Jump to content

edshead

Honorary Members
  • Posts

    66
  • Joined

  • Last visited

Everything posted by edshead

  1. Everything appears to have uninstalled cleanly and I've gone through the rest of the post as well. Additionally, that one popup I was getting on startup returned, and I found it was due to the googletalk plugin registry key in HKCU/Software/Microsoft/Windows/CurrentVersion/Run not enclosing the path in quotes, so Windows wasn't reading the full path. Enclosed it in quotes, and it's all fixed. Thank you again for all of your time and insights. I believe this thread can now be closed.
  2. Bravo. Replaced autochk per your instructions while in Ubuntu. Booted to safe mode just fine. Started a chkdsk and it asked to schedule one for next startup. I said yes, rebooted, autochk ran and came up clean. Windows loaded fine (even without that popup I mentioned earlier). You've taken me from the brink of a reinstall and all the headache that goes with restoring all my programs... to 100% functional. You are truly amazing. Thanks for all of your help. There's no way I could've done this without you. As awesome as you are, no offense, but I hope you don't see me back here again. :-P Thank you.
  3. I was having problems with chkdsk running on restart, and I believe it would've been autochk that ran at that point so it would make sense that it's not in good health. Here's the combofix logs (quarantine log included). Note, I had a crash when I ran it the first time (froze like previous), so I ran with /nombr. The kicked myself a bit for not doing that the first time. ComboFix-quarantined-files.txt combolog.txt
  4. Sorry. That window that is in the image above pops up on startup. Thank again, so much, for all of your help!!!
  5. Following numbered section is to document your great work. I backed up the registry with ERUNT I started above. Then, I imported i8042prt.reg. Reboot. Keyboard works. Backup registry again with ERUNT. Import usbehci.reg. Reboot. No change in functionality. Backup registry again with ERUNT. Import HDAudBus.reg. Reboot. No change in functionality. Still, I check device manager and I see that the Code 39 errors are gone. Windows thinks that the Audio Codec and Touchpad are running fine. I uninstall the Dell Touchpad. Reboot. It auto-detects Dell Touchpad. It installs it, but it's still not working. I go to Device manager and tell it to uninstall and tell Windows to remove the driver software. Reboot. Install Touchpad driver from the Dell driver package mentioned above. (I think it's R286???) Reboot. Touchpad works. I install the IDT package (R226??? above). Reboot. Sound works. Okay. So now that we have all the old problems done, here's a couple new ones that popped up. At some point a window started popping up trying to open the file Ed. (no extension.) It asked for a program to open with. I opened with notepad, and it's a blank file. Is this possibly where the rootkit might've been doing the logging? Also, I got a pop up from AVG saying autochk.exe was infected, but it wouldn't clean it because it's a system file. Both a log from AVG (actually not txt, it's csv if you want) that shows the detection as well as an MBAM scan of that file are attached. MBAM picks up nothing. AVG-autochk.txt mbam-log-2012-02-20 (17-38-05)-autochk.txt
  6. Here's the details tab of each device that device manager is giving a Code 39 error on. Additionally, I provided the driver details, which includes the driver file list for each device. As a recap: Built-in keyboard has always used the default Windows driver as far as I know. I can't find a proprietary Dell driver for it anywhere. Touchpad does use a Dell driver, and I've installed the most current one from Dell's support site. That's the driver that gives the details you're looking at there. HD Audio driver: Made by Sigmatel (now IDT). Ever since I got the laptop, if I reinstalled Windows, or otherwise lost the driver, I had to use Dell's update for that. For my computer, the appropriate Dell update is R190517. Rather than attach the 8mb driver, you have a directory listing for the extracted Dell package. Installing the Sigmatel software from that Dell package now gives me an error saying I don't have that device. Similarly, pointing Windows' "update driver" at that folder says that it doesn't contain anything for my device. r190517.txt Note, the above update is for Windows Vista. There isn't one for Win7, and using the Vista driver in Win7 means the external mic jack doesn't work (which I use). The solution I found was installing a driver for a slightly newer device from IDT, which worked flawlessly. That is Dell update R226903, and a directory listing for that 24mb package is also attached. Right now, I get the same problem with this package as the one above, where it doesn't recognize the device, and Windows doesn't recognize it as being an appropriate driver. r226903.txt Thanks for your continued efforts!!!!
  7. Didn't see ERDNT\subs. "dir /s" from \ERDNT\ attached. Also, regarding wireless. Wireless adapter itself is fine, loading and showing no error in Device manager. Shows up in network connections as well. The WLAN service isn't starting though due to the ndisuio service not starting. I did try to reinstall the driver, and reached the same result. erdntdir.txt
  8. First off, bad news. Can't uninstall SP1. Not sure if that's because I used a Win7 SP1 DVD to upgrade from Vista, or if it's because the pre-SP1 files got deleted at some point. Bottom line, I don't have the appropriate KB update available in "installed updates" in order to remove SP1. Using wusa at the prompt also doesn't work. Oh well. Reinstalled AVG & Comodo, and the only log for an AVG scan where something turned up is attached.. (AVG is actually semi-colon delimited but it didn't let me upload csv files.) Comodo looks to have taken its log files with it when it uninstalled, or overwritten them in the reinstall. Still searching, but it's not looking good. Also, a majority of the damaging crashes happened while combofix was running. That is, it would be running with the /nombr switch, freeze, and I'd have to do a hard reboot. I'm nearly certain that's what caused the damage, as the initial failures happened immediately after each one of those reboots. First, CFscan, keyboard mouse go out, scan again, audio goes out, scan again, wireless goes out. It's one of the things that drove me here. Additionally, had another idea for pre-reinstall. I still have major problems in the attached sfctodo.txt according to SFC. I don't think SFC is working. We already knew that some of the files it has are corrupt and thus it's not copying them. It also looks like it's setting up "pending renames" that never actually execute. (I've checked for the folders that they should be renamed to, and they're not there.) I've found instructions on mounting the install image off of the install DVD within the recovery environment. (These detailed instructions fix a specific issue, but it can be generalized to other windows system files. And unfortunately I can't find a similar example in Win7, but it works the same.) My thoughts were to create a text file with commands to fix each issue (cmd1: rename old file to back it up, cmd2: apply fix by copying from DVD, cmd3: append to log that it completed those two commands). Reason I'm not doing that in a batch file is that I'm using a batch file to wrap that text file, so I can use a loop to check for a non-0 exit from each command, and if a given command does exit with an error, append error/command that caused error to the log file, and ECHO something like, "You'd save yourself any more of a headache if you just reinstalled already." It's a bit of a shot in the dark, but I figure that if Windows (sfc) is identifying core problems for me where there is something specific I can do (execute the commands that it's trying to), that might be better than digging around from the GUI. With backups of each of the things I'm touching, along with the fact I probably have to reinstall anyway, I'm not seeing many drawbacks other than the time suck. I welcome your thoughts though. