This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Home Page Redirect

16 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Combofix asked me to update the program so I did. I am not sure whether or not it retained the command line you asked me to run when it restarted itself. Please let me know if I need to run it again. Here are the results. ComboFix 11-08-16.02 - Jas 16/08/2011 12:59:42.2.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.2.1033.18.3581.1963 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe Command switches used :: c:\users\Jas\Desktop\CFScript.txt AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\PCDr\5830\Downloads\652c72d6-ea41-4060-96f7-060298329393.dll c:\programdata\PCDr\5830\Downloads\ae67b364-b69e-471e-b177-2459120b84d4.dll c:\programdata\PCDr\5830\Downloads\bbfa36b0-30b0-4e36-8d8c-69df1d87626b.dll c:\programdata\PCDr\5830\Downloads\daf30858-49d8-434b-b4b1-068b5dc9267c.dll . . ((((((((((((((((((((((((( Files Created from 2011-07-16 to 2011-08-16 ))))))))))))))))))))))))))))))) . . 2011-08-16 17:30 . 2011-07-13 03:39 6881616 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C3D1EAC0-BAA3-4AB6-8AB9-DC817DBF23CB}\mpengine.dll 2011-08-16 17:07 . 2011-08-16 18:34 ——– d—–w- c:\users\Jas\AppData\Local\temp 2011-08-16 17:07 . 2011-08-16 17:07 ——– d—–w- c:\users\Dell Technician\AppData\Local\temp 2011-08-16 17:07 . 2011-08-16 17:07 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-08-13 17:53 . 2011-08-13 17:53 ——– d—–w- c:\program files\ESET 2011-08-13 17:30 . 2011-08-13 17:30 ——– d—–w- c:\users\Jas\AppData\Roaming\Malwarebytes 2011-08-13 17:30 . 2011-08-13 17:30 ——– d—–w- c:\programdata\Malwarebytes 2011-08-13 17:30 . 2011-07-06 23:52 41272 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-08-13 17:30 . 2011-08-13 17:30 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware 2011-08-13 17:30 . 2011-07-06 23:52 22712 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-08-12 03:20 . 2011-08-12 03:20 ——– d—–w- c:\program files\7-Zip 2011-08-12 02:50 . 2011-08-12 02:50 ——– d—–w- C:\_OTL 2011-08-12 02:47 . 2011-08-12 02:48 ——– d—–w- c:\program files\ERUNT 2011-08-10 19:20 . 2011-06-17 16:03 375808 —-a-w- c:\windows\system32\winsrv.dll 2011-08-10 19:20 . 2011-07-06 15:31 214016 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-08-10 19:19 . 2011-06-06 10:59 2409784 —-a-w- c:\program files\Windows Mail\OESpamFilter.dat 2011-08-10 19:19 . 2011-06-20 08:54 3602832 —-a-w- c:\windows\system32\ntkrnlpa.exe 2011-08-10 19:19 . 2011-06-20 08:54 3550096 —-a-w- c:\windows\system32\ntoskrnl.exe 2011-08-10 19:19 . 2011-06-17 20:13 905104 —-a-w- c:\windows\system32\drivers\tcpip.sys 2011-08-10 18:33 . 2011-08-10 18:33 ——– d—–w- c:\users\Jas\AppData\Roaming\thriXXX 2011-08-09 01:18 . 2011-08-09 01:18 ——– d—–w- c:\program files\Apple Software Update 2011-08-08 20:14 . 2011-08-08 20:14 ——– d—–w- c:\programdata\boost_interprocess 2011-08-08 20:10 . 2011-08-08 20:25 ——– d—–w- c:\users\Jas\AppData\Local\NPE . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-08-05 19:59 . 2009-08-04 13:23 307200 —-a-w- c:\windows\system32\TubeFinder.exe 2011-06-22 22:01 . 2011-06-22 22:01 53816 —-a-w- c:\windows\system32\drivers\RapportKELL.sys 2011-06-10 20:28 . 2011-05-18 14:51 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-06-02 13:34 . 2011-07-14 14:02 2043392 —-a-w- c:\windows\system32\win32k.sys 2011-05-24 23:14 . 2010-10-07 18:52 222080 ——w- c:\windows\system32\MpSigStub.exe 2011-06-29 13:58 . 2011-05-13 04:16 142296 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll 2011-04-23 04:44 . 2011-04-23 04:44 119808 —-a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay] @="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}" [HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}] 2008-09-15 20:25 4233480 —-a-w- c:\program files\Protector Suite QL\farchns.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen] @="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}" [HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}] 2008-09-15 20:25 4233480 —-a-w- c:\program files\Protector Suite QL\farchns.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2008-01-25 167936] "OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2008-03-04 36864] "Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-12-08 3444736] "DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2011-04-23 30192] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-11 49152] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872] "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112] "VolPanel"="c:\program files\Creative\SBAudigy\Volume Panel\VolPanlu.exe" [2006-11-27 180224] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-10-10 69632] "SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2008-02-15 405504] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "PSQLLauncher"="c:\program files\Protector Suite QL\launcher.exe" [2008-09-15 49928] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] "Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-07-06 1047656] . c:\users\Jas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] OneNote Table Of Contents.onetoc2 [2008-12-30 3656] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360] Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-1-10 809488] QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2008-2-22 1193240] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) "DisableCAD"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus] 2008-09-15 20:12 96520 —-a-w- c:\program files\Protector Suite QL\psqlpwd.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ scecli c:\program files\Protector Suite QL\psqlpwd.dll . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^DataViz Inc Messenger.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\DataViz Inc Messenger.lnk backup=c:\windows\pss\DataViz Inc Messenger.lnk.CommonStartup backupExtension=.CommonStartup . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HotSync Manager.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HotSync Manager.lnk backup=c:\windows\pss\HotSync Manager.lnk.CommonStartup backupExtension=.CommonStartup . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] 2010-09-01 12:32 421160 —-a-w- c:\program files\iTunes\iTunesHelper.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService] 2007-12-21 15:58 184320 —-a-w- c:\program files\Dell\MediaDirect\PCMService.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2010-08-10 09:15 421888 —-a-w- c:\program files\QuickTime\QTTask.exe . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 136176] R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [x] R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2011-04-23 30192] R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 136176] R3 libusb0;libusb-win32 - Kernel Driver, Version 1.2.4.0;c:\windows\system32\drivers\libusb0.sys [2010-06-24 21504] R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-07-06 41272] R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2008-05-06 11520] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] R4 iaNvStor;Intel® Turbo Memory Controller;c:\windows\system32\drivers\ianvstor.sys [2007-09-07 209408] S0 RapportKELL;RapportKELL;c:\windows\System32\Drivers\RapportKELL.sys [2011-06-22 53816] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1206000.01D\SYMDS.SYS [2011-01-27 340088] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1206000.01D\SYMEFA.SYS [2011-03-15 744568] S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110812.001\BHDrvx86.sys [2011-07-23 815736] S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110815.030\IDSvix86.sys [2011-08-02 367736] S1 RapportCerberus_29574;RapportCerberus_29574;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\29574\RapportCerberus32_29574.sys [2011-08-05 216912] S1 RapportEI;RapportEI;c:\program files\Trusteer\Rapport\bin\RapportEI.sys [2011-06-22 66360] S1 RapportPG;RapportPG;c:\program files\Trusteer\Rapport\bin\RapportPG.sys [2011-06-22 158904] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1206000.01D\Ironx86.SYS [2011-01-27 136312] S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NIS\1206000.01D\SYMTDIV.SYS [2011-03-22 331384] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\aestsrv.exe [2007-09-20 73728] S2 NIS;Norton Internet Security;c:\program files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe [2011-04-17 130008] S2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\Norton PC Checkup\Engine\2.0.4.131\SymcPCCULaunchSvc.exe [2010-12-21 120248] S2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe [2009-08-24 126392] S2 RapportMgmtService;Rapport Management Service;c:\program files\Trusteer\Rapport\bin\RapportMgmtService.exe [2011-06-22 870200] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-07-28 105592] . . — Other Services/Drivers In Memory — . *NewlyCreated* - BHDRVX86 *NewlyCreated* - CCHP *NewlyCreated* - SRTSP *NewlyCreated* - SRTSPX *NewlyCreated* - SYMIRON *NewlyCreated* - SYMTDIV *Deregistered* - ccHP . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc HPService REG_MULTI_SZ HPSLPSVC LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . Contents of the 'Scheduled Tasks' folder . 2011-08-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 17:08] . 2011-08-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 17:08] . 2011-08-16 c:\windows\Tasks\Norton Internet Security - Run Full System Scan - Jas.job - c:\program files\Norton Internet Security\Engine\18.6.0.29\navw32.exe [2011-05-10 00:28] . 2011-08-09 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job - c:\program files\Dell Support Center\uaclauncher.exe [2011-06-21 18:08] . 2011-08-16 c:\windows\Tasks\SystemToolsDailyTest.job - c:\program files\Dell Support Center\uaclauncher.exe [2011-06-21 18:08] . . ——- Supplementary Scan ——- . uStart Page = mSearch Bar = hxxp://www.google.com uInternet Settings,ProxyOverride = *.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 TCP: DhcpNameServer = 192.168.0.1 DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.1.0/GarminAxControl.CAB FF - ProfilePath - c:\users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\ FF - prefs.js: browser.search.selectedEngine - FF - prefs.js: browser.startup.homepage - www.google.ca . . ************************************************************************** scanning hidden processes … . scanning hidden autostart entries … . scanning hidden files … . scan completed successfully hidden files: . ************************************************************************** . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS] "ImagePath"="\"c:\program files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files\Norton Internet Security\Engine\18.6.0.29\diMaster.dll\" /prefetch:1" – . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PCCUJobMgr] "ImagePath"="\"c:\program files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files\Norton PC Checkup\Engine\2.0.4.131\diMaster.dll\" /prefetch:1" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\S-1-5-21-2433036754-4184192211-1337042601-1000\Software\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC] @Denied: (C D) (Everyone) . [HKEY_USERS\S-1-5-21-2433036754-4184192211-1337042601-1000\Software\SecuROM\License information*] "datasecu"=hex:8f,ed,42,b2,ba,f9,84,a5,74,82,a5,5b,2e,43,3e,0f,d6,c1,d9,6e,59, a1,15,5e,38,8b,0c,31,be,14,79,91,6e,c7,8d,cf,ef,ac,d3,bc,47,74,22,8a,3f,0f,\ "rkeysecu"=hex:a6,9a,16,cf,8d,49,22,9c,8d,4d,40,00,61,0f,85,ce . [HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC] @Denied: (C D) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Channels] @Denied: (C D) (Everyone) "ccSvcHst_UserSession_7928"="{0E1E07D0-154D-40FB-9EE8-99085376DADE}" "ccSvcHst_UserSession_4524"="{9301AD7D-25CF-484F-94A7-069BEBF762E5}" "ccSvcHst_UserSession_408"="{F3340D61-3258-4668-8046-CB9E24596D38}" "ccSvcHst_UserSession_1860"="{47C153E8-8402-472E-8F23-587382E94751}" "ccSvcHst_UserSession_2128"="{B0BBFD4B-2C6D-496D-BE3B-0866B599A4F7}" "ccSvcHst_UserSession_496"="{3CEBF2A6-5F99-4958-B511-2254ECB57497}" "ccSvcHst_UserSession_2564"="{0A7016B0-B630-4ECD-8734-F0622908D382}" "ccSvcHst_UserSession_3432"="{00FED740-F71D-4E13-BFDB-0A2DF9E06F39}" "ccSvcHst_UserSession_3024"="{8C318366-5FF3-458C-9597-6EC5899402B6}" "ccSvcHst_UserSession_2776"="{D51D6254-5CF4-42D2-AAD3-75C43567658C}" "ccSvcHst_UserSession_2356"="{D3265DE2-0955-40F1-9503-0BB14533B633}" "ccSvcHst_UserSession_3868"="{EFC6336C-EDDD-48F7-8F8F-C909B91E4C0B}" "ccSvcHst_UserSession_3600"="{C06D3C4D-D130-40EF-AE9E-1066887A3E7E}" "ccSvcHst_UserSession_3692"="{41078930-8D12-4621-9C9E-E6F7AC4AA272}" "ccSvcHst_UserSession_672"="{4361210B-6686-46A5-8C1A-0B1BA30308CF}" "ccSvcHst_UserSession_2424"="{812B743F-7C11-43F5-831A-78BD78817A48}" "ccSvcHst_UserSession_3516"="{1DA28031-0969-472C-970D-5DF061164FAC}" "ccSvcHst_UserSession_4268"="{687412B5-442B-4256-BDB5-2D96E0B36C09}" "ccSvcHst_UserSession_1504"="{FD509181-30AF-4430-995B-EE0E5DF178D2}" "ccSvcHst_UserSession_5336"="{0AA0C197-8928-4D8E-A60F-9E732D887BB8}" "ccSvcHst_UserSession_1552"="{1E6811D1-51D7-4969-9567-877C9A9231DE}" "ccSvcHst_UserSession_4072"="{A22813BF-6FFA-40D3-AB29-59A9979AFC87}" "ccSvcHst_UserSession_5800"="{C66F50BE-4FCA-452B-8135-1D5AFB52446F}" "ccSvcHst_UserSession_2212"="{33A005FA-A128-4A31-9234-37317622F799}" "ccSvcHst_UserSession_3816"="{F9D30CCE-D055-43D7-AFA7-B48411282234}" "ccSvcHst_UserSession_3452"="{4C52D2C2-BBF1-40EB-BA71-B97FD8C9AD2F}" "ccSvcHst_UserSession_2056"="{90076733-E758-4C52-BC09-A4A88EE4F835}" "ccSvcHst_UserSession_528"="{CDF5F42F-1B83-4C4F-819D-05DFB7378368}" "ccSvcHst_UserSession_568"="{D298E936-40DA-48F7-A75D-EADFA0C5B458}" "ccSvcHst_UserSession_3376"="{16F80961-8FAF-47A6-A4E7-C3D318081660}" "ccSvcHst_UserSession_3180"="{C055F6E3-AC40-4452-ADB0-23D2E497E456}" "ccSvcHst_UserSession_3980"="{D727EBED-564A-4B73-9434-313C97681D69}" "ccSvcHst_UserSession_2516"="{04FA70CD-448B-48D3-8DBF-6F8AC326D262}" "ccSvcHst_UserSession_4016"="{900961F8-BFE9-4B38-B6CA-6589E8FC84CB}" "ccSvcHst_UserSession_2656"="{71BF0CC1-9209-4BD0-BC95-F44C6F32EBC8}" "ccSvcHst_UserSession_3168"="{246E130F-155A-4D90-BAFF-C4EB8353A567}" "ccSvcHst_UserSession_3676"="{4263C629-A4CD-40CD-BEFE-D2DC59D9E533}" "ccSvcHst_UserSession_3064"="{37B56C8C-D63A-4F0F-AC08-3DE96CD85F7E}" "ccSvcHst_UserSession_2148"="{7EC9DB62-0610-4497-8D49-A1822CDDF156}" "ccSvcHst_UserSession_3804"="{1896A9EA-808A-45E2-B0AB-35A3614DBBD7}" "ccSvcHst_UserSession_2664"="{C6BFDC5E-BA87-4A41-AB0A-956C94C86EB8}" "ccSvcHst_UserSession_2176"="{CB44ABDB-6C0F-4668-BAA9-761512DCA595}" "ccSvcHst_UserSession_3672"="{039C7F4B-66A0-4EC0-88BC-4DAF10839A99}" "ccSvcHst_UserSession_2092"="{69ADD176-0E2E-4003-AC17-4A59C47D09E0}" "ccSvcHst_UserSession_4112"="{19C6EA29-E6CB-449C-81EE-4F38CB85A84B}" "ccSvcHst_UserSession_3540"="{D72D91D9-6CCA-42A7-ADC4-C25800B75251}" "ccSvcHst_UserSession_2528"="{6F527929-C42F-4A49-A174-764C18E682B7}" "ccSvcHst_UserSession_2808"="{8E23D5AD-6E2A-4D9F-A2F3-8D55A3557306}" "ccSvcHst_UserSession_3884"="{92E129CD-8E13-48EB-BDF5-42C089F4B595}" "ccSvcHst_UserSession_3696"="{C97B8608-A358-433E-93B9-37CB0E90BF58}" "ccSvcHst_UserSession_5316"="{8F430045-8F43-4522-AE08-406C247C02ED}" "ccSvcHst_UserSession_3820"="{5E2EA37D-0485-4DD6-B6AA-31E5E74FF7A4}" "ccSvcHst_UserSession_2232"="{B1F8880E-85CB-4F55-B7D2-E38B49453B15}" "ccSvcHst_UserSession_2816"="{88BD2213-8300-4F33-9A4D-14F82CCA8EFF}" "ccSvcHst_UserSession_3808"="{52692F21-1FBF-4D50-8D30-DE5169E2A246}" "ccSvcHst_UserSession_3572"="{EC26F2E8-576F-46B3-95E0-9F101351EBB4}" "g_coUserCommandChannel"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "ccSvcHst_NIS"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "DING_{4467AB8F-68C8-4ab5-9B48-B3E6EB65F6A1}"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ccSettingsService"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ccGenericEvent_Global_EM"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ccGenericEvent_Global_LM"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ccGenericLog_Manager"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ccJobMgr_general_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ccJobMgr_session_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "{3F11C6A7-CEA8-40c9-88EE-E5461341AE97}_ccSubmissionEngineIPC"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "SymRedirSvcRequestChannel"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "SNDServiceRequestChannel"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "{A2DE0E79-877C-485b-B604-78B170313E9E}_IronIPC"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "SNDLocationChannel"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "_isDataPrComm_"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ncw_performance_IPC"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "_NCWSvcComm_NortonCommunityWatchConfiguration"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "_ProcessDetection_"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "isError_Service_IPC"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "BashIPCChannel"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "_HSPlayerCommand_"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "{C4A09495-F6BC-4166-B717-F3F3250462BB}"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "_AvProdSvcComm_"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "IPS_COMMAND_CHANNEL"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "FWAlert"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "NortonNetServiceIPC"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "NetMapServiceIPC"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "g_coVistaProxyChannel"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ipcChannel_ShastaServer"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "_ReputationSvcComm_ReputationPublisher"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ncw_reputation_scan_server_IPC"="{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}" "ccSvcHst_UserSession_1696"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "{B44E7D73-F081-414B-ADD2-CD66675A190D}1"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "{9BBA000F-092F-432f-B9DF-9D64FD1C2978}"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "AvProdSession_01"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "{436E95FE-192E-469f-8F34-5038FBA89BF4}1"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "AvProdSession_Options_01"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "AvProdSession_MessageCenter_01"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "AvProdSession_Scanless_01"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "AvProdSession_IPUA_01"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "AvProdSession_CanIRun_01"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "clt::AlertChannel2_01"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "TRUSTCHANNEL"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "SDKCHANNEL1"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "ToasterNotify\\SessionID_1"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "AccountServices_1"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" "FormHandler_1"="{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Endpoints] @Denied: (C D) (Everyone) "{0E1E07D0-154D-40FB-9EE8-99085376DADE}"="" "{7051307E-A0C8-4E8F-8C20-921558D6F131}"="" "{4CAB2D65-1473-4B64-8F19-915A20126AAC}"="" "{8652364D-1C4D-46E9-83FD-0203B80CBBCE}"="" "{83A0BDD0-307B-40C1-BFB3-DDE41468EACE}"="" "{5EE6A797-343D-4C10-AA49-4BBA2B34ADE0}"="" "{765154EA-D349-4B83-A8B8-1A4F6E94634C}"="" "{F2933192-9CB2-41E5-9D5A-690B1F0DCB62}"="" "{F3ECDB39-E5FB-41BF-BD55-4B8DE5B563EA}"="" "{13478B7F-FABF-40EB-AA1E-D0F298B89E1E}"="" "{D97A3433-C4E7-49B1-89BD-D8B5CFB41606}"="" "{95DC3211-D1C0-471E-BADE-C33C8D5E7DC7}"="" "{FBE52D5B-F9AB-4B09-942F-8C939F1FB930}"="" "{F7E96364-93CD-4726-8F5A-6753F016A059}"="" "{DAE0269A-BA41-4FD2-BC90-AEECBED9EB99}"="" "{21944417-BBA8-439D-AA92-6B908D19A336}"="" "{CB645B1A-2C88-4CA7-93E2-CFA726278618}"="" "{AC49838D-5AE6-490D-B9F5-D23E8153D551}"="" "{5976C35D-061B-4A57-93AA-93E9CBD8B170}"="" "{3331C478-07D8-4D7A-B29A-DA94F7D0DE88}"="" "{AC92EF23-673F-4A44-9167-AEE852602A8F}"="" "{1E80F1CD-C4D6-4A84-816C-07FC5DA44D49}"="" "{9301AD7D-25CF-484F-94A7-069BEBF762E5}"="" "{833BBFC7-D588-4F3D-AC03-D39CB30F8314}"="" "{F3340D61-3258-4668-8046-CB9E24596D38}"="" "{D3E775F9-F5F0-4408-8A9D-BDEFA2238D39}"="" "{8C0553C7-E8B6-4CA6-9002-D0407B357C51}"="" "{96F38BC2-BB55-4B13-B58F-C0B5969997D2}"="" "{7A8A6C4E-102C-44D9-B5B5-64CC6DC8DAB4}"="" "{1C8E98AB-F117-4F66-942A-53EBF31FE431}"="" "{47C153E8-8402-472E-8F23-587382E94751}"="" "{0DB4D9A2-FB68-485E-86A7-8F22968CEC8D}"="" "{3C91F6E5-4D7B-43F9-A419-74D37056A0A0}"="" "{5C7E652E-8FC0-4BF2-8E56-1F597C4F9B3B}"="" "{244D2FD6-135A-4DC3-BCB5-6215EA4010D4}"="" "{300397E0-0C8B-4F12-B67E-F01A4558C98B}"="" "{51E418BA-80B2-4A89-B698-8D8E953B0C44}"="" "{31E707C6-046F-47AF-8A13-7333A952D250}"="" "{D0F8E187-EBC7-4A35-87FE-4B27E74C061E}"="" "{C506B88C-4966-4F82-93AE-D49D1A825142}"="" "{F520FC9C-29F7-43CD-8020-785B9EC8EE10}"="" "{A2E153DF-A0B5-42D5-95F9-80F31D885228}"="" "{65373D77-F427-499E-A7CD-A075D477BBDA}"="" "{D85EFB60-AA50-41F2-81CC-7160D60E2A4E}"="" "{7414E5EC-052A-4E80-A42E-D959FE8DAAF6}"="" "{3218D135-14D2-48A2-90A4-DFB22ADAE1A0}"="" "{7A093622-4C35-4DC5-8606-2EAC9C4B3AD9}"="" "{1CBC1997-B10B-4964-A0E1-BB5E8226C0FF}"="" "{513656E1-2AEB-4ADA-A358-B8377F2539C7}"="" "{B0BBFD4B-2C6D-496D-BE3B-0866B599A4F7}"="" "{18D3D09D-695B-44CB-98DC-401928F49488}"="" "{777B95FF-61BA-482D-9694-632626E813FF}"="" "{E43CFF4D-0482-4E98-8529-AF886D4C3723}"="" "{0B134880-8B41-43D0-8156-DEB25B5A925E}"="" "{8F26F51F-44EE-4BA7-801A-5EBA36F3E302}"="" "{AF23B26E-600B-432D-A0AE-C27C558D6C49}"="" "{BCFD67E4-E89C-4A0D-9848-FCB3135AFF95}"="" "{3CEBF2A6-5F99-4958-B511-2254ECB57497}"="" "{4C050F04-2FC6-405B-8FB6-1A706823633A}"="" "{9AD40710-7554-4DF9-AEBE-AB570610CF97}"="" "{02E7B998-2698-451F-BE37-AB53A57E80E2}"="" "{797FC801-3B0F-4C5E-B580-AEEA409284E0}"="" "{05BB8320-ECA1-49D2-92DF-F18D5095374E}"="" "{0A7016B0-B630-4ECD-8734-F0622908D382}"="" "{B2407EEE-E31E-45D3-BD68-4445B5882E15}"="" "{E2F86E85-A961-4236-998D-66939CBABF2B}"="" "{2E5E05D7-7D81-4422-BC44-A7886895F532}"="" "{00FED740-F71D-4E13-BFDB-0A2DF9E06F39}"="" "{710D68BE-D717-4479-93F4-5F49728CF029}"="" "{8C318366-5FF3-458C-9597-6EC5899402B6}"="" "{EF6C15C7-814B-4933-B220-D7B0188FE5C1}"="" "{FD12588C-F3C0-4359-A77E-46221C4EA743}"="" "{DAC1305E-8DF0-4FF4-8BA9-D8043AEDC789}"="" "{529B4A99-49E0-4E09-9579-669FE4D7C9AC}"="" "{3B51A7FA-03EF-4C00-A493-30CAC694891E}"="" "{73905EC2-BC28-419F-A30C-5CE29EB8F8D4}"="" "{B9CDEB26-7759-4A0E-9B42-A466C1B88F24}"="" "{D51D6254-5CF4-42D2-AAD3-75C43567658C}"="" "{1D6A3C68-06DF-4B0E-BD69-57B4B0DA187E}"="" "{69DB9B04-399B-4968-B84B-D59FA8EED262}"="" "{C82EFA56-0CD0-4A45-B6C1-6B069C3BF503}"="" "{D3265DE2-0955-40F1-9503-0BB14533B633}"="" "{45986818-C529-4612-B57C-891F8FA70A34}"="" "{EFC6336C-EDDD-48F7-8F8F-C909B91E4C0B}"="" "{EF058C52-7195-4E34-86EC-49280A8BF68D}"="" "{7142B3BD-B3B5-4C08-9970-3559BFFF814F}"="" "{3FE3794E-64BE-406D-BF11-C6D22E723D72}"="" "{40187450-5226-4274-B901-645D1C11EA8B}"="" "{4E7800EE-8B2B-425D-982D-B49A7AA5CF17}"="" "{C06D3C4D-D130-40EF-AE9E-1066887A3E7E}"="" "{09E9F1FE-A0B2-4CC3-BB1C-B724218612FD}"="" "{2DCE4063-9EAC-499E-9E46-7AD8A65E7058}"="" "{97F505E7-326C-46CA-9C52-AF975FF1C434}"="" "{BB32F1EA-8845-4A04-9FCA-680ABE5F3487}"="" "{69D366F3-3E54-4AE7-AE91-E06AF3501AFC}"="" "{15651C57-3D31-44DC-92C6-7264BE196B34}"="" "{17FA27DD-B14A-4DEF-AE36-6C876385D905}"="" "{AE9E9C07-9FFC-4748-947F-7F27D5DDECB4}"="" "{0753117C-B59E-4A9A-96A8-DEBC01D0A67F}"="" "{DCA5DDAD-D425-49C2-82FF-21CB96EF1176}"="" "{8E5D66A9-93BF-4711-B313-F38231D7139E}"="" "{F8E9764C-948D-45ED-A631-5B3FA9D67DC1}"="" "{050F01D4-B40F-43AF-BECE-8213FC3AB1B1}"="" "{08D0FD65-2086-40AF-9311-F9B86C2DBDD8}"="" "{41078930-8D12-4621-9C9E-E6F7AC4AA272}"="" "{D98C7AB9-D914-4B28-A858-BC837CBFCE33}"="" "{99972678-1E9E-43A3-8BAC-5DF1C249E7DB}"="" "{AFFC3F6C-9DAE-4706-8D09-4E677FF7302F}"="" "{967551A5-1D03-4EF3-ABE4-CBBD00834948}"="" "{4361210B-6686-46A5-8C1A-0B1BA30308CF}"="" "{A52F05CC-176A-4557-B2CD-B7CBA6B1D491}"="" "{5604DC11-C5F7-4BAE-B37A-DB7B5D872EBE}"="" "{C5A5DF4A-E0AA-4ACD-8DB7-258FF81ECC2E}"="" "{A1E17940-B115-4C53-AD4E-8A4C465A7E77}"="" "{60C2B311-38C9-40CB-88F7-FCD438B732C3}"="" "{B978BF5A-93FF-4DB4-98B5-78DF5BA92E04}"="" "{812B743F-7C11-43F5-831A-78BD78817A48}"="" "{87CE2137-D6EB-48EE-81DB-716DD0F1C2AE}"="" "{DA14CF6B-B2A1-4841-B142-55B7D6974782}"="" "