Solved Sirefef - 1 minute boot loop

N9ZN-Extra · Aug 18, 2012

To be more inclusive I will submit a custom scan of EVERYTHING when the scan completes. Until then the full scan you requested is below. I am aware of the ATTACKER.EXE which is a security tools download from one of the reputable white hat houses.
Note: Last time I ran F-Secure it took some time to finish, over 3 hours, and this scan took a short comparative time to complete.

[FONT=Arial]Scanning Report[/FONT]

[FONT=Arial]Saturday, August 18, 2012 11:52:32 - 12:47:26[/FONT]

Computer name: ETERNALKHARA-PC
Scanning type: Scan system for malware, spyware and rootkits
Target: C:\ Q:\

[FONT=Arial]23 malware found[/FONT]

TrackingCookie.Questionmarket (spyware)

System (Disinfected)

TrackingCookie.Adinterax(spyware)

System (Disinfected)

TrackingCookie.2o7(spyware)

System (Disinfected)

TrackingCookie.Advertising(spyware)

System (Disinfected)

TrackingCookie.Atdmt(spyware)

System (Disinfected)

TrackingCookie.Adtech(spyware)

System (Disinfected)

TrackingCookie.Doubleclick(spyware)

System (Disinfected)

TrackingCookie.Revsci(spyware)

System (Disinfected)

TrackingCookie.WebTrendsLive (spyware)

System (Disinfected)

TrackingCookie.Clickbank(spyware)

System (Disinfected)

TrackingCookie.Fastclick(spyware)

System (Disinfected)

TrackingCookie.Adbrite(spyware)

System (Disinfected)

TrackingCookie.Xiti(spyware)

System (Disinfected)

TrackingCookie.Webtrends(spyware)

System (Disinfected)

TrackingCookie.Mediaplex(spyware)

System (Disinfected)

TrackingCookie.Liveperson(spyware)

System (Disinfected)

TrackingCookie.Statcounter(spyware)

System (Disinfected)

TrackingCookie.Atwola(spyware)

System (Disinfected)

TrackingCookie.Yieldmanager(spyware)

System (Disinfected)

Trojan.Dos.Ataker.A(virus)

C:\USERS\ETERNALKHARAS\DOWNLOADS\SECUTITY TOOLS\ATTACKER\ATTACKER.EXE (Renamed & Submitted)

Virus:W32/ZeroAccess.B(virus)

C:\FRST\QUARANTINE\SERVICES.EXE (Not cleaned)

Trojan.Generic.KDV.694094(virus)

C:\FRST\QUARANTINE\{AEC20CE0-3B62-6463-9D60-F6936E9E0AA7}\{AEC20CE0-3B62-6463-9D60-F6936E9E0AA7}\N (Not cleaned)

Trojan.Generic.KDV.694094(virus)

C:\FRST\QUARANTINE\{AEC20CE0-3B62-6463-9D60-F6936E9E0AA7}\N (Not cleaned)

[FONT=Arial]Statistics[/FONT]

Scanned:

Files: 85067
System: 5001
Not scanned: 225

Actions:

Disinfected: 19
Renamed: 1
Deleted: 0
Not cleaned: 3
Submitted: 1

Files not scanned:

C:\PAGEFILE.SYS
C:\HIBERFIL.SYS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SAM
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SYSTEM
C:\WINDOWS\SYSTEM32\CATROOT2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CATDB
C:\WINDOWS\SYSTEM32\CATROOT2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CATDB
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF06FAA5D7A7358976.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF2398FAAB14181A8A.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF25C7EAC0FABD499D.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF39888B4328C434DD.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF4369ABF76F65588D.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF471EDC97F770CD6F.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF4B96619A2DC9901A.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF4EA3FC8757743E62.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF5A5AAD8AEEC57FF9.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF5F3E34DE59B958F8.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF7F101B52EC87C060.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF886EABB62916B84F.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF8B7E901B20FC7E92.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF91657C6603DECF38.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFAF3AC8826B9FCE43.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFB38BC60CDB413390.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFCEED35514E8C3E61.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFE4DCAB6388F472B2.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFEE830DB179F5B951.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFFA066FCB686F5F48.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFFF3980B6AA8FA5E5.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\LOW\HSPERFDATA_ETERNALKHARAS\1084
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\HSPERFDATA_ETERNALKHARAS\3056
C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\CACHE\INDIV01.TMP
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\025C720CD9877009A13A610C34CEE630_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0270FC9424DF83A3314C9E484AE2DABA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0642E5E9D9AF6426FA01E6373F164BAE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\03B042F57C852E669890993A5A3F0193_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\071014DC9743B14140ABE139C66226A2_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\07BF34DFC8911E99565C4DEA755ED74A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\082B21B4A6EA8D92A5D54A0A95088C7E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\098A78D2082BDACA5FCF08A038D8213C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0A8A8A49336685C790DE46102DB237A4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0CEF826AF23143F020EBD1EC7CEEA9D1_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0DB0A2327C74D05B2C61FB90598DB43F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\109FADF480B0168EEFDB92F9D42D20EA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0DCBCA2D5BF5DC36135A5995D5E97016_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\10BB32DA3B8F08153BED622D999DFD09_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\10EE58A737EE83A77F32FBEE578BBD8B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\11AAF8F76CB4179F540C0DC5316803F6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\13CE210650142BC4E16B6344905B393A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1546E3312E4D58B142244B3958469F19_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\15A2ED9FB359E38CA8F0DA992C8A6DEF_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\15348B796174AFF8ED64BB7F136D1E41_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1D678A2E20E629AFC40D65E66DCB1721_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1B36C8C0E4764C77C6FCF2B53FBCCD51_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1E61F672133EAECD550B791718BF002A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1FDD590CCC148058278EEE79996763C1_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\224B15D0174745363143F16A390B3E78_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1F65E7F720A8E418CC256485C5958FEA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\278697C6D647366EFD8F33CCE95ACD05_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\23F12C7D5C907ED9BF0C66453938AA82_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2820F8654EECC9AC0E1204F1B3D27EE7_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2B80A4069231D636108B03FCE11431E5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2BB735F0EB810608F55FEE1283B50E33_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2D828E083930442A0AE2A5D103B3A640_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2CD867168347F48FC9FF8097CC6DBC39_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2EC423E52C58A8CC3336F6DE6285519D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3025B9F05025235F68A19CFA7FF4A1EA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\316024BB0F6D5B78AB4B41F43162C418_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3339DFC43FECE85C0C85A3C160540830_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\35E8A793EFD34CE021362EBF2745449C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\35EC592986765295ED7DF7DFEC3CAC1E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\366BEA1EDF8634A4048BBBE3B5BA622F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\393761E022C58D685105A003C9A39A91_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\38B09B97D710798FD5936685B72A5832_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\39A2BB77739B3F1469A9FA7BA3E89483_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3B01FECC534D68DD42B02C74ECC98C16_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3F499CBC7D0D6761A7824848D740084F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3F68077E15C2769B3E5A7C51674DAC03_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3FD6DCDC4CF7CDB733BC1F17BE19BB67_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\40333906B29D4B771D813DF0862857AB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4046B04E0F8633CAD3B57938E8F65C7A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\41F69F79188C8D677AFB34B63E870613_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4354C26629DEC20654A67FD676C56466_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4413667EE169BCBB375E598565AC91E0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4867985DA066EB409A93B791AFD72245_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\490327C52DD0FAF5BF152B0D42DDFD9B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4AB3596DB8849B1007FBD0C1E791652E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4B0E7829757C8062BD8F0C0D60FBC68A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4B11C83A55D4024012734CE3CCB8E0DF_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4F8E1F0AC597531B3F6E8779353A3E05_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4C842D8CD0DB1DE558E3FB9C20476676_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4D1511425744F45F933D30B94DEAC66F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\51356B2B59B647B793E3A04C0CC23757_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\525AA54B7EF671F9D139B7E83D841A0F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\53E084B513548C14FC5ABF8165691727_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5388F06EB44BF39375361EAC1F330557_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\52848223AB402DCB171981C7CE0F1F44_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\52CB140C492197F09758998FBE8C272F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\541BEED47CF5006B1BA6CDC4F6782327_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\54D2C25EEC0C9253B52F72DDA67F3357_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\54FBF0ECB95466EC7770778EFB4ADBB0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5518B48334F9BCDA284898214FE92D7E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\57A9A6DCA23B8B9D3E52A015A4DACC0F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5D19314F3F5E840933F08F2E37FE3281_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5AEF43B19902D255E58966860E56794F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5CFF310961E723A8E3322DCBA7E65E78_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5D58F0C2CC571B974C19149468FBC45C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5E99DE6C700D4018585D2F7724D158E4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5F3031CB99059A7E198776FB0C7C74A3_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5FCB5119E9293AB3E3BF3200FE98358E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5FE3444849D61F1FF957EA7A3FB9BC1D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\61979489C58FF29C05234F3A6D4213B9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\62B74FF1B22302D8487216965C807623_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\65B3707B36F1C52F1B38E086095EDFF7_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\66241C30C02129760913CA15925BD494_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\681B2EF85802CBE2C694DE5ACA3DA4D7_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6BADB7B03E4E1AC4CB7AC332EADB2879_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\68EEAE1F9E65FCECC15814826ED6CC09_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6A767E65EE3C26AAE8F0233075B3F03D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6CE17D74489196A7C6EFE5ABFF936107_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6F44640846C65F646AFFB6883DF9C995_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6FCE084D797F4F4D92A44B2AB6DD775B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\76928C1C91032D3D8DD78CE26E6B3575_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\77DFC07D0834DFE19015AF114D5247BB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\796D6C80CFA559677668F65058EB3905_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\79635D529B65B97827AF83E4B8AC38A4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7CA786329743275B4E4EB78386EBCDB9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7893685DC6CFE00A091ED398335A8614_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\81AEC6DFE0ABE7B59801FECE266BFD3C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\80B0C9BD66D41F72ED9307DD0CD955E4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7F2227CFA847C03067440FFEDCF7949F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\828C210752A7A5A6811A780C57D1DBC3_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8361226D8D839FDD8DA1CEB5E30F7DE5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\838E3806FE02294683F2AA5501B1ECF8_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8483364BC0E999D1B246C3315C5F7C33_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\873FB985F6E5572E77FE9F6F2D2551E6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8DCAD7D0378611FAD8E79014B8303E4B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8850C5E7FACE12EEF1A2A46936BF6090_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8C76B132A4272B216D4FF5C8E6BF4223_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8E7C7DF26C28A488F0C41071C6400CFE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\92BC615FB85EB1A296999F08DBCFAACB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\945F42BFB6378E9D89282959C15769F4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\92DD70B0CB51033DF553561001DD30F5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9654757663EB36BB5094FC718F768A8A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9654A08E70F04899E0C8D1D50294C911_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\99C17DFBFFD0BFB8F598C0ED806E9666_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\97D56C47AE94F90C9649C03E2828A85B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9801B28F386BF89FBF2EA3FB9F791D47_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9BFD48C10C19E75BAFAF83E7C691E633_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9DB241A6450FFC982C23C59B167E663B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9C8B2B113580232A18D9934185C98955_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9E9949496A537E17F64AFE568CC9ABF2_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A1B6A5C8F5A61995FDE978B506CDB5C4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A2F0AE79351B8251FD062CDE68C9FAF0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A3F2EF861BFE85CBB790C135D3EF44AC_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A5905E0AF7709CA46EF12A0863DF22A5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A8B2E6AED747D61472F7F1C8F119805D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A5D9933B1FA7929C8DDB5EB786A5EFCE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A79F82FDDAE5B585564F6A66F9EC448A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A84A898BD2EF0829C23240D632AD1D83_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA28FCDB1CD8FB1ACF059C885B9C3907_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA57CA27BCD9D46923567938A8BC5C88_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA86AA36C8FFD3F17CFB5C3A8D75B4DA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B0E90D8B7437ABDE0DC0C1F062291062_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B18571AB486E630F02ABA179EE3BDECC_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B3BDD649DE364F4C31BAAEE31FAFF432_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B407DE258A0FDBA919473AE64D3FDFF0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B55600731BADB35E05FABAB22B5AFB71_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B7B4483FD56791CC7B8190376E6B07FA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B655AA2253EA318BF0EB339FF0AFA6E3_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BA29731E4D500116F7F545C5AC41CE4C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BE6152ADC2C9E3CDCBAF27DCE04CF50E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BBBF778AD5624EB79320D59DF457D58C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C0EC3A4F36AEF77320E1A66627890E9A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C2F6154956EA4BDDFE26E41A9A945A22_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C585BE184A196F98C229718993525B90_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C5A7D31310F21EE9C5A2A9E6E638BD3D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CBD74EE45CEF7ECD220BFB660A0CDF3E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C8A4724F1626C70FB4C59F4BA6512985_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CBB8498D18496BC25F535154CC27C891_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CDC96250DCA11782AE738FD4B4CEFD32_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CC15B2F0C61370EB85F73BB8C6692E41_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CEE7415E46F419CFADC0CFE2B1B814D9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CFCC8FE4E9A0E339418F75D33C63B9DE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D064A605F0B3F34B1DAD2B19307625E5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D1594FDB7A109A62844C4C3D51B94CDB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D0FA52738BF347552C44E0EE2F39EA6F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D275A02E32BC06FC5EDD8004592674D2_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D280315480E64592CBE43DB3B382B384_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D2A31AB7F0F405AB6E8726D4BAD910A9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D3159631A5CB49C3375AF9974AB53071_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D5BA31D8736CD55FB540E9D4D67E3FFD_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D3BA12D08D49A6B73050BEF56DF8E45B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D65A5BCB418543E5D8C144C85455E54B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D6A39733A570AAC5FE164336B3A6A72D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D6A4F4958F028FA31EE5CB85EBEF5EF0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DA57DFFC8594A4B5CA7C983B7DF22E47_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D92E621BE9827D43EE4D4B9049472755_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DABDFAAE38BA3F5A1666CA177CFED162_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD8205F02689799DDCEF2867F1894197_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E055D094C6E1F68E5C38E02624A25B35_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E1AA4D8506C2FEF270F16A3A25B7850C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E52C12CE68DAB78474E47CA7AC61E87C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E84384B3DB3F7F8D1A8B30B0E6C91C22_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E8928373922F5E14BB714C0D3D355929_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E8C3D5F76285D8FD8A89B70914A2C477_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ECC899F93C98B98296AEBDBE9BE94B83_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EF07055209A5E2CB904B5ED556515851_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F05FDFAED7F03B6A505158C4FFEBF4EF_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F1C186882D9CC0F16FBDA8B7462A8F99_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F426B076FCA2A84042C712F758339723_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F5DEA830FD11798C22B352BFE64D0B5D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F52523BBA3FB16650CA37702B51E0271_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F43A9320A888FDEEC54772DDF1CDB3C6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F5494AEC14CD9C5B1AD0FDA787E07BA6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FA0144564578EDFCB7EB7207C3B54B17_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FCA5CEFF8056A571A6D5C85CE28B1DFE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FDF71EC195865D4D5881C1CB6A40D84C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FDC208C8FCAA0D7F35C032A23207B8C5_7D119F20-88F0-4F62-ABAA-F277D52D008D

