Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

very very slow pc


  • Please log in to reply
23 replies to this topic

#1 superqaz

superqaz

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 01 April 2013 - 07:09 AM

hi

 

am i infected . pc suddenly painfully slow to do any task including web and right clicks, and ocassional web redirection

 

ran avast and malwarebytes scanners and defrag and checked for server reshaping [but i have been doing a lot of torrents

 

xp pro sp3

 

thanks


Edited by superqaz, 01 April 2013 - 07:24 AM.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:15 AM

Posted 01 April 2013 - 10:55 AM

Welcome.. see

Slow Computer/browser? Check Here First; It May Not Be Malware

 

We will also check as torrents are like apromise to be infected.

 

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:

  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

 

 

 

Please Download TDSSkiller
Launch it.
Click on change parameters-Select TDLFS file system
Click on "Scan".
Please post the LOG report(log file should be in your C drive)
 
Do not change the default options on scan results.

 

 

 

Please download AdwCleaner by Xplode onto your desktop.
•Close all open programs and internet browsers.
•Double click on adwcleaner.exe to run the tool.
•Click on Delete.
•Confirm each time with Ok.
•You will be prompted to restart your computer. A text file will open after the restart.
•Please post the contents of that logfile with your next reply.
•You can find the logfile at C:\AdwCleaner[S1].txt as well.


>>>>

Now I'd like us to scan your machine with ESET OnlineScan

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png  button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

NOTE:Sometimes if ESET finds no infections it will not create a log.


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 superqaz

superqaz
  • Topic Starter

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 02 April 2013 - 01:49 PM

sorry about delay, i missed seeing email from u

 

here are logs

 

i forgot to close FF when i "Reset FF Proxy Settings" does it matter?

 

thanks

 

 

MiniToolBox by Farbar  Version:05-03-2013
Ran by m (administrator) on 02-04-2013 at 19:44:39
Running from "C:\Documents and Settings\m\My Documents\Downloads"
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"network.proxy.type", 0

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================


127.0.0.1       localhost

========================= IP Configuration: ================================

Broadcom NetXtreme 57xx Gigabit Controller = Local Area Connection (Connected)


# ----------------------------------
# Interface IP Configuration         
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Local Area Connection"

set address name="Local Area Connection" source=dhcp
set dns name="Local Area Connection" source=dhcp register=PRIMARY
set wins name="Local Area Connection" source=dhcp


popd
# End of interface IP configuration




Windows IP Configuration



        Host Name . . . . . . . . . . . . : b-2d11017b6bf24

        Primary Dns Suffix  . . . . . . . :

        Node Type . . . . . . . . . . . . : Unknown

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controller

        Physical Address. . . . . . . . . : 00-0F-1F-97-91-66

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 192.168.0.2

        Subnet Mask . . . . . . . . . . . : 255.255.255.0

        IP Address. . . . . . . . . . . . : fe80::20f:1fff:fe97:9166%4

        Default Gateway . . . . . . . . . : 192.168.0.1

        DHCP Server . . . . . . . . . . . : 192.168.0.1

        DNS Servers . . . . . . . . . . . : 192.168.0.1

                                            fec0:0:0:ffff::1%1

                                            fec0:0:0:ffff::2%1

                                            fec0:0:0:ffff::3%1

        Lease Obtained. . . . . . . . . . : 02 April 2013 19:37:53

        Lease Expires . . . . . . . . . . : 05 April 2013 19:37:53



Tunnel adapter Teredo Tunneling Pseudo-Interface:



        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

        Physical Address. . . . . . . . . : 00-00-FB-FC-B0-BD-22-7E

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : 2001:0:4137:9e76:0:fbfc:b0bd:227e

        IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%5

        Default Gateway . . . . . . . . . : ::

        NetBIOS over Tcpip. . . . . . . . : Disabled



Tunnel adapter Automatic Tunneling Pseudo-Interface:



        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface

        Physical Address. . . . . . . . . : C0-A8-00-02

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : fe80::5efe:192.168.0.2%2

        Default Gateway . . . . . . . . . :

        DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1

                                            fec0:0:0:ffff::2%1

                                            fec0:0:0:ffff::3%1

        NetBIOS over Tcpip. . . . . . . . : Disabled

Server:  UnKnown
Address:  192.168.0.1

Name:    google.com
Addresses:  173.194.41.142, 173.194.41.128, 173.194.41.129, 173.194.41.130
      173.194.41.131, 173.194.41.132, 173.194.41.133, 173.194.41.134, 173.194.41.135
      173.194.41.136, 173.194.41.137



Pinging google.com [173.194.41.137] with 32 bytes of data:



Reply from 173.194.41.137: bytes=32 time=23ms TTL=54

Reply from 173.194.41.137: bytes=32 time=23ms TTL=54



Ping statistics for 173.194.41.137:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 23ms, Maximum = 23ms, Average = 23ms

Server:  UnKnown
Address:  192.168.0.1

Name:    yahoo.com
Addresses:  98.138.253.109, 98.139.183.24, 206.190.36.45



Pinging yahoo.com [206.190.36.45] with 32 bytes of data:



Reply from 206.190.36.45: bytes=32 time=619ms TTL=47

Reply from 206.190.36.45: bytes=32 time=590ms TTL=47



Ping statistics for 206.190.36.45:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 590ms, Maximum = 619ms, Average = 604ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 0f 1f 97 91 66 ...... Broadcom NetXtreme 57xx Gigabit Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1     192.168.0.2      20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1      1
      192.168.0.0    255.255.255.0      192.168.0.2     192.168.0.2      20
      192.168.0.2  255.255.255.255        127.0.0.1       127.0.0.1      20
    192.168.0.255  255.255.255.255      192.168.0.2     192.168.0.2      20
        224.0.0.0        240.0.0.0      192.168.0.2     192.168.0.2      20
  255.255.255.255  255.255.255.255      192.168.0.2     192.168.0.2      1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (03/25/2013 05:45:53 PM) (Source: Application Hang) (User: )
Description: Hanging application qbittorrent.exe, version 3.0.9.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (03/16/2013 11:32:16 PM) (Source: Application Hang) (User: )
Description: Hanging application firefox.exe, version 18.0.1.4764, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (03/07/2013 04:22:32 AM) (Source: Application Error) (User: )
Description: Faulting application rndlresolversvc.exe, version 0.0.0.0, faulting module rndlresolversvc.exe, version 0.0.0.0, fault address 0x00003035.
Error in creating result PEAP-TLV in response to received PEAP-TLV (rndlresolversvc.exe!ld!)

Error: (03/07/2013 04:20:40 AM) (Source: Application Error) (User: )
Description: Faulting application rndlresolversvc.exe, version 0.0.0.0, faulting module rndlresolversvc.exe, version 0.0.0.0, fault address 0x00003035.
Processing media-specific event for [rndlresolversvc.exe!ws!]

Error: (03/06/2013 08:44:23 PM) (Source: Windows Search Service) (User: )
Description: Context: Windows Application, SystemIndex Catalog

Error: (03/06/2013 08:16:22 PM) (Source: Application Hang) (User: )
Description: Hanging application firefox.exe, version 18.0.1.4764, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (03/06/2013 08:16:22 PM) (Source: Application Hang) (User: )
Description: Hanging application firefox.exe, version 18.0.1.4764, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (03/06/2013 08:16:22 PM) (Source: Application Hang) (User: )
Description: Hanging application firefox.exe, version 18.0.1.4764, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (03/06/2013 08:16:19 PM) (Source: Application Hang) (User: )
Description: Hanging application firefox.exe, version 18.0.1.4764, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (03/06/2013 08:14:37 PM) (Source: Application Hang) (User: )
Description: Hanging application thunderbird.exe, version 17.0.3.4794, hang module hungapp, version 0.0.0.0, hang address 0x00000000.


System errors:
=============
Error: (04/02/2013 07:38:29 PM) (Source: Service Control Manager) (User: )
Description: The Spybot-S&D 2 Security Center Service service failed to start due to the following error:
%%1053

Error: (04/02/2013 07:38:27 PM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for the Spybot-S&D 2 Security Center Service service to connect.

Error: (04/02/2013 11:06:06 AM) (Source: Service Control Manager) (User: )
Description: The Spybot-S&D 2 Security Center Service service failed to start due to the following error:
%%1053

Error: (04/02/2013 11:06:06 AM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for the Spybot-S&D 2 Security Center Service service to connect.

Error: (04/02/2013 11:05:28 AM) (Source: Dhcp) (User: )
Description: The IP address lease 192.168.0.2 for the Network Card with network address 000F1F979166 has been
denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).

Error: (04/01/2013 05:37:23 PM) (Source: Service Control Manager) (User: )
Description: The Spybot-S&D 2 Security Center Service service failed to start due to the following error:
%%1053

Error: (04/01/2013 05:37:23 PM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for the Spybot-S&D 2 Security Center Service service to connect.

Error: (03/30/2013 05:44:28 PM) (Source: Dhcp) (User: )
Description: The IP address lease 192.168.0.2 for the Network Card with network address 000F1F979166 has been
denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).

Error: (03/28/2013 10:42:56 AM) (Source: 0) (User: )
Description: F:


Microsoft Office Sessions:
=========================
Error: (03/25/2013 05:45:53 PM) (Source: Application Hang)(User: )
Description: qbittorrent.exe3.0.9.0hungapp0.0.0.000000000

Error: (03/16/2013 11:32:16 PM) (Source: Application Hang)(User: )
Description: firefox.exe18.0.1.4764hungapp0.0.0.000000000

Error: (03/07/2013 04:22:32 AM) (Source: Application Error)(User: )
Description: rndlresolversvc.exe0.0.0.0rndlresolversvc.exe0.0.0.000003035

Error: (03/07/2013 04:20:40 AM) (Source: Application Error)(User: )
Description: rndlresolversvc.exe0.0.0.0rndlresolversvc.exe0.0.0.000003035

Error: (03/06/2013 08:44:23 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Error: (03/06/2013 08:16:22 PM) (Source: Application Hang)(User: )
Description: firefox.exe18.0.1.4764hungapp0.0.0.000000000

Error: (03/06/2013 08:16:22 PM) (Source: Application Hang)(User: )
Description: firefox.exe18.0.1.4764hungapp0.0.0.000000000

Error: (03/06/2013 08:16:22 PM) (Source: Application Hang)(User: )
Description: firefox.exe18.0.1.4764hungapp0.0.0.000000000

Error: (03/06/2013 08:16:19 PM) (Source: Application Hang)(User: )
Description: firefox.exe18.0.1.4764hungapp0.0.0.000000000

Error: (03/06/2013 08:14:37 PM) (Source: Application Hang)(User: )
Description: thunderbird.exe17.0.3.4794hungapp0.0.0.000000000


=========================== Installed Programs ============================

7-Zip 9.20
Adobe Flash Player 11 ActiveX (Version: 11.6.602.180)
Adobe Flash Player 11 Plugin (Version: 11.6.602.180)
Anti-Twin (Installation 18/03/2013)
avast! Free Antivirus (Version: 7.0.1455.0)
Belarc Advisor 8.3 (Version: 8.3.0.0)
Broadcom Advanced Control Suite 2 (Version: 7.58.01)
Broadcom Gigabit Integrated Controller (Version: 9.02.06)
CCleaner (Version: 3.28)
CDBurnerXP (Version: 4.5.0.3717)
DVD Flick 1.3.0.7 (Version: 1.3.0.7)
Everything 1.2.1.371
Foxit Reader (Version: 5.4.5.124)
GOM Player (Version: 2.1.47.5133)
Google Chrome (Version: 26.0.1410.43)
Google Update Helper (Version: 1.3.21.135)
Intel® Graphics Media Accelerator Driver (Version: 6.14.10.4543)
IrfanView (remove only) (Version: 4.35)
JLC's Internet TV
Kana Reminder 1.5 (Version: 1.5)
Macrium Reflect Free Edition (Version: 5.1.5732)
Malwarebytes Anti-Malware version 1.70.0.1100 (Version: 1.70.0.1100)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Office Professional Edition 2003 (Version: 11.0.5614.0)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
MozBackup 1.5.1
Mozilla Firefox 18.0.1 (x86 en-US) (Version: 18.0.1)
Mozilla Maintenance Service (Version: 18.0.1)
Mozilla Thunderbird 17.0.3 (x86 en-US) (Version: 17.0.3)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MyDefrag v4.3.1 (Version: 4.0.0.0)
NotesHolder 2.3 (Version: 2.3)
PhraseExpress v9.1.2 (Version: 9.1.2)
Python 2.7.3 (Version: 2.7.3150)
qBittorrent 3.0.9 (Version: 3.0.9)
RealDownloader (Version: 1.3.0)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0)
RealUpgrade 1.1 (Version: 1.1.0)
Revo Uninstaller 1.94 (Version: 1.94)
Solway's Desktop Icon Layout Saver 1.01 (Version: 1.01)
SoundMAX (Version: 5.12.01.7000)
Spotify (Version: 0.8.5.1356.gd1d40f3a)
Spybot - Search & Destroy (Version: 2.0.12)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Windows XP (KB2736233) (Version: 1)
Update for Windows XP (KB2749655) (Version: 1)
VLC media player 2.0.5 (Version: 2.0.5)
WebFldrs XP (Version: 9.50.7523)
WordWeb (Version: 6)
XnView 1.99.1 (Version: 1.99.1)

========================= Memory info: ===================================

Percentage of memory in use: 45%
Total physical RAM: 502.07 MB
Available physical RAM: 272.39 MB
Total Pagefile: 1996.72 MB
Available Pagefile: 1742.72 MB
Total Virtual: 2047.88 MB
Available Virtual: 1969.59 MB

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:37.26 GB) (Free:27.99 GB) NTFS
4 Drive f: (New Volume) (Fixed) (Total:931.51 GB) (Free:654.41 GB) NTFS

========================= Users: ========================================

User accounts for \\B-2D11017B6BF24

Administrator            ASPNET                   Guest                    
HelpAssistant            m                        SUPPORT_388945a0         


**** End of log ****

 

----------------------------------------------

 

 

ttds killer results- nothing found. but i will look for the log

 

------------------------------------------------------
found it

 

