Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

still hijacked


  • Please log in to reply
16 replies to this topic

#1 elbonito

elbonito

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 22 May 2011 - 01:47 PM

Hi,

After following many topics I've finally come to the conclusion this maleware/virus/tdss or whatever it is, has me beat.It started as the Windows Recovery Virus but maybe there was more to it? I have my Dell Latidude/D600, w/XP Pro working now but my MS programs are still missing. As well the Google redirects and the occasional commercial has me beat. It is starting to slow down too. I'm unsure about taking any other steps without some knowledgable support. Restore points are missing and I do not have an OS reboot disk. Could someone give me a hand please?

Thanks

Edited by hamluis, 23 May 2011 - 02:43 PM.
Moved from MRL to AII.


BC AdBot (Login to Remove)

 


#2 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:11:40 PM

Posted 29 May 2011 - 10:46 PM

Hello.

Have you tried following all the steps here? http://www.bleepingcomputer.com/virus-removal/remove-windows-recovery

~Blade

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#3 elbonito

elbonito
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 30 May 2011 - 09:49 PM

Hi Blade,

Thanks for the connection. Yes, I did most of that link but the Secunia....somehow I missed that on my search. I got 97% secure with my Cyberlink DVD no longer supported, Adobe Reader 8X doing an update now and Sun Jave doing the update. Adobe Reader just gave me an error on update. It says its a high risk for hackers.
Each time I boot it seems to get slower. Hijacking on my browser especially bleepingcomputers and other help sites, desktop is back but MS and other program still hidden.

Elbonito

P.S. I got up this morning and the Adobe 8 updater was ready to launch...maybe Secunia PSI gave it a nudge.

Edited by elbonito, 31 May 2011 - 06:11 AM.


#4 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:11:40 PM

Posted 31 May 2011 - 02:56 PM

Hello.

Let's try this.

Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!
Be sure to download TDSSKiller.exe from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.
  • Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
    Vista/Windows 7 users right-click and select Run As Administrator.
  • If TDSSKiller does not run, try renaming it.
  • To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
  • Click the Start Scan button.
  • Do not use the computer during the scan
  • If the scan completes with nothing found, click Close to exit.
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
  • A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
  • Copy and paste the contents of that file in your next reply.

~Blade


In your next reply, please include the following:
TDSSKiller Log
How is the computer running now?

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#5 elbonito

elbonito
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 01 June 2011 - 07:07 AM

Hi Blade,

Sorry, nothing was found with TDSSKiller. This is the log anyway.

2011/06/01 07:57:16.0164 2888 TDSS rootkit removing tool 2.5.3.0 May 25 2011 07:09:24
2011/06/01 07:57:17.0326 2888 ================================================================================
2011/06/01 07:57:17.0326 2888 SystemInfo:
2011/06/01 07:57:17.0326 2888
2011/06/01 07:57:17.0326 2888 OS Version: 5.1.2600 ServicePack: 3.0
2011/06/01 07:57:17.0326 2888 Product type: Workstation
2011/06/01 07:57:17.0326 2888 ComputerName: CHNG12
2011/06/01 07:57:17.0326 2888 UserName: User
2011/06/01 07:57:17.0326 2888 Windows directory: C:\WINDOWS
2011/06/01 07:57:17.0326 2888 System windows directory: C:\WINDOWS
2011/06/01 07:57:17.0326 2888 Processor architecture: Intel x86
2011/06/01 07:57:17.0326 2888 Number of processors: 1
2011/06/01 07:57:17.0326 2888 Page size: 0x1000
2011/06/01 07:57:17.0326 2888 Boot type: Normal boot
2011/06/01 07:57:17.0326 2888 ================================================================================
2011/06/01 07:57:20.0480 2888 Initialize success
2011/06/01 07:57:24.0967 1588 ================================================================================
2011/06/01 07:57:24.0977 1588 Scan started
2011/06/01 07:57:24.0977 1588 Mode: Manual;
2011/06/01 07:57:24.0977 1588 ================================================================================
2011/06/01 07:57:28.0752 1588 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/06/01 07:57:29.0163 1588 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/06/01 07:57:29.0784 1588 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2011/06/01 07:57:30.0224 1588 AFD (7618d5218f2a614672ec61a80d854a37) C:\WINDOWS\System32\drivers\afd.sys
2011/06/01 07:57:30.0565 1588 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
2011/06/01 07:57:32.0267 1588 ApfiltrService (090880e9bf20f928bc341f96d27c019e) C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
2011/06/01 07:57:33.0419 1588 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/06/01 07:57:33.0789 1588 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/06/01 07:57:34.0881 1588 ati2mtag (246248aada156450be611eceaa5fe033) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
2011/06/01 07:57:35.0782 1588 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/06/01 07:57:36.0253 1588 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/06/01 07:57:36.0383 1588 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
2011/06/01 07:57:36.0724 1588 avgntflt (47b879406246ffdced59e18d331a0e7d) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
2011/06/01 07:57:37.0134 1588 avipbb (5fedef54757b34fb611b9ec8fb399364) C:\WINDOWS\system32\DRIVERS\avipbb.sys
2011/06/01 07:57:37.0525 1588 b57w2k (3a3a82ffd268bcfb7ae6a48cecf00ad9) C:\WINDOWS\system32\DRIVERS\b57xp32.sys
2011/06/01 07:57:37.0885 1588 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/06/01 07:57:38.0196 1588 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/06/01 07:57:38.0747 1588 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/06/01 07:57:39.0177 1588 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/06/01 07:57:39.0538 1588 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/06/01 07:57:39.0908 1588 cercsr6 (84853b3fd012251690570e9e7e43343f) C:\WINDOWS\system32\drivers\cercsr6.sys
2011/06/01 07:57:40.0519 1588 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
2011/06/01 07:57:41.0050 1588 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
2011/06/01 07:57:42.0172 1588 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/06/01 07:57:42.0822 1588 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
2011/06/01 07:57:43.0483 1588 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
2011/06/01 07:57:43.0864 1588 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/06/01 07:57:44.0224 1588 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2011/06/01 07:57:44.0795 1588 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/06/01 07:57:45.0196 1588 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/06/01 07:57:45.0586 1588 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
2011/06/01 07:57:45.0937 1588 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
2011/06/01 07:57:46.0398 1588 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
2011/06/01 07:57:46.0788 1588 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/06/01 07:57:47.0339 1588 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/06/01 07:57:47.0720 1588 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/06/01 07:57:48.0130 1588 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/06/01 07:57:48.0881 1588 HSFHWICH (a84bbbdd125d370593004f6429f8445c) C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys
2011/06/01 07:57:49.0632 1588 HSF_DPV (b678fa91cf4a1c19b462d8db04cd02ab) C:\WINDOWS\system32\DRIVERS\HSF_DPV.SYS
2011/06/01 07:57:50.0433 1588 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/06/01 07:57:51.0265 1588 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/06/01 07:57:51.0625 1588 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/06/01 07:57:52.0937 1588 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
2011/06/01 07:57:53.0247 1588 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/06/01 07:57:53.0558 1588 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/06/01 07:57:53.0908 1588 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/06/01 07:57:54.0309 1588 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/06/01 07:57:54.0710 1588 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/06/01 07:57:55.0100 1588 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
2011/06/01 07:57:55.0471 1588 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/06/01 07:57:55.0841 1588 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/06/01 07:57:56.0242 1588 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/06/01 07:57:56.0632 1588 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2011/06/01 07:57:57.0043 1588 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/06/01 07:57:57.0944 1588 mdmxsdk (3c318b9cd391371bed62126581ee9961) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
2011/06/01 07:57:58.0285 1588 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/06/01 07:57:58.0615 1588 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
2011/06/01 07:57:58.0996 1588 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/06/01 07:57:59.0346 1588 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/06/01 07:57:59.0987 1588 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/06/01 07:58:00.0548 1588 MRxSmb (0ea4d8ed179b75f8afa7998ba22285ca) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/06/01 07:58:00.0939 1588 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2011/06/01 07:58:01.0329 1588 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/06/01 07:58:01.0710 1588 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/06/01 07:58:02.0321 1588 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/06/01 07:58:02.0641 1588 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/06/01 07:58:03.0032 1588 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
2011/06/01 07:58:03.0452 1588 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
2011/06/01 07:58:03.0853 1588 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/06/01 07:58:04.0183 1588 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/06/01 07:58:04.0564 1588 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/06/01 07:58:04.0924 1588 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/06/01 07:58:05.0255 1588 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/06/01 07:58:05.0725 1588 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/06/01 07:58:06.0196 1588 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2011/06/01 07:58:06.0747 1588 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/06/01 07:58:07.0278 1588 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/06/01 07:58:07.0628 1588 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/06/01 07:58:07.0979 1588 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/06/01 07:58:08.0349 1588 omci (53d5f1278d9edb21689bbbcecc09108d) C:\WINDOWS\system32\DRIVERS\omci.sys
2011/06/01 07:58:08.0740 1588 OZSCR (ab2b07ac4afd38f574d903eaf9e98a60) C:\WINDOWS\system32\DRIVERS\ozscr.sys
2011/06/01 07:58:09.0130 1588 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/06/01 07:58:09.0501 1588 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/06/01 07:58:09.0851 1588 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/06/01 07:58:10.0212 1588 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/06/01 07:58:10.0843 1588 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys
2011/06/01 07:58:11.0333 1588 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
2011/06/01 07:58:13.0817 1588 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/06/01 07:58:14.0198 1588 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/06/01 07:58:14.0528 1588 PSI (d24dfd16a1e2a76034df5aa18125c35d) C:\WINDOWS\system32\DRIVERS\psi_mf.sys
2011/06/01 07:58:14.0859 1588 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/06/01 07:58:16.0391 1588 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/06/01 07:58:16.0751 1588 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
2011/06/01 07:58:17.0102 1588 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/06/01 07:58:17.0452 1588 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/06/01 07:58:17.0733 1588 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/06/01 07:58:18.0103 1588 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/06/01 07:58:18.0614 1588 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/06/01 07:58:19.0025 1588 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2011/06/01 07:58:19.0505 1588 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/06/01 07:58:19.0926 1588 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/06/01 07:58:20.0417 1588 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
2011/06/01 07:58:20.0567 1588 SASENUM (7ce61c25c159f50f9eaf6d77fc83fa35) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
2011/06/01 07:58:20.0747 1588 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
2011/06/01 07:58:21.0148 1588 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/06/01 07:58:21.0518 1588 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/06/01 07:58:21.0859 1588 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/06/01 07:58:22.0229 1588 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys
2011/06/01 07:58:22.0980 1588 SMCIRDA (707647a1aa0edb6cbef61b0c75c28ed3) C:\WINDOWS\system32\DRIVERS\smcirda.sys
2011/06/01 07:58:23.0611 1588 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2011/06/01 07:58:23.0972 1588 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/06/01 07:58:24.0482 1588 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/06/01 07:58:24.0883 1588 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
2011/06/01 07:58:25.0324 1588 STAC97 (5813d453ef8ce49d607c255cf128aceb) C:\WINDOWS\system32\drivers\stac97.sys
2011/06/01 07:58:25.0794 1588 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/06/01 07:58:26.0145 1588 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2011/06/01 07:58:27.0477 1588 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/06/01 07:58:28.0318 1588 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/06/01 07:58:28.0688 1588 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/06/01 07:58:29.0029 1588 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/06/01 07:58:29.0389 1588 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/06/01 07:58:30.0070 1588 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2011/06/01 07:58:31.0002 1588 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2011/06/01 07:58:31.0482 1588 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2011/06/01 07:58:31.0843 1588 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/06/01 07:58:32.0193 1588 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/06/01 07:58:32.0574 1588 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2011/06/01 07:58:32.0935 1588 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/06/01 07:58:33.0285 1588 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/06/01 07:58:33.0636 1588 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2011/06/01 07:58:34.0236 1588 VolSnap (7c38f81f40d61d1607ddb62fe5817bb9) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/06/01 07:58:34.0266 1588 Suspicious file (Forged): C:\WINDOWS\system32\drivers\VolSnap.sys. Real md5: 7c38f81f40d61d1607ddb62fe5817bb9, Fake md5: 4c8fcb5cc53aab716d810740fe59d025
2011/06/01 07:58:34.0266 1588 VolSnap - detected Rootkit.Win32.TDSS.tdl3 (0)
2011/06/01 07:58:34.0827 1588 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/06/01 07:58:35.0168 1588 wceusbsh (4c0b8ef721783f52f8e531fbdc4b1f74) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
2011/06/01 07:58:35.0749 1588 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/06/01 07:58:36.0349 1588 winachsf (0c5b9cf1bdf998750d9c5eeb5f8c55ac) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
2011/06/01 07:58:36.0990 1588 wlluc48 (dca17912a1926ae427537648fc0e74d5) C:\WINDOWS\system32\DRIVERS\wlluc48.sys
2011/06/01 07:58:37.0421 1588 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/06/01 07:58:37.0812 1588 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/06/01 07:58:38.0653 1588 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
2011/06/01 07:58:38.0933 1588 ================================================================================
2011/06/01 07:58:38.0933 1588 Scan finished
2011/06/01 07:58:38.0933 1588 ================================================================================
2011/06/01 07:58:38.0943 1864 Detected object count: 1
2011/06/01 07:58:38.0943 1864 Actual detected object count: 1
2011/06/01 07:59:24.0328 1864 VolSnap (7c38f81f40d61d1607ddb62fe5817bb9) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/06/01 07:59:24.0328 1864 Suspicious file (Forged): C:\WINDOWS\system32\drivers\VolSnap.sys. Real md5: 7c38f81f40d61d1607ddb62fe5817bb9, Fake md5: 4c8fcb5cc53aab716d810740fe59d025
2011/06/01 07:59:31.0449 1864 Backup copy found, using it..
2011/06/01 07:59:31.0699 1864 C:\WINDOWS\system32\drivers\VolSnap.sys - will be cured after reboot
2011/06/01 07:59:31.0699 1864 Rootkit.Win32.TDSS.tdl3(VolSnap) - User select action: Cure
2011/06/01 07:59:53.0741 0272 Deinitialize success

I have rebooted and the redirect seems to be gone. The reboot is still slow and MS files are missing (MS office, defragment program etc.). Thanks
I actually tried to run tdsskiller last week and it wouldn't even start. Weird or you're a magician....thanks

Edited by elbonito, 01 June 2011 - 07:40 AM.


#6 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:11:40 PM

Posted 01 June 2011 - 09:55 AM

Hello,

So everything is in order now?

~Blade

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#7 elbonito

elbonito
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 01 June 2011 - 08:46 PM

Hi Blade,

The redirects are gone but the boot-up is very slow...with the XP page taking a long time, then a long slow blue page, then a black page and then when my desktop opens the sart programs take along time especially Super-anti spyware.
Also in start/programs my MS programs are missing MS Office/word etc. and in Accessories the defragment program and hard-drive cleanup is missing to name a few.

Any ideas?

Elbonito

#8 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:11:40 PM

Posted 01 June 2011 - 09:09 PM

Hello.

My recommendation for the slow boot is to minimize the number of programs that you have start on startup.

Have you run Unhide.exe?

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#9 elbonito

elbonito
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 04 June 2011 - 03:08 AM

Yes, I have run unhide, I ran it agsin just to make sure. The MS programs are still missing.
I was looking into BC's start-up forums to see what actions I could take to help my boot-up. I thought I'd do a disk cleanup and defragment first but I can't find them.

Edited by elbonito, 04 June 2011 - 03:10 AM.


#10 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:11:40 PM

Posted 04 June 2011 - 03:20 AM

Hello.

Thanks to Broni for the below.

To manually recreate "All Programs" entries, follow these steps...

  • Download App Paths
  • Double click on AppPaths.exe to run the program.
  • Keep the program open.

In this example I'll recreate an entry for Avast antivirus program.
  • Go Start>All Programs.
  • Right click on Avast entry, click "Properties".

Posted Image
NOTE. Make sure, you right click on Avast program, NOT on Avast folder.

  • You'll see this window:

Posted Image

Due to the damage caused by the infection, you'll find "Target" box empty.

  • Go back to AppPaths window and find Avast entry.
  • Right click on Avast line, click "Edit".
  • A pop-up window will open:

Posted Image

  • Highlight everything in "Path" box, right click on it, click "Copy"
  • Go back to Avast "Properties" window, right click inside "Target" box, click "Paste".
  • IMPORTANT! Add quotation marks at the beginning of the path and at the end
  • Click OK and you're done.

Posted Image


In case, program's link shows as (empty):

Posted Image

  • Open Windows Explorer, navigate to Avast folder in Program Files
  • Right click on Avast ".exe" file, click "Create shortcut":

Posted Image

  • Copy that shortcut, go back to Start menu.
  • Right click on avast!Free Antivirus, click "Paste".
  • You'll see Avast shortcut recreated replacing (empty) entry.

Alternatively....
...you paste that shortcut in:
(XP) - C:\Documents and Settings\All Users\Start Menu\Programs\Avast
(Vista/7) - C:\Program Data\Start Menu\Programs\Avast

~Blade

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#11 elbonito

elbonito
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 06 June 2011 - 02:25 AM

Hi Blade,

Thank you and Broni for the info. That's exactly what I need. I feel a little lame here. I ran the program Appspath fine (see below) but the examples to insert path has me baffled. My program path shows as empty and I'm running XP pro but I can't seem to create the same senario as described above.

Elbonito

Type Name Path Directory
Machine AcroRd32.exe C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe C:\Program Files\Adobe\Reader 8.0\Reader\
Machine Apoint.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Apoint
Machine BackItUp.exe C:\Program Files\Nero\Nero 7\Nero BackItUp\BackItUp.exe C:\Program Files\Nero\Nero 7\Nero BackItUp\
Machine bckgzm.exe C:\Program Files\MSN Gaming Zone\Windows\bckgzm.exe
Machine chkrzm.exe C:\Program Files\MSN Gaming Zone\Windows\chkrzm.exe
Machine cmmgr32.exe C:\WINDOWS\system32\cmmgr32.exe C:\WINDOWS\system32
Machine CONF.EXE C:\Program Files\NetMeeting\conf.exe C:\Program Files\NetMeeting;
Machine dialer.exe C:\Program Files\Windows NT\dialer.exe
Machine excel.exe C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine frontpg.exe C:\PROGRA~1\MICROS~2\OFFICE11\FRONTPG.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine HELPCTR.EXE C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe
Machine hrtzzm.exe C:\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe
Machine hypertrm.exe "C:\Program Files\Windows NT\hypertrm.exe"
Machine ICWCONN1.EXE "C:\Program Files\Internet Explorer\Connection Wizard\ICWCONN1.EXE" C:\Program Files\Internet Explorer\Connection Wizard;
Machine ICWCONN2.EXE "C:\Program Files\Internet Explorer\Connection Wizard\ICWCONN2.EXE" C:\Program Files\Internet Explorer\Connection Wizard;
Machine IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer;
Machine ImageDrive.exe C:\Program Files\Nero\Nero 7\Nero ImageDrive\ImageDrive.exe C:\Program Files\Nero\Nero 7\Nero ImageDrive\
Machine INETWIZ.EXE "C:\Program Files\Internet Explorer\Connection Wizard\INETWIZ.EXE" C:\Program Files\Internet Explorer\Connection Wizard;
Machine infopath.exe C:\Program Files\Microsoft Office\OFFICE11\INFOPATH.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine install.exe
Machine ISIGNUP.EXE "C:\Program Files\Internet Explorer\Connection Wizard\ISIGNUP.EXE" C:\Program Files\Internet Explorer\Connection Wizard;
Machine javaws.exe C:\Program Files\Java\jre6\bin\javaws.exe C:\Program Files\Java\jre6\bin
Machine mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware
Machine migwiz.exe C:\WINDOWS\system32\usmt\migwiz.exe
Machine moviemk.exe C:\Program Files\Movie Maker\moviemk.exe
Machine mplayer2.exe "C:\Program Files\Windows Media Player\mplayer2.exe" "C:\Program Files\Windows Media Player"
Machine MSACCESS.EXE C:\PROGRA~1\MICROS~2\OFFICE11\MSACCESS.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine MSCONFIG.EXE C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
Machine msimn.exe C:\Program Files\Outlook Express\msimn.exe C:\Program Files\Outlook Express
Machine msinfo32.exe C:\Program Files\Common Files\Microsoft Shared\MSInfo\MSInfo32.exe C:\Program Files\Common Files\Microsoft Shared\MSInfo
Machine MSMSGS.EXE C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Messenger;
Machine MSNMSGR.EXE C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\MSN Messenger\
Machine MsoHtmEd.exe
Machine msoxmled.exe C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLED.EXE
Machine MSPUB.EXE C:\PROGRA~1\MICROS~2\OFFICE11\MSPUB.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine mspview.exe C:\PROGRA~1\COMMON~1\MICROS~1\MODI\11.0\MSPVIEW.EXE C:\Program Files\Common Files\Microsoft Shared\MODI\11.0\
Machine NCoverEd.exe C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverDes.exe C:\Program Files\Nero\Nero 7\Nero CoverDesigner\
Machine Nero.exe C:\Program Files\Nero\Nero 7\Core\Nero.exe C:\Program Files\Nero\Nero 7\Core\
Machine NeroBurnRights.exe C:\Program Files\Nero\Nero 7\Nero Toolkit\NeroBurnRights.exe C:\Program Files\Nero\Nero 7\Nero Toolkit\
Machine NeroHome.exe C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe C:\Program Files\Nero\Nero 7\Nero Home\
Machine NeroMediaHome.exe C:\Program Files\Nero\Nero 7\Nero MediaHome\NeroMediaHome.exe C:\Program Files\Nero\Nero 7\Nero MediaHome\
Machine NeroVision.exe C:\Program Files\Nero\Nero 7\Nero Vision\NeroVision.exe C:\Program Files\Nero\Nero 7\Nero Vision\
Machine ois.exe C:\PROGRA~1\MICROS~2\OFFICE11\OIS.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine OUTLOOK.EXE C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine pbrush.exe C:\WINDOWS\system32\mspaint.exe C:\WINDOWS\system32
Machine PhotoSnapViewer.exe C:\Program Files\Nero\Nero 7\Nero PhotoSnap\PhotoSnapViewer.exe C:\Program Files\Nero\Nero 7\Nero PhotoSnap\
Machine pinball.exe C:\Program Files\Windows NT\Pinball\pinball.exe C:\Program Files\Windows NT\Pinball
Machine PowerDVD.exe C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe C:\Program Files\CyberLink\PowerDVD
Machine powerpnt.exe C:\PROGRA~1\MICROS~2\OFFICE11\POWERPNT.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine Recode.exe C:\Program Files\Nero\Nero 7\Nero Recode\Recode.exe C:\Program Files\Nero\Nero 7\Nero Recode\
Machine rvsezm.exe C:\Program Files\MSN Gaming Zone\Windows\rvsezm.exe
Machine schdpl32.exe C:\PROGRA~1\MICROS~2\OFFICE11\1033\SCHDPL32.EXE C:\Program Files\Microsoft Office\OFFICE11\1033\
Machine ShowTime.exe C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe C:\Program Files\Nero\Nero 7\Nero ShowTime\
Machine shvlzm.exe C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe
Machine SoundTrax.exe C:\Program Files\Nero\Nero 7\Nero SoundTrax\SoundTrax.exe C:\Program Files\Nero\Nero 7\Nero SoundTrax\
Machine table30.exe
Machine visio.exe C:\PROGRA~1\MICROS~2\Visio11\VISIO.EXE C:\Program Files\Microsoft Office\Visio11\
Machine wab.exe C:\Program Files\Outlook Express\wab.exe C:\Program Files\Outlook Express
Machine wabmig.exe C:\Program Files\Outlook Express\wabmig.exe C:\Program Files\Outlook Express
Machine waveedit.exe C:\Program Files\Nero\Nero 7\Nero WaveEditor\waveedit.exe C:\Program Files\Nero\Nero 7\Nero WaveEditor\
Machine winnt32.exe
Machine Winword.exe C:\PROGRA~1\MICROS~2\OFFICE11\WINWORD.EXE C:\Program Files\Microsoft Office\OFFICE11\
Machine WMPBurn.exe C:\Program Files\Nero\Nero 7\Nero Fast CD-Burning Plug-in\WMPBurn.exe C:\Program Files\Nero\Nero 7\Nero Fast CD-Burning Plug-in\
Machine wmplayer.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Program Files\Windows Media Player
Machine WORDPAD.EXE "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE"
Machine WRITE.EXE "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE"
Machine XPSViewer.exe "c:\WINDOWS\system32\XPSViewer\XPSViewer.exe"

#12 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:11:40 PM

Posted 06 June 2011 - 10:11 AM

At what step exactly are you getting hung up?

~Blade

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#13 elbonito

elbonito
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 07 June 2011 - 06:34 AM

Sorry I guess I should have been more clear. I think Broni used Windows 7 in his example? In XP I cann't find the target box to put in the correct path.
My program link is empty as described in the example. But when I go to C:\Documents and Settings\All Users\Start Menu\Programs\ and right click there is no target box. Do you mean to create a shotcut in programs? And put the target in there? What do I do with the shortcut afterwards?
When I go to MS Office\MS office tools it is empty so I'm unsure of what would go in that shortcut?

Elbonito

#14 Blade

Blade

    Strong in the Bleepforce


  • Site Admin
  • 12,704 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US
  • Local time:11:40 PM

Posted 07 June 2011 - 05:49 PM

My program link is empty as described in the example


If this is the case you should follow only the second half of the instructions (those following In case, program's link shows as (empty):).

Hope that helps.

~Blade

Edited by Blade Zephon, 07 June 2011 - 05:49 PM.

Posted Image

If I am helping you, it has been 48 hours since your last post, and I have yet to reply to your topic, please send me a PM
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Circle us on Google+


#15 elbonito

elbonito
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:40 PM

Posted 09 June 2011 - 07:27 AM

Yes Blade I surmised that I use the last part of the instructions.
My problem is that I can't get the windows to open as described.

When I go to C:\Documents and Settings\All Users\Start Menu\Programs\ and right click there is no target box. Do you mean to create a shotcut in programs? And put the target in there? What do I do with the shortcut afterwards?
When I go to MS Office\MS office tools it is empty so I'm unsure of what would go in that shortcut as there are several program like Word, Access, Visio?

Elbonito




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users