[FONT=Arial]Options[/FONT]

Scanning engines:
Scanning options:

Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML XXX ANI AVB BAT CMD JOB LSP MAP MHT MIF PHP POT SWF WMF NWS TAR TMP
Use advanced heuristics

N9ZN-Extra · Aug 18, 2012

DUPLICATE POST REMOVED!

N9ZN-Extra · Aug 18, 2012

While the F-Secure custom scan was running I tried to update the MSSE virus files. I realized the warnings received yesterday and today occured when an MSSE virus pattern update was attempted. The MSSE update failed yesterday and today, the info is below. I will post results from F-Secures custom scan later but it may not include any re-infections that may be tied to the attempted MSSE vitus pattern update.

The errors found in the online scanner directory are likely from F-Secures online scanner download, or from an online scan by MSSE prior to and in preparation for the MSSE pattern download. They do not explain the warnings for SIREFEF seen in the last image. This occured after F-Secure DISCOVERED threats in the FRST and COMBOFIX directories quarantine areas. The date and time associated with the discovery is not consistent with when the update was attempted. This time discrepancy was also noticed yesterday when I REMOVED the entries displayed by MSSE. This may be another false positive however the time discrepancy in MSSE and the updating failure lead me to believe something continues to be infected or changed by a prior infection within MSSE's files. (see the images displayed in this post)

Security Essentials encountered the following error:

Error code 0x80508023. The program could not find the malware and other potentially unwanted software on this computer.

Category:
Virus

Description:
This program is dangerous and replicates by infecting other files.

Recommended action:
Remove this software immediately.

Items:
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a683
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a685
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a687
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a691
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a693
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a695
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a69f
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6a1
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6a3
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6ad
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6af
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6b1
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6bb
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6bd
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6bf
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6c9
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6cb
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6cd
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6d7
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6d9
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6db
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6e5
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6e7
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6e9
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6f3
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6f5
file:C:\Users\ETERNA~1\AppData\Local\Temp\OnlineScanner\Anti-Virus\Aquarius\tmp00006bf7\tmp0003a6f7

Get more information about this item online.

[FONT=arial black]Yesterdays detection data from MSSE is below, notice the time comparisons which seem strangely unusual.[/FONT]

N9ZN-Extra · Aug 18, 2012

Results from F-Secure's online scanner in CUSTOM MODE USING ALL AVAILABLE OPTIONS. This scan took a considerable longer time to finish and included many more files than the full option. Root Kit detection was also checked for this scan.