{0786086A-952E-497A-A173-B282B5D4E955}"="" "{0EA43AA1-91DB-4DA9-8845-E15333EDCABA}"="" "{D7D4749F-6324-41C1-A385-7BFD06B06A84}"="" "{1330AA44-9D5A-484A-BDF8-58671F0B8F1E}"="" "{4008B49F-D839-4A27-9CB8-11525297DBE3}"="" "{1DA28031-0969-472C-970D-5DF061164FAC}"="" "{953EBA71-4C50-415C-B438-B9A045C24291}"="" "{3932AF95-D20D-4836-915E-DFF1217E801A}"="" "{E1E85287-D928-4AA4-87FF-38BFE0E289D9}"="" "{7DDA7E11-12F5-491A-BFF4-A4EBFD6B0AC1}"="" "{58289B7C-299B-48DD-9EEE-E3C24B799F1D}"="" "{687412B5-442B-4256-BDB5-2D96E0B36C09}"="" "{06C6D42D-172E-4800-BF66-CA2B4251A224}"="" "{4254F643-D686-4F41-B39F-E507A33A0F4F}"="" "{488F8448-F162-43D0-A4A2-4CFC2C8CBD15}"="" "{A0CC4708-FEF3-4282-AE03-59ED8F1DC304}"="" "{BC95B9D3-DB30-47BB-B893-0ACDF683F75D}"="" "{FD509181-30AF-4430-995B-EE0E5DF178D2}"="" "{21BA4231-1898-4CBE-8C5C-9313F446B664}"="" "{2F51A061-4189-4B1B-B761-4EB2F54F1520}"="" "{70F7925C-3961-4B53-AFB4-FFA93E4C45D7}"="" "{ED9EAA44-08F3-4F8B-8269-C5BE44280668}"="" "{0AA0C197-8928-4D8E-A60F-9E732D887BB8}"="" "{B0CDED07-A377-4AD3-89B1-BABCCCE069BE}"="" "{1E6811D1-51D7-4969-9567-877C9A9231DE}"="" "{667E26CE-EF92-4BD0-B22B-26C2069336B7}"="" "{32248FEA-B5FF-459B-9BE2-E5A88CD04EA5}"="" "{1DE43244-1DF5-4DA2-8A48-DACD83655D35}"="" "{5BFAD024-3598-44D4-A383-7D77E72E54BD}"="" "{41AC969D-2533-49D3-882B-691A1F65919D}"="" "{6A00DB17-A93C-411B-9470-5F34BF705750}"="" "{87E66ECB-60E5-4A7A-88B2-F785394CD007}"="" "{FF0E01DE-ACB4-414E-9489-8A1E78257BE5}"="" "{EFBCC41C-8183-4C37-8B45-40203873A38E}"="" "{8E937AED-0244-4DF8-8639-5D88E157D976}"="" "{769B11F3-8EF9-4D0C-A270-70B990E68218}"="" "{C66F50BE-4FCA-452B-8135-1D5AFB52446F}"="" "{D62CC5F6-2496-49CF-86A8-5404C8386E10}"="" "{575D1745-BCBC-4358-8EC9-245316865637}"="" "{E48FB9C6-66FA-4A00-ABA9-7E1BA22552D7}"="" "{33A005FA-A128-4A31-9234-37317622F799}"="" "{7B940DA5-3CAE-4488-B82B-6FA6F178896D}"="" "{0B9B119A-AB87-4C88-B8BE-9E87AF9C29F0}"="" "{32FC0393-C504-479F-A3E2-E316154DD7AF}"="" "{838BE22B-AB3F-4350-8570-685478299AD5}"="" "{C53D5604-22A9-4501-B9AC-CDCD20C965D8}"="" "{F98B6CE9-D627-44A8-BA91-8A9DF43D38DB}"="" "{C700FF94-86F0-4B28-A22D-4E1FF75F9710}"="" "{934239A5-9F02-430B-BA9E-BF078DC9184F}"="" "{4D72D249-592D-44EB-9374-46D79CA7B3DF}"="" "{4C52D2C2-BBF1-40EB-BA71-B97FD8C9AD2F}"="" "{C4B24641-B616-4F0C-88D4-E3BC20D8075D}"="" "{E249FB24-8D9A-424E-B3CC-F8F41BF0B318}"="" "{E77DDA3F-C0D2-40ED-87C0-E52E3D2DC867}"="" "{90076733-E758-4C52-BC09-A4A88EE4F835}"="" "{C6DEA381-BF84-4AED-8F20-52B79242870F}"="" "{9A8DE67B-B6AC-4618-9F65-E066AB896A62}"="" "{CDF5F42F-1B83-4C4F-819D-05DFB7378368}"="" "{EEFF3C27-E228-4C5A-829F-DDDCF5A9DCB1}"="" "{D298E936-40DA-48F7-A75D-EADFA0C5B458}"="" "{C0DE44A6-6A7D-469E-8C8E-8FB509467E15}"="" "{96A1F5A7-90C3-4875-B132-C1C5007A0F8B}"="" "{34E98015-F7EC-471F-AC18-F0E514794693}"="" "{16F80961-8FAF-47A6-A4E7-C3D318081660}"="" "{555BB382-84A8-483E-B8BE-9DCF92AAB2AE}"="" "{1EB2D375-BE66-41F7-AA8F-701203958508}"="" "{CD7FA8C1-7C24-4402-A30D-4AE557EAE31E}"="" "{DC5DDBCC-3532-40EF-AF2A-7A59225F91B9}"="" "{4FF00D89-F258-4754-849D-B98309C83CFE}"="" "{2E03A12D-2BA8-45A2-B422-FCC35B8829B4}"="" "{D84A010A-6ADD-420A-A665-5A217E6DF2CD}"="" "{C055F6E3-AC40-4452-ADB0-23D2E497E456}"="" "{9583E60C-6E81-4667-B729-AB3797D4D4CB}"="" "{D727EBED-564A-4B73-9434-313C97681D69}"="" "{5AB817A9-1708-40F8-B517-143F1B02EF12}"="" "{82707FB3-CFBA-4FD4-8A7C-2A4CEF4FB552}"="" "{D41F3006-B325-47B4-B844-3E448F0516DD}"="" "{04FA70CD-448B-48D3-8DBF-6F8AC326D262}"="" "{AFA65823-E809-431B-B1C8-D37EC70D4837}"="" "{930E4C36-82F5-4CCF-A948-AEDFFB2EB10F}"="" "{1EE59DBF-0F7E-4312-880A-2D2DF77310B4}"="" "{4D67EA5E-9D61-4385-A046-3FF9A57E6C87}"="" "{900961F8-BFE9-4B38-B6CA-6589E8FC84CB}"="" "{B63AD2B0-8DFE-4E23-AD36-DCD1640278D7}"="" "{D8D6140E-BB95-474A-8C9E-821A94B9C8D9}"="" "{3A71ADAF-6DA9-4878-B6DA-1A51FF9E4ABD}"="" "{50C8CFAC-82AA-40F9-9F97-508F9A746A18}"="" "{D14CA032-BA3F-498A-9195-90665431A28F}"="" "{B4AECE8B-6DC8-4C7B-AE38-DDE3EF079B9A}"="" "{199B2A5F-FC0F-411C-9B08-DA15170C69D8}"="" "{71BF0CC1-9209-4BD0-BC95-F44C6F32EBC8}"="" "{860487DC-3F15-407B-B80B-B7D962EF216E}"="" "{95B6317B-668B-4C7F-866F-8BBFD6F9EFDF}"="" "{2F3485C0-B27A-49DF-867A-7720944399A4}"="" "{246E130F-155A-4D90-BAFF-C4EB8353A567}"="" "{99E7AEFB-9795-4BA8-BD5D-B628CD59AA16}"="" "{4263C629-A4CD-40CD-BEFE-D2DC59D9E533}"="" "{04D3BDDD-F2B4-4FBA-A9CD-0D706065F109}"="" "{0B4D0EED-9A5D-4B72-85B3-B496459A29F5}"="" "{94F83EFB-C349-41D4-AFA0-C01CC2DD6A8C}"="" "{F86BEC59-D7F7-41A4-93CE-09FE6933A5CB}"="" "{58E5C55F-C54C-4664-8AA7-A2C77F6F8209}"="" "{D784E940-7F10-4E0D-97FA-AA0BA09C1C22}"="" "{37B56C8C-D63A-4F0F-AC08-3DE96CD85F7E}"="" "{BA5BD50A-E38A-4D8E-9A84-4D3107997F6F}"="" "{AE61CDFF-B865-4F0D-9992-2F9938518099}"="" "{5A60D0E5-B209-4361-BFAE-98CE3A0A1926}"="" "{10472E05-D189-4104-94C0-4FC719B6883F}"="" "{7EC9DB62-0610-4497-8D49-A1822CDDF156}"="" "{ABD4842B-0B5E-4C47-B86A-C450A6FABE52}"="" "{442D53CF-42AE-46BE-8125-8985BEF3A687}"="" "{F1AE7667-C8B7-4825-964C-BD92EE9FAA2C}"="" "{289EF1AF-8CC7-479D-9CBD-D8172EDB196B}"="" "{F764C8F6-E60D-4741-B772-B84A800734FA}"="" "{8371EA42-13B4-423A-93A7-255121E32875}"="" "{3B085377-588E-4768-9051-35E67B1221C6}"="" "{4B4A79F8-4939-4C75-AF0B-EBB6B5584842}"="" "{B6D7B5FB-EB05-4321-B3CD-4503462B428D}"="" "{1896A9EA-808A-45E2-B0AB-35A3614DBBD7}"="" "{1B0B974D-7C59-41C0-8EAB-E48900CA9426}"="" "{D9D58950-8719-44FD-AA62-C06F4FC90B10}"="" "{C6BFDC5E-BA87-4A41-AB0A-956C94C86EB8}"="" "{C83091DB-DE29-42ED-82A2-6BF54D3BAD81}"="" "{7E94F970-9D7E-4B4E-87BE-93CFCD782DF4}"="" "{BB8E5AA5-5B13-4D45-B500-BF0D5E44CA9E}"="" "{3EB15089-5353-4D67-8EC7-5D711A6D698B}"="" "{D46D2D51-E000-4445-920E-04E0BB02FBB0}"="" "{99FD4B67-CBE8-4C1C-AA00-1A0D68B41F80}"="" "{53918F23-A974-4E18-9C18-154AE26A1D9F}"="" "{C0C66B61-D961-40CB-9135-262CFADF387A}"="" "{5DC16A73-69B3-43C6-82A4-8AF5C7361410}"="" "{EBCF2CF0-CE68-4AAD-B91F-5DA67200B22C}"="" "{4F4413E2-CE57-4CDD-B6A9-BA764378E1E9}"="" "{55273310-0AB5-4EC5-981A-FC3413285EE0}"="" "{FB25C904-12AA-4981-9957-47AD2A818FA1}"="" "{52BE34E0-CF1E-4EEF-8667-81BA10CB207A}"="" "{706D4DD7-886B-4A60-8CEC-DCC9FA83E14F}"="" "{EC3317A6-9421-4B94-930A-F9DCB3088933}"="" "{73317B31-4301-4F4D-836F-F59F0D8197B8}"="" "{A791A347-0D53-493F-B17F-B39