Trojan: PSW.OnlineGames4.ALGT

Did you want me to download the Avast virus definitions file and have it perform a AV scan (quickscan?)

Yes, it's part of the scanner.
Please run RogueKiller again and delete those items.

I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan

•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.

• Leave the check mark next to Remove found threats.
  

•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

Hey Dave - thanks for hanging in there with me on this one - appears to be a tough one / hiding good!!!

I ran RogueKiller and deleted those items.

I ran ESET and it didn't find anything:

287,796 files scanned
0 infections found
3 hrs 24 minutes 17 seconds

What's next?

Please give me an update on the status of your computer.

The mouse still does the "I'm busy" regularly when it shouldn't be.

IE still doesn't work.

I haven't gotten any AVG detection windows today (yet) but I've only had it on for the last few hours while that scan was running.

The only thing we've changed since the last AVG detection window appeared was the RougeKiller delete of those few items.

Do you have reason to believe those were it?? Have you seen anything that was an "Ah ha!" ? Any suggestions for getting IE back in the game?

Hey Dave - in addition to the comments I made in the previous post, I booted in to SAFE mode and ran AVG scan. I will post it's output log below. The line that said "... TROJAN ..." did not show up this time (good news?) However, the line that said "
c:\Users\Michael\AppData\Local\Temp\sysoxkq\ Locked file. Not tested." is still present (this is the directory that the AVG Detection window calls out when it flags the virus / trojan.

I'm attaching some screen shots. One shows the directory properties windows. I'm not familiar with these settings but it is different than other directories I've looked at. The other screen shot is the error message I receive if I try deleting the directory. There is only one user / ID on this computer - "Michael." But yet it is still keeping me from accessing it.

I googled "sysoxkg" (the directory) and it only had two hits - one being our forum thread.

Thoughts?? Do you think I'm barking up the wrong tree?


AVG 2013 AntiVirus command line scanner
Copyright (c) 1992 - 2012 AVG Technologies
Program version 2013.0.3272, engine 2013.0.3162
Virus Database: Version 3162/6275 2013-04-26
c:\Documents and Settings\ Locked file. Not tested.
c:\hiberfil.sys Locked file. Not tested.
c:\pagefile.sys Locked file. Not tested.
c:\ProgramData\Desktop\ Locked file. Not tested.
c:\ProgramData\Documents\ Locked file. Not tested.
c:\ProgramData\Favorites\ Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\00f4026d2a9e607d355ed4b754e22dc2_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\012e7121270a46c3e052dcd565c02b2c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0159956234e76eec1de60b9922b346d9_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\01f964054469659f49612fec2c93f2ca_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\027ff6a46cec1016eb181470b3fa8869_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\05bb55db03ca9de383adcff319102036_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\088b0c4f37bac925dc14f185fb7a72e5_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08bf6c3f4cf8cae1053587b42f6f7172_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0b7300d8631f16bc98190fdbcaac6a5b_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0e8922020b4c305efe85354a87528a11_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\10b217a72cc07923f4fb12359213a467_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\142e29d7db14e8c50c2e460ce41243cb_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\15c118c348cd00dd5269bd13861bfd1a_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\162cb7bd6e75f1246b29326ee91910a9_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1d2c9c212537eda54dff74f223cb8873_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\20372a0a683cc93fc2b364a1c2a19653_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\217ad365ec9d76230cd85d07a022e7d5_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\233bba36d2c6dde04d9d5efb0e044ef3_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\255e24d9b6ffa7c7a2c9f39853b37ce2_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\271042c915efbaee7eafc331bf0bed22_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2750b5b68466d2e6a5507885d949fb25_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\27cd7b6544fa09a9502308a717b5bb0f_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\29aafbf376a4152f235bc7305c196913_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\29ec7ef0c5274f3c173e1a25c22e12b3_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2e79ae801a9e062925ada6a462e0a5bf_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2e9e5916875d73e2e5f7739ad7c80990_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2fd77c352a376a4785074171b474fe44_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\321ecd4745a569bc81dba931b0e296bf_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\326ff51c2015bd67a5c0fcef1be01663_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3297eef3d4613ae90708da656939564c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3324db52fc2a6ce8a8a9be5503b39271_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\33a0da4981aac72a95a74333b094db9c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\35f4016196bd0e6dc1f9383f6b41c2ed_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\36a8bf9f3583116fd229bee8f4f87205_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\39c96e5ced6b638deeb9718c970ccd82_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3a893139898343d746eb460c1e701f25_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3c9e818976f60beca0fcfe16f96d130e_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3f2f76dcffa98ce3df90c87e150f81b7_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\401e41d8b2c3a47cce40f6e5ef1e3f49_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\421f09d1c4eb05f7c778192537a8be70_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\425591c7b23b03f9614cc9a249cec681_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\42c7bad283faa18805db5d0c0c327d1a_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\455d6f6419e407bd420ff51a637f6176_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\463ed5e66f7b3ab4c18db745a1432a7e_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4b246a8c78633d2e2784449ec5989e6c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4db934be325e6c4af8f07237c8970d0a_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\529b842658a269525a21e59cf18ae1c8_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\53bdedea96c9c4e83a2f74611aefe9a7_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\54750848cd0a74b388f699b36f5fe289_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\548c0fe46c30aede2958e14570639b4a_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\54972b6450ff2b9a45707028c0666d97_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\56ca0b990345b9f389344fd0ed84a001_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5b1c30239744c36bc54cab2a8e761088_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5eb4b03746704a895978a471ab28b354_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6034e43bbf3ed616044ca5aa13e9f9c4_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6536eae72280794e1be497e508a2d93b_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6670066d77a6cef9a54af10d1680a2a4_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\675895009b84f8cd65f2561825a21c79_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\68176a905900a384d8d9135dc349aeae_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6ca0624fb2192e4ca89b213bc3e47645_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6d124164108efd2232e6b6a65751bc0d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\706d4b07b0f03e277e9da764ac53d187_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\71f34e21b9b3ff630440d836d38209dd_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7214e221e9cd847c6ec5ebc70f6edd70_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\735ab1576b08935301cdfd5ff44e41a1_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7429a0147258a9c1e1f1cd2fae1e1d19_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7652d6b5b67b1de9e8882c62f3de0b58_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\779e49e5f200b65c54ffcd4dca1cb642_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\77e2dfac915a227b43ce01c5ec2fade9_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7a770477fdad27d125979e438dd5f17c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7aa0b371d5331310f00a87193611bccd_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7b28972db6a9aaaaad73cc6b38502048_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f932c893208feca020071e6d71eed8a_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\80972d5cfd457053966b41c08de15acb_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\848a1577628b2493dd07511dc7183f21_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8592bcce9f617c22658a80270e0425ee_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\85ef770a546a40acc05b8a48c2cd66f1_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\87cee9d0467e0bfb9b1e67dbbcb2ae3f_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\88179a56a795dfb7673b201221a499b0_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\886ce73d1b912154dfd79eeb9c526d57_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\88c844b9c6248baeb1ac34d805b3b103_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8b4ef3bdb2e7a3cdd43fbefa6fce139c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8b82e98c34c4e701d6121286d9cf7c1b_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8d1eb092a7bd084bb365a2a3d7433072_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8ebc3e563c908c9c48ab63b3fc96781b_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\917bcf2919a1c73623f049dcc6d239fa_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\920494ad3794fdee79697450d2ca1101_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\924adf36e3c4ac704f7ce352b1f0a7a2_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9292d8adb4f17487abd7ed2522323097_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\961786b9b58072299a0b86c3900f97a7_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\968fc01cc8bfe188339fa0b6ca98ff03_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\96d9e1028a6fabc6f15554209a7ea3ac_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\96e08428bdd48928898d74b2e1f81a77_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\97301bb063e72d4708232a57a2b62188_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\99d1a104f53a41bb2fca116fee3efb4d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9bf10ca95e1fa98aa5de2a4a5f854757_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9c1a4d805cab33a9dc7cf55d70ba3044_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9c9ffa6b7036835de005097264cf9c21_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9ca0b20e809262e8c7e4cae2186d66f2_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9cab24b6f57313e2f73915d3096cc370_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9eae7953cacf02b1150bbc7a4cd523fa_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9f2198c9cba6a3767159621b395b2128_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a144cb30812e05b3bcd476dfbca42892_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a5000574652a957a25d3d9acb283720b_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a8a7be92cd1901c4299e03a5381c1101_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a9843c924651aaebfae3cc9830175465_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\aa1a3618574fc1e8ccad75904de1d1a4_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ab136c41198691892d87004d42afe199_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ad833ffe1f50007f193742241d81bf9a_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ae58ba3250873d53a440eaddfcc3f51b_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\af794979090fca294bf3bc3cf54553a0_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\af7a3d48094409a939b4d9a787d670a4_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b161d82ebcd67c7ffac3da9d783b5793_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b207b8a3a77ce84509f2f20b61ad721d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b3c12987c24d3cf7714c3b74d5a660cc_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b6020004d6f22c3cc518adfb383dcfe4_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b79cc14596b02dbdd99272f4ee6275f3_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\be06107d298fbf00cac51bd709ea9728_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bf2908877d718c2509c39a08fb6db5ac_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bfb17aca1edda70b843eb8bf54a392de_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bfbf312143bcb295c754ae8ea89bccaf_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c04df66ea1a6cd70124fbb0523c45380_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c0969844aac525cf7215c3129178ed7d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c4c492f75731ea20cb6064fdedf06b0c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c7fd3241560d06d1a2b21aa53dfd984d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c8b3cba338696e3a48020b3c99709e51_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c97ae38367abffde48d488622ae807d4_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca6125e51ea50ac1fed45cb5e36ad295_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cafa33ff53a244c4a616516ec9f81340_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cafcd99aab739d13dff5b853633330f2_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ccc25802b034c708e4c32aa37137521e_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cdf75dd6148d3db8db6a2b25c324e83c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cf316546ff9d6822f5c2533843e93b12_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d189ed573af55a6b12392cce69d61a69_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6d8ca9e6b307567e3e5d7d1968ea90d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d7b5d31dce3990e49f257471cbfecd0d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d85d2a7c20ef9f1b5e4343ce9cd61503_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\da19ea215eb568e6d8ae1e2e8c3d8a9e_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\da95b681f2e1bda9b9a9e7b04bac3cfe_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dc567cdfa575576a498205432a0903d4_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dd74283649d4c7dd8be04e9a6942a0e6_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\de5f99ee4b1e03a49fd5c49cf1c5e67c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dffdb18a42c9d5a896c73220e638b546_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e10a2e683d68668aea15c3e0699fdd8d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e4048b9c2abe7e5e505e3c29336bb90d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e55571fe745f62bc3f14fa23b4dd178d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e5b0b0c80693cef16c00c9bf7c8c3d4d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e7b86a6a5d8d2fd923cbc597add93d8d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e9c22230f0f4849a09d002282b0a2c8e_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e9cfb67014cbe3fbfda2d18af4847337_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ea495bd9efd5c212ce9e2d8f150227e0_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\eba46f7a2ca3b4e93752e9977546ad59_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ee6d71aa3e6365c4a5f684bf2fd09b8d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ef167f4dafc2e29b9eeb395fcd16a20d_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ef7c1e437f7f0c8553fa594c87c87eb5_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f2251112d9a9da01596a80310fa53f09_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f333a9a03caf5d48e96789e11d330fd3_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f503402d71d1e9e1ac9304af6a405143_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f95a73b3710718ae0d04a4b10054aaff_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\facf6bece2a293b639ad119f212a39b2_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fb59e8130bf285c2a654ce807ecd501e_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fcb59d0c17ddea510c12864fba4d1099_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd04279bde6c71332f5c6304b17a4a4c_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd89bea299896524ac0c751041450997_2be2016f-5311-4e31-81c5-afd56bf25c06 Locked file. Not tested.
c:\ProgramData\Templates\ Locked file. Not tested.
c:\Qoobox\BackEnv\ Locked file. Not tested.
c:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} Locked file. Not tested.
c:\System Volume Information\{426d74de-9506-11e2-b2c0-101f740d7cdb}{3808876b-c176-4e48-b7ae-04046e6cc752} Locked file. Not tested.
c:\System Volume Information\{426d74e2-9506-11e2-b2c0-101f740d7cdb}{3808876b-c176-4e48-b7ae-04046e6cc752} Locked file. Not tested.
c:\System Volume Information\{45b699b7-9fc5-11e2-a6b9-101f740d7cdb}{3808876b-c176-4e48-b7ae-04046e6cc752} Locked file. Not tested.
c:\System Volume Information\{dfd3bcd3-9d9a-11e2-83b0-101f740d7cdb}{3808876b-c176-4e48-b7ae-04046e6cc752} Locked file. Not tested.
c:\System Volume Information\{e4b18176-ac99-11e2-b21a-101f740d7cdb}{3808876b-c176-4e48-b7ae-04046e6cc752} Locked file. Not tested.
c:\System Volume Information\{ffbbd7cb-ad0e-11e2-b35e-101f740d7cdb}{3808876b-c176-4e48-b7ae-04046e6cc752} Locked file. Not tested.
c:\Users\Default\AppData\Local\History\ Locked file. Not tested.
c:\Users\Default\AppData\Local\Temporary Internet Files\ Locked file. Not tested.
c:\Users\Default\Documents\My Music\ Locked file. Not tested.
c:\Users\Default\Documents\My Pictures\ Locked file. Not tested.
c:\Users\Default\Documents\My Videos\ Locked file. Not tested.
c:\Users\Default\NetHood\ Locked file. Not tested.
c:\Users\Default\PrintHood\ Locked file. Not tested.
c:\Users\Default\Templates\ Locked file. Not tested.
c:\Users\Michael\AppData\Local\Avg2013\log\avg-cc4be605-c752-4968-8f79-be6a6252ff31.tmp Locked file. Not tested.
c:\Users\Michael\AppData\Local\History\ Locked file. Not tested.
c:\Users\Michael\AppData\Local\Microsoft\Windows\UsrClass.dat Locked file. Not tested.
c:\Users\Michael\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Locked file. Not tested.
c:\Users\Michael\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Locked file. Not tested.
c:\Users\Michael\AppData\Local\Microsoft\Windows\WebCache\V01.log Locked file. Not tested.
c:\Users\Michael\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat Locked file. Not tested.
c:\Users\Michael\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.tmp Locked file. Not tested.
c:\Users\Michael\AppData\Local\Temp\sysoxkq\ Locked file. Not tested.
c:\Users\Michael\Documents\My Music\ Locked file. Not tested.
c:\Users\Michael\Documents\My Pictures\ Locked file. Not tested.
c:\Users\Michael\Documents\My Videos\ Locked file. Not tested.
c:\Users\Michael\NetHood\ Locked file. Not tested.
c:\Users\Michael\NTUSER.DAT Locked file. Not tested.
c:\Users\Michael\ntuser.dat.LOG1 Locked file. Not tested.
c:\Users\Michael\ntuser.dat.LOG2 Locked file. Not tested.
c:\Users\Michael\PrintHood\ Locked file. Not tested.
c:\Users\Michael\Templates\ Locked file. Not tested.
c:\Users\Public\Documents\My Music\ Locked file. Not tested.
c:\Users\Public\Documents\My Pictures\ Locked file. Not tested.
c:\Users\Public\Documents\My Videos\ Locked file. Not tested.
c:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat Locked file. Not tested.
c:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat Locked file. Not tested.
c:\Windows\ServiceProfiles\LocalService\NTUSER.DAT Locked file. Not tested.
c:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 Locked file. Not tested.
c:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 Locked file. Not tested.
c:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT Locked file. Not tested.
c:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 Locked file. Not tested.
c:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 Locked file. Not tested.
c:\Windows\System32\catroot2\edb.log Locked file. Not tested.
c:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Locked file. Not tested.
c:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Locked file. Not tested.
c:\Windows\System32\config\DEFAULT Locked file. Not tested.
c:\Windows\System32\config\DEFAULT.LOG1 Locked file. Not tested.
c:\Windows\System32\config\DEFAULT.LOG2 Locked file. Not tested.
c:\Windows\System32\config\RegBack\DEFAULT Locked file. Not tested.
c:\Windows\System32\config\RegBack\SAM Locked file. Not tested.
c:\Windows\System32\config\RegBack\SECURITY Locked file. Not tested.
c:\Windows\System32\config\RegBack\SOFTWARE Locked file. Not tested.
c:\Windows\System32\config\RegBack\SYSTEM Locked file. Not tested.
c:\Windows\System32\config\SAM Locked file. Not tested.
c:\Windows\System32\config\SAM.LOG1 Locked file. Not tested.
c:\Windows\System32\config\SAM.LOG2 Locked file. Not tested.
c:\Windows\System32\config\SECURITY Locked file. Not tested.
c:\Windows\System32\config\SECURITY.LOG1 Locked file. Not tested.
c:\Windows\System32\config\SECURITY.LOG2 Locked file. Not tested.
c:\Windows\System32\config\SOFTWARE Locked file. Not tested.
c:\Windows\System32\config\SOFTWARE.LOG1 Locked file. Not tested.
c:\Windows\System32\config\SOFTWARE.LOG2 Locked file. Not tested.
c:\Windows\System32\config\SYSTEM Locked file. Not tested.
c:\Windows\System32\config\SYSTEM.LOG1 Locked file. Not tested.
c:\Windows\System32\config\SYSTEM.LOG2 Locked file. Not tested.
c:\Windows\System32\LogFiles\WMI\RtBackup\ Locked file. Not tested.
d:\System Volume Information\ Locked file. Not tested.

------------------------------------------------------------
Test started: 26.4.2013 23:10:22
Duration of test: 1 hour(s) 35 minute(s) 13 second(s)
------------------------------------------------------------
Objects scanned : 371398
Found infections : 241
Found high severity : 0
Found med severity : 0
Found info severity : 241
Fixed high severity : 0
Fixed med severity : 0
Fixed info severity : 0
------------------------------------------------------------

Sung to the tune "If I only had a brain..."

Sorry, forgot to attach the screen shots.....

It wouldn't let me make two attachments this time.... here is the second screen shot....

Please go to Jotti's malware scan
(If more than one file needs scanned they must be done separately and links posted for each one)

* Copy the file path in the below Code box:



* At the upload site, click once inside the window next to Browse.
* Press Ctrl+V on the keyboard (both at the same time) to paste the file path into the window.
* Next click Submit file
* Your file will possibly be entered into a queue which normally takes less than a minute to clear.
* This will perform a scan across multiple different virus scanning engines.
* Important: Wait for all of the scanning engines to complete.
* Once the scan is finished, Copy and then Paste the link in the address bar into your next reply.
********************************************
Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.



Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.



This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
Please run AVG again and see if that file shows up after your cleanup.

Hi Dave - unfortunately when I go to Jotti's malware scan URL, click on the file name box it automatically opens the 'browse for file' type of window. I'm using Firefox. I tried Chrome and it did the same thing. My IE still isn't working so I can't try that. So, I can't paste the path name / file name into that box. When I try to navigate to it via the browse for file window it tells me I don't have access to that directory - ugh! Thoughts / suggestions?

RebelSnipe wrote:

Hi Dave - unfortunately when I go to Jotti's malware scan URL, click on the file name box it automatically opens the 'browse for file' type of window. I'm using Firefox. I tried Chrome and it did the same thing. My IE still isn't working so I can't try that. So, I can't paste the path name / file name into that box. When I try to navigate to it via the browse for file window it tells me I don't have access to that directory - ugh! Thoughts / suggestions?

Please try doing a disk cleanup and see if that file remains there.

Hi Dave - many, many files were cleaned up off the laptop but unfortunately the questionable directory remains.

Ok Please try to delete it. Use Unlocker (below) if you have to.

You can download and install Unlocker .