[FONT=Arial]Scanning Report[/FONT]

[FONT=Arial]Saturday, August 18, 2012 13:11:31 - 18:30:02[/FONT]

Computer name: ETERNALKHARA-PC
Scanning type: Scan system for malware, spyware and rootkits
Target: C:\ Q:\

[FONT=Arial]3 malware found[/FONT]

Trojan.Dos.Ataker.A (virus)

C:\Users\EternalKharas\Downloads\Secutity tools\attacker\ATTACKER.0XE (Not cleaned & Submitted)

Trojan.Dos.Ataker.A (virus)

C:\Users\EternalKharas\Downloads\Secutity tools\attacker.zip\attacker.exe (Not cleaned)

Trojan.Dos.Ataker.A (virus)

C:\Users\EternalKharas\Downloads\Secutity tools\attacker.zip (Renamed & Submitted)

[FONT=Arial]Statistics[/FONT]

Scanned:

Files: 2146727
System: 4998
Not scanned: 515

Actions:

Disinfected: 0
Renamed: 1
Deleted: 0
Not cleaned: 2
Submitted: 2

Files not scanned:

C:\HIBERFIL.SYS
C:\PAGEFILE.SYS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG1
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG2
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG1
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG2
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG1
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG2
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG1
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG2
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG1
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG2
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SAM
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SYSTEM
C:\WINDOWS\SYSTEM32\CATROOT2\EDB.LOG
C:\WINDOWS\SYSTEM32\CATROOT2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CATDB
C:\WINDOWS\SYSTEM32\CATROOT2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CATDB
C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT
C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT.LOG1
C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT.LOG2
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT.LOG1
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT.LOG2
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\ROAMING\PEERNETWORKING\BE8FA77439C36A95E560241919BD6EF9\F5DADCC145EB03D3A5FF2D8D84AED944\GROUPING\DB.MDB
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\ROAMING\PEERNETWORKING\BE8FA77439C36A95E560241919BD6EF9\F5DADCC145EB03D3A5FF2D8D84AED944\GROUPING\EDB.LOG
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\ROAMING\PEERNETWORKING\BE8FA77439C36A95E560241919BD6EF9\F5DADCC145EB03D3A5FF2D8D84AED944\GROUPING\TMP.EDB
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\LASTALIVE0.DAT
C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\LASTALIVE1.DAT
C:\USERS\ETERNALKHARAS\NTUSER.DAT
C:\USERS\ETERNALKHARAS\NTUSER.DAT.LOG1
C:\USERS\ETERNALKHARAS\NTUSER.DAT.LOG2
C:\Users\EternalKharas\Downloads\RealAir_-_Marchetti_SF260_2007_(FSX).rar\RealAir\sf26007\AutoPlay\Config Panel.cdd\_detect.dat
C:\Users\EternalKharas\Downloads\RealAir_-_Marchetti_SF260_2007_(FSX).rar\RealAir\sf26007\AutoPlay\Config Panel.cdd\_proj.dat
C:\Users\EternalKharas\Downloads\RealAir_-_Marchetti_SF260_2007_(FSX).rar\RealAir\sf26007\AutoPlay\Config Panel.cdd\_fonts.dat
C:\Users\EternalKharas\Downloads\Windows 7 Drivers, software, and manuals\NVIDIA\Graphics Packages\Benchmark_0330_final.rar\Benchmark_0330_final\StarTalesBenchmark.msi
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_3ds931797FD.7z
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_intro6757B27C.ac3
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_intro62556571.mpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_intro1B990785.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menuFC99322E.ac3
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menu8BBF6CC7.mpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menu41A21EE5.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menu_leftC6CBC022.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menu_rev6291F9D5.ac3
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menu_revBCAC22A6.mpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menu_rev4D74D4FE.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_menu_right7D728544.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub5DD786BF.ac3
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub13A03657.mpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub1E43DBD20.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub2FA3EE61B.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub347DBA78C.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub442CE570B.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub5646F9F01.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub64544C714.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub_rev01257D76.ac3
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_menu_to_sub_revADE0B4A3.mpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_thumbnail70587367.png
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title94D7C77F.ac3
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_titleFD198485.mpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title102063228.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title2BA717970.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title31211BFC7.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title4B07E7DA3.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title5FD013B9E.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title671517100.xml
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title_rev0681418A.ac3
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\jellyballoons_title_rev35B79624.mpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\papier2321DBCD.jpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\ref4849A8EC.jpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\sky1BA7741A.jpg
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3\Nero 7.2.3.3\Installation\Cab\37744978.cab\text16B1B9DE.png
C:\Users\EternalKharas\Downloads\ALIENWARE\Nero_7.2.3.3.zip\Nero 7.2.3.3\Installation\Cab\E4060BF5.cab\rootFEAA0A71.img\root.img
C:\Users\EternalKharas\Documents\PAYDOTGOV071111.xps\Documents/1/_rels/FixedDocument.fdoc.rels
C:\Users\EternalKharas\Documents\PAYDOTGOV071111.xps\Documents/1/FixedDocument.fdoc
C:\Users\EternalKharas\Documents\PAYDOTGOV071111.xps\_rels/FixedDocumentSequence.fdseq.rels
C:\Users\EternalKharas\Documents\PAYDOTGOV071111.xps\FixedDocumentSequence.fdseq
C:\Users\EternalKharas\Documents\PAYDOTGOV071111.xps\_rels/.rels
C:\Users\EternalKharas\Documents\PAYDOTGOV071111.xps\[Content_Types].xml
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\FML1C15.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\FMLD825.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\FMLABF3.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF1D055B7BF6D20DCE.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF3254A1F978105869.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF4B96619A2DC9901A.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF4D31599547B57A16.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF595FA047EDF92D76.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF5F3E34DE59B958F8.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF619C73420E76E6AE.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF817DACD1B8CE5B89.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF8ED94F775C6DD3F9.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF91657C6603DECF38.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF98A21E579979CB65.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF9E6A138D9F4A4973.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF886EABB62916B84F.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF9E9621472D4CD35B.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DF9EEFD273A90CC369.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFAF3AC8826B9FCE43.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFB38BC60CDB413390.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFB8FF8C93E3D74A50.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFE4B9D3DC025DE91B.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFE4DCAB6388F472B2.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFEBCB3A30B35C60D4.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFEE830DB179F5B951.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFF519FB8185140507.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFF80FEAAC281BBEC2.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\~DFFA066FCB686F5F48.TMP
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\HSPERFDATA_ETERNALKHARAS\3056
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\TEMP\LOW\HSPERFDATA_ETERNALKHARAS\1084
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG1
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG2
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.WORD\~WRS0176.TMP
C:\Users\EternalKharas\AppData\Local\Microsoft\Outlook\archive.pst
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\MICROSOFT\CARDSPACE\CARDSPACESP2.DB
C:\USERS\ETERNALKHARAS\APPDATA\LOCAL\MICROSOFT\CARDSPACE\CARDSPACESP2.DB.SHADOW
C:\SYSTEM VOLUME INFORMATION\SYSCACHE.HVE
C:\SYSTEM VOLUME INFORMATION\SYSCACHE.HVE.LOG1
C:\SYSTEM VOLUME INFORMATION\SYSCACHE.HVE.LOG2
C:\PROGRAMDATA\MICROSOFT\WINDOWS\DRM\CACHE\INDIV01.TMP
C:\PROGRAMDATA\MICROSOFT\SEARCH\DATA\APPLICATIONS\WINDOWS\MSS.LOG
C:\PROGRAMDATA\MICROSOFT\SEARCH\DATA\APPLICATIONS\WINDOWS\MSSTMP.LOG
C:\PROGRAMDATA\MICROSOFT\SEARCH\DATA\APPLICATIONS\WINDOWS\TMP.EDB
C:\PROGRAMDATA\MICROSOFT\SEARCH\DATA\APPLICATIONS\WINDOWS\WINDOWS.EDB
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\IMPSERVICEEDB4FA23-53B8-4AFA-8C5D-99752CCA7094.LOCK
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\SCANS\MPCACHE-F748F32AD79DC9D610858BED52B71BAAC320B0C1.BIN.67
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\SCANS\MPCACHE-F748F32AD79DC9D610858BED52B71BAAC320B0C1.BIN.7E
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\SCANS\MPCACHE-F748F32AD79DC9D610858BED52B71BAAC320B0C1.BIN.80
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\SCANS\MPCACHE-F748F32AD79DC9D610858BED52B71BAAC320B0C1.BIN.87
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\SCANS\MPCACHE-F748F32AD79DC9D610858BED52B71BAAC320B0C1.BIN.A0
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\SCANS\MPCACHE-F748F32AD79DC9D610858BED52B71BAAC320B0C1.BIN.VE0
C:\PROGRAMDATA\MICROSOFT\MICROSOFT ANTIMALWARE\SCANS\MPCACHE-F748F32AD79DC9D610858BED52B71BAAC320B0C1.BIN.VE1
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0270FC9424DF83A3314C9E484AE2DABA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\025C720CD9877009A13A610C34CEE630_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0642E5E9D9AF6426FA01E6373F164BAE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\03B042F57C852E669890993A5A3F0193_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\071014DC9743B14140ABE139C66226A2_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\082B21B4A6EA8D92A5D54A0A95088C7E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\07BF34DFC8911E99565C4DEA755ED74A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\098A78D2082BDACA5FCF08A038D8213C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0A8A8A49336685C790DE46102DB237A4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0CEF826AF23143F020EBD1EC7CEEA9D1_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0DB0A2327C74D05B2C61FB90598DB43F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0DCBCA2D5BF5DC36135A5995D5E97016_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\109FADF480B0168EEFDB92F9D42D20EA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\10BB32DA3B8F08153BED622D999DFD09_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\10EE58A737EE83A77F32FBEE578BBD8B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\13CE210650142BC4E16B6344905B393A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\11AAF8F76CB4179F540C0DC5316803F6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\15348B796174AFF8ED64BB7F136D1E41_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1546E3312E4D58B142244B3958469F19_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\15A2ED9FB359E38CA8F0DA992C8A6DEF_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1B36C8C0E4764C77C6FCF2B53FBCCD51_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1E61F672133EAECD550B791718BF002A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1D678A2E20E629AFC40D65E66DCB1721_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1F65E7F720A8E418CC256485C5958FEA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1FDD590CCC148058278EEE79996763C1_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\224B15D0174745363143F16A390B3E78_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\23F12C7D5C907ED9BF0C66453938AA82_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\278697C6D647366EFD8F33CCE95ACD05_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2820F8654EECC9AC0E1204F1B3D27EE7_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2B80A4069231D636108B03FCE11431E5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2BB735F0EB810608F55FEE1283B50E33_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2CD867168347F48FC9FF8097CC6DBC39_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2D828E083930442A0AE2A5D103B3A640_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2EC423E52C58A8CC3336F6DE6285519D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3025B9F05025235F68A19CFA7FF4A1EA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\316024BB0F6D5B78AB4B41F43162C418_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3339DFC43FECE85C0C85A3C160540830_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\35E8A793EFD34CE021362EBF2745449C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\35EC592986765295ED7DF7DFEC3CAC1E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\366BEA1EDF8634A4048BBBE3B5BA622F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\38B09B97D710798FD5936685B72A5832_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\393761E022C58D685105A003C9A39A91_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\39A2BB77739B3F1469A9FA7BA3E89483_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3B01FECC534D68DD42B02C74ECC98C16_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3F499CBC7D0D6761A7824848D740084F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3FD6DCDC4CF7CDB733BC1F17BE19BB67_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3F68077E15C2769B3E5A7C51674DAC03_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\40333906B29D4B771D813DF0862857AB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4046B04E0F8633CAD3B57938E8F65C7A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\41F69F79188C8D677AFB34B63E870613_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4354C26629DEC20654A67FD676C56466_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4413667EE169BCBB375E598565AC91E0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4867985DA066EB409A93B791AFD72245_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4AB3596DB8849B1007FBD0C1E791652E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\490327C52DD0FAF5BF152B0D42DDFD9B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4B0E7829757C8062BD8F0C0D60FBC68A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4C842D8CD0DB1DE558E3FB9C20476676_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4B11C83A55D4024012734CE3CCB8E0DF_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4D1511425744F45F933D30B94DEAC66F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4F8E1F0AC597531B3F6E8779353A3E05_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\51356B2B59B647B793E3A04C0CC23757_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\525AA54B7EF671F9D139B7E83D841A0F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\52848223AB402DCB171981C7CE0F1F44_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\52CB140C492197F09758998FBE8C272F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5388F06EB44BF39375361EAC1F330557_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\53E084B513548C14FC5ABF8165691727_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\541BEED47CF5006B1BA6CDC4F6782327_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\54D2C25EEC0C9253B52F72DDA67F3357_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5518B48334F9BCDA284898214FE92D7E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\54FBF0ECB95466EC7770778EFB4ADBB0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\57A9A6DCA23B8B9D3E52A015A4DACC0F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5AEF43B19902D255E58966860E56794F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5CFF310961E723A8E3322DCBA7E65E78_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5D19314F3F5E840933F08F2E37FE3281_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5D58F0C2CC571B974C19149468FBC45C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5E99DE6C700D4018585D2F7724D158E4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5F3031CB99059A7E198776FB0C7C74A3_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5FCB5119E9293AB3E3BF3200FE98358E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5FE3444849D61F1FF957EA7A3FB9BC1D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\61979489C58FF29C05234F3A6D4213B9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\62B74FF1B22302D8487216965C807623_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\65B3707B36F1C52F1B38E086095EDFF7_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\681B2EF85802CBE2C694DE5ACA3DA4D7_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\66241C30C02129760913CA15925BD494_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\68EEAE1F9E65FCECC15814826ED6CC09_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6A767E65EE3C26AAE8F0233075B3F03D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6BADB7B03E4E1AC4CB7AC332EADB2879_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6CE17D74489196A7C6EFE5ABFF936107_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6F44640846C65F646AFFB6883DF9C995_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6FCE084D797F4F4D92A44B2AB6DD775B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\76928C1C91032D3D8DD78CE26E6B3575_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\77DFC07D0834DFE19015AF114D5247BB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7893685DC6CFE00A091ED398335A8614_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\79635D529B65B97827AF83E4B8AC38A4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\796D6C80CFA559677668F65058EB3905_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7CA786329743275B4E4EB78386EBCDB9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7F2227CFA847C03067440FFEDCF7949F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\80B0C9BD66D41F72ED9307DD0CD955E4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\81AEC6DFE0ABE7B59801FECE266BFD3C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\828C210752A7A5A6811A780C57D1DBC3_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8361226D8D839FDD8DA1CEB5E30F7DE5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\838E3806FE02294683F2AA5501B1ECF8_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\873FB985F6E5572E77FE9F6F2D2551E6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8483364BC0E999D1B246C3315C5F7C33_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8850C5E7FACE12EEF1A2A46936BF6090_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8C76B132A4272B216D4FF5C8E6BF4223_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8E7C7DF26C28A488F0C41071C6400CFE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8DCAD7D0378611FAD8E79014B8303E4B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\92BC615FB85EB1A296999F08DBCFAACB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\92DD70B0CB51033DF553561001DD30F5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\945F42BFB6378E9D89282959C15769F4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9654757663EB36BB5094FC718F768A8A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9654A08E70F04899E0C8D1D50294C911_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\97D56C47AE94F90C9649C03E2828A85B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9801B28F386BF89FBF2EA3FB9F791D47_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\99C17DFBFFD0BFB8F598C0ED806E9666_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9BFD48C10C19E75BAFAF83E7C691E633_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9DB241A6450FFC982C23C59B167E663B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9E9949496A537E17F64AFE568CC9ABF2_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9C8B2B113580232A18D9934185C98955_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A1B6A5C8F5A61995FDE978B506CDB5C4_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A2F0AE79351B8251FD062CDE68C9FAF0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A3F2EF861BFE85CBB790C135D3EF44AC_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A5905E0AF7709CA46EF12A0863DF22A5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A5D9933B1FA7929C8DDB5EB786A5EFCE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A79F82FDDAE5B585564F6A66F9EC448A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A84A898BD2EF0829C23240D632AD1D83_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A8B2E6AED747D61472F7F1C8F119805D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA28FCDB1CD8FB1ACF059C885B9C3907_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA86AA36C8FFD3F17CFB5C3A8D75B4DA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA57CA27BCD9D46923567938A8BC5C88_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B18571AB486E630F02ABA179EE3BDECC_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B0E90D8B7437ABDE0DC0C1F062291062_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B3BDD649DE364F4C31BAAEE31FAFF432_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B407DE258A0FDBA919473AE64D3FDFF0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B55600731BADB35E05FABAB22B5AFB71_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B655AA2253EA318BF0EB339FF0AFA6E3_7D119F20-88F0-4F62-ABAA-F277D52D008D

N9ZN-Extra · Aug 18, 2012

SECOND HALF OF CUSTOM SCAN...

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B7B4483FD56791CC7B8190376E6B07FA_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BA29731E4D500116F7F545C5AC41CE4C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BBBF778AD5624EB79320D59DF457D58C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BE6152ADC2C9E3CDCBAF27DCE04CF50E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C0EC3A4F36AEF77320E1A66627890E9A_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C2F6154956EA4BDDFE26E41A9A945A22_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C585BE184A196F98C229718993525B90_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C5A7D31310F21EE9C5A2A9E6E638BD3D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C8A4724F1626C70FB4C59F4BA6512985_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CBB8498D18496BC25F535154CC27C891_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CBD74EE45CEF7ECD220BFB660A0CDF3E_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CC15B2F0C61370EB85F73BB8C6692E41_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CDC96250DCA11782AE738FD4B4CEFD32_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CFCC8FE4E9A0E339418F75D33C63B9DE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CEE7415E46F419CFADC0CFE2B1B814D9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D064A605F0B3F34B1DAD2B19307625E5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D0FA52738BF347552C44E0EE2F39EA6F_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D1594FDB7A109A62844C4C3D51B94CDB_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D275A02E32BC06FC5EDD8004592674D2_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D280315480E64592CBE43DB3B382B384_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D2A31AB7F0F405AB6E8726D4BAD910A9_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D3BA12D08D49A6B73050BEF56DF8E45B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D3159631A5CB49C3375AF9974AB53071_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D5BA31D8736CD55FB540E9D4D67E3FFD_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D65A5BCB418543E5D8C144C85455E54B_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D6A39733A570AAC5FE164336B3A6A72D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D6A4F4958F028FA31EE5CB85EBEF5EF0_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DA57DFFC8594A4B5CA7C983B7DF22E47_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D92E621BE9827D43EE4D4B9049472755_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD8205F02689799DDCEF2867F1894197_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E055D094C6E1F68E5C38E02624A25B35_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DABDFAAE38BA3F5A1666CA177CFED162_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E52C12CE68DAB78474E47CA7AC61E87C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E84384B3DB3F7F8D1A8B30B0E6C91C22_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E1AA4D8506C2FEF270F16A3A25B7850C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E8928373922F5E14BB714C0D3D355929_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ECC899F93C98B98296AEBDBE9BE94B83_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EF07055209A5E2CB904B5ED556515851_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F05FDFAED7F03B6A505158C4FFEBF4EF_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F1C186882D9CC0F16FBDA8B7462A8F99_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F426B076FCA2A84042C712F758339723_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E8C3D5F76285D8FD8A89B70914A2C477_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F52523BBA3FB16650CA37702B51E0271_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F5494AEC14CD9C5B1AD0FDA787E07BA6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F43A9320A888FDEEC54772DDF1CDB3C6_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F5DEA830FD11798C22B352BFE64D0B5D_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FA0144564578EDFCB7EB7207C3B54B17_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FCA5CEFF8056A571A6D5C85CE28B1DFE_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FDF71EC195865D4D5881C1CB6A40D84C_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FDC208C8FCAA0D7F35C032A23207B8C5_7D119F20-88F0-4F62-ABAA-F277D52D008D
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\_rels/.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\docProps/core.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\word/_rels/document.xml.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\word/document.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\word/webSettings.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\docProps/app.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\word/fontTable.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\word/settings.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\word/styles.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\word/theme/theme1.xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\SetAuthor\sample.docx\[Content_Types].xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\_rels/.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\AlbumArt/jacqui.jpg
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Lyrics/Valparaiso.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/_rels/Valparaiso.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/Valparaiso.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Lyrics/CrystalFree.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Lyrics/Sire.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Lyrics/SmallPines.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\_rels/TrackList.wpl.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\TrackList.wpl
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/_rels/CrystalFree.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/CrystalFree.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/_rels/Sire.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/Sire.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/_rels/SmallPines.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\Tracks/SmallPines.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\musicbundlesignature\SampleMusicBundle.zip\[Content_Types].xml
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\_rels/.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\AlbumArt/jacqui.jpg
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Lyrics/Valparaiso.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/_rels/Valparaiso.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/Valparaiso.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Lyrics/CrystalFree.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Lyrics/Sire.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Lyrics/SmallPines.txt
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\_rels/TrackList.wpl.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\TrackList.wpl
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/_rels/CrystalFree.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/CrystalFree.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/_rels/Sire.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/Sire.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/_rels/SmallPines.wma.rels
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\Tracks/SmallPines.wma
C:\Program Files\Microsoft SDKs\Windows\v7.1\Samples\dataaccess\OPC\MusicBundle\ConsumptionData\SampleMusicBundle.zip\[Content_Types].xml
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/button_accept.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/button_login.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/button_next.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/button_play.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/exit_text.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_environments.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_eula.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_login.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_login_disabled.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_patcher.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_question.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_repair_success.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_settings.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/de/title_tos.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/button_accept.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/button_login.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/button_next.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/button_play.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/exit_text.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_environments.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_eula.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_login.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_login_disabled.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_patcher.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_question.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_repair_success.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_settings.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/fr/title_tos.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/back_button.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/back_icon.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/bg.jpg
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_accept.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_loading.gif
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_login.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_next.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_pause.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_play.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_settings.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/button_testing.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/checkbox.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/checkmark.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/confirmation_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/content_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/content_bottom.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/content_top.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/controls.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/cursor_default.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/cursor_hover.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/cursor_pointer.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/env_section.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/error_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/error_bg_hover.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/exit_button.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/exit_text.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/explosion.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/icon_error.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/icon_loading.gif
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/icon_repair.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/icon_repair_failed.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/icon_repair_success.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/icon_warning.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/input.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/loading.gif
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/logo.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/mask.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/outline.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/progressbar.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/progressbar_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/progressbar_end.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/progressbar_glow.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/progress_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/readmore_arrow.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/refresh.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/restart.gif
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/s.gif
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/scrollbar_arrows.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/scrollbar_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/scrollbar_slider.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/settings_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/settings_buttons.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/settings_close.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/settings_dropdown.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/settings_select.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/sort.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/start.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/start_shadow.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_environments.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_eula.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_login.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_login_disabled.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_question.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_repair_failed.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_repair_success.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_settings.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/title_tos.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/toggle_dev.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/warning_bg.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\images/warning_bg_hover.png
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/app.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/bundleloader.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/errormsgs.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/host.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/httpdownload.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/inputs.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/interop.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/jquery.array.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/jquery.bezier.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/jquery.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/jquery.mousewheel.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/jquery.scrollbar.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/jshelper.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/json2.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/jsons.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/localization.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/skinwindow.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swfobject.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_ajax.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_captcha.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_interop.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_launching.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_logging.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_patchprogress.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_requirements.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\js/swtor_urls.js
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\app.config.xml
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\bundles.json
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\download.solidconfig
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\downloader.bundle
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\language-de.xml
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\language-en.xml
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\language-fr.xml
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\language.xml
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\launcher.bundle
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\mollom-captcha-player.swf
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\patcher.bundle
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\patching_complete.wav
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\settings.xml
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\swtor.css
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\swtor.html
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\swtor.ico
C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe\window.config.xml
[FONT=Arial]Options[/FONT]

Scanning engines:
Scanning options:
- Scan all files
- Scan inside archives
- Use advanced heuristics

N9ZN-Extra · Aug 19, 2012

Just for fun I ran yet another 3+ hour MSSE scan of c: and q:, the 2 HDD's active in this OS. As usuall I did not receive any virus warnings after the scan. This is what I have been seeing the past 2 days until several hours pass and I try to do a pattern update that fails. After the failure I look at the MSSE history tab and the virus info shows up as being discovered, quarantined, or disinfected, 6 plus hours earlier. Last time I tried the update via MSSE I checked the history tab prior to attempting the update and everything showed to be clean. The delay of several hours for MSSE to display the information has me stumped since it normally will show up as soon as a virus scan has completed. I am wondering if this may be somehow affected by services manipulation?

After a little thought on why the update was failing I noticed that BITS (Background Intelligent Transfer Service) was missing from the services list. BITS was not stopped it was no longer present in the list of installed services at boot time.

After opening an elevated command prompt I was successful recreating the service via elevated command line with this command sc create BITS binpath= "c:\windows\system32\svchost.exe -k netsvcs" start= delayed-auto . BITS service was started via running services.msc from the start prompt.

My issue with MSSE updates has been resolved along with other related issues in MS Updates. Might this have been affected by SIREFEF's manipulation of the services environment and could this trojan have been used to remove services from the que of services to be installed at system startup?

If the answer to my question is YES then we need to find a way to identify and recover any other missing services. A simple restore of services.exe to one which conforms with the expected checksum will not resolve everything that may have changed or been removed.

Jay Pfoutz · Aug 19, 2012

Actually, it is typical for Sirefef to modify services.exe in a way that breaks the path of BITS to run (called code obfuscation), therefore disabling the BITS service. So, if services.exe and then the BITS service is restored, the problem should be solved.

If there are no more issues, then we shall clean up!

Clean up System Restore

Now, to get you off to a clean start, we will be creating a new Restore Point, then clearing the old ones to make sure you do not get reinfected, in case you need to "restore back."

To manually create a new Restore Point

Go to Control Panel and select System and Maintenance
Select System
On the left select Advance System Settings and accept the warning if you get one
Select System Protection Tab
Select Create at the bottom
Type in a name I.e. Clean
Select Create

Now we can purge the infected ones

Go back to the System and Maintenance page
Select Performance Information and Tools
On the left select Open Disk Cleanup
Select Files from all users and accept the warning if you get one
In the drop down box select your main drive I.e. C
For a few moments the system will make some calculations:
Select the More Options tab
In the System Restore and Shadow Backups select Clean up
Select Delete on the pop up
Select OK
Select Delete

Run OTC to remove our tools

To remove all of the tools we used and the files and folders they created, please do the following:
Please download OTC.exe by OldTimer:

Save it to your Desktop.
Double click OTC.exe.
Click the CleanUp! button.
If you are prompted to Reboot during the cleanup, select Yes.
The tool will delete itself once it finishes.

Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

Purge old temporary files

Download CCleaner Slim and save it to your Desktop - Alternate download link

When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.

* Double-click the CCleaner shortcut on the desktop to start the program.
* Click on the Options block on the left, then choose Cookies.
* Under Cookies to Delete, highlight any cookies you would like to retain permanently
* Click the right arrow > to move them to the Cookies to Keep window.
* Go into Options > Advanced & uncheck Only delete files in Windows Temp folders older than 48 hours
* Click Cleaner on the left then Run Cleaner on the right to run the program.
* Important: Make sure that ALL browser windows are closed before selecting Run Cleaner

Caution: Only use the Registry feature if you are very familiar with the registry.
Always back up your registry before making any changes. Exit CCleaner after it has completed it's process.

Security Check

Please download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Tell me in your next reply, if you have completed these tasks:

Cleaned System Restore
Ran OTC
Ran CCleaner
Ran Security Check

Also, let me know how your computer is running, and don't forget to post the contents of the Security Check log.

N9ZN-Extra · Aug 19, 2012

My PC is running as normal, still getting crashes in I.E. and other programs referencing certain *.DLL files since a re-build of the OS a while back but I am not concerned with that. This OS is not worth the time to fix.

I am preparing to install a dual water loop on this box, change motherboard, processor, GPU, 10K RPM HDD's in raid and overclock the 3.0Ghz quad core processor to beyond 4.0Ghz. In addition the North Bridge and South Bridge, FSB, and GPU will be overclocked and memory will be running at its rated 2000 Mhz, all on a freshly imaged 64 bit OS by the end of August.

I will keep this build around since it has tons of software installed that I ocassionally use and some historical info I want to hang onto for a while.

The following are complete.

Cleaned System Restore
Ran OTC
Ran CCleaner
Ran Security Check

checkup.txt follows...
Results of screen317's Security Check version 0.99.46

Windows 7 Service Pack 1 x86 (UAC is enabled)

Internet Explorer 9

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Microsoft Security Essentials

Antivirus up to date!

`````````Anti-malware/Other Utilities Check:`````````

CCleaner

Java(TM) 7 Update 5

Java version out of Date!

Adobe Reader X (10.1.4)

Google Chrome 21.0.1180.75

Google Chrome 21.0.1180.79

````````Process Check: objlist.exe by Laurent````````

Microsoft Security Essentials MSMpEng.exe

Microsoft Security Essentials msseces.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 1%

````````````````````End of Log``````````````````````

How is Java out of date? Maybe the system needs rebooting after removal of older versions? JavaFX was also removed due to long running script issues on this site.
Verified Java Version

Congratulations!

You have the recommended Java installed (Version 7 Update 5).

N9ZN-Extra · Aug 20, 2012

After a re-boot I decided to restore the system to a prior point, the one created during your instructions above. I will clean up the remaining left overs from Combofix and FRST as well as getting rid of any quarantine files from AV software.

What led me to the restore is not worth explaining and the system is running as expected.

Jay Pfoutz · Aug 20, 2012

O...kay. Anyway, here are prevention tips that I always share:

Personal Tips on Preventing Malware

See this page for more info about malware and prevention.

Read more about "FAQ: How did Sirefef or ZeroAccess Infect You?"

Any other questions before I mark this topic solved?

N9ZN-Extra · Aug 20, 2012

SIREFEF is interesting but if I were the author of such a prevalent virus I would have reminded myself of the work of sony music and their old root kit technology.

With that thought in mind you can close this. I think things are as clean as can be expected, only a format and fresh start are the only way to be 100% certain.

Jay Pfoutz · Aug 21, 2012

Actually, these days, the only way to be 100% certain is a new hard drive, Linux, and a good antivirus for Linux!

Marked as solved. √

Solved Sirefef - 1 minute boot loop

N9ZN-Extra

Posts: 26 +0

N9ZN-Extra

Posts: 26 +0

N9ZN-Extra

Posts: 26 +0

N9ZN-Extra

Posts: 26 +0

N9ZN-Extra

Posts: 26 +0

N9ZN-Extra

Posts: 26 +0

Jay Pfoutz

Posts: 4,279 +49

N9ZN-Extra

Posts: 26 +0

N9ZN-Extra

Posts: 26 +0

Jay Pfoutz

Posts: 4,279 +49

N9ZN-Extra

Posts: 26 +0

Jay Pfoutz

Posts: 4,279 +49

Similar threads

Latest posts