C62EC110A}"="" "{6CEC44C9-2DCB-4B03-9C2A-E6AC826B76BE}"="" "{CB44ABDB-6C0F-4668-BAA9-761512DCA595}"="" "{E6FB9819-816E-4FFF-BA53-806D2CFB7E53}"="" "{B21F6F12-825B-4CEE-8919-F7CB335374E5}"="" "{28D271D8-7B87-429A-BAAE-996BCAEB7C63}"="" "{40314BA0-0476-4631-968F-6F860406FA7F}"="" "{AA28F835-D455-4C9A-AB96-DB831649BC69}"="" "{49F14F9E-09E9-487D-B3FA-6474E1B3AF55}"="" "{49550196-8C36-4A97-92A9-C85A08E29580}"="" "{AFBE98DD-7562-4321-823D-6A8E6B3AA7CF}"="" "{6EBFE520-885E-415D-B6E1-DA7A322808FC}"="" "{957697B8-63AA-4004-816F-F21DD7293074}"="" "{B08FEAE9-E75D-43AB-8927-778098C4ACB2}"="" "{039C7F4B-66A0-4EC0-88BC-4DAF10839A99}"="" "{34914661-1195-4BA8-B039-D7F7985E398F}"="" "{87940285-2B88-4A4B-8101-51DFEAB8D777}"="" "{D8142839-DA7E-4216-A33F-746915483A86}"="" "{69ADD176-0E2E-4003-AC17-4A59C47D09E0}"="" "{5107CE83-19AB-41D5-B8CD-2271C36FFA90}"="" "{19C6EA29-E6CB-449C-81EE-4F38CB85A84B}"="" "{0A5B43D3-FDA8-44A8-830F-0DE0B20E4576}"="" "{D72D91D9-6CCA-42A7-ADC4-C25800B75251}"="" "{50943293-4DD6-44E7-8AE2-736FC489EF30}"="" "{F9F528A8-B7DE-4BA6-9015-2CE3D099CCC2}"="" "{A57568B3-49F7-46EB-8F54-3098F8467740}"="" "{91FA6EE9-CF6A-4BFC-9FD9-8976407A5927}"="" "{171F1E17-7823-4A7B-99D6-35D35829595A}"="" "{979A9BE0-4360-4F13-81BC-5EF784A4AA27}"="" "{CAD85673-0628-45E3-AE17-AA0CB20B4C2F}"="" "{312BE741-2A34-4575-9BAD-F6F4B76B5C08}"="" "{951014E2-A6E2-4A67-B92D-C21D11A26267}"="" "{A2860B39-F07C-45C5-8FB2-7503A64D4806}"="" "{D020A955-8D2D-491D-882E-B45975BD1AA9}"="" "{AD0A4448-7F16-4EBC-B857-CD9F6F3F1C7D}"="" "{D1EFBA2F-EDFC-47AC-8E7D-D84B5FE932E0}"="" "{5759A5B1-D737-4F63-91C7-4C39834D503A}"="" "{37D22EFF-A531-47CE-8D13-B844B7FE2346}"="" "{E2DFD9EB-27C9-4645-AF70-DBD8872F022E}"="" "{929D1595-3581-4E07-AF6A-CFAB527F35D6}"="" "{0B441E57-DEBE-49C2-B088-09DBB2B754FA}"="" "{B185D01C-ABEC-4F31-907E-6C2BED8901E2}"="" "{C9081132-61BF-43B7-BB24-5D87848734DA}"="" "{53E09BA1-4BD4-4E4F-AD1B-759DFE9C3006}"="" "{2782284B-5252-4FAF-B2B4-4193A3D820FE}"="" "{A2C25DD7-1369-41AD-AB0A-79A83C95E42F}"="" "{55598129-1B95-499B-B5B5-716B14C36EE1}"="" "{6F527929-C42F-4A49-A174-764C18E682B7}"="" "{37324576-19CD-48D8-9BD8-4ECAFFA38632}"="" "{8E23D5AD-6E2A-4D9F-A2F3-8D55A3557306}"="" "{0D78CA05-98BD-4121-AC74-35DA02D5B658}"="" "{94C5802C-2222-4716-9744-27C62DCD3951}"="" "{DB836893-1A12-42A7-82CD-DBA85FB04C33}"="" "{92E566E5-91BA-41B5-A12B-A918EA8A8F2F}"="" "{6CA7E540-9354-4A16-AE37-D9FD0D400AE8}"="" "{0523C67B-1497-42B7-95F6-F713C0EBDDB5}"="" "{7133B6F6-5127-49E0-9228-087CDBDA073F}"="" "{10C8F4FD-6DD1-4E15-BC38-D2A29685B675}"="" "{8854ACF2-50BC-4CFD-8FA0-5A8CEA066BBF}"="" "{8FC1B0A3-63D8-4254-8C91-B1DBF4693986}"="" "{9CB89BFF-1CF7-493F-B76D-572F836EA48E}"="" "{B605EFB4-3C4C-42AB-B37C-9843C4586216}"="" "{13F4B159-3F22-4B9B-8D7E-C2C4DD485DF9}"="" "{3F900DB3-A07D-499D-9AF8-691301CC1D15}"="" "{03781753-C1F5-4E46-B355-1FCC8DCE147B}"="" "{98D975C5-E135-441B-8C95-EA2F9567B9A7}"="" "{DD90A29B-B851-496E-8527-DCB5A64D2884}"="" "{6D76E2C5-9DFA-4AA5-93F3-A5577A684311}"="" "{BBDF52FC-5A4E-4783-B2BB-96B05BBB69BE}"="" "{D944880C-442F-4936-81A1-F4723F0B631D}"="" "{799990C9-08C1-4DDA-9B02-A4E76576A1BC}"="" "{B7A9A7F3-37E5-490C-81EE-451DF87C902E}"="" "{26BDC270-E5DA-4BD2-A819-DC127A6D532D}"="" "{615F107D-6B2A-43B0-A858-1E78DEADB3E2}"="" "{18735280-BA62-4E8F-BC8C-55EE26D88299}"="" "{34FF5246-A4F7-4913-8217-FF783E5835A2}"="" "{ABA8D221-87B2-40B5-93E5-2201C42FEF1B}"="" "{1B39B934-7E48-4743-B08D-2583B2EDCDCF}"="" "{EC9C2289-54B2-4978-B12C-042B16D5EE65}"="" "{00B9B242-4EE8-42A5-BACA-87EC587A338C}"="" "{12F08E78-585C-4F18-8C33-4331AEA58649}"="" "{45DD7D87-7483-4E22-BB86-E6BDE6243C43}"="" "{49E91230-03DF-415C-8C59-7EAF2CB8506B}"="" "{1DE309F4-F4B5-4A49-8107-BE9A341C86A6}"="" "{DEFE5EC7-38A9-49D8-A348-CC51B4EC0249}"="" "{C7A4A001-56E9-4D13-A67F-2DE3FA81BC8F}"="" "{E6DF1F48-7815-4E51-93DD-19DF80377BE4}"="" "{2A0BE77F-CEAF-44E5-BCBB-CD93C7DF161A}"="" "{982C347D-605F-4A10-84D4-131A7DD7F42D}"="" "{6DE8421B-E74D-4063-9A69-EACEFC6D5392}"="" "{D5F7EDB3-5A17-487F-9A1C-C236EB9B3EA2}"="" "{B3B6B774-9BD8-48E8-8352-6E0F0947E7EF}"="" "{47C82DEE-BBAF-40FA-BF37-0D578787D289}"="" "{8F2FF45D-B46C-4AC0-B1C2-036793EC0FBA}"="" "{92E129CD-8E13-48EB-BDF5-42C089F4B595}"="" "{4794535E-840E-4E32-A742-36BA2BDC1DCF}"="" "{9305C986-1D9E-4DB4-90C0-BA49F7992F08}"="" "{100864B6-2762-4E8B-A7A9-65C43388BB8A}"="" "{C97B8608-A358-433E-93B9-37CB0E90BF58}"="" "{E8710388-AD20-4551-8635-DC388FB6A423}"="" "{B0C7D029-0558-4BC0-8DA9-3254ADECCE47}"="" "{D5CBE73E-2C86-47AE-B2EA-9F8D4A1550A5}"="" "{8DC53491-EFA9-4353-85DB-DE5F0ABBE552}"="" "{DE3C7C95-AFF2-47C6-8FBF-1C8024B92C39}"="" "{08B86C8B-74B0-4237-A2FA-C82B6E408CB0}"="" "{68DAE0D0-C95F-4C10-96F8-4AD9CE5DD944}"="" "{9C101EFF-CB9F-4FE5-BF1B-8153D72B64F9}"="" "{E0A7CC5F-8C69-4591-99E6-4BDA46BE72B0}"="" "{85881E3E-B58F-4AD3-8A67-8AEB0F1E09AA}"="" "{617477C7-5B66-4BFD-B827-15EE747AC239}"="" "{EF196731-74E7-42C1-B6A8-5A2B0C89C1B2}"="" "{EEC196B0-7860-434F-8005-7FFAF1EE4112}"="" "{5B710556-6043-46A3-8618-51AB6F89811A}"="" "{1995CC31-F984-4B7E-A3F8-B1DAEB0C7C4F}"="" "{C2A2608C-E24D-464F-92E0-04D725EBE029}"="" "{7A65F212-6840-4689-8C76-28E735061EE1}"="" "{3E238054-AD86-433C-B39F-C3916B0B018B}"="" "{A2CA5B39-35B5-47C7-8DAC-B3B7E07BB94A}"="" "{5E6F2343-3AEB-496F-88AF-C8E624117E78}"="" "{83B82479-42DD-484B-902E-7C7D47CBD06C}"="" "{8EA0D14C-771B-4283-8980-27C6A4F4BA75}"="" "{31DCFE0B-DC15-4856-A8D5-C21773BFB381}"="" "{F9D30CCE-D055-43D7-AFA7-B48411282234}"="" "{7972B5EB-6779-439C-9BF3-C78A07543211}"="" "{7F8C0B26-FD56-44EA-9EFB-E31CA4E3202D}"="" "{3BB9F692-06E1-4C51-8740-B0C95ED4856A}"="" "{A20FE2FA-A773-4AF1-986F-4E4A1F7097AA}"="" "{9AA57586-73DC-4ECA-B8A2-03A94C48966E}"="" "{B6B682A1-0B76-47D2-8873-6495CACAB50B}"="" "{58EC926B-DC0B-4E42-A6A2-5751379938CA}"="" "{F59BCE8B-3852-4E07-A19B-7C843ADE55F1}"="" "{80C62EF5-698A-4C7F-ACF5-31C5A0CF9C62}"="" "{5495F2E4-639C-44B5-BDA0-44360BCDA07D}"="" "{F91DC632-3079-44DD-B25E-4926B4254E0C}"="" "{2EC7D38D-EA07-4DEF-B70E-E6C36F72C87F}"="" "{4CCECD6A-D1E5-4511-96D0-4C685500313E}"="" "{6E328A9F-657F-47B0-9AFE-B2FAB1CBA39C}"="" "{0B2F6057-E17E-48E8-9BE6-C8DBAACA9AD3}"="" "{96EE8CF0-9BF9-4C1B-A778-94122ECD7896}"="" "{C833399B-CBAA-43F2-99D8-BA635DB2BD28}"="" "{8F430045-