Magikvw
Honorary Members-
Posts
63 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Everything posted by Magikvw
-
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
Thanks Firefox I will check that out too. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
Thank you - I'll check the answers forum and call for some local support. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
This computer belongs to my work - I, unfortunately, am as IT as it gets here - yes my log in has Admin rights - I have just gone through running all kind of anti-maleware software with help from the anti-maleware forum here. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
If by doing updates manually you mean to go to Windows Update and then click check for updates and select the updates i want - that is what I have been trying to do. When I click check for updates I get the error attached. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
OK thank you. Here are the results from FSS: Farbar Service Scanner Version: 03-03-2013 Ran by jlincoln (administrator) on 06-03-2013 at 16:38:58 Running from "C:\Users\jlincoln\Desktop" Windows 7 Professional Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo IP is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== WinDefend Service is not running. Checking service configuration: The start type of WinDefend service is set to Demand. The default start type is Auto. The ImagePath of WinDefend service is OK. The ServiceDll of WinDefend service is OK. Windows Defender Disabled Policy: ========================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware"=DWORD:1 Other Services: ============== File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\wscsvc.dll => MD5 is legit C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\System32\wuaueng.dll => MD5 is legit C:\Windows\System32\qmgr.dll => MD5 is legit C:\Windows\System32\es.dll => MD5 is legit C:\Windows\System32\cryptsvc.dll => MD5 is legit C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit I ran both tools for IE and I will let you know if I have any further issues. To be more detailed it was crashing as foillows: I would get a pop up saying that IE had stopped running - then it would check for issues and restart IE. It seemed to be happeneing in the following circumstances: 1) When clicking quickly through messages in G-mail 2) When trying to open a PDF file from a hyber link 3) When opening a new tab So far the problem has not reoccured since running the fix tools - if it does I will follow the link you provided. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
Oh - also Internet Explorer 9 started crashing periodically today - I am not sure if that is a related issue or not. I rebooted to see if that corrected that issue and it did not. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
Hello and thank you - Sorry my my late reply I have been out ill for a few days. I am still having the following issues. Cannot Update Windows Cannot Update Adobe Acrobat X Standard Cannot reinstall Google tool bar Here are the items that we ran on this machine trying to rid it of the webhp issue: Malwarebytes Symantec Endpoint Combofix TFC TDSKiller ESET Online Scanner AdwCleaner Security Check Malwarebytes Anti-Rootkit I don't know if any of these are the type of program you were asking about. I followed your instructions above to check the services. Each of the services you listed above were on the list and were checked. There were A LOT of other services on the list as wel - did you want a complete list or were you just interested in differences in the ones you had listed? To be clear - my services list matched those that you listed in your previous post. Thank you - Jeff -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
To be clear I did just run the WIndows fix utility again - same results, the issue still exists. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
Sorry - I forgot to mention that i have already run this. It seems to find that there is an issue with WIndows Update and says that it has fixed the problem but the issue still exists. Have also tried updating in safe mode with networking, that does not work either. -
Cannot do Windows or other software updates
Magikvw replied to Magikvw's topic in General Windows PC Help
Opps - sorry - I am running Windows 7 professional 64 nit service pack 1 -
Hello - THis issue started as a Webhp maleware infection. I worked with that group until they could no longer assist and then they told me to post here. Here is that original thread: http://forums.malwarebytes.org/index.php?&showtopic=118340&st=20 Windows will not run any updates. I go to the update page and when I search for updates I get an error (picture attached) I alos cannot update Adobe, Java, and most likely some other software. ANy help is greatly appreciated.
-
cannot do any microsoft or adobe updates
-
Sorry this took a while - I've been in and out and working off site. THanks for your patience - here is the new COmbofix ComboFix 13-01-28.02 - jlincoln 01/28/2013 14:45:43.2.4 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.8175.6013 [GMT -5:00] Running from: c:\users\jlincoln\Desktop\ComboFix.exe AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855} FW: Symantec Endpoint Protection *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E} SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((( Files Created from 2012-12-28 to 2013-01-28 ))))))))))))))))))))))))))))))) . . 2013-01-28 19:48 . 2013-01-28 19:48 -------- d-----w- c:\users\Public\AppData\Local\temp 2013-01-28 19:48 . 2013-01-28 19:48 -------- d-----w- c:\users\Jeff Lincoln\AppData\Local\temp 2013-01-28 19:48 . 2013-01-28 19:48 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-01-28 19:48 . 2013-01-28 19:48 -------- d-----w- c:\users\administrator\AppData\Local\temp 2013-01-24 17:36 . 2013-01-24 17:36 -------- d-----w- c:\windows\SysWow64\20-20 Technologies 2013-01-24 15:48 . 2013-01-24 15:48 -------- d-----w- c:\users\jlincoln\AppData\Local\Western Digital 2013-01-10 20:41 . 2013-01-10 20:41 -------- d-----w- c:\windows\SysWow64\drivers\Symantec.cloud 2013-01-10 20:41 . 2013-01-10 20:42 -------- d-----w- c:\program files\Symantec.cloud 2013-01-10 20:40 . 2013-01-28 19:43 -------- d-----w- c:\programdata\Symantec.Cloud 2013-01-10 20:40 . 2013-01-10 20:40 -------- d-----w- c:\programdata\Symantec Hosted Services . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-01-09 15:56 . 2012-09-19 07:13 74248 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-01-09 15:56 . 2012-09-19 07:13 697864 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-11-13 19:14 . 2012-09-24 23:27 66395536 ----a-w- c:\windows\system32\MRT.exe 2012-11-07 18:57 . 2012-11-07 18:57 167072 ----a-r- c:\windows\SysWow64\drivers\Symantec.cloud\ccSetx64.sys 2012-11-06 14:05 . 2012-09-24 22:16 88008 ----a-w- c:\windows\system32\LMIRfsClientNP.dll 2012-11-06 14:04 . 2012-09-24 22:16 35240 ----a-w- c:\windows\system32\LMIport.dll 2012-11-06 14:04 . 2012-09-24 22:16 83880 ----a-w- c:\windows\system32\LMIinit.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-09-25 39408] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "USB3MON"="c:\program files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-05-21 291648] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-12-07 343168] "IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe" [2012-06-07 56128] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352] "Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2012-07-27 36800] "Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2012-07-27 823224] "ccApp"="c:\program files (x86)\Common Files\Symantec Shared\ccApp.exe" [2011-03-22 115560] "{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"="c:\program files (x86)\Google\Gmail Notifier\gnotify.exe" [2005-07-15 479232] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "DisableCAD"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-30 676936] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] R3 netvsc;netvsc;c:\windows\system32\DRIVERS\netvsc60.sys [2010-11-21 168448] R3 SynthVid;SynthVid;c:\windows\system32\DRIVERS\VMBusVideoM.sys [2010-11-21 22528] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-09-26 1255736] R3 WvPCR;WvPCR;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [2012-01-16 198144] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] S0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-05-21 19264] S1 ccSet_Cloud;CC Standalone Settings Manager;c:\windows\SysWOW64\Drivers\Symantec.cloud\ccSetx64.sys [2012-11-07 167072] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-12-07 204288] S2 EmbassyService;EmbassyService;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [2012-01-17 218504] S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-05-30 13632] S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2011-11-09 189608] S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2012-11-06 375728] S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [2012-06-08 15928] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-30 399432] S2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys [2009-09-17 145448] S2 SsPaAdm;Symantec.cloud Cloud Agent x64;c:\program files\Symantec.cloud\PlatformAgent\ccSvcHst.exe [2012-11-07 191856] S2 ssPaSetMgr;Symantec.cloud Scheduler;c:\program files\Symantec.cloud\PlatformAgent32\ccSvcHst.exe [2012-11-07 138272] S2 SymcBackupAgentSvc;Symantec Backup Exec.cloud;c:\program files\Symantec.cloud\BackupAgent\basvc.exe [2012-11-02 8057752] S2 Wave Authentication Manager Service;Wave Authentication Manager Service;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [2012-01-05 1679872] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2011-12-06 95248] S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-05-18 47616] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-09-24 138912] S3 iusb3hub;Intel® USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-05-21 357184] S3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-05-21 789824] S3 SNTUSB64;SafeNet USB SuperPro/UltraPro/HardwareKey;c:\windows\system32\DRIVERS\SNTUSB64.SYS [2011-05-27 63528] S3 symrg;symrg;c:\windows\system32\DRIVERS\symrg.sys [2011-08-03 21624] . . --- Other Services/Drivers In Memory --- . *NewlyCreated* - SYMRG *NewlyCreated* - UDFS . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-01-24 10:18 1607120 ----a-w- c:\program files (x86)\Google\Chrome\Application\24.0.1312.56\Installer\chrmstp.exe . Contents of the 'Scheduled Tasks' folder . 2013-01-28 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-19 15:56] . 2013-01-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-25 17:08] . 2013-01-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-09-25 17:08] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnabledUnlockedFDEIconOverlay] @="{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}" [HKEY_CLASSES_ROOT\CLSID\{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}] 2011-12-08 15:45 139128 ----a-w- c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UninitializedFdeIconOverlay] @="{CF08DA3E-C97D-4891-A66B-E39B28DD270F}" [HKEY_CLASSES_ROOT\CLSID\{CF08DA3E-C97D-4891-A66B-E39B28DD270F}] 2011-12-08 15:45 139128 ----a-w- c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtDCpl64.exe" [2011-07-21 2907240] "TdmNotify"="c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe" [2011-12-08 381296] "DBRMTray"="c:\dell\DBRM\Reminder\DbrmTrayIcon.exe" [2011-03-08 227328] "LogMeIn GUI"="c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe" [2012-06-08 57928] "SymantecPaui"="c:\program files\Symantec.cloud\PlatformAgent\PAUI.exe" [2012-11-07 2633168] . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.acculormemberservices.com/ mLocal Page = c:\windows\SysWOW64\blank.htm IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 TCP: DhcpNameServer = 192.128.101.2 216.171.129.13 DPF: {8A5BE387-D09A-4DFA-A56B-DCB89BD11468} - hxxps://virtualkitchenshowroom.homedepot.com/VS/Core/Player/2020PlayerAX_WEB_Win32.cab . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-01-28 14:49:43 ComboFix-quarantined-files.txt 2013-01-28 19:49 ComboFix2.txt 2012-11-20 14:17 . Pre-Run: 412,635,947,008 bytes free Post-Run: 412,535,324,672 bytes free . - - End Of File - - 6F534B1FC2E251A672CBADC46F13B20E
-
Hello - Sorry for the dealy I am still with you. I've been real busy and in and out with the holidays. I d ran both MBAR and the windows fix again and I still cannot run windows updates. I then went to Safe Mode and tried to do windows update and it wont even start the process at all. I alos ran MBAR again while I was in safe mode. It found nothing bith times I ran it. Thanks for your patience.
-
Sorry I did not see that. Did you want me to run the MBAR tool again or the MS Fix tool again?
-
Interesting - I also noticed today that my Google Toolbar is gone and I cannot reinstall it.
-
OK, I tried this and Windows Update doesn't do anything when I click on it from the programs menu - nothing at all. So I tired to navigate there in IE and when I get to the windows upodate page it just tells me how to start windows updates from the program menu if it doesn't start automatically in the browser (which it does not start in the browser either).
-
Thank you - I ran the Windows Fix from the link provided. It ran through its process and said it corrected the problem. I still cannot do windows updates and get the same error when I try. It alwasy errors at the check for updates part of the process - so it doesn't even provide a list of available updates.
-
To be clear - when Windows Update wouldn't work I did run the Fixdamage App that came with the MBAR and it did not correct the issue.
-
OK - I installed and ran MBAR as you instructed. I ran it once and it found 4 infections - cleaned them - rebooted and then ran it again. The second time no infections were found. Redirects when using Google appear to be gone, it does however still say Webhp in the URL when I go to Google. My internet connection is fine - Windows FIrewall seems OK - I cannot get Windows Updates. When I run Update is searches for updates and then give me the folloing error: An error occured while checking for new updates on your computer. Error found: 8007005 Here is Log that Mbar produced - I think this contains both scans: Malwarebytes Anti-Rootkit BETA 1.01.0.1011 © Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x64 Account is Administrative Internet Explorer version: 9.0.8112.16421 File system is: NTFS Disk drives: C:\ DRIVE_FIXED CPU speed: 3.192000 GHz Memory total: 8571793408, free: 6577319936 ------------ Kernel report ------------ 12/12/2012 10:53:06 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kdcom.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\system32\PSHED.dll \SystemRoot\system32\CLFS.SYS \SystemRoot\system32\CI.dll \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\system32\drivers\ACPI.sys \SystemRoot\system32\drivers\WMILIB.SYS \SystemRoot\system32\drivers\msisadrv.sys \SystemRoot\system32\drivers\pci.sys \SystemRoot\system32\drivers\vdrvroot.sys \SystemRoot\system32\DRIVERS\iusb3hcs.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\system32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\system32\drivers\iaStor.sys \SystemRoot\system32\drivers\amdxata.sys \SystemRoot\system32\drivers\fltmgr.sys \SystemRoot\system32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Ntfs.sys \SystemRoot\System32\Drivers\msrpc.sys \SystemRoot\System32\Drivers\ksecdd.sys \SystemRoot\System32\Drivers\cng.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\system32\drivers\ndis.sys \SystemRoot\system32\drivers\NETIO.SYS \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\system32\drivers\volsnap.sys \SystemRoot\System32\Drivers\spldr.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\system32\DRIVERS\PBADRV.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\System32\drivers\hwpolicy.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\system32\drivers\disk.sys \SystemRoot\system32\drivers\CLASSPNP.SYS \SystemRoot\system32\DRIVERS\cdrom.sys \SystemRoot\System32\Drivers\SRTSP64.SYS \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS \SystemRoot\System32\Drivers\SRTSPX64.SYS \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\vga.sys \SystemRoot\System32\drivers\VIDEOPRT.SYS \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\DRIVERS\RDPCDD.sys \SystemRoot\system32\drivers\rdpencdd.sys \SystemRoot\system32\drivers\rdprefmp.sys \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \??\C:\Windows\system32\drivers\wpsdrvnt.sys \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\drivers\ws2ifsl.sys \SystemRoot\system32\DRIVERS\wfplwf.sys \SystemRoot\system32\DRIVERS\pacer.sys \SystemRoot\system32\DRIVERS\vpcnfltr.sys \SystemRoot\system32\DRIVERS\netbios.sys \SystemRoot\system32\DRIVERS\serial.sys \SystemRoot\system32\DRIVERS\wanarp.sys \SystemRoot\system32\drivers\vpcvmm.sys \SystemRoot\system32\DRIVERS\termdd.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\system32\DRIVERS\mssmbios.sys \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys \SystemRoot\System32\drivers\discache.sys \SystemRoot\system32\drivers\csc.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\DRIVERS\blbdrive.sys \SystemRoot\system32\DRIVERS\tunnel.sys \SystemRoot\system32\DRIVERS\atikmpag.sys \SystemRoot\system32\DRIVERS\atikmdag.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\dxgmms1.sys \SystemRoot\system32\DRIVERS\HDAudBus.sys \SystemRoot\system32\DRIVERS\iusb3xhc.sys \SystemRoot\system32\DRIVERS\USBD.SYS \SystemRoot\system32\DRIVERS\e1c62x64.sys \SystemRoot\system32\DRIVERS\usbehci.sys \SystemRoot\system32\DRIVERS\USBPORT.SYS \SystemRoot\system32\DRIVERS\serenum.sys \SystemRoot\system32\DRIVERS\intelppm.sys \SystemRoot\system32\DRIVERS\CompositeBus.sys \SystemRoot\system32\DRIVERS\lmimirr.sys \SystemRoot\system32\DRIVERS\AgileVpn.sys \SystemRoot\system32\DRIVERS\rasl2tp.sys \SystemRoot\system32\DRIVERS\ndistapi.sys \SystemRoot\system32\DRIVERS\ndiswan.sys \SystemRoot\system32\DRIVERS\raspppoe.sys \SystemRoot\system32\DRIVERS\raspptp.sys \SystemRoot\system32\DRIVERS\rassstp.sys \SystemRoot\system32\DRIVERS\rdpbus.sys \SystemRoot\system32\DRIVERS\kbdclass.sys \SystemRoot\system32\DRIVERS\mouclass.sys \SystemRoot\system32\DRIVERS\teefer2.sys \SystemRoot\system32\DRIVERS\swenum.sys \SystemRoot\system32\DRIVERS\ks.sys \SystemRoot\system32\DRIVERS\umbus.sys \SystemRoot\system32\DRIVERS\vpcusb.sys \SystemRoot\system32\DRIVERS\usbrpm.sys \SystemRoot\system32\DRIVERS\vpchbus.sys \SystemRoot\system32\DRIVERS\usbhub.sys \SystemRoot\System32\Drivers\NDProxy.SYS \SystemRoot\system32\drivers\AtihdW76.sys \SystemRoot\system32\drivers\portcls.sys \SystemRoot\system32\drivers\drmk.sys \SystemRoot\system32\drivers\ksthunk.sys \SystemRoot\system32\DRIVERS\iusb3hub.sys \SystemRoot\system32\drivers\RTDVHD64.sys \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\Drivers\dump_iaStor.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\system32\DRIVERS\usbccgp.sys \SystemRoot\System32\win32k.sys \SystemRoot\System32\drivers\Dxapi.sys \SystemRoot\system32\DRIVERS\dc3d.sys \SystemRoot\system32\DRIVERS\HIDPARSE.SYS \SystemRoot\system32\DRIVERS\hidusb.sys \SystemRoot\system32\DRIVERS\HIDCLASS.SYS \SystemRoot\system32\DRIVERS\kbdhid.sys \SystemRoot\system32\DRIVERS\mouhid.sys \SystemRoot\system32\DRIVERS\SNTUSB64.SYS \SystemRoot\system32\DRIVERS\monitor.sys \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\drivers\WudfPf.sys \SystemRoot\system32\DRIVERS\lltdio.sys \SystemRoot\system32\DRIVERS\rspndr.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\System32\Drivers\Sentinel64.sys \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys \??\C:\Windows\system32\drivers\LMIRfsDriver.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\Drivers\secdrv.SYS \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\System32\DRIVERS\srv.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\system32\DRIVERS\asyncmac.sys \SystemRoot\System32\ATMFD.DLL \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121211.019\EX64.SYS \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121211.019\ENG64.SYS \SystemRoot\system32\DRIVERS\USBSTOR.SYS \??\C:\Windows\system32\drivers\mbamchameleon.sys \??\C:\Windows\system32\drivers\mbamswissarmy.sys \Windows\System32\ntdll.dll \Windows\System32\smss.exe \Windows\System32\apisetschema.dll \Windows\System32\autochk.exe \Windows\System32\psapi.dll ----------- End ----------- <<<1>>> Upper Device Name: \Device\Harddisk0\DR0 Upper Device Object: 0xfffffa8009a07060 Upper Device Driver Name: \Driver\Disk\ Lower Device Name: \Device\Ide\IAAStorageDevice-1\ Lower Device Object: 0xfffffa8007185050 Lower Device Driver Name: \Driver\iaStor\ Driver name found: iaStor DriverEntry returned 0x0 Function returned 0x0 Downloaded database version: v2012.12.12.08 Initializing... Done! <<<2>>> Device number: 0, partition: 3 Physical Sector Size: 512 Drive: 0, DevicePointer: 0xfffffa8009a07060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xfffffa8009a07b90, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xfffffa8009a07060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ DevicePointer: 0xfffffa800714c690, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xfffffa8007185050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\ ------------ End ---------- Upper DeviceData: 0xfffff8a0017c5df0, 0xfffffa8009a07060, 0xfffffa800695e2e0 Lower DeviceData: 0xfffff8a01033d590, 0xfffffa8007185050, 0xfffffa800d6e9d00 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning directory: C:\Windows\system32\drivers... Done! Drive 0 Scanning MBR on drive 0... MBR buffers are not equal MBR is forged! [4333f673a96dbe57f4d0023e55e5303d] Inspecting partition table: MBR Signature: 55AA Disk Signature: 4A1E3F57 Partition information: Partition 0 type is Other (0xde) Partition is NOT ACTIVE. Partition starts at LBA: 63 Numsec = 80262 Partition 1 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 81920 Numsec = 32800768 Partition 2 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 32882688 Numsec = 943859760 Partition 3 type is HIDDEN (0x17) Partition is ACTIVE. Partition starts at LBA: 976744448 Numsec = 20480 Partition is not bootable Infected: VBR on Hidden active partition --> [Rootkit.Alureon.F.VBR] Changing partition to empty and not active. New active partition is 1 on drive 0 ... Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 MBR infection found on drive 0 Disk Size: 500107862016 bytes Sector size: 512 bytes Scanning physical sectors of unpartitioned space on drive 0 (1-62-976753168-976773168)... Sector 976753168 --> [Forged physical sector] Sector 976753169 --> [Forged physical sector] Sector 976753170 --> [Forged physical sector] Sector 976753171 --> [Forged physical sector] Sector 976753172 --> [Forged physical sector] Sector 976753173 --> [Forged physical sector] Sector 976753174 --> [Forged physical sector] Sector 976753175 --> [Forged physical sector] Sector 976753176 --> [Forged physical sector] Sector 976753177 --> [Forged physical sector] Sector 976753178 --> [Forged physical sector] Sector 976753179 --> [Forged physical sector] Sector 976753180 --> [Forged physical sector] Sector 976753181 --> [Forged physical sector] Sector 976753182 --> [Forged physical sector] Sector 976753183 --> [Forged physical sector] Sector 976753184 --> [Forged physical sector] Sector 976753185 --> [Forged physical sector] Sector 976753186 --> [Forged physical sector] Sector 976753187 --> [Forged physical sector] Sector 976753188 --> [Forged physical sector] Sector 976753189 --> [Forged physical sector] Sector 976753190 --> [Forged physical sector] Sector 976753191 --> [Forged physical sector] Sector 976753192 --> [Forged physical sector] Sector 976753193 --> [Forged physical sector] Sector 976753194 --> [Forged physical sector] Sector 976753195 --> [Forged physical sector] Sector 976753196 --> [Forged physical sector] Sector 976753197 --> [Forged physical sector] Sector 976753198 --> [Forged physical sector] Sector 976753199 --> [Forged physical sector] Sector 976753200 --> [Forged physical sector] Sector 976753201 --> [Forged physical sector] Sector 976753202 --> [Forged physical sector] Sector 976753203 --> [Forged physical sector] Sector 976753204 --> [Forged physical sector] Sector 976753205 --> [Forged physical sector] Sector 976753206 --> [Forged physical sector] Sector 976753207 --> [Forged physical sector] Sector 976753208 --> [Forged physical sector] Sector 976753209 --> [Forged physical sector] Sector 976753210 --> [Forged physical sector] Sector 976753211 --> [Forged physical sector] Sector 976753212 --> [Forged physical sector] Sector 976753213 --> [Forged physical sector] Sector 976753214 --> [Forged physical sector] Sector 976753215 --> [Forged physical sector] Sector 976753216 --> [Forged physical sector] Sector 976753217 --> [Forged physical sector] Sector 976753218 --> [Forged physical sector] Sector 976753219 --> [Forged physical sector] Sector 976753220 --> [Forged physical sector] Sector 976753221 --> [Forged physical sector] Sector 976753222 --> [Forged physical sector] Sector 976753223 --> [Forged physical sector] Sector 976753224 --> [Forged physical sector] Sector 976753225 --> [Forged physical sector] Sector 976753226 --> [Forged physical sector] Sector 976753227 --> [Forged physical sector] Sector 976753228 --> [Forged physical sector] Sector 976753229 --> [Forged physical sector] Sector 976753230 --> [Forged physical sector] Sector 976753231 --> [Forged physical sector] Sector 976753232 --> [Forged physical sector] Sector 976753233 --> [Forged physical sector] Sector 976753234 --> [Forged physical sector] Sector 976753235 --> [Forged physical sector] Sector 976753236 --> [Forged physical sector] Sector 976753237 --> [Forged physical sector] Sector 976753238 --> [Forged physical sector] Sector 976753239 --> [Forged physical sector] Sector 976753240 --> [Forged physical sector] Sector 976753241 --> [Forged physical sector] Sector 976753242 --> [Forged physical sector] Sector 976753243 --> [Forged physical sector] Sector 976753244 --> [Forged physical sector] Sector 976753245 --> [Forged physical sector] Sector 976753246 --> [Forged physical sector] Sector 976753247 --> [Forged physical sector] Sector 976753248 --> [Forged physical sector] Sector 976753249 --> [Forged physical sector] Sector 976753250 --> [Forged physical sector] Sector 976753251 --> [Forged physical sector] Sector 976753252 --> [Forged physical sector] Sector 976753253 --> [Forged physical sector] Sector 976753254 --> [Forged physical sector] Sector 976753255 --> [Forged physical sector] Sector 976753256 --> [Forged physical sector] Sector 976753257 --> [Forged physical sector] Sector 976753258 --> [Forged physical sector] Sector 976753259 --> [Forged physical sector] Sector 976753260 --> [Forged physical sector] Sector 976753261 --> [Forged physical sector] Sector 976753262 --> [Forged physical sector] Sector 976753263 --> [Forged physical sector] Sector 976753264 --> [Forged physical sector] Sector 976753265 --> [Forged physical sector] Sector 976753266 --> [Forged physical sector] Sector 976753267 --> [Forged physical sector] Sector 976753268 --> [Forged physical sector] Sector 976753269 --> [Forged physical sector] Sector 976753270 --> [Forged physical sector] Sector 976753271 --> [Forged physical sector] Sector 976753272 --> [Forged physical sector] Sector 976753273 --> [Forged physical sector] Sector 976753274 --> [Forged physical sector] Sector 976753275 --> [Forged physical sector] Sector 976753276 --> [Forged physical sector] Sector 976753277 --> [Forged physical sector] Sector 976753278 --> [Forged physical sector] Sector 976753279 --> [Forged physical sector] Sector 976753280 --> [Forged physical sector] Sector 976753281 --> [Forged physical sector] Sector 976753282 --> [Forged physical sector] Sector 976753283 --> [Forged physical sector] Sector 976753284 --> [Forged physical sector] Sector 976753285 --> [Forged physical sector] Sector 976753286 --> [Forged physical sector] Sector 976753287 --> [Forged physical sector] Sector 976753288 --> [Forged physical sector] Sector 976753289 --> [Forged physical sector] Sector 976753290 --> [Forged physical sector] Sector 976753291 --> [Forged physical sector] Sector 976753292 --> [Forged physical sector] Sector 976753293 --> [Forged physical sector] Sector 976753294 --> [Forged physical sector] Sector 976753295 --> [Forged physical sector] Sector 976753296 --> [Forged physical sector] Sector 976753297 --> [Forged physical sector] Sector 976753298 --> [Forged physical sector] Sector 976753299 --> [Forged physical sector] Sector 976753300 --> [Forged physical sector] Sector 976753301 --> [Forged physical sector] Sector 976753302 --> [Forged physical sector] Sector 976753303 --> [Forged physical sector] Sector 976753304 --> [Forged physical sector] Sector 976753305 --> [Forged physical sector] Sector 976753306 --> [Forged physical sector] Sector 976753307 --> [Forged physical sector] Sector 976753308 --> [Forged physical sector] Sector 976753309 --> [Forged physical sector] Sector 976753310 --> [Forged physical sector] Sector 976753311 --> [Forged physical sector] Sector 976753312 --> [Forged physical sector] Sector 976753313 --> [Forged physical sector] Sector 976753314 --> [Forged physical sector] Sector 976753315 --> [Forged physical sector] Sector 976753316 --> [Forged physical sector] Sector 976753317 --> [Forged physical sector] Sector 976753318 --> [Forged physical sector] Sector 976753319 --> [Forged physical sector] Sector 976753320 --> [Forged physical sector] Sector 976753321 --> [Forged physical sector] Sector 976753322 --> [Forged physical sector] Sector 976753323 --> [Forged physical sector] Sector 976753324 --> [Forged physical sector] Sector 976753325 --> [Forged physical sector] Sector 976753326 --> [Forged physical sector] Sector 976753327 --> [Forged physical sector] Sector 976753328 --> [Forged physical sector] Sector 976753329 --> [Forged physical sector] Sector 976753330 --> [Forged physical sector] Sector 976753331 --> [Forged physical sector] Sector 976753332 --> [Forged physical sector] Sector 976753333 --> [Forged physical sector] Sector 976753334 --> [Forged physical sector] Sector 976753335 --> [Forged physical sector] Sector 976753336 --> [Forged physical sector] Sector 976753337 --> [Forged physical sector] Sector 976753338 --> [Forged physical sector] Sector 976753339 --> [Forged physical sector] Sector 976753340 --> [Forged physical sector] Sector 976753341 --> [Forged physical sector] Sector 976753342 --> [Forged physical sector] Sector 976753343 --> [Forged physical sector] Sector 976753344 --> [Forged physical sector] Sector 976753345 --> [Forged physical sector] Sector 976753346 --> [Forged physical sector] Sector 976753347 --> [Forged physical sector] Sector 976753348 --> [Forged physical sector] Sector 976753349 --> [Forged physical sector] Sector 976753350 --> [Forged physical sector] Sector 976753351 --> [Forged physical sector] Sector 976753352 --> [Forged physical sector] Sector 976753353 --> [Forged physical sector] Sector 976753354 --> [Forged physical sector] Sector 976753355 --> [Forged physical sector] Sector 976753356 --> [Forged physical sector] Sector 976753357 --> [Forged physical sector] Sector 976753358 --> [Forged physical sector] Sector 976753359 --> [Forged physical sector] Sector 976753360 --> [Forged physical sector] Sector 976753361 --> [Forged physical sector] Sector 976753362 --> [Forged physical sector] Sector 976753363 --> [Forged physical sector] Sector 976753364 --> [Forged physical sector] Sector 976753365 --> [Forged physical sector] Sector 976753366 --> [Forged physical sector] Sector 976753367 --> [Forged physical sector] Sector 976753368 --> [Forged physical sector] Sector 976753369 --> [Forged physical sector] Sector 976753370 --> [Forged physical sector] Sector 976753371 --> [Forged physical sector] Sector 976753372 --> [Forged physical sector] Sector 976753373 --> [Forged physical sector] Sector 976753374 --> [Forged physical sector] Sector 976753375 --> [Forged physical sector] Sector 976753376 --> [Forged physical sector] Sector 976753377 --> [Forged physical sector] Sector 976753378 --> [Forged physical sector] Sector 976753379 --> [Forged physical sector] Sector 976753380 --> [Forged physical sector] Sector 976753381 --> [Forged physical sector] Sector 976753382 --> [Forged physical sector] Sector 976753383 --> [Forged physical sector] Sector 976753384 --> [Forged physical sector] Sector 976753385 --> [Forged physical sector] Sector 976753386 --> [Forged physical sector] Sector 976753387 --> [Forged physical sector] Sector 976753388 --> [Forged physical sector] Sector 976753389 --> [Forged physical sector] Sector 976753390 --> [Forged physical sector] Sector 976753391 --> [Forged physical sector] Sector 976753392 --> [Forged physical sector] Sector 976753393 --> [Forged physical sector] Sector 976753394 --> [Forged physical sector] Sector 976753395 --> [Forged physical sector] Sector 976753396 --> [Forged physical sector] Sector 976753397 --> [Forged physical sector] Sector 976753398 --> [Forged physical sector] Sector 976753399 --> [Forged physical sector] Sector 976753400 --> [Forged physical sector] Sector 976753401 --> [Forged physical sector] Sector 976753402 --> [Forged physical sector] Sector 976753403 --> [Forged physical sector] Sector 976753404 --> [Forged physical sector] Sector 976753405 --> [Forged physical sector] Sector 976753406 --> [Forged physical sector] Sector 976753407 --> [Forged physical sector] Sector 976753408 --> [Forged physical sector] Sector 976753409 --> [Forged physical sector] Sector 976753410 --> [Forged physical sector] Sector 976753411 --> [Forged physical sector] Sector 976753412 --> [Forged physical sector] Sector 976753413 --> [Forged physical sector] Sector 976753414 --> [Forged physical sector] Sector 976753415 --> [Forged physical sector] Sector 976753416 --> [Forged physical sector] Sector 976753417 --> [Forged physical sector] Sector 976753418 --> [Forged physical sector] Sector 976753419 --> [Forged physical sector] Sector 976753420 --> [Forged physical sector] Sector 976753421 --> [Forged physical sector] Sector 976753422 --> [Forged physical sector] Sector 976753423 --> [Forged physical sector] Sector 976753424 --> [Forged physical sector] Sector 976753425 --> [Forged physical sector] Sector 976753426 --> [Forged physical sector] Sector 976753427 --> [Forged physical sector] Sector 976753428 --> [Forged physical sector] Sector 976753429 --> [Forged physical sector] Sector 976753430 --> [Forged physical sector] Sector 976753431 --> [Forged physical sector] Sector 976753432 --> [Forged physical sector] Sector 976753433 --> [Forged physical sector] Sector 976753434 --> [Forged physical sector] Sector 976753435 --> [Forged physical sector] Sector 976753436 --> [Forged physical sector] Sector 976753437 --> [Forged physical sector] Sector 976753438 --> [Forged physical sector] Sector 976753439 --> [Forged physical sector] Sector 976753440 --> [Forged physical sector] Sector 976753441 --> [Forged physical sector] Sector 976753442 --> [Forged physical sector] Sector 976753443 --> [Forged physical sector] Sector 976753444 --> [Forged physical sector] Sector 976753445 --> [Forged physical sector] Sector 976753446 --> [Forged physical sector] Sector 976753447 --> [Forged physical sector] Sector 976753448 --> [Forged physical sector] Sector 976753449 --> [Forged physical sector] Sector 976753450 --> [Forged physical sector] Sector 976753451 --> [Forged physical sector] Sector 976753452 --> [Forged physical sector] Sector 976753453 --> [Forged physical sector] Sector 976753454 --> [Forged physical sector] Sector 976753455 --> [Forged physical sector] Sector 976753456 --> [Forged physical sector] Sector 976753457 --> [Forged physical sector] Sector 976753458 --> [Forged physical sector] Sector 976753459 --> [Forged physical sector] Sector 976753460 --> [Forged physical sector] Sector 976753461 --> [Forged physical sector] Sector 976753462 --> [Forged physical sector] Sector 976753463 --> [Forged physical sector] Sector 976753464 --> [Forged physical sector] Sector 976753465 --> [Forged physical sector] Sector 976753466 --> [Forged physical sector] Sector 976753467 --> [Forged physical sector] Sector 976753468 --> [Forged physical sector] Sector 976753469 --> [Forged physical sector] Sector 976753470 --> [Forged physical sector] Sector 976753471 --> [Forged physical sector] Sector 976753472 --> [Forged physical sector] Sector 976753473 --> [Forged physical sector] Sector 976753474 --> [Forged physical sector] Sector 976753475 --> [Forged physical sector] Sector 976753476 --> [Forged physical sector] Sector 976753477 --> [Forged physical sector] Sector 976753478 --> [Forged physical sector] Sector 976753479 --> [Forged physical sector] Sector 976753480 --> [Forged physical sector] Sector 976753481 --> [Forged physical sector] Sector 976753482 --> [Forged physical sector] Sector 976753483 --> [Forged physical sector] Sector 976753484 --> [Forged physical sector] Sector 976753485 --> [Forged physical sector] Sector 976753486 --> [Forged physical sector] Sector 976753487 --> [Forged physical sector] Sector 976753488 --> [Forged physical sector] Sector 976753489 --> [Forged physical sector] Sector 976753490 --> [Forged physical sector] Sector 976753491 --> [Forged physical sector] Sector 976753492 --> [Forged physical sector] Sector 976753493 --> [Forged physical sector] Sector 976753494 --> [Forged physical sector] Sector 976753495 --> [Forged physical sector] Sector 976753496 --> [Forged physical sector] Sector 976753497 --> [Forged physical sector] Sector 976753498 --> [Forged physical sector] Sector 976753499 --> [Forged physical sector] Sector 976753500 --> [Forged physical sector] Sector 976753501 --> [Forged physical sector] Sector 976753502 --> [Forged physical sector] Sector 976753503 --> [Forged physical sector] Sector 976753504 --> [Forged physical sector] Sector 976753505 --> [Forged physical sector] Sector 976753506 --> [Forged physical sector] Sector 976753507 --> [Forged physical sector] Sector 976753508 --> [Forged physical sector] Sector 976753509 --> [Forged physical sector] Sector 976753510 --> [Forged physical sector] Sector 976753511 --> [Forged physical sector] Sector 976753512 --> [Forged physical sector] Sector 976753513 --> [Forged physical sector] Sector 976753514 --> [Forged physical sector] Sector 976753515 --> [Forged physical sector] Sector 976753516 --> [Forged physical sector] Sector 976753517 --> [Forged physical sector] Sector 976753518 --> [Forged physical sector] Sector 976753519 --> [Forged physical sector] Sector 976753520 --> [Forged physical sector] Sector 976753521 --> [Forged physical sector] Sector 976753522 --> [Forged physical sector] Sector 976753523 --> [Forged physical sector] Sector 976753524 --> [Forged physical sector] Sector 976753525 --> [Forged physical sector] Sector 976753526 --> [Forged physical sector] Sector 976753527 --> [Forged physical sector] Sector 976753528 --> [Forged physical sector] Sector 976753529 --> [Forged physical sector] Sector 976753530 --> [Forged physical sector] Sector 976753531 --> [Forged physical sector] Sector 976753532 --> [Forged physical sector] Sector 976753533 --> [Forged physical sector] Sector 976753534 --> [Forged physical sector] Sector 976753535 --> [Forged physical sector] Sector 976753536 --> [Forged physical sector] Sector 976753537 --> [Forged physical sector] Sector 976753538 --> [Forged physical sector] Sector 976753539 --> [Forged physical sector] Sector 976753540 --> [Forged physical sector] Sector 976753541 --> [Forged physical sector] Sector 976753542 --> [Forged physical sector] Sector 976753543 --> [Forged physical sector] Sector 976753544 --> [Forged physical sector] Sector 976753545 --> [Forged physical sector] Sector 976753546 --> [Forged physical sector] Sector 976753547 --> [Forged physical sector] Sector 976753548 --> [Forged physical sector] Sector 976753549 --> [Forged physical sector] Sector 976753550 --> [Forged physical sector] Sector 976753551 --> [Forged physical sector] Sector 976753552 --> [Forged physical sector] Sector 976753553 --> [Forged physical sector] Sector 976753554 --> [Forged physical sector] Sector 976753555 --> [Forged physical sector] Sector 976753556 --> [Forged physical sector] Sector 976753557 --> [Forged physical sector] Sector 976753558 --> [Forged physical sector] Sector 976753559 --> [Forged physical sector] Sector 976753560 --> [Forged physical sector] Sector 976753561 --> [Forged physical sector] Sector 976753562 --> [Forged physical sector] Sector 976753563 --> [Forged physical sector] Sector 976753564 --> [Forged physical sector] Sector 976753565 --> [Forged physical sector] Sector 976753566 --> [Forged physical sector] Sector 976753567 --> [Forged physical sector] Sector 976753568 --> [Forged physical sector] Sector 976753569 --> [Forged physical sector] Sector 976753570 --> [Forged physical sector] Sector 976753571 --> [Forged physical sector] Sector 976753572 --> [Forged physical sector] Sector 976753573 --> [Forged physical sector] Sector 976753574 --> [Forged physical sector] Sector 976753575 --> [Forged physical sector] Sector 976753576 --> [Forged physical sector] Sector 976753577 --> [Forged physical sector] Sector 976753578 --> [Forged physical sector] Sector 976753579 --> [Forged physical sector] Sector 976753580 --> [Forged physical sector] Sector 976753581 --> [Forged physical sector] Sector 976753582 --> [Forged physical sector] Sector 976753583 --> [Forged physical sector] Sector 976753584 --> [Forged physical sector] Sector 976753585 --> [Forged physical sector] Sector 976753586 --> [Forged physical sector] Sector 976753587 --> [Forged physical sector] Sector 976753588 --> [Forged physical sector] Sector 976753589 --> [Forged physical sector] Sector 976753590 --> [Forged physical sector] Sector 976753591 --> [Forged physical sector] Sector 976753592 --> [Forged physical sector] Sector 976753593 --> [Forged physical sector] Sector 976753594 --> [Forged physical sector] Sector 976753595 --> [Forged physical sector] Sector 976753596 --> [Forged physical sector] Sector 976753597 --> [Forged physical sector] Sector 976753598 --> [Forged physical sector] Sector 976753599 --> [Forged physical sector] Sector 976753600 --> [Forged physical sector] Sector 976753601 --> [Forged physical sector] Sector 976753602 --> [Forged physical sector] Sector 976753603 --> [Forged physical sector] Sector 976753604 --> [Forged physical sector] Sector 976753605 --> [Forged physical sector] Sector 976753606 --> [Forged physical sector] Sector 976753607 --> [Forged physical sector] Sector 976753608 --> [Forged physical sector] Sector 976753609 --> [Forged physical sector] Sector 976753610 --> [Forged physical sector] Sector 976753611 --> [Forged physical sector] Sector 976753612 --> [Forged physical sector] Sector 976753613 --> [Forged physical sector] Sector 976753614 --> [Forged physical sector] Sector 976753615 --> [Forged physical sector] Sector 976753616 --> [Forged physical sector] Sector 976753617 --> [Forged physical sector] Sector 976753618 --> [Forged physical sector] Sector 976753619 --> [Forged physical sector] Sector 976753620 --> [Forged physical sector] Sector 976753621 --> [Forged physical sector] Sector 976753622 --> [Forged physical sector] Sector 976753623 --> [Forged physical sector] Sector 976753624 --> [Forged physical sector] Sector 976753625 --> [Forged physical sector] Sector 976753626 --> [Forged physical sector] Sector 976753627 --> [Forged physical sector] Sector 976753628 --> [Forged physical sector] Sector 976753629 --> [Forged physical sector] Sector 976753630 --> [Forged physical sector] Sector 976753631 --> [Forged physical sector] Sector 976753632 --> [Forged physical sector] Sector 976753633 --> [Forged physical sector] Sector 976753634 --> [Forged physical sector] Sector 976753635 --> [Forged physical sector] Sector 976753636 --> [Forged physical sector] Sector 976753637 --> [Forged physical sector] Sector 976753638 --> [Forged physical sector] Sector 976753639 --> [Forged physical sector] Sector 976753640 --> [Forged physical sector] Sector 976753641 --> [Forged physical sector] Sector 976753642 --> [Forged physical sector] Sector 976753643 --> [Forged physical sector] Sector 976753644 --> [Forged physical sector] Sector 976753645 --> [Forged physical sector] Sector 976753646 --> [Forged physical sector] Sector 976753647 --> [Forged physical sector] Sector 976753648 --> [Forged physical sector] Sector 976753649 --> [Forged physical sector] Sector 976753650 --> [Forged physical sector] Sector 976753651 --> [Forged physical sector] Sector 976753652 --> [Forged physical sector] Sector 976753653 --> [Forged physical sector] Sector 976753654 --> [Forged physical sector] Sector 976753655 --> [Forged physical sector] Sector 976753656 --> [Forged physical sector] Sector 976753657 --> [Forged physical sector] Sector 976753658 --> [Forged physical sector] Sector 976753659 --> [Forged physical sector] Sector 976753660 --> [Forged physical sector] Sector 976753661 --> [Forged physical sector] Sector 976753662 --> [Forged physical sector] Sector 976753663 --> [Forged physical sector] Sector 976753664 --> [Forged physical sector] Sector 976753665 --> [Forged physical sector] Sector 976753666 --> [Forged physical sector] Sector 976753667 --> [Forged physical sector] Sector 976753668 --> [Forged physical sector] Sector 976753669 --> [Forged physical sector] Sector 976753670 --> [Forged physical sector] Sector 976753671 --> [Forged physical sector] Sector 976753672 --> [Forged physical sector] Sector 976753673 --> [Forged physical sector] Sector 976753674 --> [Forged physical sector] Sector 976753675 --> [Forged physical sector] Sector 976753676 --> [Forged physical sector] Sector 976753677 --> [Forged physical sector] Sector 976753678 --> [Forged physical sector] Sector 976753679 --> [Forged physical sector] Sector 976753680 --> [Forged physical sector] Sector 976753681 --> [Forged physical sector] Sector 976753682 --> [Forged physical sector] Sector 976753683 --> [Forged physical sector] Sector 976753684 --> [Forged physical sector] Sector 976753685 --> [Forged physical sector] Sector 976753686 --> [Forged physical sector] Sector 976753687 --> [Forged physical sector] Sector 976753688 --> [Forged physical sector] Sector 976753689 --> [Forged physical sector] Sector 976753690 --> [Forged physical sector] Sector 976753691 --> [Forged physical sector] Sector 976753692 --> [Forged physical sector] Sector 976753693 --> [Forged physical sector] Sector 976753694 --> [Forged physical sector] Sector 976753695 --> [Forged physical sector] Sector 976753696 --> [Forged physical sector] Sector 976753697 --> [Forged physical sector] Sector 976753698 --> [Forged physical sector] Sector 976753699 --> [Forged physical sector] Sector 976753700 --> [Forged physical sector] Sector 976753701 --> [Forged physical sector] Sector 976753702 --> [Forged physical sector] Sector 976753703 --> [Forged physical sector] Sector 976753704 --> [Forged physical sector] Sector 976753705 --> [Forged physical sector] Sector 976753706 --> [Forged physical sector] Sector 976753707 --> [Forged physical sector] Sector 976753708 --> [Forged physical sector] Sector 976753709 --> [Forged physical sector] Sector 976753710 --> [Forged physical sector] Sector 976753711 --> [Forged physical sector] Sector 976753712 --> [Forged physical sector] Sector 976753713 --> [Forged physical sector] Sector 976753714 --> [Forged physical sector] Sector 976753715 --> [Forged physical sector] Sector 976753716 --> [Forged physical sector] Sector 976753717 --> [Forged physical sector] Sector 976753718 --> [Forged physical sector] Sector 976753719 --> [Forged physical sector] Sector 976753720 --> [Forged physical sector] Sector 976753721 --> [Forged physical sector] Sector 976753722 --> [Forged physical sector] Sector 976753723 --> [Forged physical sector] Sector 976753724 --> [Forged physical sector] Sector 976753725 --> [Forged physical sector] Sector 976753726 --> [Forged physical sector] Sector 976753727 --> [Forged physical sector] Sector 976753728 --> [Forged physical sector] Sector 976753729 --> [Forged physical sector] Sector 976753730 --> [Forged physical sector] Sector 976753731 --> [Forged physical sector] Sector 976753732 --> [Forged physical sector] Sector 976753733 --> [Forged physical sector] Sector 976753734 --> [Forged physical sector] Sector 976753735 --> [Forged physical sector] Sector 976753736 --> [Forged physical sector] Sector 976753737 --> [Forged physical sector] Sector 976753738 --> [Forged physical sector] Sector 976753739 --> [Forged physical sector] Sector 976753740 --> [Forged physical sector] Sector 976753741 --> [Forged physical sector] Sector 976753742 --> [Forged physical sector] Sector 976753743 --> [Forged physical sector] Sector 976753744 --> [Forged physical sector] Sector 976753745 --> [Forged physical sector] Sector 976753746 --> [Forged physical sector] Sector 976753747 --> [Forged physical sector] Sector 976753748 --> [Forged physical sector] Sector 976753749 --> [Forged physical sector] Sector 976753750 --> [Forged physical sector] Sector 976753751 --> [Forged physical sector] Sector 976753752 --> [Forged physical sector] Sector 976753753 --> [Forged physical sector] Sector 976753754 --> [Forged physical sector] Sector 976753755 --> [Forged physical sector] Sector 976753756 --> [Forged physical sector] Sector 976753757 --> [Forged physical sector] Sector 976753758 --> [Forged physical sector] Sector 976753759 --> [Forged physical sector] Sector 976753760 --> [Forged physical sector] Sector 976753761 --> [Forged physical sector] Sector 976753762 --> [Forged physical sector] Sector 976753763 --> [Forged physical sector] Sector 976753764 --> [Forged physical sector] Sector 976753765 --> [Forged physical sector] Sector 976753766 --> [Forged physical sector] Sector 976753767 --> [Forged physical sector] Sector 976753768 --> [Forged physical sector] Sector 976753769 --> [Forged physical sector] Sector 976753770 --> [Forged physical sector] Sector 976753771 --> [Forged physical sector] Sector 976753772 --> [Forged physical sector] Sector 976753773 --> [Forged physical sector] Sector 976753774 --> [Forged physical sector] Sector 976753775 --> [Forged physical sector] Sector 976753776 --> [Forged physical sector] Sector 976753777 --> [Forged physical sector] Sector 976753778 --> [Forged physical sector] Sector 976753779 --> [Forged physical sector] Sector 976753780 --> [Forged physical sector] Sector 976753781 --> [Forged physical sector] Sector 976753782 --> [Forged physical sector] Sector 976753783 --> [Forged physical sector] Sector 976753784 --> [Forged physical sector] Sector 976753785 --> [Forged physical sector] Sector 976753786 --> [Forged physical sector] Sector 976753787 --> [Forged physical sector] Sector 976753788 --> [Forged physical sector] Sector 976753789 --> [Forged physical sector] Sector 976753790 --> [Forged physical sector] Sector 976753791 --> [Forged physical sector] Sector 976753792 --> [Forged physical sector] Sector 976753793 --> [Forged physical sector] Sector 976753794 --> [Forged physical sector] Sector 976753795 --> [Forged physical sector] Sector 976753796 --> [Forged physical sector] Sector 976753797 --> [Forged physical sector] Sector 976753798 --> [Forged physical sector] Sector 976753799 --> [Forged physical sector] Sector 976753800 --> [Forged physical sector] Sector 976753801 --> [Forged physical sector] Sector 976753802 --> [Forged physical sector] Sector 976753803 --> [Forged physical sector] Sector 976753804 --> [Forged physical sector] Sector 976753805 --> [Forged physical sector] Sector 976753806 --> [Forged physical sector] Sector 976753807 --> [Forged physical sector] Sector 976753808 --> [Forged physical sector] Sector 976753809 --> [Forged physical sector] Sector 976753810 --> [Forged physical sector] Sector 976753811 --> [Forged physical sector] Sector 976753812 --> [Forged physical sector] Sector 976753813 --> [Forged physical sector] Sector 976753814 --> [Forged physical sector] Sector 976753815 --> [Forged physical sector] Sector 976753816 --> [Forged physical sector] Sector 976753817 --> [Forged physical sector] Sector 976753818 --> [Forged physical sector] Sector 976753819 --> [Forged physical sector] Sector 976753820 --> [Forged physical sector] Sector 976753821 --> [Forged physical sector] Sector 976753822 --> [Forged physical sector] Sector 976753823 --> [Forged physical sector] Sector 976753824 --> [Forged physical sector] Sector 976753825 --> [Forged physical sector] Sector 976753826 --> [Forged physical sector] Sector 976753827 --> [Forged physical sector] Sector 976753828 --> [Forged physical sector] Sector 976753829 --> [Forged physical sector] Sector 976753830 --> [Forged physical sector] Sector 976753831 --> [Forged physical sector] Sector 976753832 --> [Forged physical sector] Sector 976753833 --> [Forged physical sector] Sector 976753834 --> [Forged physical sector] Sector 976753835 --> [Forged physical sector] Sector 976753836 --> [Forged physical sector] Sector 976753837 --> [Forged physical sector] Sector 976753838 --> [Forged physical sector] Sector 976753839 --> [Forged physical sector] Sector 976753840 --> [Forged physical sector] Sector 976753841 --> [Forged physical sector] Sector 976753842 --> [Forged physical sector] Sector 976753843 --> [Forged physical sector] Sector 976753844 --> [Forged physical sector] Sector 976753845 --> [Forged physical sector] Sector 976753846 --> [Forged physical sector] Sector 976753847 --> [Forged physical sector] Sector 976753848 --> [Forged physical sector] Sector 976753849 --> [Forged physical sector] Sector 976753850 --> [Forged physical sector] Sector 976753851 --> [Forged physical sector] Sector 976753852 --> [Forged physical sector] Sector 976753853 --> [Forged physical sector] Sector 976753854 --> [Forged physical sector] Sector 976753855 --> [Forged physical sector] Sector 976753856 --> [Forged physical sector] Sector 976753857 --> [Forged physical sector] Sector 976753858 --> [Forged physical sector] Sector 976753859 --> [Forged physical sector] Sector 976753860 --> [Forged physical sector] Sector 976753861 --> [Forged physical sector] Sector 976753862 --> [Forged physical sector] Sector 976753863 --> [Forged physical sector] Sector 976753864 --> [Forged physical sector] Sector 976753865 --> [Forged physical sector] Sector 976753866 --> [Forged physical sector] Sector 976753867 --> [Forged physical sector] Sector 976753868 --> [Forged physical sector] Sector 976753869 --> [Forged physical sector] Sector 976753870 --> [Forged physical sector] Sector 976753871 --> [Forged physical sector] Sector 976753872 --> [Forged physical sector] Sector 976753873 --> [Forged physical sector] Sector 976753874 --> [Forged physical sector] Sector 976753875 --> [Forged physical sector] Sector 976753876 --> [Forged physical sector] Sector 976753877 --> [Forged physical sector] Sector 976753878 --> [Forged physical sector] Sector 976753879 --> [Forged physical sector] Sector 976753880 --> [Forged physical sector] Sector 976753881 --> [Forged physical sector] Sector 976753882 --> [Forged physical sector] Sector 976753883 --> [Forged physical sector] Sector 976753884 --> [Forged physical sector] Sector 976753885 --> [Forged physical sector] Sector 976753886 --> [Forged physical sector] Sector 976753887 --> [Forged physical sector] Sector 976753888 --> [Forged physical sector] Sector 976753889 --> [Forged physical sector] Sector 976753890 --> [Forged physical sector] Sector 976753891 --> [Forged physical sector] Sector 976753892 --> [Forged physical sector] Sector 976753893 --> [Forged physical sector] Sector 976753894 --> [Forged physical sector] Sector 976753895 --> [Forged physical sector] Sector 976753896 --> [Forged physical sector] Sector 976753897 --> [Forged physical sector] Sector 976753898 --> [Forged physical sector] Sector 976753899 --> [Forged physical sector] Sector 976753900 --> [Forged physical sector] Sector 976753901 --> [Forged physical sector] Sector 976753902 --> [Forged physical sector] Sector 976753903 --> [Forged physical sector] Sector 976753904 --> [Forged physical sector] Sector 976753905 --> [Forged physical sector] Sector 976753906 --> [Forged physical sector] Sector 976753907 --> [Forged physical sector] Sector 976753908 --> [Forged physical sector] Sector 976753909 --> [Forged physical sector] Sector 976753910 --> [Forged physical sector] Sector 976753911 --> [Forged physical sector] Sector 976753912 --> [Forged physical sector] Sector 976753913 --> [Forged physical sector] Sector 976753914 --> [Forged physical sector] Sector 976753915 --> [Forged physical sector] Sector 976753916 --> [Forged physical sector] Sector 976753917 --> [Forged physical sector] Sector 976753918 --> [Forged physical sector] Sector 976753919 --> [Forged physical sector] Sector 976753920 --> [Forged physical sector] Sector 976753921 --> [Forged physical sector] Sector 976753922 --> [Forged physical sector] Sector 976753923 --> [Forged physical sector] Sector 976753924 --> [Forged physical sector] Sector 976753925 --> [Forged physical sector] Sector 976753926 --> [Forged physical sector] Sector 976753927 --> [Forged physical sector] Sector 976753928 --> [Forged physical sector] Sector 976753929 --> [Forged physical sector] Sector 976753930 --> [Forged physical sector] Sector 976753931 --> [Forged physical sector] Sector 976753932 --> [Forged physical sector] Sector 976753933 --> [Forged physical sector] Sector 976753934 --> [Forged physical sector] Sector 976753935 --> [Forged physical sector] Sector 976753936 --> [Forged physical sector] Sector 976753937 --> [Forged physical sector] Sector 976753938 --> [Forged physical sector] Sector 976753939 --> [Forged physical sector] Sector 976753940 --> [Forged physical sector] Sector 976753941 --> [Forged physical sector] Sector 976753942 --> [Forged physical sector] Sector 976753943 --> [Forged physical sector] Sector 976753944 --> [Forged physical sector] Sector 976753945 --> [Forged physical sector] Sector 976753946 --> [Forged physical sector] Sector 976753947 --> [Forged physical sector] Sector 976753948 --> [Forged physical sector] Sector 976753949 --> [Forged physical sector] Sector 976753950 --> [Forged physical sector] Sector 976753951 --> [Forged physical sector] Sector 976753952 --> [Forged physical sector] Sector 976753953 --> [Forged physical sector] Sector 976753954 --> [Forged physical sector] Sector 976753955 --> [Forged physical sector] Sector 976753956 --> [Forged physical sector] Sector 976753957 --> [Forged physical sector] Sector 976753958 --> [Forged physical sector] Sector 976753959 --> [Forged physical sector] Sector 976753960 --> [Forged physical sector] Sector 976753961 --> [Forged physical sector] Sector 976753962 --> [Forged physical sector] Sector 976753963 --> [Forged physical sector] Sector 976753964 --> [Forged physical sector] Sector 976753965 --> [Forged physical sector] Sector 976753966 --> [Forged physical sector] Sector 976753967 --> [Forged physical sector] Sector 976753968 --> [Forged physical sector] Sector 976753969 --> [Forged physical sector] Sector 976753970 --> [Forged physical sector] Sector 976753971 --> [Forged physical sector] Sector 976753972 --> [Forged physical sector] Sector 976753973 --> [Forged physical sector] Sector 976753974 --> [Forged physical sector] Sector 976753975 --> [Forged physical sector] Sector 976753976 --> [Forged physical sector] Sector 976753977 --> [Forged physical sector] Sector 976753978 --> [Forged physical sector] Sector 976753979 --> [Forged physical sector] Sector 976753980 --> [Forged physical sector] Sector 976753981 --> [Forged physical sector] Sector 976753982 --> [Forged physical sector] Sector 976753983 --> [Forged physical sector] Sector 976753984 --> [Forged physical sector] Sector 976753985 --> [Forged physical sector] Sector 976753986 --> [Forged physical sector] Sector 976753987 --> [Forged physical sector] Sector 976753988 --> [Forged physical sector] Sector 976753989 --> [Forged physical sector] Sector 976753990 --> [Forged physical sector] Sector 976753991 --> [Forged physical sector] Sector 976753992 --> [Forged physical sector] Sector 976753993 --> [Forged physical sector] Sector 976753994 --> [Forged physical sector] Sector 976753995 --> [Forged physical sector] Sector 976753996 --> [Forged physical sector] Sector 976753997 --> [Forged physical sector] Sector 976753998 --> [Forged physical sector] Sector 976753999 --> [Forged physical sector] Sector 976754000 --> [Forged physical sector] Sector 976754001 --> [Forged physical sector] Sector 976754002 --> [Forged physical sector] Sector 976754003 --> [Forged physical sector] Sector 976754004 --> [Forged physical sector] Sector 976754005 --> [Forged physical sector] Sector 976754006 --> [Forged physical sector] Sector 976754007 --> [Forged physical sector] Sector 976754008 --> [Forged physical sector] Sector 976754009 --> [Forged physical sector] Sector 976754010 --> [Forged physical sector] Sector 976754011 --> [Forged physical sector] Sector 976754012 --> [Forged physical sector] Sector 976754013 --> [Forged physical sector] Sector 976754014 --> [Forged physical sector] Sector 976754015 --> [Forged physical sector] Sector 976754016 --> [Forged physical sector] Sector 976754017 --> [Forged physical sector] Sector 976754018 --> [Forged physical sector] Sector 976754019 --> [Forged physical sector] Sector 976754020 --> [Forged physical sector] Sector 976754021 --> [Forged physical sector] Sector 976754022 --> [Forged physical sector] Sector 976754023 --> [Forged physical sector] Sector 976754024 --> [Forged physical sector] Sector 976754025 --> [Forged physical sector] Sector 976754026 --> [Forged physical sector] Sector 976754027 --> [Forged physical sector] Sector 976754028 --> [Forged physical sector] Sector 976754029 --> [Forged physical sector] Sector 976754030 --> [Forged physical sector] Sector 976754031 --> [Forged physical sector] Sector 976754032 --> [Forged physical sector] Sector 976754033 --> [Forged physical sector] Sector 976754034 --> [Forged physical sector] Sector 976754035 --> [Forged physical sector] Sector 976754036 --> [Forged physical sector] Sector 976754037 --> [Forged physical sector] Sector 976754038 --> [Forged physical sector] Sector 976754039 --> [Forged physical sector] Sector 976754040 --> [Forged physical sector] Sector 976754041 --> [Forged physical sector] Sector 976754042 --> [Forged physical sector] Sector 976754043 --> [Forged physical sector] Sector 976754044 --> [Forged physical sector] Sector 976754045 --> [Forged physical sector] Sector 976754046 --> [Forged physical sector] Sector 976754047 --> [Forged physical sector] Sector 976754048 --> [Forged physical sector] Sector 976754049 --> [Forged physical sector] Sector 976754050 --> [Forged physical sector] Sector 976754051 --> [Forged physical sector] Sector 976754052 --> [Forged physical sector] Sector 976754053 --> [Forged physical sector] Sector 976754054 --> [Forged physical sector] Sector 976754055 --> [Forged physical sector] Sector 976754056 --> [Forged physical sector] Sector 976754057 --> [Forged physical sector] Sector 976754058 --> [Forged physical sector] Sector 976754059 --> [Forged physical sector] Sector 976754060 --> [Forged physical sector] Sector 976754061 --> [Forged physical sector] Sector 976754062 --> [Forged physical sector] Sector 976754063 --> [Forged physical sector] Sector 976754064 --> [Forged physical sector] Sector 976754065 --> [Forged physical sector] Sector 976754066 --> [Forged physical sector] Sector 976754067 --> [Forged physical sector] Sector 976754068 --> [Forged physical sector] Sector 976754069 --> [Forged physical sector] Sector 976754070 --> [Forged physical sector] Sector 976754071 --> [Forged physical sector] Sector 976754072 --> [Forged physical sector] Sector 976754073 --> [Forged physical sector] Sector 976754074 --> [Forged physical sector] Sector 976754075 --> [Forged physical sector] Sector 976754076 --> [Forged physical sector] Sector 976754077 --> [Forged physical sector] Sector 976754078 --> [Forged physical sector] Sector 976754079 --> [Forged physical sector] Sector 976754080 --> [Forged physical sector] Sector 976754081 --> [Forged physical sector] Sector 976754082 --> [Forged physical sector] Sector 976754083 --> [Forged physical sector] Sector 976754084 --> [Forged physical sector] Sector 976754085 --> [Forged physical sector] Sector 976754086 --> [Forged physical sector] Sector 976754087 --> [Forged physical sector] Sector 976754088 --> [Forged physical sector] Sector 976754089 --> [Forged physical sector] Sector 976754090 --> [Forged physical sector] Sector 976754091 --> [Forged physical sector] Sector 976754092 --> [Forged physical sector] Sector 976754093 --> [Forged physical sector] Sector 976754094 --> [Forged physical sector] Sector 976754095 --> [Forged physical sector] Sector 976754096 --> [Forged physical sector] Sector 976754097 --> [Forged physical sector] Sector 976754098 --> [Forged physical sector] Sector 976754099 --> [Forged physical sector] Sector 976754100 --> [Forged physical sector] Sector 976754101 --> [Forged physical sector] Sector 976754102 --> [Forged physical sector] Sector 976754103 --> [Forged physical sector] Sector 976754104 --> [Forged physical sector] Sector 976754105 --> [Forged physical sector] Sector 976754106 --> [Forged physical sector] Sector 976754107 --> [Forged physical sector] Sector 976754108 --> [Forged physical sector] Sector 976754109 --> [Forged physical sector] Sector 976754110 --> [Forged physical sector] Sector 976754111 --> [Forged physical sector] Sector 976754112 --> [Forged physical sector] Sector 976754113 --> [Forged physical sector] Sector 976754114 --> [Forged physical sector] Sector 976754115 --> [Forged physical sector] Sector 976754116 --> [Forged physical sector] Sector 976754117 --> [Forged physical sector] Sector 976754118 --> [Forged physical sector] Sector 976754119 --> [Forged physical sector] Sector 976754120 --> [Forged physical sector] Sector 976754121 --> [Forged physical sector] Sector 976754122 --> [Forged physical sector] Sector 976754123 --> [Forged physical sector] Sector 976754124 --> [Forged physical sector] Sector 976754125 --> [Forged physical sector] Sector 976754126 --> [Forged physical sector] Sector 976754127 --> [Forged physical sector] Sector 976754128 --> [Forged physical sector] Sector 976754129 --> [Forged physical sector] Sector 976754130 --> [Forged physical sector] Sector 976754131 --> [Forged physical sector] Sector 976754132 --> [Forged physical sector] Sector 976754133 --> [Forged physical sector] Sector 976754134 --> [Forged physical sector] Sector 976754135 --> [Forged physical sector] Sector 976754136 --> [Forged physical sector] Sector 976754137 --> [Forged physical sector] Sector 976754138 --> [Forged physical sector] Sector 976754139 --> [Forged physical sector] Sector 976754140 --> [Forged physical sector] Sector 976754141 --> [Forged physical sector] Sector 976754142 --> [Forged physical sector] Sector 976754143 --> [Forged physical sector] Sector 976754144 --> [Forged physical sector] Sector 976754145 --> [Forged physical sector] Sector 976754146 --> [Forged physical sector] Sector 976754147 --> [Forged physical sector] Sector 976754148 --> [Forged physical sector] Sector 976754149 --> [Forged physical sector] Sector 976754150 --> [Forged physical sector] Sector 976754151 --> [Forged physical sector] Sector 976754152 --> [Forged physical sector] Sector 976754153 --> [Forged physical sector] Sector 976754154 --> [Forged physical sector] Sector 976754155 --> [Forged physical sector] Sector 976754156 --> [Forged physical sector] Sector 976754157 --> [Forged physical sector] Sector 976754158 --> [Forged physical sector] Sector 976754159 --> [Forged physical sector] Sector 976754160 --> [Forged physical sector] Sector 976754161 --> [Forged physical sector] Sector 976754162 --> [Forged physical sector] Sector 976754163 --> [Forged physical sector] Sector 976754164 --> [Forged physical sector] Sector 976754165 --> [Forged physical sector] Sector 976754166 --> [Forged physical sector] Sector 976754167 --> [Forged physical sector] Sector 976754168 --> [Forged physical sector] Sector 976754169 --> [Forged physical sector] Sector 976754170 --> [Forged physical sector] Sector 976754171 --> [Forged physical sector] Sector 976754172 --> [Forged physical sector] Sector 976754173 --> [Forged physical sector] Sector 976754174 --> [Forged physical sector] Sector 976754175 --> [Forged physical sector] Sector 976754176 --> [Forged physical sector] Sector 976754177 --> [Forged physical sector] Sector 976754178 --> [Forged physical sector] Sector 976754179 --> [Forged physical sector] Sector 976754180 --> [Forged physical sector] Sector 976754181 --> [Forged physical sector] Sector 976754182 --> [Forged physical sector] Sector 976754183 --> [Forged physical sector] Sector 976754184 --> [Forged physical sector] Sector 976754185 --> [Forged physical sector] Sector 976754186 --> [Forged physical sector] Sector 976754187 --> [Forged physical sector] Sector 976754188 --> [Forged physical sector] Sector 976754189 --> [Forged physical sector] Sector 976754190 --> [Forged physical sector] Sector 976754191 --> [Forged physical sector] Sector 976754192 --> [Forged physical sector] Sector 976754193 --> [Forged physical sector] Sector 976754194 --> [Forged physical sector] Sector 976754195 --> [Forged physical sector] Sector 976754196 --> [Forged physical sector] Sector 976754197 --> [Forged physical sector] Sector 976754198 --> [Forged physical sector] Sector 976754199 --> [Forged physical sector] Sector 976754200 --> [Forged physical sector] Sector 976754201 --> [Forged physical sector] Sector 976754202 --> [Forged physical sector] Sector 976754203 --> [Forged physical sector] Sector 976754204 --> [Forged physical sector] Sector 976754205 --> [Forged physical sector] Sector 976754206 --> [Forged physical sector] Sector 976754207 --> [Forged physical sector] Sector 976754208 --> [Forged physical sector] Sector 976754209 --> [Forged physical sector] Sector 976754210 --> [Forged physical sector] Sector 976754211 --> [Forged physical sector] Sector 976754212 --> [Forged physical sector] Sector 976754213 --> [Forged physical sector] Sector 976754214 --> [Forged physical sector] Sector 976754215 --> [Forged physical sector] Sector 976754216 --> [Forged physical sector] Sector 976754217 --> [Forged physical sector] Sector 976754218 --> [Forged physical sector] Sector 976754219 --> [Forged physical sector] Sector 976754220 --> [Forged physical sector] Sector 976754221 --> [Forged physical sector] Sector 976754222 --> [Forged physical sector] Sector 976754223 --> [Forged physical sector] Sector 976754224 --> [Forged physical sector] Sector 976754225 --> [Forged physical sector] Sector 976754226 --> [Forged physical sector] Sector 976754227 --> [Forged physical sector] Sector 976754228 --> [Forged physical sector] Sector 976754229 --> [Forged physical sector] Sector 976754230 --> [Forged physical sector] Sector 976754231 --> [Forged physical sector] Sector 976754232 --> [Forged physical sector] Sector 976754233 --> [Forged physical sector] Sector 976754234 --> [Forged physical sector] Sector 976754235 --> [Forged physical sector] Sector 976754236 --> [Forged physical sector] Sector 976754237 --> [Forged physical sector] Sector 976754238 --> [Forged physical sector] Sector 976754239 --> [Forged physical sector] Sector 976754240 --> [Forged physical sector] Sector 976754241 --> [Forged physical sector] Sector 976754242 --> [Forged physical sector] Sector 976754243 --> [Forged physical sector] Sector 976754244 --> [Forged physical sector] Sector 976754245 --> [Forged physical sector] Sector 976754246 --> [Forged physical sector] Sector 976754247 --> [Forged physical sector] Sector 976754248 --> [Forged physical sector] Sector 976754249 --> [Forged physical sector] Sector 976754250 --> [Forged physical sector] Sector 976754251 --> [Forged physical sector] Sector 976754252 --> [Forged physical sector] Sector 976754253 --> [Forged physical sector] Sector 976754254 --> [Forged physical sector] Sector 976754255 --> [Forged physical sector] Sector 976754256 --> [Forged physical sector] Sector 976754257 --> [Forged physical sector] Sector 976754258 --> [Forged physical sector] Sector 976754259 --> [Forged physical sector] Sector 976754260 --> [Forged physical sector] Sector 976754261 --> [Forged physical sector] Sector 976754262 --> [Forged physical sector] Sector 976754263 --> [Forged physical sector] Sector 976754264 --> [Forged physical sector] Sector 976754265 --> [Forged physical sector] Sector 976754266 --> [Forged physical sector] Sector 976754267 --> [Forged physical sector] Sector 976754268 --> [Forged physical sector] Sector 976754269 --> [Forged physical sector] Sector 976754270 --> [Forged physical sector] Sector 976754271 --> [Forged physical sector] Sector 976754272 --> [Forged physical sector] Sector 976754273 --> [Forged physical sector] Sector 976754274 --> [Forged physical sector] Sector 976754275 --> [Forged physical sector] Sector 976754276 --> [Forged physical sector] Sector 976754277 --> [Forged physical sector] Sector 976754278 --> [Forged physical sector] Sector 976754279 --> [Forged physical sector] Sector 976754280 --> [Forged physical sector] Sector 976754281 --> [Forged physical sector] Sector 976754282 --> [Forged physical sector] Sector 976754283 --> [Forged physical sector] Sector 976754284 --> [Forged physical sector] Sector 976754285 --> [Forged physical sector] Sector 976754286 --> [Forged physical sector] Sector 976754287 --> [Forged physical sector] Sector 976754288 --> [Forged physical sector] Sector 976754289 --> [Forged physical sector] Sector 976754290 --> [Forged physical sector] Sector 976754291 --> [Forged physical sector] Sector 976754292 --> [Forged physical sector] Sector 976754293 --> [Forged physical sector] Sector 976754294 --> [Forged physical sector] Sector 976754295 --> [Forged physical sector] Sector 976754296 --> [Forged physical sector] Sector 976754297 --> [Forged physical sector] Sector 976754298 --> [Forged physical sector] Sector 976754299 --> [Forged physical sector] Sector 976754300 --> [Forged physical sector] Sector 976754301 --> [Forged physical sector] Sector 976754302 --> [Forged physical sector] Sector 976754303 --> [Forged physical sector] Sector 976754304 --> [Forged physical sector] Sector 976754305 --> [Forged physical sector] Sector 976754306 --> [Forged physical sector] Sector 976754307 --> [Forged physical sector] Sector 976754308 --> [Forged physical sector] Sector 976754309 --> [Forged physical sector] Sector 976754310 --> [Forged physical sector] Sector 976754311 --> [Forged physical sector] Sector 976754312 --> [Forged physical sector] Sector 976754313 --> [Forged physical sector] Sector 976754314 --> [Forged physical sector] Sector 976754315 --> [Forged physical sector] Sector 976754316 --> [Forged physical sector] Sector 976754317 --> [Forged physical sector] Sector 976754318 --> [Forged physical sector] Sector 976754319 --> [Forged physical sector] Sector 976754320 --> [Forged physical sector] Sector 976754321 --> [Forged physical sector] Sector 976754322 --> [Forged physical sector] Sector 976754323 --> [Forged physical sector] Sector 976754324 --> [Forged physical sector] Sector 976754325 --> [Forged physical sector] Sector 976754326 --> [Forged physical sector] Sector 976754327 --> [Forged physical sector] Sector 976754328 --> [Forged physical sector] Sector 976754329 --> [Forged physical sector] Sector 976754330 --> [Forged physical sector] Sector 976754331 --> [Forged physical sector] Sector 976754332 --> [Forged physical sector] Sector 976754333 --> [Forged physical sector] Sector 976754334 --> [Forged physical sector] Sector 976754335 --> [Forged physical sector] Sector 976754336 --> [Forged physical sector] Sector 976754337 --> [Forged physical sector] Sector 976754338 --> [Forged physical sector] Sector 976754339 --> [Forged physical sector] Sector 976754340 --> [Forged physical sector] Sector 976754341 --> [Forged physical sector] Sector 976754342 --> [Forged physical sector] Sector 976754343 --> [Forged physical sector] Sector 976754344 --> [Forged physical sector] Sector 976754345 --> [Forged physical sector] Sector 976764927 --> [Forged physical sector] Sector 976773167 --> [Forged physical sector] Done! Performing system, memory and registry scan... Done! Scan finished Creating System Restore point... Scheduling clean up... <<<2>>> Device number: 0, partition: 3 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes BCD Entry for BOOTEMS is missing Malicious Entry 26000022 for BOOTEMS present! Removal scheduling successful. System shutdown needed. System shutdown occurred ======================================= --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.01.0.1011 © Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x64 Account is Administrative Internet Explorer version: 9.0.8112.16421 File system is: NTFS Disk drives: C:\ DRIVE_FIXED CPU speed: 3.192000 GHz Memory total: 8571793408, free: 7216726016 --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.01.0.1011 © Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x64 Account is Administrative Internet Explorer version: 9.0.8112.16421 File system is: NTFS Disk drives: C:\ DRIVE_FIXED CPU speed: 3.192000 GHz Memory total: 8571793408, free: 7035146240 ------------ Kernel report ------------ 12/12/2012 11:06:33 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kdcom.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\system32\PSHED.dll \SystemRoot\system32\CLFS.SYS \SystemRoot\system32\CI.dll \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\system32\drivers\ACPI.sys \SystemRoot\system32\drivers\WMILIB.SYS \SystemRoot\system32\drivers\msisadrv.sys \SystemRoot\system32\drivers\pci.sys \SystemRoot\system32\drivers\vdrvroot.sys \SystemRoot\system32\DRIVERS\iusb3hcs.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\system32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\system32\drivers\iaStor.sys \SystemRoot\system32\drivers\amdxata.sys \SystemRoot\system32\drivers\fltmgr.sys \SystemRoot\system32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Ntfs.sys \SystemRoot\System32\Drivers\msrpc.sys \SystemRoot\System32\Drivers\ksecdd.sys \SystemRoot\System32\Drivers\cng.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\system32\drivers\ndis.sys \SystemRoot\system32\drivers\NETIO.SYS \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\system32\drivers\volsnap.sys \SystemRoot\System32\Drivers\spldr.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\system32\DRIVERS\PBADRV.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\System32\drivers\hwpolicy.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\system32\drivers\disk.sys \SystemRoot\system32\drivers\CLASSPNP.SYS \SystemRoot\system32\DRIVERS\cdrom.sys \SystemRoot\System32\Drivers\SRTSP64.SYS \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121211.019\EX64.SYS \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121211.019\ENG64.SYS \SystemRoot\System32\Drivers\SRTSPX64.SYS \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\vga.sys \SystemRoot\System32\drivers\VIDEOPRT.SYS \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\DRIVERS\RDPCDD.sys \SystemRoot\system32\drivers\rdpencdd.sys \SystemRoot\system32\drivers\rdprefmp.sys \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \??\C:\Windows\system32\drivers\wpsdrvnt.sys \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\drivers\ws2ifsl.sys \SystemRoot\system32\DRIVERS\wfplwf.sys \SystemRoot\system32\DRIVERS\pacer.sys \SystemRoot\system32\DRIVERS\vpcnfltr.sys \SystemRoot\system32\DRIVERS\netbios.sys \SystemRoot\system32\DRIVERS\serial.sys \SystemRoot\system32\DRIVERS\wanarp.sys \SystemRoot\system32\drivers\vpcvmm.sys \SystemRoot\system32\DRIVERS\termdd.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\system32\DRIVERS\mssmbios.sys \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys \SystemRoot\System32\drivers\discache.sys \SystemRoot\system32\drivers\csc.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\DRIVERS\blbdrive.sys \SystemRoot\system32\DRIVERS\tunnel.sys \SystemRoot\system32\DRIVERS\atikmpag.sys \SystemRoot\system32\DRIVERS\atikmdag.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\dxgmms1.sys \SystemRoot\system32\DRIVERS\HDAudBus.sys \SystemRoot\system32\DRIVERS\iusb3xhc.sys \SystemRoot\system32\DRIVERS\USBD.SYS \SystemRoot\system32\DRIVERS\e1c62x64.sys \SystemRoot\system32\DRIVERS\usbehci.sys \SystemRoot\system32\DRIVERS\USBPORT.SYS \SystemRoot\system32\DRIVERS\serenum.sys \SystemRoot\system32\DRIVERS\intelppm.sys \SystemRoot\system32\DRIVERS\CompositeBus.sys \SystemRoot\system32\DRIVERS\lmimirr.sys \SystemRoot\system32\DRIVERS\AgileVpn.sys \SystemRoot\system32\DRIVERS\rasl2tp.sys \SystemRoot\system32\DRIVERS\ndistapi.sys \SystemRoot\system32\DRIVERS\ndiswan.sys \SystemRoot\system32\DRIVERS\raspppoe.sys \SystemRoot\system32\DRIVERS\raspptp.sys \SystemRoot\system32\DRIVERS\rassstp.sys \SystemRoot\system32\DRIVERS\rdpbus.sys \SystemRoot\system32\DRIVERS\kbdclass.sys \SystemRoot\system32\DRIVERS\mouclass.sys \SystemRoot\system32\DRIVERS\teefer2.sys \SystemRoot\system32\DRIVERS\swenum.sys \SystemRoot\system32\DRIVERS\ks.sys \SystemRoot\system32\DRIVERS\umbus.sys \SystemRoot\system32\DRIVERS\vpcusb.sys \SystemRoot\system32\DRIVERS\usbrpm.sys \SystemRoot\system32\DRIVERS\vpchbus.sys \SystemRoot\system32\DRIVERS\usbhub.sys \SystemRoot\System32\Drivers\NDProxy.SYS \SystemRoot\system32\drivers\AtihdW76.sys \SystemRoot\system32\drivers\portcls.sys \SystemRoot\system32\drivers\drmk.sys \SystemRoot\system32\drivers\ksthunk.sys \SystemRoot\system32\DRIVERS\iusb3hub.sys \SystemRoot\system32\drivers\RTDVHD64.sys \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\Drivers\dump_iaStor.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\System32\win32k.sys \SystemRoot\System32\drivers\Dxapi.sys \SystemRoot\system32\DRIVERS\usbccgp.sys \SystemRoot\system32\DRIVERS\dc3d.sys \SystemRoot\system32\DRIVERS\HIDPARSE.SYS \SystemRoot\system32\DRIVERS\hidusb.sys \SystemRoot\system32\DRIVERS\HIDCLASS.SYS \SystemRoot\system32\DRIVERS\kbdhid.sys \SystemRoot\system32\DRIVERS\mouhid.sys \SystemRoot\system32\DRIVERS\monitor.sys \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\system32\DRIVERS\SNTUSB64.SYS \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\DRIVERS\lltdio.sys \SystemRoot\system32\DRIVERS\rspndr.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\System32\Drivers\Sentinel64.sys \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys \??\C:\Windows\system32\drivers\LMIRfsDriver.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\Drivers\secdrv.SYS \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\System32\DRIVERS\srv.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\system32\drivers\spsys.sys \??\C:\Windows\system32\drivers\mbamchameleon.sys \??\C:\Windows\system32\drivers\mbamswissarmy.sys \Windows\System32\ntdll.dll \Windows\System32\smss.exe \Windows\System32\apisetschema.dll \Windows\System32\autochk.exe \Windows\System32\msvcrt.dll \Windows\System32\imm32.dll \Windows\System32\oleaut32.dll ----------- End ----------- <<<1>>> Upper Device Name: \Device\Harddisk0\DR0 Upper Device Object: 0xfffffa8009a25060 Upper Device Driver Name: \Driver\Disk\ Lower Device Name: \Device\Ide\IAAStorageDevice-1\ Lower Device Object: 0xfffffa80071aa050 Lower Device Driver Name: \Driver\iaStor\ Driver name found: iaStor DriverEntry returned 0x0 Function returned 0x0 Initializing... Done! <<<2>>> Device number: 0, partition: 3 Physical Sector Size: 512 Drive: 0, DevicePointer: 0xfffffa8009a25060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xfffffa8009a25ab0, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xfffffa8009a25060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ DevicePointer: 0xfffffa80071a48c0, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xfffffa80071aa050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\ ------------ End ---------- Upper DeviceData: 0xfffff8a00d58bbc0, 0xfffffa8009a25060, 0xfffffa8006eb8790 Lower DeviceData: 0xfffff8a008e49280, 0xfffffa80071aa050, 0xfffffa8006e5e790 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning directory: C:\Windows\system32\drivers... Done! Drive 0 Scanning MBR on drive 0... Inspecting partition table: MBR Signature: 55AA Disk Signature: 4A1E3F57 Partition information: Partition 0 type is Other (0xde) Partition is NOT ACTIVE. Partition starts at LBA: 63 Numsec = 80262 Partition 1 type is Primary (0x7) Partition is ACTIVE. Partition starts at LBA: 81920 Numsec = 32800768 Partition file system is NTFS Partition is bootable Partition 2 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 32882688 Numsec = 943859760 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Disk Size: 500107862016 bytes Sector size: 512 bytes Scanning physical sectors of unpartitioned space on drive 0 (1-62-976753168-976773168)... Done! Performing system, memory and registry scan... Done! Scan finished =======================================
-
Yes I agree to these terms - I will try the Maleware bytes Anti-root kit
-
What is causing what the webhp to show in the URL? AT&T is my ISP
-
Just and FYI - I just checked and the Google redirects have returned
-
OK - I did all of that. THe first time I tried to Install Java I received the following: Downloaded FIle c:\Users\jtlincoln\AppData\LocalLow\Sun\Java\jre1.7.0_09\java_sp.dll is corrupt Then I save the install fiel to the Desktop and ran it from there and it seemd to work fine. Windows Update will not run properly - I get the following error: An error occured while searching for updates on your computer Error(s) Found: Code 80070005 WIndows Update Encountered an Unknown Error Webhp still in the Google URL. Search results are still slow to display but I am not seeing any redirects today (I did yesterday and the day before).
-
Ok the log is below. The machine is behaving better - no more pop ups (that's been the case for a while now) and no redirects from google searches. However, webhap still shows in the google URL. ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found. HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! HKEY_USERS\S-1-5-21-2926821782-996902761-1434136602-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_USERS\S-1-5-21-2926821782-996902761-1434136602-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2DDBCA37-95C6-4B23-B1A8-7D6A4E36CF86}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2DDBCA37-95C6-4B23-B1A8-7D6A4E36CF86}\ not found. Registry key HKEY_USERS\S-1-5-21-2926821782-996902761-1434136602-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found. ========== COMMANDS ========== Error: Unable to interpret <[PURITY][emptyjava]> in the current context! [EMPTYFLASH] User: All Users User: Default User: Default User User: Jackson ->Flash cache emptied: 1055 bytes User: Jake ->Flash cache emptied: 0 bytes User: Jeff ->Flash cache emptied: 2867 bytes User: Patty ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.69.0 log created on 11262012_204821