913BF18F-672D-4676-9855-F9A192A88886} (IMBCContents Control) - http://touch.imbc.com/ocx/Online.cab
O16 - DPF: {92D0D610-A6FA-48D8-94CB-BD47FDF68655} (Launcher Class) - http://app.tubemusic.com/naver/naverx.cab
O16 - DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} (Cdmcco Class) - http://cafeimg.hanmail.net/cab9_1/dmcc2.cab?Version=1,0,0,10
O16 - DPF: {9487AF3D-2053-4914-B893-64F83F293544} (AquaPlayer Class) - http://download.mgoon.com/app/mgoon_player/Dist/AquaPlayer1009.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BED3AC7-E6D4-43E7-B8A1-1FA502F639E1} (XTools Control) - http://player.bugs.co.kr/install/XTools.cab
O16 - DPF: {9C33ABEA-52B6-4895-85B0-E3BAB337EE3E} (Pull0PlayerX Control) - http://pullshot.pullbbang.com/images/Pull0Player.ocx
O16 - DPF: {AF11AA64-87A5-4146-AF3B-A7BD0F278485} (SBStarter Control) - http://download.soribada.com/down/Soribada/Setup/20061206/SBStart.CAB
O16 - DPF: {AF60D574-F249-4243-8040-5521AAA5BB5E} (PandoraTVSet Class) - http://imgcdn.pandora.tv/pan_img/p3player/package/pdrtvset.cab
O16 - DPF: {B3260660-93AC-48D8-8DDC-2C22192CA2AB} (Naver Mail BigFile Upload Control2) - http://mail.naver.com/activex/NvBigFileUpload2_NT.cab
O16 - DPF: {B375275F-4705-4D2C-88C1-A891105B9ABA} (NetEditor Control) - http://bbs.nate.com/fs_jsps/NetEditor.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B9B38E70-EEF6-4E3A-AE84-DDE59A053B7C} (Daum ActiveX manager Class) - http://cafeimg.hanmail.net/cto/xman.cab?ver=1,2,2,0
O16 - DPF: {BAE923B7-8344-485E-B82D-82402F30B019} (DaumImageCtl Class) - http://cafeimg.hanmail.net/activex/DaImage.cab
O16 - DPF: {D8F001C6-43B1-4CFD-9DAF-C8BEAE0E2B6D} (Touch Control) - http://touch.imbc.com/ocx/test/Online.cab
O16 - DPF: {E1CDC08F-F464-4682-AE6A-7689451387C0} (CAFE multiupload control) - http://cafeimg.hanmail.net/activex/dmcm.cab?Version=1,0,0,21
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)


Thanks! Let me know if there is anything else to do.

Trogan

Everything looks good!

Let me know if I can mark this resolved please.

Here are some tips for a clean and scure computer.

For XP users.
It's a good idea to Flush your System Restore points after ridding yourself of malware. You can clean this by doing the following:

• Click Start | Help and Support | Undo changes to your computer with System Restore.
• Click Create A Restore Point then click Next. Give it a name it and then click Create, then Close.
• Close the Help and Support Center box.
• Click Start | Run and type Cleanmgr
• Select (C: ) then click OK.
• Click the More Options tab.
• Click Clean Up in the System Restore Section.

This will remove all previous restore points except the newly created one.

Make your Internet Explorer more secure

1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click on the Security tab
3. Click the Internet icon so it becomes highlighted.
4. Click on Default Level and click OK
5. Click on the Custom Level button.
   • Change the Download signed ActiveX controls to Prompt
   • Change the Download unsigned ActiveX controls to Disable
   • Change the Initialise and script ActiveX controls not marked as safe to Disable
   • Change the Installation of desktop items to Prompt
   • Change the Launching programs and files in an IFRAME to Prompt
   • Change the Navigate sub-frames across different domains to Prompt
   • Internet Explorer 7 users: Check all other items and make sure that they meet the (recommended) setting when applies.
   • When all these settings have been made, click on the OK button.
   • If it prompts you as to whether or not you want to save the
   settings, press the Yes button.
6. Next press the Apply button and then the OK to exit the Internet Properties page.

Take the time to check out the following links

Introduction to Internet Explorer 7
http://www.microsoft.com/windows/ie/default.mspx

Internet Explorer 7 features
http://www.microsoft.com/windows/ie/ie7/about/features/default.mspx

Release Notes for Internet Explorer 7
http://msdn2.microsoft.com/en-us/ie/aa740486.aspx
These Release Notes give you information about installing Internet Explorer® 7 and contain information about known issues and possible workarounds for those issues.

Internet Explorer 7 Ressources - In Depth Articles - Known Issues ...
http://www.ie-vista.com/

Internet Explorer7 - Phishing Filter Frequently Asked Questions
http://www.microsoft.com/mscorp/safety/technologies/antiphishing/faq.mspx

Resources for using Internet Explorer 6
http://support.microsoft.com/?kbid=867470

How to Configure Enhanced Security Features for Internet Explorer from Windows XP SP2
http://www.microsoft.com/technet/security/smallbusiness/prodtech/windowsxp/iesecxp.mspx

Safety Home
http://www.microsoft.com/mscorp/safety/default.mspx

IEBlog
http://blogs.msdn.com/ie/default.aspx

Microsoft Malicious Software Removal Tool
http://www.microsoft.com/security/malwareremove/families.mspx

Keep your Sun Java up to date

The most current version of Sun Java is: Java Runtime Environment Version 6.0
http://java.sun.com/javase/downloads/index.jsp

• Scroll down to where it says "Java Runtime Environment (JRE) 6".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.

And in the future, remember to remove older versions of Java when you update to a newer version to avoid exploitation of older versions left on your system.

Check out these topics for more information:
http://spywarewarrior.com/viewtopic.php?t=17910
http://spywarewarrior.com/viewtopic.php?t=17598

Free programs that may help you in keeping the PC clean

• SpywareBlaster
  SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
  You can download SpywareBlaster here
  A tutorial can be found here
• SpywareGuard
  It provides a degree of real-time protection solution against spyware that is a great addition to SpywareBlaster's protection method. An anti-virus program scans files before you open them and prevents execution if a virus is detected - SpywareGuard does the same thing, but for spyware. And you can easily have an anti-virus program running alongside SpywareGuard. It also features Download Protection and Browser Hijacking Protection.
  You can download SpywareGuard here
  A tutorial can be found here
• IE-SPYAD
  IE-SPYAD puts over 5000 sites in your restricted zone, so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all. It basically prevents any downloads, cookies, scripts from the sites listed, although you will still be able to connect to the sites.
  You can download IE-SPYAD here
  A tutorial can be found here
• Hosts File
  A Hosts file replaces your current HOSTS file with one containing well known ad, spyware sites etc. Basically, this prevents your coputer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer.
  A tutorial can be found here
  • MVPS Hosts File
    You can download the MVPS Hosts File
    Furthermore the website contains useful tips and links to other resources and utilities.
  • Bluetack's Hosts File and Hosts Manager
    Essentially based on the research made by Webhelper, Andrew Clover and Eric L. Howes, it contains most if not all the known spyware sites...sites responsible for hijacks, rogue apllications etc...
    Download Bluetack's Hosts file here
    Download Bluetack's HostsManager here

Free Spyware Detection and Removal Programs

• Ad-Aware
  It scans for known spyware on your computer. These scans should be run at least once every two weeks.
  You can download Ad-Aware here
  A tutorial can be found here
• Spybot - Search & Destroy
  It scans for spyware and other malicious programs. Spybot has preventitive tools that stop programs from even installing on your computer.
  You can download Spybot - S&D here
  A tutorial can be found here

Before adding any other Spyware Detection and Removal programs always check the Rogue Anti-Spyware List for programs known to be misleading, mistaken, or just outright "Foistware".
You will find the list here

WinPatrol

WinPatrol uses a heuristic approach to detecting attacks and violations of your computing environment. Traditional security programs scan your hard drive searching for previously identified threats. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge. You'll be removing dangerous new programs while others download new reference files.

• Detect & Neutralize Spyware.
• Detect & Neutralize ADware.
• Detect & Neutralize Viral infections.
• Detect & Neutralize Unwanted IE Add-Ons.
• Detect & Restore File Type Changes.
• Automatically Filter Unwanted Cookies.
• Avoid Start Page Hijacking.
• Detect changes to HOSTS & critical system files.
• Kill Multiple Tasks that replicate each other, in a single step!
• Stop programs that repeatedly add themselves to your Startup List!

Starting with WinPatrol 9.5 PLUS users also get the addition of Real-time Infiltration Detection so they'll know immediately when changes are made to critical system areas. WinPatrol Free is not demo or trial software. You're welcome to use it as long as you like.
You can download WinPatrol here
WinPatrol FAQ

SiteHound by Firetrust

Firetrust introduces the SiteHound Toolbar - the safe way to browse the Internet. With SiteHound, when you browse the Internet, you're shown a warning page every time you go to a site which is a known scam, potentially loads viruses or spyware on to your computer, has questionable content or anything you would not consider reasonable. You are shown a warning page with information about that site. From there you can choose to enter the site or go back. SiteHound is a free add-on to Internet Explorer. (Users of Firefox - a version for you is coming soon.) SiteHound's comprehensive database gathers the knowledge from other users and respected experts from the online security community to tell you which sites are real and which are bogus.

SiteHound will alert you when you enter a site which is known to contain:

• Fraudulent claims or scams
• Offensive material
• Security vulnerabilities
• Spyware or Adware
• Spam related material
• or other content deemed to be unsafe

Specifically, SiteHound blocks these categories:

• Adult • Spyware • Spam Advertising • Phishing • Possible scam or fraud • Misleading or False Advertising
• Pharming • Rogue or Suspect Product • Adware • Malware or Virus

System Requirements:
Internet Explorer 5.5+ and Windows 95/98/NT 4/ME/2000/XP

Product Info & Download: SiteHound Toolbar

Use an AntiVirus Software

It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See the link below for a listing of some online & their stand-alone antivirus programs.
Computer Safety On line - Anti-Virus
http://forum.malwareremoval.com/viewtopic.php?p=53#53

Update your Anti Virus Software

It is imperative that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall

I can not stress enough how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For an article on Firewalls and a listing of some available ones see the link below.
Computer Safety On line - Software Firewalls
http://forum.malwareremoval.com/viewtopic.php?p=56#56
A tutorial on Understanding and Using Firewalls can be found here

Happy Surfing!

Koheni

Yes, it appears to be back in order and BitDeffender was finely able to finish a scan. Although my other PC can not finish a BitDeffender scan, at a different location. A but that is another posting.

Thanks for the help!

Go Manchester!!!

Koheni

Trogan

Glad I could be of assistance! The help you received here was free. Please read through some of these Prevention Tips that Short-Media offers.

This topic is now closed. If you wish it reopened, please send a Private Message (PM) to one of the Spyware Mods with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required.

If you are not the user who started this thread, you must start a new Thread instead

Would you also be interested to join Short-Media (Team #93) with the Folding@Home Project? More information available here