19:50:21.0750 1452  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:50:21.0937 1452  ============================================================
19:50:21.0937 1452  Current date / time: 2013/04/02 19:50:21.0937
19:50:21.0937 1452  SystemInfo:
19:50:21.0937 1452  
19:50:21.0937 1452  OS Version: 5.1.2600 ServicePack: 3.0
19:50:21.0937 1452  Product type: Workstation
19:50:21.0937 1452  ComputerName: B-2D11017B6BF24
19:50:21.0937 1452  UserName: m
19:50:21.0937 1452  Windows directory: C:\WINDOWS
19:50:21.0937 1452  System windows directory: C:\WINDOWS
19:50:21.0937 1452  Processor architecture: Intel x86
19:50:21.0937 1452  Number of processors: 1
19:50:21.0937 1452  Page size: 0x1000
19:50:21.0937 1452  Boot type: Normal boot
19:50:21.0937 1452  ============================================================
19:50:23.0281 1452  Drive \Device\Harddisk0\DR0 - Size: 0x9516AE000 (37.27 Gb), SectorSize: 0x200, Cylinders: 0x1301, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
19:50:23.0281 1452  Drive \Device\Harddisk1\DR2 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:50:23.0281 1452  ============================================================
19:50:23.0281 1452  \Device\Harddisk0\DR0:
19:50:23.0296 1452  MBR partitions:
19:50:23.0296 1452  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4A852C1
19:50:23.0296 1452  \Device\Harddisk1\DR2:
19:50:23.0296 1452  MBR partitions:
19:50:23.0296 1452  \Device\Harddisk1\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
19:50:23.0296 1452  ============================================================
19:50:23.0328 1452  C: <-> \Device\Harddisk0\DR0\Partition1
19:50:23.0359 1452  F: <-> \Device\Harddisk1\DR2\Partition1
19:50:23.0359 1452  ============================================================
19:50:23.0359 1452  Initialize success
19:50:23.0359 1452  ============================================================
19:51:32.0656 0128  ============================================================
19:51:32.0656 0128  Scan started
19:51:32.0656 0128  Mode: Manual; TDLFS;
19:51:32.0656 0128  ============================================================
19:51:32.0890 0128  ================ Scan system memory ========================
19:51:32.0906 0128  System memory - ok
19:51:32.0906 0128  ================ Scan services =============================
19:51:33.0015 0128  [ D848A0B4574A3EBBC2B82698FC2A7408 ] 6to4            C:\WINDOWS\System32\6to4svc.dll
19:51:33.0015 0128  6to4 - ok
19:51:33.0062 0128  [ ACA338AB4A7C2DD3425A7CEE63E7ABCD ] Aavmker4        C:\WINDOWS\system32\drivers\Aavmker4.sys
19:51:33.0062 0128  Aavmker4 - ok
19:51:33.0062 0128  Abiosdsk - ok
19:51:33.0078 0128  abp480n5 - ok
19:51:33.0125 0128  [ 8FD99680A539792A30E97944FDAECF17 ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:51:33.0125 0128  ACPI - ok
19:51:33.0156 0128  [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
19:51:33.0156 0128  ACPIEC - ok
19:51:33.0203 0128  [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:51:33.0218 0128  AdobeFlashPlayerUpdateSvc - ok
19:51:33.0218 0128  adpu160m - ok
19:51:33.0265 0128  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
19:51:33.0265 0128  aec - ok
19:51:33.0296 0128  [ F6B7B1ECD7B41736BDB6FF4B092BCB79 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
19:51:33.0312 0128  AFD - ok
19:51:33.0328 0128  Aha154x - ok
19:51:33.0328 0128  aic78u2 - ok
19:51:33.0343 0128  aic78xx - ok
19:51:33.0359 0128  [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
19:51:33.0359 0128  Alerter - ok
19:51:33.0375 0128  [ 8C515081584A38AA007909CD02020B3D ] ALG             C:\WINDOWS\System32\alg.exe
19:51:33.0390 0128  ALG - ok
19:51:33.0390 0128  AliIde - ok
19:51:33.0406 0128  amsint - ok
19:51:33.0421 0128  [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
19:51:33.0437 0128  AppMgmt - ok
19:51:33.0437 0128  asc - ok
19:51:33.0453 0128  asc3350p - ok
19:51:33.0468 0128  asc3550 - ok
19:51:33.0531 0128  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
19:51:33.0546 0128  aspnet_state - ok
19:51:33.0578 0128  [ D592D4E5C724F6AE2E2B82C65382DC16 ] aswFsBlk        C:\WINDOWS\system32\drivers\aswFsBlk.sys
19:51:33.0578 0128  aswFsBlk - ok
19:51:33.0625 0128  [ 953E103C610FD9D4B165EB2B8CD805E6 ] aswMon2         C:\WINDOWS\system32\drivers\aswMon2.sys
19:51:33.0625 0128  aswMon2 - ok
19:51:33.0640 0128  [ A6E20E62871A28A0F1C05B1681848FA7 ] aswMonFlt       C:\WINDOWS\system32\drivers\aswMonFlt.sys
19:51:33.0656 0128  aswMonFlt - ok
19:51:33.0656 0128  [ ECFA3E1617F1B62C81744EFBB039DE3C ] AswRdr          C:\WINDOWS\system32\drivers\AswRdr.sys
19:51:33.0671 0128  AswRdr - ok
19:51:33.0671 0128  [ 657A61979F40D67CA29716149766FFA7 ] aswRvrt         C:\WINDOWS\system32\drivers\aswRvrt.sys
19:51:33.0671 0128  aswRvrt - ok
19:51:33.0718 0128  [ 32E2ACBCBB96CCD43DB7CC5AF612D306 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys
19:51:33.0750 0128  aswSnx - ok
19:51:33.0765 0128  [ 192BCC6C1EC0A556FD2114BFB155F919 ] aswSP           C:\WINDOWS\system32\drivers\aswSP.sys
19:51:33.0765 0128  aswSP - ok
19:51:33.0796 0128  [ 9333FE6057F47C371A80DC4F2D140D63 ] aswTdi          C:\WINDOWS\system32\drivers\aswTdi.sys
19:51:33.0796 0128  aswTdi - ok
19:51:33.0796 0128  [ EDB0C9BA44B748E420CCA989FD8B826E ] aswVmm          C:\WINDOWS\system32\drivers\aswVmm.sys
19:51:33.0812 0128  aswVmm - ok
19:51:33.0828 0128  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:51:33.0828 0128  AsyncMac - ok
19:51:33.0859 0128  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
19:51:33.0859 0128  atapi - ok
19:51:33.0875 0128  Atdisk - ok
19:51:33.0890 0128  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:51:33.0890 0128  Atmarpc - ok
19:51:33.0921 0128  [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
19:51:33.0921 0128  AudioSrv - ok
19:51:33.0953 0128  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
19:51:33.0953 0128  audstub - ok
19:51:33.0984 0128  [ 01E80E1DE60650BC61E9A0A513B0DDD8 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
19:51:33.0984 0128  avast! Antivirus - ok
19:51:34.0015 0128  [ 3A3A82FFD268BCFB7AE6A48CECF00AD9 ] b57w2k          C:\WINDOWS\system32\DRIVERS\b57xp32.sys
19:51:34.0031 0128  b57w2k - ok
19:51:34.0062 0128  [ 5D7BE7B19E827125E016325334E58FF1 ] BANTExt         C:\WINDOWS\System32\Drivers\BANTExt.sys
19:51:34.0062 0128  BANTExt - ok
19:51:34.0078 0128  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
19:51:34.0078 0128  Beep - ok
19:51:34.0109 0128  [ 574738F61FCA2935F5265DC4E5691314 ] BITS            C:\WINDOWS\system32\qmgr.dll
19:51:34.0171 0128  BITS - ok
19:51:34.0203 0128  [ FC6D1D80588D371F0321E15A75B2F8F2 ] Browser         C:\WINDOWS\System32\browser.dll
19:51:34.0218 0128  Browser - ok
19:51:34.0250 0128  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
19:51:34.0250 0128  cbidf2k - ok
19:51:34.0250 0128  cd20xrnt - ok
19:51:34.0265 0128  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
19:51:34.0265 0128  Cdaudio - ok
19:51:34.0281 0128  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
19:51:34.0281 0128  Cdfs - ok
19:51:34.0296 0128  [ 4B0A100EAF5C49EF3CCA8C641431EACC ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:51:34.0296 0128  Cdrom - ok
19:51:34.0312 0128  Changer - ok
19:51:34.0328 0128  [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc           C:\WINDOWS\system32\cisvc.exe
19:51:34.0343 0128  CiSvc - ok
19:51:34.0359 0128  [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
19:51:34.0359 0128  ClipSrv - ok
19:51:34.0406 0128  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:51:34.0468 0128  clr_optimization_v2.0.50727_32 - ok
19:51:34.0546 0128  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:51:34.0578 0128  clr_optimization_v4.0.30319_32 - ok
19:51:34.0593 0128  CmdIde - ok
19:51:34.0609 0128  COMSysApp - ok
19:51:34.0640 0128  Cpqarray - ok
19:51:34.0687 0128  [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
19:51:34.0687 0128  CryptSvc - ok
19:51:34.0703 0128  dac2w2k - ok
19:51:34.0718 0128  dac960nt - ok
19:51:34.0781 0128  [ 9222562D44021B988B9F9F62207FB6F2 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
19:51:34.0812 0128  DcomLaunch - ok
19:51:34.0859 0128  [ C51DE19619D50CBD03708647ACA10E70 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
19:51:34.0875 0128  Dhcp - ok
19:51:34.0906 0128  [ 47B6AAEC570F2C11D8BAD80A064D8ED1 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
19:51:34.0906 0128  Disk - ok
19:51:34.0937 0128  dmadmin - ok
19:51:34.0984 0128  [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
19:51:35.0000 0128  dmboot - ok
19:51:35.0031 0128  [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
19:51:35.0031 0128  dmio - ok
19:51:35.0062 0128  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
19:51:35.0062 0128  dmload - ok
19:51:35.0093 0128  [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver        C:\WINDOWS\System32\dmserver.dll
19:51:35.0093 0128  dmserver - ok
19:51:35.0140 0128  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
19:51:35.0140 0128  DMusic - ok
19:51:35.0171 0128  [ D977659AE4D8ECE5286D99D1ED34614D ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
19:51:35.0171 0128  Dnscache - ok
19:51:35.0187 0128  [ B4109C8C3D54C83246997A777724F318 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
19:51:35.0187 0128  Dot3svc - ok
19:51:35.0203 0128  dpti2o - ok
19:51:35.0234 0128  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
19:51:35.0234 0128  drmkaud - ok
19:51:35.0265 0128  [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost         C:\WINDOWS\System32\eapsvc.dll
19:51:35.0265 0128  EapHost - ok
19:51:35.0281 0128  [ BC93B4A066477954555966D77FEC9ECB ] ERSvc           C:\WINDOWS\System32\ersvc.dll
19:51:35.0281 0128  ERSvc - ok
19:51:35.0312 0128  [ C519E15665CD89A91AD383FCE3CB556A ] Eventlog        C:\WINDOWS\system32\services.exe
19:51:35.0328 0128  Eventlog - ok
19:51:35.0343 0128  [ F17F6226BDC0CD5F0BEF0DAF84D29BEC ] EventSystem     C:\WINDOWS\system32\es.dll
19:51:35.0359 0128  EventSystem - ok
19:51:35.0390 0128  [ 4D893323DAE445E34A4C9038B0551BC9 ] exFat           C:\WINDOWS\system32\drivers\exFat.sys
19:51:35.0390 0128  exFat - ok
19:51:35.0421 0128  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
19:51:35.0421 0128  Fastfat - ok
19:51:35.0453 0128  [ 888CD7B39C37E13A2419BECFAAF0A28C ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
19:51:35.0468 0128  FastUserSwitchingCompatibility - ok
19:51:35.0484 0128  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\DRIVERS\fdc.sys
19:51:35.0484 0128  Fdc - ok
19:51:35.0515 0128  [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
19:51:35.0515 0128  Fips - ok
19:51:35.0531 0128  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\DRIVERS\flpydisk.sys
19:51:35.0531 0128  Flpydisk - ok
19:51:35.0546 0128  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\DRIVERS\fltMgr.sys
19:51:35.0546 0128  FltMgr - ok
19:51:35.0609 0128  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
19:51:35.0609 0128  FontCache3.0.0.0 - ok
19:51:35.0640 0128  [ 30D42943A54704EF13E2562911DBFCEA ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:51:35.0640 0128  Fs_Rec - ok
19:51:35.0656 0128  [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:51:35.0656 0128  Ftdisk - ok
19:51:35.0687 0128  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:51:35.0687 0128  Gpc - ok
19:51:35.0734 0128  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
19:51:35.0734 0128  gupdate - ok
19:51:35.0750 0128  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
19:51:35.0750 0128  gupdatem - ok
19:51:35.0796 0128  [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
19:51:35.0796 0128  helpsvc - ok
19:51:35.0828 0128  [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ         C:\WINDOWS\System32\hidserv.dll
19:51:35.0828 0128  HidServ - ok
19:51:35.0843 0128  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:51:35.0859 0128  hidusb - ok
19:51:35.0890 0128  [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
19:51:35.0890 0128  hkmsvc - ok
19:51:35.0906 0128  hpn - ok
19:51:35.0953 0128  [ 937031C085718C1C04A9C0864625EC6B ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
19:51:35.0968 0128  HTTP - ok
19:51:36.0000 0128  [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
19:51:36.0015 0128  HTTPFilter - ok
19:51:36.0015 0128  i2omgmt - ok
19:51:36.0031 0128  i2omp - ok
19:51:36.0093 0128  [ 0F0194C4B635C10C3F785E4FEE52D641 ] ialm            C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
19:51:36.0125 0128  ialm - ok
19:51:36.0203 0128  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:51:36.0234 0128  idsvc - ok
19:51:36.0265 0128  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
19:51:36.0265 0128  Imapi - ok
19:51:36.0281 0128  [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService    C:\WINDOWS\system32\imapi.exe
19:51:36.0296 0128  ImapiService - ok
19:51:36.0312 0128  ini910u - ok
19:51:36.0328 0128  IntelIde - ok
19:51:36.0343 0128  [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
19:51:36.0343 0128  intelppm - ok
19:51:36.0359 0128  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
19:51:36.0359 0128  Ip6Fw - ok
19:51:36.0390 0128  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:51:36.0390 0128  IpFilterDriver - ok
19:51:36.0390 0128  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:51:36.0406 0128  IpInIp - ok
19:51:36.0421 0128  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:51:36.0421 0128  IpNat - ok
19:51:36.0453 0128  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:51:36.0453 0128  IPSec - ok
19:51:36.0468 0128  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
19:51:36.0468 0128  IRENUM - ok
19:51:36.0500 0128  [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:51:36.0515 0128  isapnp - ok
19:51:36.0531 0128  [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:51:36.0531 0128  Kbdclass - ok
19:51:36.0546 0128  [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
19:51:36.0546 0128  kbdhid - ok
19:51:36.0562 0128  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
19:51:36.0578 0128  kmixer - ok
19:51:36.0593 0128  [ C6EBF1D6AD71DF30DB49B8D3287E1368 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
19:51:36.0593 0128  KSecDD - ok
19:51:36.0625 0128  [ 3695B8D03745B2F8022B161238347A9D ] LanmanServer    C:\WINDOWS\System32\srvsvc.dll
19:51:36.0640 0128  LanmanServer - ok
19:51:36.0671 0128  [ 3B9324D60DD321BAB7BF6F77931D3FD1 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
19:51:36.0687 0128  lanmanworkstation - ok
19:51:36.0703 0128  lbrtfdc - ok
19:51:36.0734 0128  [ A7DB739AE99A796D91580147E919CC59 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
19:51:36.0734 0128  LmHosts - ok
19:51:36.0750 0128  [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
19:51:36.0765 0128  Messenger - ok
19:51:36.0796 0128  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
19:51:36.0796 0128  mnmdd - ok
19:51:36.0843 0128  [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
19:51:36.0859 0128  mnmsrvc - ok
19:51:36.0890 0128  [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
19:51:36.0890 0128  Modem - ok
19:51:36.0890 0128  [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:51:36.0906 0128  Mouclass - ok
19:51:36.0921 0128  [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:51:36.0921 0128  mouhid - ok
19:51:36.0937 0128  [ 1A1FAA5102466F418494E94FF9B0B091 ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
19:51:36.0937 0128  MountMgr - ok
19:51:36.0984 0128  [ 5C5E45DDABEFBC9F564F1D5C83258B8F ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
19:51:36.0984 0128  MozillaMaintenance - ok
19:51:37.0000 0128  mraid35x - ok
19:51:37.0015 0128  [ 4FEFD389D71126EE581B9F9CB2918BE4 ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:51:37.0031 0128  MRxDAV - ok
19:51:37.0062 0128  [ FB2FCCC70F7174C7BF64F48E96D3ADF4 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:51:37.0093 0128  MRxSmb - ok
19:51:37.0140 0128  [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC           C:\WINDOWS\system32\msdtc.exe
19:51:37.0140 0128  MSDTC - ok
19:51:37.0171 0128  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
19:51:37.0171 0128  Msfs - ok
19:51:37.0187 0128  MSIServer - ok
19:51:37.0218 0128  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:51:37.0218 0128  MSKSSRV - ok
19:51:37.0234 0128  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:51:37.0234 0128  MSPCLOCK - ok
19:51:37.0250 0128  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
19:51:37.0250 0128  MSPQM - ok
19:51:37.0265 0128  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:51:37.0265 0128  mssmbios - ok
19:51:37.0281 0128  [ F7B1AD991491F02AF6DA70B00B8BF114 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
19:51:37.0296 0128  Mup - ok
19:51:37.0296 0128  [ D74224C4D52AC609A89C83791E5A709C ] mv61xxmm        C:\WINDOWS\system32\drivers\mv61xxmm.sys
19:51:37.0296 0128  mv61xxmm - ok
19:51:37.0312 0128  [ 6090786DAA545A3EC7D34A46A8CD1661 ] mv64xxmm        C:\WINDOWS\system32\drivers\mv64xxmm.sys
19:51:37.0312 0128  mv64xxmm - ok
19:51:37.0328 0128  [ 93A609C515C87F604C09F78E80E03F1D ] mvxxmm          C:\WINDOWS\system32\drivers\mvxxmm.sys
19:51:37.0328 0128  mvxxmm - ok
19:51:37.0375 0128  [ 0102140028FAD045756796E1C685D695 ] napagent        C:\WINDOWS\System32\qagentrt.dll
19:51:37.0390 0128  napagent - ok
19:51:37.0437 0128  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
19:51:37.0453 0128  NDIS - ok
19:51:37.0468 0128  [ 091735A5F20ACB1DC147383A905AE002 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
19:51:37.0468 0128  NdisTapi - ok
19:51:37.0484 0128  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
19:51:37.0484 0128  Ndisuio - ok
19:51:37.0500 0128  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
19:51:37.0500 0128  NdisWan - ok
19:51:37.0515 0128  [ 816460BD4B4ACD27937D1D0813E2E9E9 ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
19:51:37.0515 0128  NDProxy - ok
19:51:37.0531 0128  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
19:51:37.0531 0128  NetBIOS - ok
19:51:37.0546 0128  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
19:51:37.0562 0128  NetBT - ok
19:51:37.0593 0128  [ B857BA82860D7FF85AE29B095645563B ] NetDDE          C:\WINDOWS\system32\netdde.exe
19:51:37.0593 0128  NetDDE - ok
19:51:37.0609 0128  [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
19:51:37.0625 0128  NetDDEdsdm - ok
19:51:37.0656 0128  [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon        C:\WINDOWS\system32\lsass.exe
19:51:37.0671 0128  Netlogon - ok
19:51:37.0703 0128  [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman          C:\WINDOWS\System32\netman.dll
19:51:37.0734 0128  Netman - ok
19:51:37.0781 0128  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:51:37.0781 0128  NetTcpPortSharing - ok
19:51:37.0828 0128  [ FCEE5FCB99F7C724593365C706D28388 ] Nla             C:\WINDOWS\System32\mswsock.dll
19:51:37.0843 0128  Nla - ok
19:51:37.0875 0128  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
19:51:37.0875 0128  Npfs - ok
19:51:37.0906 0128  [ 4C51D5275AE8A16999EDFE7E647D00DE ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
19:51:37.0937 0128  Ntfs - ok
19:51:37.0953 0128  [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
19:51:37.0968 0128  NtLmSsp - ok
19:51:38.0031 0128  [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
19:51:38.0046 0128  NtmsSvc - ok
19:51:38.0093 0128  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
19:51:38.0093 0128  Null - ok
19:51:38.0109 0128  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
19:51:38.0109 0128  NwlnkFlt - ok
19:51:38.0125 0128  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
19:51:38.0125 0128  NwlnkFwd - ok
19:51:38.0187 0128  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:51:38.0187 0128  ose - ok
19:51:38.0218 0128  [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport         C:\WINDOWS\system32\DRIVERS\parport.sys
19:51:38.0218 0128  Parport - ok
19:51:38.0250 0128  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
19:51:38.0250 0128  PartMgr - ok
19:51:38.0281 0128  [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
19:51:38.0281 0128  ParVdm - ok
19:51:38.0296 0128  [ A219903CCF74233761D92BEF471A07B1 ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
19:51:38.0296 0128  PCI - ok
19:51:38.0312 0128  PCIDump - ok
19:51:38.0328 0128  [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
19:51:38.0328 0128  PCIIde - ok
19:51:38.0343 0128  [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
19:51:38.0359 0128  Pcmcia - ok
19:51:38.0359 0128  PDCOMP - ok
19:51:38.0375 0128  PDFRAME - ok
19:51:38.0390 0128  PDRELI - ok
19:51:38.0390 0128  PDRFRAME - ok
19:51:38.0406 0128  perc2 - ok
19:51:38.0421 0128  perc2hib - ok
19:51:38.0453 0128  [ C519E15665CD89A91AD383FCE3CB556A ] PlugPlay        C:\WINDOWS\system32\services.exe
19:51:38.0468 0128  PlugPlay - ok
19:51:38.0484 0128  [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
19:51:38.0484 0128  PolicyAgent - ok
19:51:38.0531 0128  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
19:51:38.0531 0128  PptpMiniport - ok
19:51:38.0546 0128  [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
19:51:38.0546 0128  ProtectedStorage - ok
19:51:38.0593 0128  [ D8E11D311785F89F1D70A28B0E879127 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
19:51:38.0593 0128  PSched - ok
19:51:38.0625 0128  [ E590B296DB213CB55EFD6B16A89CF1F5 ] PSMounterEx     C:\WINDOWS\system32\drivers\psmounterex.sys
19:51:38.0640 0128  PSMounterEx - ok
19:51:38.0640 0128  [ 2BD2E42E36623273261A57E6F27791AC ] pssnap          C:\WINDOWS\system32\DRIVERS\pssnap.sys
19:51:38.0656 0128  pssnap - ok
19:51:38.0671 0128  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:51:38.0671 0128  Ptilink - ok
19:51:38.0687 0128  ql1080 - ok
19:51:38.0687 0128  Ql10wnt - ok
19:51:38.0703 0128  ql12160 - ok
19:51:38.0718 0128  ql1240 - ok
19:51:38.0734 0128  ql1280 - ok
19:51:38.0734 0128  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
19:51:38.0750 0128  RasAcd - ok
19:51:38.0765 0128  [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
19:51:38.0781 0128  RasAuto - ok
19:51:38.0796 0128  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
19:51:38.0796 0128  Rasl2tp - ok
19:51:38.0828 0128  [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan          C:\WINDOWS\System32\rasmans.dll
19:51:38.0843 0128  RasMan - ok
19:51:38.0859 0128  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
19:51:38.0859 0128  RasPppoe - ok
19:51:38.0890 0128  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
19:51:38.0890 0128  Raspti - ok
19:51:38.0937 0128  [ 77050C6615F6EB5402F832B27FD695E0 ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
19:51:38.0953 0128  Rdbss - ok
19:51:38.0968 0128  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:51:38.0968 0128  RDPCDD - ok
19:51:39.0000 0128  [ 47EA20320E3D6FDC7B7BB22B2B881CA6 ] rdpdr           C:\WINDOWS\system32\DRIVERS\rdpdr.sys
19:51:39.0015 0128  rdpdr - ok
19:51:39.0031 0128  [ C7D9BC54354B8C706ABF172D48313F1B ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
19:51:39.0046 0128  RDPWD - ok
19:51:39.0062 0128  [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
19:51:39.0078 0128  RDSessMgr - ok
19:51:39.0125 0128  [ A0FF419B61AE47E26ADF3BB15DB4F2FE ] RealNetworks Downloader Resolver Service C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
19:51:39.0125 0128  RealNetworks Downloader Resolver Service - ok
19:51:39.0140 0128  [ F828DD7E1419B6653894A8F97A0094C5 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
19:51:39.0140 0128  redbook - ok
19:51:39.0187 0128  [ 3ECAFFA92BBE7407F5405820DFE8D740 ] ReflectService.exe C:\Program Files\Macrium\Reflect\ReflectService.exe
19:51:39.0203 0128  ReflectService.exe - ok
19:51:39.0234 0128  [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
19:51:39.0250 0128  RemoteAccess - ok
19:51:39.0281 0128  [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
19:51:39.0296 0128  RemoteRegistry - ok
19:51:39.0343 0128  [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator      C:\WINDOWS\system32\locator.exe
19:51:39.0359 0128  RpcLocator - ok
19:51:39.0406 0128  [ 9222562D44021B988B9F9F62207FB6F2 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
19:51:39.0421 0128  RpcSs - ok
19:51:39.0484 0128  [ 743D7D59767073A617B1DCC6C546F234 ] rspndr          C:\WINDOWS\system32\DRIVERS\rspndr.sys
19:51:39.0484 0128  rspndr - ok
19:51:39.0531 0128  [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP            C:\WINDOWS\system32\rsvp.exe
19:51:39.0546 0128  RSVP - ok
19:51:39.0562 0128  [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs           C:\WINDOWS\system32\lsass.exe
19:51:39.0578 0128  SamSs - ok
19:51:39.0625 0128  [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
19:51:39.0640 0128  SCardSvr - ok
19:51:39.0687 0128  [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule        C:\WINDOWS\system32\schedsvc.dll
19:51:39.0703 0128  Schedule - ok
19:51:39.0828 0128  [ 206387AB881E93A1A6EB89966C8651F1 ] SDScannerService C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
19:51:39.0875 0128  SDScannerService - ok
19:51:39.0968 0128  [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
19:51:40.0031 0128  SDUpdateService - ok
19:51:40.0078 0128  [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService    C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
19:51:40.0078 0128  SDWSCService - ok
19:51:40.0125 0128  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:51:40.0125 0128  Secdrv - ok
19:51:40.0140 0128  [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon        C:\WINDOWS\System32\seclogon.dll
19:51:40.0156 0128  seclogon - ok
19:51:40.0203 0128  [ B9C7617C1E8AB6FDFF75D3C8DAFCB4C8 ] senfilt         C:\WINDOWS\system32\drivers\senfilt.sys
19:51:40.0218 0128  senfilt - ok
19:51:40.0265 0128  [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS            C:\WINDOWS\system32\sens.dll
19:51:40.0281 0128  SENS - ok
19:51:40.0312 0128  [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum         C:\WINDOWS\system32\DRIVERS\serenum.sys
19:51:40.0312 0128  serenum - ok
19:51:40.0328 0128  [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
19:51:40.0328 0128  Serial - ok
19:51:40.0375 0128  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
19:51:40.0375 0128  Sfloppy - ok
19:51:40.0406 0128  [ 4F10A2FA76B5BD54CD68AFA94E8ADB39 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
19:51:40.0421 0128  SharedAccess - ok
19:51:40.0437 0128  [ 888CD7B39C37E13A2419BECFAAF0A28C ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
19:51:40.0453 0128  ShellHWDetection - ok
19:51:40.0453 0128  Simbad - ok
19:51:40.0515 0128  [ 0066FF77AEB4AE70066F7E94D5A6D866 ] smwdm           C:\WINDOWS\system32\drivers\smwdm.sys
19:51:40.0515 0128  smwdm - ok
19:51:40.0531 0128  Sparrow - ok
19:51:40.0562 0128  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
19:51:40.0562 0128  splitter - ok
19:51:40.0593 0128  [ 258DD5D4283FD9F9A7166BE9AE45CE73 ] Spooler         C:\WINDOWS\system32\spoolsv.exe
19:51:40.0609 0128  Spooler - ok
19:51:40.0625 0128  [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
19:51:40.0625 0128  sr - ok
19:51:40.0656 0128  [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice       C:\WINDOWS\system32\srsvc.dll
19:51:40.0671 0128  srservice - ok
19:51:40.0703 0128  [ 9B390283569EA58D43D2586032B892F5 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
19:51:40.0703 0128  Srv - ok
19:51:40.0718 0128  [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
19:51:40.0734 0128  SSDPSRV - ok
19:51:40.0765 0128  [ E57B778208C783D8DEBAB320C16A1B82 ] StarOpen        C:\WINDOWS\system32\drivers\StarOpen.sys
19:51:40.0765 0128  StarOpen - ok
19:51:40.0796 0128  [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
19:51:40.0828 0128  stisvc - ok
19:51:40.0859 0128  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
19:51:40.0859 0128  swenum - ok
19:51:40.0875 0128  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
19:51:40.0875 0128  swmidi - ok
19:51:40.0890 0128  SwPrv - ok
19:51:40.0890 0128  symc810 - ok
19:51:40.0906 0128  symc8xx - ok
19:51:40.0921 0128  sym_hi - ok
19:51:40.0921 0128  sym_u3 - ok
19:51:40.0937 0128  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
19:51:40.0937 0128  sysaudio - ok
19:51:40.0968 0128  [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
19:51:40.0984 0128  SysmonLog - ok
19:51:41.0000 0128  [ E2B32B10ACC5D97623275AAFB67E5F03 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
19:51:41.0015 0128  TapiSrv - ok
19:51:41.0046 0128  [ 51E41F16ACD80B8B39C0AE703A213F09 ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
19:51:41.0062 0128  Tcpip - ok
19:51:41.0078 0128  [ F4A3C6ABE7818B1B53F58FA1ADB605CD ] Tcpip6          C:\WINDOWS\system32\DRIVERS\tcpip6.sys
19:51:41.0093 0128  Tcpip6 - ok
19:51:41.0109 0128  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
19:51:41.0109 0128  TDPIPE - ok
19:51:41.0109 0128  [ C0578456F29E5F26285F81B7B71FE57D ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
19:51:41.0125 0128  TDTCP - ok
19:51:41.0140 0128  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
19:51:41.0156 0128  TermDD - ok
19:51:41.0171 0128  [ 5128852A18AE46C387F87BF27DA4C9DD ] TermService     C:\WINDOWS\System32\termsrv.dll
19:51:41.0187 0128  TermService - ok
19:51:41.0203 0128  [ 888CD7B39C37E13A2419BECFAAF0A28C ] Themes          C:\WINDOWS\System32\shsvcs.dll
19:51:41.0218 0128  Themes - ok
19:51:41.0265 0128  [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr         C:\WINDOWS\system32\tlntsvr.exe
19:51:41.0281 0128  TlntSvr - ok
19:51:41.0281 0128  TosIde - ok
19:51:41.0312 0128  [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks          C:\WINDOWS\system32\trkwks.dll
19:51:41.0328 0128  TrkWks - ok
19:51:41.0343 0128  [ 8F861EDA21C05857EB8197300A92501C ] tunmp           C:\WINDOWS\system32\DRIVERS\tunmp.sys
19:51:41.0343 0128  tunmp - ok
19:51:41.0359 0128  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
19:51:41.0359 0128  Udfs - ok
19:51:41.0375 0128  ultra - ok
19:51:41.0421 0128  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
19:51:41.0437 0128  Update - ok
19:51:41.0468 0128  [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost        C:\WINDOWS\System32\upnphost.dll
19:51:41.0484 0128  upnphost - ok
19:51:41.0500 0128  [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS             C:\WINDOWS\System32\ups.exe
19:51:41.0515 0128  UPS - ok
19:51:41.0546 0128  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
19:51:41.0546 0128  usbccgp - ok
19:51:41.0578 0128  [ 52674B5DBEE499342A599C7771ABECAA ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
19:51:41.0578 0128  usbehci - ok
19:51:41.0593 0128  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
19:51:41.0593 0128  usbhub - ok
19:51:41.0625 0128  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
19:51:41.0625 0128  usbprint - ok
19:51:41.0640 0128  [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan         C:\WINDOWS\system32\DRIVERS\usbscan.sys
19:51:41.0640 0128  usbscan - ok
19:51:41.0656 0128  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
19:51:41.0656 0128  USBSTOR - ok
19:51:41.0687 0128  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
19:51:41.0687 0128  usbuhci - ok
19:51:41.0718 0128  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
19:51:41.0718 0128  VgaSave - ok
19:51:41.0718 0128  ViaIde - ok
19:51:41.0734 0128  [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
19:51:41.0734 0128  VolSnap - ok
19:51:41.0765 0128  [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS             C:\WINDOWS\System32\vssvc.exe
19:51:41.0781 0128  VSS - ok
19:51:41.0796 0128  [ 9F8A0D0CBB2FA265A754516128C00E22 ] W32Time         C:\WINDOWS\system32\w32time.dll
19:51:41.0812 0128  W32Time - ok
19:51:41.0843 0128  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:51:41.0843 0128  Wanarp - ok
19:51:41.0859 0128  WDICA - ok
19:51:41.0875 0128  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
19:51:41.0875 0128  wdmaud - ok
19:51:41.0906 0128  [ 703591CD1403BC19E7198CA7B314E132 ] WebClient       C:\WINDOWS\System32\webclnt.dll
19:51:41.0921 0128  WebClient - ok
19:51:41.0968 0128  [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
19:51:41.0984 0128  winmgmt - ok
19:51:42.0031 0128  [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
19:51:42.0046 0128  WmdmPmSN - ok
19:51:42.0078 0128  [ C8A6C82F90B055149925DC7526B2D78C ] Wmi             C:\WINDOWS\System32\advapi32.dll
19:51:42.0093 0128  Wmi - ok
19:51:42.0109 0128  [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
19:51:42.0125 0128  WmiApSrv - ok
19:51:42.0171 0128  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:51:42.0218 0128  WPFFontCache_v0400 - ok
19:51:42.0265 0128  [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
19:51:42.0281 0128  wscsvc - ok
19:51:42.0312 0128  [ 37E17DF31E2883F394FABFBC93AC3069 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
19:51:42.0343 0128  wuauserv - ok
19:51:42.0375 0128  [ 349B8D2BB755E8C3B0E3E82A87663E55 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
19:51:42.0390 0128  WZCSVC - ok
19:51:42.0437 0128  [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
19:51:42.0453 0128  xmlprov - ok
19:51:42.0468 0128  ================ Scan global ===============================
19:51:42.0500 0128  [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
19:51:42.0531 0128  [ B23423313519C522E0E73BA170D3CE71 ] C:\WINDOWS\system32\winsrv.dll
19:51:42.0562 0128  [ B23423313519C522E0E73BA170D3CE71 ] C:\WINDOWS\system32\winsrv.dll
19:51:42.0578 0128  [ C519E15665CD89A91AD383FCE3CB556A ] C:\WINDOWS\system32\services.exe
19:51:42.0593 0128  [Global] - ok
19:51:42.0593 0128  ================ Scan MBR ==================================
19:51:42.0625 0128  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
19:51:42.0843 0128  \Device\Harddisk0\DR0 - ok
19:51:42.0859 0128  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR2
19:51:42.0984 0128  \Device\Harddisk1\DR2 - ok
19:51:42.0984 0128  ================ Scan VBR ==================================
19:51:43.0000 0128  [ 56C696D9A589D01EF728E28514327EF7 ] \Device\Harddisk0\DR0\Partition1
19:51:43.0000 0128  \Device\Harddisk0\DR0\Partition1 - ok
19:51:43.0000 0128  [ A195007D934CB096F6B0B3B3320F6439 ] \Device\Harddisk1\DR2\Partition1
19:51:43.0000 0128  \Device\Harddisk1\DR2\Partition1 - ok
19:51:43.0015 0128  ============================================================
19:51:43.0015 0128  Scan finished
19:51:43.0015 0128  ============================================================
19:51:43.0031 2848  Detected object count: 0
19:51:43.0031 2848  Actual detected object count: 0
19:52:18.0031 2244  Deinitialize success

 

----------------------------------------------------------------------

 

next log

# AdwCleaner v2.115 - Logfile created 04/02/2013 at 19:57:57
# Updated 17/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : m - B-2D11017B6BF24
# Boot Mode : Normal
# Running from : C:\Documents and Settings\m\My Documents\Downloads\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\END
Folder Deleted : C:\Documents and Settings\All Users.WINDOWS\Application Data\boost_interprocess
Folder Deleted : C:\Documents and Settings\All Users.WINDOWS\Application Data\InstallMate
Folder Deleted : C:\Documents and Settings\All Users.WINDOWS\Application Data\SoftSafe
Folder Deleted : C:\Documents and Settings\All Users.WINDOWS\Application Data\Tarma Installer

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\dede8bb435be14
Key Deleted : HKCU\Software\Default Tab
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Tarma Installer

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v18.0.1 (en-US)

-\\ Google Chrome v26.0.1410.43

*************************

AdwCleaner[R1].txt - [2265 octets] - [02/04/2013 19:57:19]
AdwCleaner[S1].txt - [2093 octets] - [02/04/2013 19:57:57]

########## EOF - C:\AdwCleaner[S1].txt - [2153 octets] ##########
 


i forgot to close FF when i "Reset FF Proxy Settings" does it matter?

 

thanks


Edited by superqaz, 02 April 2013 - 02:08 PM.


#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:15 AM

Posted 02 April 2013 - 07:31 PM

Hi, I am surprised there wasn't more there than that, usually torrents are loaded with malware.

 

It appears we were OK with the FF run.

 

Was your MBAM scan a Full scan that scans all drives?

 

I want to run 2 more one quick and the other may be long.

 

 Clear your web browser's cache, cookies, and history

Note: you may have to login in to some of your sites again so be sure you have those passwords or do not remove that cookie.

 

Now clean the Temp folder.

 Please download Junkware Removal Tool to your desktop.


  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

 

 

 

 

Rootkit check...

Please download aswMBR ( 4.5MB ) to your desktop.


  • Double click the aswMBR.exe icon, and click Run.
  • When asked if you'd like to "download the latest Avast! virus definitions", click Yes.
  • Click the Scan button to start the scan.
  • On completion of the scan, click the  save log button, save it to your desktop, then copy and paste it in your next reply.

 

 

 

 

 

Now I'd like us to scan your machine with ESET OnlineScan

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png  button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

 

NOTE:Sometimes if ESET finds no infections it will not create a log.

 

 

 

How is it running?


Edited by boopme, 02 April 2013 - 07:32 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 superqaz

superqaz
  • Topic Starter

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 03 April 2013 - 03:47 AM

hi

 

several of the big torrent sites clain to check theire stuff for malware...had had no problems so far after scanning torrents.

 

what is MBAM? if its malwarebytes then i dont recall if if scaned f drive [personal data, torrents etc] but spybot found stuff there .

 

it seems i an not the administrator ,,,is that correct?

 

i have crap cleaner do u strill want me to use junkware removal tool ?

 

yes i forgot eset

 

will do all this today

 

thanks for reading all that stuff [logs]



#6 danieladdison65

danieladdison65

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:45 PM

Posted 03 April 2013 - 05:14 AM

In my opinion your computer is infected by some virus, malware. so scan your pc latest updated antivirus. i reffer you scan your c with norton antivirus. if you have difficlty with this antivirus you can contact norton online chat team at any time


Edited by danieladdison65, 03 April 2013 - 05:22 AM.


#7 superqaz

superqaz
  • Topic Starter

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 03 April 2013 - 05:23 AM

there are 3 questions 2 above if u could answer any of them

 

eset is 50pc done and has found some stuff, will post results

 

i am concerned about it deleting "potentially unwanted" can u comment pls, thats sounds very dangerous. do u see anything that should not have been deleted

---------------

C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\d8mvgtk3.default\extensions\{45ea9472-bc95-4125-b3c9-b67836df3536}.xpi    JS/Redirector.NCL trojan    deleted - quarantined
C:\Documents and Settings\m\Desktop\New Folder\cdbxp_setup_4.5.1.3868.exe    Win32/OpenCandy application    cleaned by deleting - quarantined
F:\Firefox 18.0.1 (en-US) - 2013-03-15.pcv    JS/Redirector.NCL trojan    deleted - quarantined
F:\16 software\gusetup(1).exe.part    a variant of Win32/Bundled.Toolbar.Ask application    cleaned by deleting - quarantined
F:\16 software\HPownersmanualLaserJet4Luserguide_downloader_by_GiveMeFile.exe    a variant of Win32/Somoto.A application    cleaned by deleting - quarantined
F:\back ups\moz backups\Firefox 18.0.1 (en-US) - 2013-03-15.pcv    JS/Redirector.NCL trojan    deleted - quarantined
 

 

thanks


Edited by superqaz, 03 April 2013 - 04:13 PM.


#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:15 AM

Posted 03 April 2013 - 07:19 PM

Hello...  MBAM is malwarebytes. A Full scan scans all drives whereas a quick will only do the Root. usually C.

 

If  crap cleaner will clean the Temp folder then fine.

 

 

PUP or PUPs is a term used to describe unwanted programs such as Trojans, spyware and adware, along with other malware which may compromise your privacy. Some antivirus and PC security software packages, like McAfee VirusScan, will scan for and protect your system against PUPs. The term PUP was first used by persons at McAfee's Avert research lab to avoid any legal issues that may arise from calling these types of applications "spyware". ~~ from Webpedia

 

I would quarantine them.

 

 

How is it running?


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 superqaz

superqaz
  • Topic Starter

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 04 April 2013 - 04:45 AM

hi

 

seems better now but internet not as fast as it once was, but its not freezing etc like last week. everything in this last scan has been quarantined [see below], do u see anything that should not have been?

 

thats interesting about pups, i have always thought i could include legitimate software that wasn't used much

 

thanks

 

 

C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\d8mvgtk3.default\extensions\{45ea9472-bc95-4125-b3c9-b67836df3536}.xpi    JS/Redirector.NCL trojan    deleted - quarantined
C:\Documents and Settings\m\Desktop\New Folder\cdbxp_setup_4.5.1.3868.exe    Win32/OpenCandy application    cleaned by deleting - quarantined
F:\Firefox 18.0.1 (en-US) - 2013-03-15.pcv    JS/Redirector.NCL trojan    deleted - quarantined
F:\16 software\gusetup(1).exe.part    a variant of Win32/Bundled.Toolbar.Ask application    cleaned by deleting - quarantined
F:\16 software\HPownersmanualLaserJet4Luserguide_downloader_by_GiveMeFile.exe    a variant of Win32/Somoto.A application    cleaned by deleting - quarantined
F:\back ups\moz backups\Firefox 18.0.1 (en-US) - 2013-03-15.pcv    JS/Redirector.NCL trojan    deleted - quarantined
 



#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:15 AM

Posted 04 April 2013 - 09:29 PM

The detection Trojan:JS/Redirector identifies a large grouping of programs or scripts that redirect a visitor from one website to another, unsolicited website.

These redirect scripts are typically hosted on malicious or compromised websites.

The unsolicited website the user is redirected to may have any or all of the following characteristics:

  • Pornographic
  • Hosts additional malware to be downloaded onto the visitor's computer
  • Steals data from the user
  • Use the augmented traffic to perpetrate fraud

The redirect scripts are usually written in JavaScript. Redirects that operate by exploiting vulnerabilities in the visitor's web browser or computer may also be considered exploits.

 

 

When you download and install Apps... Look for items like this to UN check

Yes, install Chrome as my default browser and Google Toolbar for Internet Explorer – optional. (32.11 MB) Install Options


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#11 superqaz

superqaz
  • Topic Starter

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 05 April 2013 - 03:17 AM

hummm. that's interesting . i removed java 4 security reasons

 

i haven't seen it suggested lately to run malware scanning software in safe mode, is this because the software is now advanced and does not benefit from safe mode?



#12 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:15 AM

Posted 05 April 2013 - 08:55 PM

The redirect scripts are usually written in JavaScript. Redirects that operate by exploiting vulnerabilities in the visitor's web browser or computer may also be considered exploits.

 

Do you have your Firefox set to No Script?

https://addons.mozilla.org/en-us/firefox/addon/noscript/


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#13 superqaz

superqaz
  • Topic Starter

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 09 April 2013 - 04:44 AM

thanks, have added no script add on

 

FF still takes ages to load and sometimes to open a ste. did a test with a free program to see if my connection was being throttled by my isp = ok. any ideas?



#14 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,914 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:15 AM

Posted 09 April 2013 - 09:35 PM

I have this suggestion, if no good ask again in the Web Browsing forum. A FF expert will have more for you.

 

Remove all rules for Firefox and the plugin-container from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox and the plugin-container process and the updater process.

 

 

https://support.mozilla.org/en-US/kb/server-not-found-connection-problem?redirectlocale=en-US&redirectslug=Server+not+found

 

https://support.mozilla.org/kb/Firewalls


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#15 superqaz

superqaz
  • Topic Starter

  • Members
  • 274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:15 AM

Posted 10 April 2013 - 04:28 AM

had a look at the links..do u know which paragraph i should be following .? i use the windows firewall

 

also re the No java script add-on, do u know of any obvious changes/tweaks to make as its becoming a bit tiresome . for instance, on Bleeping computer i need to give face book permission!

 

is there an easy way to run eset again without downloading it [i did save it when asked if i wanted to use it again]

 

thanks


Edited by superqaz, 10 April 2013 - 04:40 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users