8F43-4522-AE08-406C247C02ED}"="" "{DA148F21-E914-4B50-9001-EA7BD5EADDA0}"="" "{4079033D-7035-4C38-A8A3-AD3BDCA9E158}"="" "{5522DD0C-9D67-465D-85DF-81C551E8B5D2}"="" "{6E136E12-77A5-4516-A40F-0DA413D744ED}"="" "{DC672838-AB59-4C9B-A13E-0481F620F44D}"="" "{207AF644-BBF3-43A8-BF98-DCF4E78C9604}"="" "{4176CC13-CC04-4F37-A8F8-01CE7F56B041}"="" "{E5205A1B-D2A6-4764-AC88-10B582E415F1}"="" "{6C7D1586-83FE-463B-9084-3D761B2BF9C2}"="" "{A2A44E3F-54FA-4845-9218-25E6E459F4A9}"="" "{162685D2-D1F7-4D39-88AE-31545044876B}"="" "{4D050741-D6A9-44B2-A1C4-7FFB3E394912}"="" "{1B41966D-940E-4EE9-9B60-89C24A6580E7}"="" "{92886373-A3D2-4E50-BD88-2733C768A45D}"="" "{5EFE99B6-C3A3-4B31-A2F9-6B393E08C65C}"="" "{088550A5-E4AA-4DB5-B3BF-C7473E287462}"="" "{B63DBFC8-70F9-4103-9ADE-ACF81D38201D}"="" "{CFAFE6E5-7E44-4B33-AFB1-BE2999C209F2}"="" "{30F52527-F15C-4067-996E-D52571A7A8D7}"="" "{48BFBB37-30A5-45A0-86E4-9D5DFE3AAE53}"="" "{41E7B929-81F9-4F90-BE06-153FB38FBEC9}"="" "{15830D7F-6058-4D86-8022-EC3CBE011C26}"="" "{DB206934-E55B-450A-B869-B1671E14D749}"="" "{92844B32-053E-4ADC-881E-7F903BA6BC60}"="" "{8547A6B8-C8DE-4922-8DA3-9E0FCDD72924}"="" "{A61C842D-A5E0-43C0-9DC4-B3A9865539CA}"="" "{1591FA93-60C5-4B06-BA90-9B2C8E839EAF}"="" "{0B2217A1-FCDD-419A-A26D-E6F8CF0505BA}"="" "{21FDF4CC-F365-4437-B6F1-C03704D9FBFD}"="" "{7C312EB1-70A9-4FDB-B13C-337B22CE37F2}"="" "{9FBECD9E-F9AF-4590-B2F0-D0EED5BE6BE4}"="" "{3D836766-08D8-4F50-BDE5-D24B9489FE79}"="" "{5E2EA37D-0485-4DD6-B6AA-31E5E74FF7A4}"="" "{58D0D9AF-4502-4128-B3AD-A9CF268333DD}"="" "{D53E71FD-5910-48D7-83A6-E3EB28208501}"="" "{69EB4527-C49A-4AF2-BD19-76B9DCB7B212}"="" "{1B5727A8-F7FF-42B0-A0CB-FB95DBFB9C24}"="" "{C0B136A2-A97E-4CEC-8C04-0EBA15B51DA9}"="" "{BFDB5DAF-2159-411A-B539-84E3E142B640}"="" "{B1F8880E-85CB-4F55-B7D2-E38B49453B15}"="" "{186B3ED9-3E5F-43FD-96A5-EEE300F7A890}"="" "{882632BC-CA14-4041-A2D6-BA23845F69EB}"="" "{2DD204F1-66A0-42B8-95E3-721C65ABC2D1}"="" "{B926EFDC-53A3-4C83-A561-FEB3372E593A}"="" "{6AF64C26-0BB8-4294-8B8E-B12705AD2DB1}"="" "{CCEDF838-61CD-4A14-84F3-E16B1779B2DF}"="" "{D6500428-9771-41CA-AFF2-FE11EAB83578}"="" "{88BD2213-8300-4F33-9A4D-14F82CCA8EFF}"="" "{FB049398-3685-48D7-8606-B9F0A0073CF5}"="" "{4F54A4D2-8558-486D-8328-4DF472C550B6}"="" "{E636399E-C8CA-407E-AA89-1C3AF225C3C2}"="" "{ADAF066D-B029-41E7-BEBF-9A08D39A0194}"="" "{8D9548AF-6221-457A-AC35-06683C696242}"="" "{52692F21-1FBF-4D50-8D30-DE5169E2A246}"="" "{94C45BEE-593B-459E-A404-6872B8FBD998}"="" "{2240A32C-6E6B-4331-9960-A90B233F9BB1}"="" "{86720995-2CB6-4B25-A51C-3AE881D12062}"="" "{98ECAF0F-C1D0-4F8B-A4E8-73F047D9BB66}"="" "{F511A725-C914-400E-A75F-5C92321FF223}"="" "{EAF97621-ABC2-41A3-A652-C74793ABFB21}"="" "{3D0A538B-B9B9-4A5E-986C-C316AB9D6349}"="" "{EC26F2E8-576F-46B3-95E0-9F101351EBB4}"="" "{11AF4D12-9EF7-46D8-9E84-6A457037D353}"="" "{ECE29552-35BA-425D-9EB4-EB9A0E2E82A2}"="" "{C14335B4-936B-4720-8F33-1F748D49017F}"="" "{77374A50-0A1E-4F6B-9E69-35410EC4A8BA}"="" "{E0E32B85-60FD-46E2-A6F0-F0ABF3DBA62E}"="" "{71F9CE05-509E-4EC0-869C-E87619317160}"="" "{5178F222-95E0-49B9-8311-B5540DB08E22}"="" "{BB701A94-66BE-42F1-BD12-922AAD3DC08A}"="" "{ADF94D2F-34B8-4423-BCA7-C669BBB563C5}"="" "{8200DAD6-57AF-4842-86FF-90E54FDCE42B}"="" "{90591DA0-9792-49C3-8440-C833554A92EC}"="" "{00A9543F-8E56-492E-ACE9-7743988C1C98}"="" "{653AEB8C-FF74-47AC-BAC8-85FC535BF93F}"="" "{B32879C9-26DF-4057-ACD0-9DDBCE3FD5C4}"="" "{D328EC89-1B9F-4E6E-94A6-4EA9E7CD1BD3}"="" "{A22813BF-6FFA-40D3-AB29-59A9979AFC87}"="" "{4522BEF0-F271-4B7E-A924-E0FA78EEEAB9}"="" "{47B56065-9C04-468F-8A3C-3CBFCD9FD205}"="" "{0C653265-6A22-412E-88E4-37D4BB6472D5}"="" "{D5E3DAB3-32B9-4B75-A73B-8F0730F8CFB5}"="" "{45ACA074-DE1C-40F3-90C3-70C02BA9FF5F}"="" "{D7629E34-C9CF-4923-93AF-B2FB1D501AE2}"="" "{84719168-A4A2-4C48-A78F-64DA0B4F2AEC}"="" "{59B114F1-3297-48E2-9005-263BAB002693}"="" "{AB08DC50-4AEA-415D-9B6E-7BE74E676DD0}"="" "{AA11DBD8-9854-4C10-AB7A-848F2E17BEE0}"="" "{B48A0B38-E5D6-43F0-8210-D450F55EC68B}"="" "{034FA909-9DEC-48FB-8C01-0DD0E2C20BE2}"="" "{1245A275-A4C1-4454-B50C-7B425806D4BB}"="" "{F21E0A20-DC5A-49F0-B34B-75A3719D7B04}"="" "{C4C1DFAC-48F5-4951-A551-BE34E1FC9404}"="" "{D08C14D5-47CA-483A-9BD0-55F9758F8AAD}"="" "{55A5651A-48D5-4B4A-B7BD-A1048E9C9D06}"="" "{216E326C-E71D-4B64-AA4F-20C47A28B132}"="" "{2BC90452-1EE9-4B35-9D28-382FB7809599}"="" "{C1BAA1C6-8C9B-43BF-9479-F1E04FE2F039}"="" "{2CC0E7B5-612F-4671-B355-108CB9E9A53C}"="" "{355C0F4B-7A17-46A4-8A59-6F7C77770169}"="" "{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"="" "{CC8A569F-A0CC-46E8-A339-0C671A933669}"="" "{DD65052F-7CA6-4550-A917-B1CE03A905D0}"="" "{D6F3BA0C-5137-4CBC-91F1-E9E8B60501BE}"="" "{B9C74A39-7663-4A0B-8D6D-AA908753B2D6}"="" . ——————— DLLs Loaded Under Running Processes ——————— . - - - - - - - > 'lsass.exe'(696) c:\program files\Protector Suite QL\psqlpwd.dll c:\program files\Protector Suite QL\homefus2.dll c:\program files\Protector Suite QL\infql2.dll . - - - - - - - > 'Explorer.exe'(1736) c:\program files\Protector Suite QL\farchns.dll c:\program files\Protector Suite QL\infql2.dll c:\program files\Protector Suite QL\qlbase.dll . ———————— Other Running Processes ———————— . c:\windows\system32\nvvsvc.exe c:\windows\system32\nvvsvc.exe c:\program files\Protector Suite QL\upeksvr.exe c:\windows\system32\WLANExt.exe c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe c:\windows\system32\CTsvcCDA.exe c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\STacSV.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE c:\windows\System32\WLTRYSVC.EXE c:\windows\System32\bcmwltry.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe c:\windows\system32\WUDFHost.exe c:\windows\system32\DllHost.exe c:\windows\system32\conime.exe c:\windows\system32\wbem\unsecapp.exe c:\program files\Windows Media Player\wmpnetwk.exe . ************************************************************************** . Completion time: 2011-08-16 14:37:13 - machine was rebooted ComboFix-quarantined-files.txt 2011-08-16 18:37 ComboFix2.txt 2011-08-15 02:54 . Pre-Run: 39,709,102,080 bytes free Post-Run: 36,974,387,200 bytes free . - - End Of File - - 2A7DE3BE2C04560E24D7DFDB95AFDCF2
Hello ChopperPlt

Your log looks good, Combofix did it's job. :thumbup: Don't forget to remove the old Java and update Adobe.

Time for some house cleaning

Follow these steps to uninstall Combofix
* Click START Search
* Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the /, it needs to be there.
(Note: There is a space between the ..X and the /U that needs to be there.)

[external image: Posted Image]
============================
Clean up with OTL:
  • Double-click OTL.exe to start the program.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CLEANUP button
  • Say Yes to the prompt and then allow the program to reboot your computer.


    If you notice any remaining tools or files you can delete them by right clicking and choosing delete.
    I would definitely keep Malwarebytes and run it weekly. Any other tools we used can be deleted safely if they remain after these steps.

    ============================

    Now that you appear clean, :thumbup: please follow these simple steps in order to keep your computer clean and secure:

    Here are some tips to reduce the potential for spyware infection in the future:

    MICROSOFT UPDATES
    It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to Microsoft and download all the critical updates to help prevent possible re-infection.


    Passwords
    It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
    Strong passwords: How to create and use them and consider a password keeper, to keep all your passwords safe.


    SPYWARE PREVENTION
    This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles:
  • How Did I Get Infected In The First Place? by TonyKlein
  • How to Prevent Malware by miekiemoes
  • PC Safety and Security–What Do I Need?


To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:
  • WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  • Green to go
  • Yellow for caution
  • Red to stop

WOT has an add-on available for both Firefox and IE.

  • SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites. See tutorial here
  • MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements. It basically prevents your computer from connecting to those sites by redirecting the attempted connections to 127.0.0.1, which is the IP of your local computer. See guide here and for Windows Vista here
  • Download Host.zip and Save it to your Desktop.
  • Right-click hosts.zip and select 'Extract all files' or 'Extract files…'.
  • Follow the prompts and click 'Finish'.
  • This will open the newly created hosts folder on your Desktop.
  • Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine.
  • Once updated you should see another prompt that the task was completed.
Follow this list and keep your antivirus program and antispyware programs updated and scan with them on a regular basis. By doing so, your potential for being infected again will reduce dramatically.

Hopefully this should take care of your problems! Good luck.

Do you have any questions or problems to ask? Please do not hesitate to do so.

Good luck, happy computing and stay clean! :)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI