Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win 7 Antivirus 2012, Ran FixNCR.reg, now an issue


  • Please log in to reply
3 replies to this topic

#1 Wilburx13

Wilburx13

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:03 AM

Posted 04 December 2011 - 10:54 PM

Hi,

I managed to get the Win 7 Antivirus 2012 virus earlier today. I followed the steps in this thread. I ran FixNCR.reg, RKill, and Malwarebyte's Anti-Malware. It appears that the virus has been removed. I now have two other problems though. The first is that I cannot open certain programs like Firefox or Outlook on my normal user profile. The programs appear as though they will open, but then nothing happens. I can open them on the administrator profile on my computer, but that is not the profile I normally use (my usual profile is just a user profile because of a weird way that my computer was fixed one time).

The other issue I run into is a window that pops up after I log in telling me that Windows Explorer wants to make changes to my computer and asks for administrator permission. If I hit no or exit the window then Explorer immediately crashes and I have to ctrl+alt+delete to log out and log back in. If I type in the administrator info and hit yes then it immediately switches me to the administrator profile and logs me out of mine. I can move the window down and out of the way and continue doing things if I want.

I've posted the MBAM log below from the scan that I ran earlier today. I've also scanned my entire computer with Microsoft Forefront and it did not come up with anything. I scanned with SuperAntiSpyware then and it came up with 29 threats. I've posted that log below as well in case it helps at all.

I'm running Windows 7 32-bit. The profile "Matthew" is the administrator and "quarte_matt" is my usual profile. Thank you for any help you can provide.

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8311

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

12/4/2011 6:49:17 PM
mbam-log-2011-12-04 (18-49-17).txt

Scan type: Full scan (C:\|F:\|)
Objects scanned: 443918
Time elapsed: 1 hour(s), 33 minute(s), 20 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/04/2011 at 07:54 PM

Application Version : 4.56.1000

Core Rules Database Version : 7498
Trace Rules Database Version: 5310

Scan type : Complete Scan
Total Scan Time : 00:53:07

Memory items scanned : 428
Memory threats detected : 0
Registry items scanned : 11653
Registry threats detected : 0
File items scanned : 43584
File threats detected : 29

Adware.Tracking Cookie
C:\Users\Matthew\AppData\Roaming\Microsoft\Windows\Cookies\3DY3CVBD.txt
C:\Users\jenko_juli\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenko_juli@atdmt[1].txt
C:\Users\jenko_juli\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenko_juli@doubleclick[1].txt
C:\Users\jenko_juli\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenko_juli@googleads.g.doubleclick[1].txt
C:\Users\jenko_juli\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenko_juli@questionmarket[1].txt
ad.insightexpressai.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
cdn.gotraffic.net [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
cdn.tremormedia.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
data-ero-advertising.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
files.youporn.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
ia.media-imdb.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
media.mtvnservices.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
media.nbcbayarea.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
media.nbcphiladelphia.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
media.nbcsandiego.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
media1.break.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
media10.washingtonpost.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
media3.break.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
msnbcmedia.msn.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
objects.tremormedia.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
s0.2mdn.net [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
secure-uk.imrworldwide.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
secure-us.imrworldwide.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
sftrack.searchforce.net [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
speed.pointroll.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
static.discoverymedia.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]
www.girlsdoporn.com [ C:\Users\QUARTE_MATT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VAVUDG6H ]

Trojan.Agent/Gen-IExplorer[Fake]
C:\USERS\MATTHEW\APPDATA\LOCAL\TEMP\RARSFX0\NIRD\IEXPLORE.EXE

Trojan.Agent/Gen-PEC
C:\USERS\MATTHEW\APPDATA\LOCAL\TEMP\RARSFX0\PROCS\EXPLORER.EXE

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:03 AM

Posted 05 December 2011 - 07:52 PM

Hello, I would like to run a few more tools.

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
  • List Minidump Files
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed

>>>>>>

Please Download
TDSSKiller.zip

>>> Double-click on TDSSKiller.exe to run the application.
  • Click on the Start Scan button and wait for the scan and disinfection process to be over.
  • If an infected file is detected, the default action will be Cure, click on Continue
    Posted Image
  • If a suspicious file is detected, the default action will be Skip, click on Continue
    Posted Image
  • If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.
  • If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.

Please post the logs for my review.

>>>>>
I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Under scan settings, check Posted Image and check Remove found threats
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image


NOTE: In some instances if no malware is found there will be no log produced.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Wilburx13

Wilburx13
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:03 AM

Posted 05 December 2011 - 11:11 PM

Hi, thanks for your help. I ran the scans you requested on my administrator profile. While the ESET scan was running Microsoft Forefront found a few things:

Trojan:Win32/Sirefef.J
Exploit: Java/Blacole.BX
TrojanDropper: Win32/Sirefef.B
Exploit: JS/BlacoleRef.O
Rogue: Win32/FakeRean

It removed all of them

The logs are below:

MiniToolBox:
MiniToolBox by Farbar
Ran by Matthew (administrator) on 05-12-2011 at 20:21:42
Windows 7 Enterprise (X86)

***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Intel® WiFi Link 5300 AGN = Wireless Network Connection (Connected)
Intel® 82567LM Gigabit Network Connection = Local Area Connection (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : 2CE929CQCT
Primary Dns Suffix . . . . . . . : blue.ad.bentley.edu
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : blue.ad.bentley.edu
home
ad.bentley.edu
bentley.edu

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Intel® WiFi Link 5300 AGN
Physical Address. . . . . . . . . : 00-21-6A-5C-FB-C2
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.106(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, December 05, 2011 8:18:00 PM
Lease Expires . . . . . . . . . . : Tuesday, December 06, 2011 8:18:00 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Intel® 82567LM Gigabit Network Connection
Physical Address. . . . . . . . . : 00-26-55-57-43-DB
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Server: Wireless_Broadband_Router.home
Address: 192.168.1.1

Name: google.com
Addresses: 74.125.226.145
74.125.226.144
74.125.226.146
74.125.226.148
74.125.226.147


Pinging google.com [74.125.226.148] with 32 bytes of data:
Reply from 74.125.226.148: bytes=32 time=38ms TTL=251
Reply from 74.125.226.148: bytes=32 time=20ms TTL=251

Ping statistics for 74.125.226.148:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 20ms, Maximum = 38ms, Average = 29ms
Server: Wireless_Broadband_Router.home
Address: 192.168.1.1

Name: yahoo.com
Addresses: 98.137.149.56
98.139.180.149
209.191.122.70
72.30.2.43


Pinging yahoo.com [98.139.180.149] with 32 bytes of data:
Reply from 98.139.180.149: bytes=32 time=145ms TTL=48
Reply from 98.139.180.149: bytes=32 time=54ms TTL=48

Ping statistics for 98.139.180.149:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 54ms, Maximum = 145ms, Average = 99ms
Server: Wireless_Broadband_Router.home
Address: 192.168.1.1

Name: bleepingcomputer.com
Address: 208.43.87.2


Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:
Reply from 208.43.87.2: Destination host unreachable.
Reply from 208.43.87.2: Destination host unreachable.

Ping statistics for 208.43.87.2:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
12...00 21 6a 5c fb c2 ......Intel® WiFi Link 5300 AGN
11...00 26 55 57 43 db ......Intel® 82567LM Gigabit Network Connection
1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.106 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.106 281
192.168.1.106 255.255.255.255 On-link 192.168.1.106 281
192.168.1.255 255.255.255.255 On-link 192.168.1.106 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.106 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.106 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
1 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [51712] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 07 C:\Windows\system32\wshbth.dll [35840] (Microsoft Corporation)
Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (12/05/2011 08:17:06 PM) (Source: Microsoft Operations Manager) (User: SYSTEM)SYSTEM
Description: The agent could not resolve the IP of the MOM Server CLSVAV02.gold.ad.bentley.edu. The error reported is 'The requested name is valid, but no data of the requested type was found.'.

Error: (12/05/2011 07:27:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2074

Error: (12/05/2011 07:27:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2074

Error: (12/05/2011 07:27:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/05/2011 07:27:17 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1029

Error: (12/05/2011 07:27:17 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1029

Error: (12/05/2011 07:27:17 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/05/2011 07:25:33 PM) (Source: Microsoft Operations Manager) (User: SYSTEM)SYSTEM
Description: The Agent incoming queue data submission has been blocked.
This may indicate that queue does not have sufficient space or is unavailable to accept data.

Management Group: ForefrontClientSecurity

Error: (12/05/2011 07:19:36 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7223

Error: (12/05/2011 07:19:36 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7223


System errors:
=============
Error: (12/05/2011 08:17:21 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (12/05/2011 08:17:05 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (12/05/2011 08:17:05 PM) (Source: Microsoft-Windows-GroupPolicy) (User: SYSTEM)
Description: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator.

Error: (12/05/2011 07:25:41 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (12/05/2011 07:25:35 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (12/05/2011 05:31:49 PM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer CNU1283JJP
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{CD5B4F30-7694-4B1E-A0FD-8941832.
The master browser is stopping or an election is being forced.

Error: (12/05/2011 04:56:39 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (12/05/2011 04:56:30 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (12/05/2011 04:55:26 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (12/05/2011 04:34:33 PM) (Source: atikmdag) (User: )
Description: Display is not active


Microsoft Office Sessions:
=========================
Error: (03/28/2011 11:20:51 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 131 seconds with 60 seconds of active time. This session ended with a crash.

Error: (11/03/2010 11:14:21 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 12571 seconds with 300 seconds of active time. This session ended with a crash.

Error: (11/02/2010 10:05:02 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 42227 seconds with 2280 seconds of active time. This session ended with a crash.

Error: (10/23/2010 00:53:05 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3234 seconds with 60 seconds of active time. This session ended with a crash.


=========================== Installed Programs ============================

2007 Microsoft Office Suite Service Pack 2 (SP2)
32 Bit HP CIO Components Installer (Version: 3.1.1)
ACL Desktop Education Edition (Version: 9.0.0.243)
Adobe Flash Player 10 ActiveX (Version: 10.1.53.64)
Adobe Flash Player 10 Plugin (Version: 10.3.183.10)
Adobe Photoshop 7.0 (Version: 7.0)
Adobe Reader 9.4.6 (Version: 9.4.6)
Adobe Shockwave Player 11.5 (Version: 11.5.8.612)
Amazon Unbox Video (Version: 2.1.0.126)
Apple Application Support (Version: 2.1.5)
Apple Mobile Device Support (Version: 4.0.0.97)
Apple Software Update (Version: 2.1.3.127)
ArcSoft Print Creations
Audacity 1.2.6
AuthenTec Fingerprint Software (Version: 8.5.4.23)
BlackBerry Desktop Software 6.0 (Version: 6.0.0.43)
BlackBerry Device Software Updater (Version: 6.0.1.6)
Bonjour (Version: 3.0.0.10)
Centra Client
Command & Conquer Generals (Version: 0.50.0000)
Configuration Manager Client (Version: 4.00.6487.2000)
Data Lifeguard Diagnostic for Windows (Version: 1.13)
DigitalPersona Personal 4.11 (Version: 4.11.3811)
ECL Viewer (Version: 6.0)
EPSON Artisan 710 Series Printer Uninstall
EPSON CX7400 User's Guide
Epson Event Manager (Version: 2.30.01)
Epson Print CD (Version: 2.00.00)
EPSON Printer Software
EPSON Scan
EPSON Stylus CX7400 Series Scanner Driver Update
FileZilla Client 3.3.3 (Version: 3.3.3)
Google Earth Plug-in (Version: 6.1.0.5001)
Google Update Helper (Version: 1.3.21.79)
HiJackThis (Version: 1.0.0)
HP ESU for Microsoft Windows 7 (Version: 1.1.1.1)
HP Quick Launch Buttons (Version: 6.50.17.1)
HP Webcam Application (Version: 1.0.057.1114)
HP Wireless Assistant (Version: 3.50.9.1)
iTunes (Version: 10.5.1.42)
Java Auto Updater (Version: 2.0.2.4)
Java™ 6 Update 22 (Version: 6.0.220)
LAME v3.98.3 for Audacity
Malwarebytes' Anti-Malware version 1.51.2.1300 (Version: 1.51.2.1300)
MediaImpression 2.0 for PENTAX (Version: 2.0.63.630)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Expression Blend 3 (Version: 3.0.1927.0)
Microsoft Expression Blend 3 SDK (Version: 1.0.1327.0)
Microsoft Expression Design 3 (Version: 6.0.1739.0)
Microsoft Expression Encoder 3 (Version: 3.0.1332.0)
Microsoft Expression Studio 3 (Version: 3.0.1061.0)
Microsoft Expression Web 3 (Version: 3.0.1762.0)
Microsoft Forefront Client Security Antimalware Service (Version: 1.5.1996.1)
Microsoft Forefront Client Security State Assessment Service (Version: 1.0.1703.0)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Communicator 2005 (Version: 1.0.559.0)
Microsoft Office Enterprise 2007 (Version: 12.0.6425.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6425.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6425.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Visio 2010 (Version: 14.0.4763.1000)
Microsoft Office Visio MUI (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Operations Manager 2005 Agent (Version: 5.0.2911.0)
Microsoft redistributable runtime DLLs VS2008 SP1(x86) (Version: 9.0)
Microsoft Silverlight (Version: 4.0.60831.0)
Microsoft Silverlight 3 SDK (Version: 3.0.40624.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visio Professional 2010 (Version: 14.0.4763.1000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Mozilla Firefox 8.0.1 (x86 en-US) (Version: 8.0.1)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML4.0 redistributable (Version: 4.0.0.0)
Nitro PDF Reader (Version: 1.4.0.11)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
Pharos
Presto! BizCard 5 (Version: 5.60.04.9085)
PrimoPDF -- brought to you by Nitro PDF Software (Version: 5)
QLBCASL (Version: 6.40.17.2)
QuickTime (Version: 7.70.80.34)
RealPlayer
Roxio Activation Module (Version: 1.0)
Roxio Creator Audio (Version: 3.7.0)
Roxio Creator Business (Version: 10.1)
Roxio Creator Business v10 (Version: 3.7.0)
Roxio Creator Copy (Version: 3.7.0)
Roxio Creator Data (Version: 3.7.0)
Roxio Creator Tools (Version: 3.7.0)
Roxio Express Labeler 3 (Version: 3.2.2)
Roxio MyDVD (Version: 10.1.055)
SAP Business Explorer (Version: 7.20)
SAP GUI for Windows 7.20 (Version: 7.20 Compilation 1)
SmartDraw 2010 (Version: 18.12)
Sonic CinePlayer Decoder Pack (Version: 4.3.0)
Spotify (Version: 0.5.2)
Spybot - Search & Destroy (Version: 1.6.2)
SUPERAntiSpyware (Version: 4.56.1000)
Synaptics Pointing Device Driver (Version: 15.0.24.0)
Validity Sensors software (Version: 2.7.503)
vcredist_x86 (Version: 1.0.0)
VLC media player 1.1.5 (Version: 1.1.5)
WD Anywhere Backup
WD Drive Manager (x86) (Version: 2.107)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Movie Maker (Version: 14.0.8117.0416)
Windows Live Photo Gallery (Version: 14.0.8117.416)
Windows Live Sign-in Assistant (Version: 5.000.818.5)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live Upload Tool (Version: 14.0.8014.1029)
Windows Movie Maker 2.6 (Version: 2.6.4037.0)
WinRAR archiver
WPF Toolkit June 2009 (Version 3.5.40619.1) (Version: 3.5.40619.1)

========================= Memory info: ===================================

Percentage of memory in use: 48%
Total physical RAM: 3036.27 MB
Available physical RAM: 1555.97 MB
Total Pagefile: 6070.81 MB
Available Pagefile: 4214.43 MB
Total Virtual: 2047.88 MB
Available Virtual: 1929.04 MB

========================= Partitions: =====================================

1 Drive c: (OSDisk) (Fixed) (Total:230.59 GB) (Free:125.16 GB) NTFS
3 Drive f: (HP_TOOLS) (Fixed) (Total:2 GB) (Free:1.99 GB) FAT32

========================= Users: ========================================

User accounts for \\2CE929CQCT

Administrator Guest Matthew
sysadmin

========================= Minidump Files ==================================

No minidump file found

**** End of log ****

TDSS Log:

20:25:07.0760 7828 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:44
20:25:07.0963 7828 ============================================================
20:25:07.0963 7828 Current date / time: 2011/12/05 20:25:07.0963
20:25:07.0963 7828 SystemInfo:
20:25:07.0963 7828
20:25:07.0963 7828 OS Version: 6.1.7600 ServicePack: 0.0
20:25:07.0963 7828 Product type: Workstation
20:25:07.0963 7828 ComputerName: 2CE929CQCT
20:25:07.0963 7828 UserName: Matthew
20:25:07.0963 7828 Windows directory: C:\Windows
20:25:07.0963 7828 System windows directory: C:\Windows
20:25:07.0963 7828 Processor architecture: Intel x86
20:25:07.0963 7828 Number of processors: 2
20:25:07.0963 7828 Page size: 0x1000
20:25:07.0963 7828 Boot type: Normal boot
20:25:07.0963 7828 ============================================================
20:25:09.0429 7828 Initialize success
20:25:10.0989 2528 ============================================================
20:25:10.0989 2528 Scan started
20:25:10.0989 2528 Mode: Manual;
20:25:10.0989 2528 ============================================================
20:25:12.0206 2528 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
20:25:12.0222 2528 1394ohci - ok
20:25:12.0284 2528 Accelerometer (465b6baaba53a628f7252846d0e900ee) C:\Windows\system32\DRIVERS\Accelerometer.sys
20:25:12.0284 2528 Accelerometer - ok
20:25:12.0362 2528 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
20:25:12.0378 2528 ACPI - ok
20:25:12.0425 2528 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
20:25:12.0425 2528 AcpiPmi - ok
20:25:12.0487 2528 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\Windows\system32\drivers\ADIHdAud.sys
20:25:12.0487 2528 ADIHdAudAddService - ok
20:25:12.0565 2528 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
20:25:12.0565 2528 adp94xx - ok
20:25:12.0643 2528 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
20:25:12.0659 2528 adpahci - ok
20:25:12.0705 2528 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
20:25:12.0705 2528 adpu320 - ok
20:25:12.0783 2528 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\Windows\system32\drivers\Afc.sys
20:25:12.0799 2528 Afc - ok
20:25:12.0877 2528 AFD (0db7a48388d54d154ebec120461a0fcd) C:\Windows\system32\drivers\afd.sys
20:25:12.0893 2528 AFD - ok
20:25:12.0986 2528 AgereSoftModem (faa5a0b80e011464c7654851ce3d7fe7) C:\Windows\system32\DRIVERS\AGRSM.sys
20:25:13.0033 2528 AgereSoftModem - ok
20:25:13.0095 2528 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
20:25:13.0095 2528 agp440 - ok
20:25:13.0142 2528 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
20:25:13.0158 2528 aic78xx - ok
20:25:13.0236 2528 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
20:25:13.0236 2528 aliide - ok
20:25:13.0283 2528 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
20:25:13.0298 2528 amdagp - ok
20:25:13.0329 2528 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
20:25:13.0345 2528 amdide - ok
20:25:13.0392 2528 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
20:25:13.0392 2528 AmdK8 - ok
20:25:13.0439 2528 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
20:25:13.0454 2528 AmdPPM - ok
20:25:13.0517 2528 amdsata (19ce906b4cdc11fc4fef5745f33a63b6) C:\Windows\system32\drivers\amdsata.sys
20:25:13.0532 2528 amdsata - ok
20:25:13.0595 2528 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
20:25:13.0610 2528 amdsbs - ok
20:25:13.0673 2528 amdxata (869e67d66be326a5a9159fba8746fa70) C:\Windows\system32\drivers\amdxata.sys
20:25:13.0673 2528 amdxata - ok
20:25:13.0735 2528 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
20:25:13.0735 2528 AppID - ok
20:25:13.0813 2528 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
20:25:13.0813 2528 arc - ok
20:25:13.0875 2528 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
20:25:13.0875 2528 arcsas - ok
20:25:13.0922 2528 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
20:25:13.0922 2528 AsyncMac - ok
20:25:13.0985 2528 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
20:25:13.0985 2528 atapi - ok
20:25:14.0156 2528 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
20:25:14.0219 2528 atikmdag - ok
20:25:14.0281 2528 ATSwpWDF (53ff3096d5d9ae2a75c16703a9819965) C:\Windows\system32\Drivers\ATSwpWDF.sys
20:25:14.0312 2528 ATSwpWDF - ok
20:25:14.0406 2528 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
20:25:14.0421 2528 b06bdrv - ok
20:25:14.0484 2528 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
20:25:14.0484 2528 b57nd60x - ok
20:25:14.0531 2528 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
20:25:14.0531 2528 Beep - ok
20:25:14.0577 2528 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
20:25:14.0577 2528 blbdrive - ok
20:25:14.0655 2528 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\Windows\system32\DRIVERS\bowser.sys
20:25:14.0655 2528 bowser - ok
20:25:14.0702 2528 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:25:14.0702 2528 BrFiltLo - ok
20:25:14.0749 2528 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:25:14.0749 2528 BrFiltUp - ok
20:25:14.0827 2528 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
20:25:14.0827 2528 Brserid - ok
20:25:14.0858 2528 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
20:25:14.0874 2528 BrSerWdm - ok
20:25:14.0905 2528 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
20:25:14.0905 2528 BrUsbMdm - ok
20:25:14.0967 2528 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
20:25:14.0967 2528 BrUsbSer - ok
20:25:15.0045 2528 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\drivers\BthEnum.sys
20:25:15.0061 2528 BthEnum - ok
20:25:15.0155 2528 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
20:25:15.0170 2528 BTHMODEM - ok
20:25:15.0279 2528 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys
20:25:15.0279 2528 BthPan - ok
20:25:15.0342 2528 BTHPORT (88059ff1ded4472acd17eebabd393069) C:\Windows\System32\Drivers\BTHport.sys
20:25:15.0357 2528 BTHPORT - ok
20:25:15.0435 2528 BTHUSB (80e6384beec03b8bd45edea29802d657) C:\Windows\System32\Drivers\BTHUSB.sys
20:25:15.0435 2528 BTHUSB - ok
20:25:15.0529 2528 catchme - ok
20:25:15.0607 2528 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
20:25:15.0607 2528 cdfs - ok
20:25:15.0669 2528 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
20:25:15.0669 2528 cdrom - ok
20:25:15.0716 2528 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
20:25:15.0732 2528 circlass - ok
20:25:15.0779 2528 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
20:25:15.0794 2528 CLFS - ok
20:25:15.0857 2528 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
20:25:15.0857 2528 CmBatt - ok
20:25:15.0919 2528 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
20:25:15.0919 2528 cmdide - ok
20:25:15.0966 2528 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
20:25:15.0981 2528 CNG - ok
20:25:16.0059 2528 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
20:25:16.0075 2528 Compbatt - ok
20:25:16.0122 2528 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
20:25:16.0122 2528 CompositeBus - ok
20:25:16.0169 2528 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
20:25:16.0184 2528 crcdisk - ok
20:25:16.0247 2528 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
20:25:16.0262 2528 CSC - ok
20:25:16.0356 2528 DfsC (83d1ecea8faae75604c0fa49ac7ad996) C:\Windows\system32\Drivers\dfsc.sys
20:25:16.0356 2528 DfsC - ok
20:25:16.0403 2528 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
20:25:16.0403 2528 discache - ok
20:25:16.0465 2528 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
20:25:16.0465 2528 Disk - ok
20:25:16.0559 2528 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
20:25:16.0559 2528 drmkaud - ok
20:25:16.0637 2528 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
20:25:16.0668 2528 DXGKrnl - ok
20:25:16.0715 2528 e1yexpress (44a91d98d6719b49bcd649a863225b5c) C:\Windows\system32\DRIVERS\e1y6232.sys
20:25:16.0730 2528 e1yexpress - ok
20:25:16.0855 2528 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
20:25:16.0886 2528 ebdrv - ok
20:25:16.0980 2528 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
20:25:16.0995 2528 elxstor - ok
20:25:17.0042 2528 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
20:25:17.0042 2528 ErrDev - ok
20:25:17.0120 2528 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
20:25:17.0120 2528 exfat - ok
20:25:17.0167 2528 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
20:25:17.0167 2528 fastfat - ok
20:25:17.0245 2528 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
20:25:17.0245 2528 fdc - ok
20:25:17.0292 2528 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
20:25:17.0292 2528 FileInfo - ok
20:25:17.0323 2528 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
20:25:17.0339 2528 Filetrace - ok
20:25:17.0354 2528 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
20:25:17.0354 2528 flpydisk - ok
20:25:17.0417 2528 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
20:25:17.0417 2528 FltMgr - ok
20:25:17.0463 2528 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
20:25:17.0463 2528 FsDepends - ok
20:25:17.0495 2528 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
20:25:17.0510 2528 Fs_Rec - ok
20:25:17.0557 2528 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
20:25:17.0557 2528 fvevol - ok
20:25:17.0651 2528 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
20:25:17.0651 2528 gagp30kx - ok
20:25:17.0713 2528 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:25:17.0713 2528 GEARAspiWDM - ok
20:25:17.0791 2528 HBtnKey (7dad592a4d28092d584cfb4deef1373d) C:\Windows\system32\DRIVERS\cpqbttn.sys
20:25:17.0791 2528 HBtnKey - ok
20:25:17.0838 2528 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
20:25:17.0838 2528 hcw85cir - ok
20:25:17.0885 2528 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
20:25:17.0885 2528 HDAudBus - ok
20:25:17.0947 2528 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
20:25:17.0947 2528 HidBatt - ok
20:25:17.0994 2528 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
20:25:18.0009 2528 HidBth - ok
20:25:18.0056 2528 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
20:25:18.0072 2528 HidIr - ok
20:25:18.0119 2528 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
20:25:18.0119 2528 HidUsb - ok
20:25:18.0165 2528 hpdskflt (d5c35e6416a379c445cda826b9fe452f) C:\Windows\system32\DRIVERS\hpdskflt.sys
20:25:18.0165 2528 hpdskflt - ok
20:25:18.0197 2528 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
20:25:18.0212 2528 HpqKbFiltr - ok
20:25:18.0275 2528 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
20:25:18.0275 2528 HpSAMD - ok
20:25:18.0384 2528 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
20:25:18.0399 2528 HTTP - ok
20:25:18.0493 2528 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
20:25:18.0493 2528 hwpolicy - ok
20:25:18.0555 2528 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
20:25:18.0555 2528 i8042prt - ok
20:25:18.0633 2528 iaStorV (71f1a494fedf4b33c02c4a6a28d6d9e9) C:\Windows\system32\drivers\iaStorV.sys
20:25:18.0633 2528 iaStorV - ok
20:25:18.0711 2528 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
20:25:18.0711 2528 iirsp - ok
20:25:18.0789 2528 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
20:25:18.0789 2528 intelide - ok
20:25:18.0836 2528 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
20:25:18.0836 2528 intelppm - ok
20:25:18.0883 2528 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:25:18.0883 2528 IpFilterDriver - ok
20:25:18.0945 2528 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
20:25:18.0945 2528 IPMIDRV - ok
20:25:18.0977 2528 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
20:25:18.0977 2528 IPNAT - ok
20:25:19.0055 2528 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
20:25:19.0055 2528 IRENUM - ok
20:25:19.0117 2528 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
20:25:19.0117 2528 isapnp - ok
20:25:19.0179 2528 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
20:25:19.0179 2528 iScsiPrt - ok
20:25:19.0242 2528 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
20:25:19.0242 2528 kbdclass - ok
20:25:19.0304 2528 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
20:25:19.0304 2528 kbdhid - ok
20:25:19.0351 2528 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
20:25:19.0351 2528 KSecDD - ok
20:25:19.0398 2528 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
20:25:19.0398 2528 KSecPkg - ok
20:25:19.0476 2528 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
20:25:19.0476 2528 lltdio - ok
20:25:19.0554 2528 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
20:25:19.0554 2528 LSI_FC - ok
20:25:19.0616 2528 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
20:25:19.0616 2528 LSI_SAS - ok
20:25:19.0711 2528 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:25:19.0742 2528 LSI_SAS2 - ok
20:25:19.0804 2528 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:25:19.0804 2528 LSI_SCSI - ok
20:25:19.0867 2528 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
20:25:19.0867 2528 luafv - ok
20:25:19.0960 2528 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\Windows\system32\drivers\mbam.sys
20:25:19.0976 2528 MBAMProtector - ok
20:25:20.0038 2528 mchInjDrv - ok
20:25:20.0101 2528 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
20:25:20.0101 2528 megasas - ok
20:25:20.0179 2528 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
20:25:20.0179 2528 MegaSR - ok
20:25:20.0257 2528 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
20:25:20.0257 2528 Modem - ok
20:25:20.0444 2528 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
20:25:20.0460 2528 monitor - ok
20:25:20.0553 2528 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
20:25:20.0553 2528 mouclass - ok
20:25:20.0600 2528 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
20:25:20.0600 2528 mouhid - ok
20:25:20.0631 2528 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
20:25:20.0647 2528 mountmgr - ok
20:25:20.0694 2528 MpFilter (356842aac621ab40f18992c01a590f71) C:\Windows\system32\DRIVERS\MpFilter.sys
20:25:20.0709 2528 MpFilter - ok
20:25:20.0756 2528 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
20:25:20.0756 2528 mpio - ok
20:25:20.0787 2528 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
20:25:20.0803 2528 mpsdrv - ok
20:25:20.0834 2528 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
20:25:20.0850 2528 MRxDAV - ok
20:25:20.0928 2528 mrxsmb (ca7570e42522e24324a12161db14ec02) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:25:20.0943 2528 mrxsmb - ok
20:25:20.0990 2528 mrxsmb10 (f965c3ab2b2ae5c378f4562486e35051) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:25:21.0006 2528 mrxsmb10 - ok
20:25:21.0037 2528 mrxsmb20 (25c38264a3c72594dd21d355d70d7a5d) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:25:21.0037 2528 mrxsmb20 - ok
20:25:21.0084 2528 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
20:25:21.0084 2528 msahci - ok
20:25:21.0146 2528 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
20:25:21.0146 2528 msdsm - ok
20:25:21.0240 2528 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
20:25:21.0240 2528 Msfs - ok
20:25:21.0271 2528 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
20:25:21.0286 2528 mshidkmdf - ok
20:25:21.0318 2528 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
20:25:21.0333 2528 msisadrv - ok
20:25:21.0380 2528 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
20:25:21.0396 2528 MSKSSRV - ok
20:25:21.0442 2528 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
20:25:21.0442 2528 MSPCLOCK - ok
20:25:21.0489 2528 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
20:25:21.0489 2528 MSPQM - ok
20:25:21.0536 2528 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
20:25:21.0536 2528 MsRPC - ok
20:25:21.0614 2528 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
20:25:21.0614 2528 mssmbios - ok
20:25:21.0645 2528 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
20:25:21.0645 2528 MSTEE - ok
20:25:21.0692 2528 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
20:25:21.0692 2528 MTConfig - ok
20:25:21.0723 2528 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
20:25:21.0739 2528 Mup - ok
20:25:21.0817 2528 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
20:25:21.0817 2528 NativeWifiP - ok
20:25:21.0879 2528 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
20:25:21.0910 2528 NDIS - ok
20:25:21.0957 2528 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
20:25:21.0957 2528 NdisCap - ok
20:25:22.0004 2528 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
20:25:22.0004 2528 NdisTapi - ok
20:25:22.0051 2528 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
20:25:22.0051 2528 Ndisuio - ok
20:25:22.0113 2528 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
20:25:22.0113 2528 NdisWan - ok
20:25:22.0144 2528 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
20:25:22.0144 2528 NDProxy - ok
20:25:22.0222 2528 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
20:25:22.0222 2528 NetBIOS - ok
20:25:22.0269 2528 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
20:25:22.0285 2528 NetBT - ok
20:25:22.0519 2528 NETw5s32 (5b2dfa9c5c02ddf2a113cc0f551b59df) C:\Windows\system32\DRIVERS\NETw5s32.sys
20:25:22.0566 2528 NETw5s32 - ok
20:25:22.0628 2528 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
20:25:22.0628 2528 nfrd960 - ok
20:25:22.0690 2528 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
20:25:22.0690 2528 Npfs - ok
20:25:22.0722 2528 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
20:25:22.0722 2528 nsiproxy - ok
20:25:22.0846 2528 Ntfs (187002ce05693c306f43c873f821381f) C:\Windows\system32\drivers\Ntfs.sys
20:25:22.0846 2528 Ntfs - ok
20:25:22.0893 2528 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
20:25:22.0893 2528 Null - ok
20:25:22.0971 2528 nvraid (f1b0bed906f97e16f6d0c3629d2f21c6) C:\Windows\system32\drivers\nvraid.sys
20:25:22.0987 2528 nvraid - ok
20:25:23.0034 2528 nvstor (4520b63899e867f354ee012d34e11536) C:\Windows\system32\drivers\nvstor.sys
20:25:23.0049 2528 nvstor - ok
20:25:23.0112 2528 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
20:25:23.0112 2528 nv_agp - ok
20:25:23.0174 2528 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
20:25:23.0174 2528 ohci1394 - ok
20:25:23.0283 2528 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
20:25:23.0283 2528 Parport - ok
20:25:23.0330 2528 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
20:25:23.0330 2528 partmgr - ok
20:25:23.0361 2528 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
20:25:23.0361 2528 Parvdm - ok
20:25:23.0408 2528 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
20:25:23.0408 2528 pci - ok
20:25:23.0455 2528 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
20:25:23.0455 2528 pciide - ok
20:25:23.0502 2528 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
20:25:23.0502 2528 pcmcia - ok
20:25:23.0548 2528 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
20:25:23.0548 2528 pcw - ok
20:25:23.0595 2528 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
20:25:23.0611 2528 PEAUTH - ok
20:25:23.0736 2528 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
20:25:23.0736 2528 PptpMiniport - ok
20:25:23.0798 2528 prepdrvr (2a4514a9233d35a355f569ff8b8f6240) C:\Windows\system32\CCM\prepdrv.sys
20:25:23.0798 2528 prepdrvr - ok
20:25:23.0829 2528 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
20:25:23.0829 2528 Processor - ok
20:25:23.0876 2528 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
20:25:23.0892 2528 Psched - ok
20:25:23.0923 2528 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\Windows\system32\Drivers\PxHelp20.sys
20:25:23.0923 2528 PxHelp20 - ok
20:25:24.0001 2528 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
20:25:24.0032 2528 ql2300 - ok
20:25:24.0079 2528 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
20:25:24.0079 2528 ql40xx - ok
20:25:24.0110 2528 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
20:25:24.0126 2528 QWAVEdrv - ok
20:25:24.0141 2528 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
20:25:24.0141 2528 RasAcd - ok
20:25:24.0188 2528 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
20:25:24.0188 2528 RasAgileVpn - ok
20:25:24.0219 2528 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:25:24.0219 2528 Rasl2tp - ok
20:25:24.0266 2528 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
20:25:24.0266 2528 RasPppoe - ok
20:25:24.0297 2528 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
20:25:24.0297 2528 RasSstp - ok
20:25:24.0328 2528 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
20:25:24.0344 2528 rdbss - ok
20:25:24.0391 2528 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
20:25:24.0391 2528 rdpbus - ok
20:25:24.0422 2528 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:25:24.0422 2528 RDPCDD - ok
20:25:24.0453 2528 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
20:25:24.0469 2528 RDPDR - ok
20:25:24.0500 2528 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
20:25:24.0500 2528 RDPENCDD - ok
20:25:24.0516 2528 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
20:25:24.0531 2528 RDPREFMP - ok
20:25:24.0562 2528 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
20:25:24.0562 2528 RDPWD - ok
20:25:24.0609 2528 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
20:25:24.0609 2528 rdyboost - ok
20:25:24.0687 2528 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys
20:25:24.0687 2528 RFCOMM - ok
20:25:24.0750 2528 rimmptsk (df672613fbbcd58c38bb0bc2694bcfb0) C:\Windows\system32\DRIVERS\rimmptsk.sys
20:25:24.0750 2528 rimmptsk - ok
20:25:24.0796 2528 rimsptsk (d7e09bc852684a7b1fc0f74fe090d45a) C:\Windows\system32\DRIVERS\rimsptsk.sys
20:25:24.0796 2528 rimsptsk - ok
20:25:24.0874 2528 RimUsb (f17713d108aca124a139fde877eef68a) C:\Windows\system32\Drivers\RimUsb.sys
20:25:24.0874 2528 RimUsb - ok
20:25:24.0952 2528 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\Windows\system32\DRIVERS\RimSerial.sys
20:25:24.0968 2528 RimVSerPort - ok
20:25:24.0999 2528 rismc32 (470fc46e2989f6606043c1c5365b15fd) C:\Windows\system32\DRIVERS\rismc32.sys
20:25:24.0999 2528 rismc32 - ok
20:25:25.0046 2528 rismxdp (b0a7494a9ba7909efac64e05d3f160db) C:\Windows\system32\DRIVERS\rixdptsk.sys
20:25:25.0046 2528 rismxdp - ok
20:25:25.0108 2528 ROOTMODEM (564297827d213f52c7a3a2ff749568ca) C:\Windows\system32\Drivers\RootMdm.sys
20:25:25.0124 2528 ROOTMODEM - ok
20:25:25.0186 2528 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
20:25:25.0186 2528 rspndr - ok
20:25:25.0218 2528 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
20:25:25.0218 2528 s3cap - ok
20:25:25.0358 2528 SASDIFSV (4bfbb868c869a4f8486d4c36849d59cf) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
20:25:25.0358 2528 SASDIFSV - ok
20:25:25.0389 2528 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
20:25:25.0389 2528 SASKUTIL - ok
20:25:25.0420 2528 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
20:25:25.0436 2528 sbp2port - ok
20:25:25.0483 2528 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
20:25:25.0483 2528 scfilter - ok
20:25:25.0530 2528 sdbus (aa826e35f6d28a8e5d1efeb337f24ba2) C:\Windows\system32\DRIVERS\sdbus.sys
20:25:25.0545 2528 sdbus - ok
20:25:25.0576 2528 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
20:25:25.0576 2528 secdrv - ok
20:25:25.0654 2528 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
20:25:25.0654 2528 Serenum - ok
20:25:25.0686 2528 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
20:25:25.0686 2528 Serial - ok
20:25:25.0732 2528 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
20:25:25.0732 2528 sermouse - ok
20:25:25.0795 2528 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
20:25:25.0810 2528 sffdisk - ok
20:25:25.0842 2528 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
20:25:25.0842 2528 sffp_mmc - ok
20:25:25.0873 2528 sffp_sd (a0708bbd07d245c06ff9de549ca47185) C:\Windows\system32\DRIVERS\sffp_sd.sys
20:25:25.0873 2528 sffp_sd - ok
20:25:25.0904 2528 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
20:25:25.0904 2528 sfloppy - ok
20:25:25.0966 2528 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
20:25:25.0966 2528 sisagp - ok
20:25:26.0013 2528 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:25:26.0013 2528 SiSRaid2 - ok
20:25:26.0044 2528 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
20:25:26.0044 2528 SiSRaid4 - ok
20:25:26.0107 2528 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
20:25:26.0107 2528 Smb - ok
20:25:26.0232 2528 SNP2UVC (869d33035d5ca4b5bc58777b8fd1f47f) C:\Windows\system32\DRIVERS\snp2uvc.sys
20:25:26.0278 2528 SNP2UVC - ok
20:25:26.0310 2528 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
20:25:26.0310 2528 spldr - ok
20:25:26.0388 2528 srv (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\Windows\system32\DRIVERS\srv.sys
20:25:26.0403 2528 srv - ok
20:25:26.0466 2528 srv2 (414bb592cad8a79649d01f9d94318fb3) C:\Windows\system32\DRIVERS\srv2.sys
20:25:26.0481 2528 srv2 - ok
20:25:26.0528 2528 srvnet (ff207d67700aa18242aaf985d3e7d8f4) C:\Windows\system32\DRIVERS\srvnet.sys
20:25:26.0544 2528 srvnet - ok
20:25:26.0606 2528 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
20:25:26.0606 2528 stexstor - ok
20:25:26.0668 2528 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
20:25:26.0668 2528 storflt - ok
20:25:26.0731 2528 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
20:25:26.0731 2528 storvsc - ok
20:25:26.0763 2528 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
20:25:26.0779 2528 swenum - ok
20:25:26.0888 2528 SynTP (0e8676fb3bb95aa40fdf7a4a31018c8b) C:\Windows\system32\DRIVERS\SynTP.sys
20:25:26.0966 2528 SynTP - ok
20:25:27.0075 2528 Tcpip (56c198ac82efa622dd93e9e43575f79c) C:\Windows\system32\drivers\tcpip.sys
20:25:27.0122 2528 Tcpip - ok
20:25:27.0169 2528 TCPIP6 (56c198ac82efa622dd93e9e43575f79c) C:\Windows\system32\DRIVERS\tcpip.sys
20:25:27.0200 2528 TCPIP6 - ok
20:25:27.0231 2528 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
20:25:27.0231 2528 tcpipreg - ok
20:25:27.0262 2528 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
20:25:27.0262 2528 TDPIPE - ok
20:25:27.0278 2528 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
20:25:27.0293 2528 TDTCP - ok
20:25:27.0309 2528 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
20:25:27.0325 2528 tdx - ok
20:25:27.0340 2528 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
20:25:27.0356 2528 TermDD - ok
20:25:27.0403 2528 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\Windows\system32\drivers\tpm.sys
20:25:27.0418 2528 TPM - ok
20:25:27.0465 2528 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:25:27.0465 2528 tssecsrv - ok
20:25:27.0512 2528 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
20:25:27.0512 2528 tunnel - ok
20:25:27.0559 2528 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
20:25:27.0559 2528 uagp35 - ok
20:25:27.0605 2528 udfs (2efee45a340e1590e37c2f2bac16d051) C:\Windows\system32\DRIVERS\udfs.sys
20:25:27.0621 2528 udfs - ok
20:25:27.0668 2528 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
20:25:27.0668 2528 uliagpkx - ok
20:25:27.0715 2528 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
20:25:27.0715 2528 umbus - ok
20:25:27.0746 2528 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
20:25:27.0746 2528 UmPass - ok
20:25:27.0809 2528 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys
20:25:27.0825 2528 USBAAPL - ok
20:25:27.0872 2528 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
20:25:27.0872 2528 usbccgp - ok
20:25:27.0918 2528 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
20:25:27.0918 2528 usbcir - ok
20:25:27.0981 2528 usbehci (5b71019a6aca0116fd21b368f19c0b91) C:\Windows\system32\DRIVERS\usbehci.sys
20:25:27.0996 2528 usbehci - ok
20:25:28.0059 2528 usbhub (5823d3965c2a4f6f785ed1a3b403f3b8) C:\Windows\system32\DRIVERS\usbhub.sys
20:25:28.0059 2528 usbhub - ok
20:25:28.0106 2528 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\drivers\usbohci.sys
20:25:28.0106 2528 usbohci - ok
20:25:28.0137 2528 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
20:25:28.0137 2528 usbprint - ok
20:25:28.0184 2528 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
20:25:28.0184 2528 usbscan - ok
20:25:28.0246 2528 USBSTOR (1c4287739a93594e57e2a9e6a3ed7353) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:25:28.0246 2528 USBSTOR - ok
20:25:28.0293 2528 usbuhci (6a30928a469ce802600e1ea8c0f2f53f) C:\Windows\system32\DRIVERS\usbuhci.sys
20:25:28.0308 2528 usbuhci - ok
20:25:28.0355 2528 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
20:25:28.0355 2528 vdrvroot - ok
20:25:28.0402 2528 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
20:25:28.0402 2528 vga - ok
20:25:28.0433 2528 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
20:25:28.0449 2528 VgaSave - ok
20:25:28.0480 2528 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
20:25:28.0496 2528 vhdmp - ok
20:25:28.0542 2528 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
20:25:28.0542 2528 viaagp - ok
20:25:28.0574 2528 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
20:25:28.0589 2528 ViaC7 - ok
20:25:28.0620 2528 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
20:25:28.0620 2528 viaide - ok
20:25:28.0714 2528 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
20:25:28.0714 2528 vmbus - ok
20:25:28.0745 2528 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
20:25:28.0745 2528 VMBusHID - ok
20:25:28.0793 2528 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
20:25:28.0793 2528 volmgr - ok
20:25:28.0855 2528 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
20:25:28.0855 2528 volmgrx - ok
20:25:28.0933 2528 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
20:25:28.0933 2528 volsnap - ok
20:25:28.0996 2528 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
20:25:28.0996 2528 vsmraid - ok
20:25:29.0043 2528 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
20:25:29.0043 2528 vwifibus - ok
20:25:29.0105 2528 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
20:25:29.0105 2528 vwififlt - ok
20:25:29.0167 2528 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
20:25:29.0167 2528 WacomPen - ok
20:25:29.0214 2528 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
20:25:29.0230 2528 WANARP - ok
20:25:29.0245 2528 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
20:25:29.0245 2528 Wanarpv6 - ok
20:25:29.0308 2528 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
20:25:29.0308 2528 Wd - ok
20:25:29.0370 2528 WDC_SAM (d6efaf429fd30c5df613d220e344cce7) C:\Windows\system32\DRIVERS\wdcsam.sys
20:25:29.0370 2528 WDC_SAM - ok
20:25:29.0417 2528 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
20:25:29.0433 2528 Wdf01000 - ok
20:25:29.0526 2528 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
20:25:29.0526 2528 WfpLwf - ok
20:25:29.0573 2528 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
20:25:29.0573 2528 WIMMount - ok
20:25:29.0667 2528 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
20:25:29.0667 2528 WinUsb - ok
20:25:29.0745 2528 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
20:25:29.0745 2528 WmiAcpi - ok
20:25:29.0791 2528 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
20:25:29.0807 2528 ws2ifsl - ok
20:25:29.0854 2528 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
20:25:29.0854 2528 WudfPf - ok
20:25:29.0901 2528 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:25:29.0916 2528 WUDFRd - ok
20:25:29.0979 2528 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
20:25:30.0025 2528 \Device\Harddisk0\DR0 - ok
20:25:30.0072 2528 Boot (0x1200) (457229bc9c4f1cd0b396d217c6c73bb9) \Device\Harddisk0\DR0\Partition0
20:25:30.0072 2528 \Device\Harddisk0\DR0\Partition0 - ok
20:25:30.0103 2528 Boot (0x1200) (870dbe9fcc506b16b5532640b9ad1552) \Device\Harddisk0\DR0\Partition1
20:25:30.0103 2528 \Device\Harddisk0\DR0\Partition1 - ok
20:25:30.0119 2528 Boot (0x1200) (482d7ee68567105b9ebbf0e53a8bc8c4) \Device\Harddisk0\DR0\Partition2
20:25:30.0119 2528 \Device\Harddisk0\DR0\Partition2 - ok
20:25:30.0119 2528 ============================================================
20:25:30.0119 2528 Scan finished
20:25:30.0119 2528 ============================================================
20:25:30.0135 2384 Detected object count: 0
20:25:30.0135 2384 Actual detected object count: 0

ESET Log:

C:\Users\QUARTE_MATT\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\5eab9fd7-54f29efe Java/Agent.AC trojan deleted - quarantined
C:\Users\QUARTE_MATT\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\5eab9fd7-54f29efe5E43CC36 Java/Agent.AC trojan deleted - quarantined
C:\Users\QUARTE_MATT\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\28fc15fc-2cae808e Java/TrojanDownloader.Agent.NCM trojan deleted - quarantined
C:\Users\QUARTE_MATT\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\28fc15fc-2cae808e.E4FC665D761E6ADB Java/TrojanDownloader.Agent.NCM trojan deleted - quarantined

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:03 AM

Posted 06 December 2011 - 12:59 PM

HI, Looks a lot better. You need to update some thimngs..
Remove the version of HiJack This you have it's outdated.

You need to update Superantispyware. The version you ran is old.. It's at 5.0.1136
May as well update it and rerun it.


Update Java and Adobe...

Important Note: Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.Please follow these steps to remove older version Java components and update:
  • Download the latest version of Java Runtime Environment (JRE) Version 7 and save it to your desktop.
  • Look for "Java Platform, Standard Edition".
  • Click the "Download JRE" button to the right.
  • Read the License Agreement, and then check the box that says: "Accept License Agreement".
  • From the list, select your OS and Platform (32-bit or 64-bit).
  • If a download for an Offline Installation is available, it is recommended to choose that and save the file to your desktop.
  • Close any programs you may have running - especially your web browser.
Go to Posted Image > Control Panel, double-click on Add/Remove Programs or Programs and Features in Vista/Windows 7 and remove all older versions of Java.
  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-7u1-windows-i586-s.exe (or jre-7u1-windows-x64.exe for 64-bit) to install the newest version.
  • If using Windows 7 or Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
  • When the Java Setup - Welcome window opens, click the Install > button.
  • If offered to install a Toolbar, just uncheck the box before continuing unless you want it.
  • The McAfee Security Scan Plus tool is installed by default unless you uncheck the McAfee installation box when updating Java.
Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications but it's not necessary.
To disable the JQS service if you don't want to use it:
  • Go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter.
  • Click Ok and reboot your computer.


Similarly Update to Adobe Reader X (10.1.0)
Note UN check the box so you do not install the toolbar,unless you really want it..

Free! Google Toolbar search Google from any web page, block pop-ups

Yes, install Google Toolbar - optional

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users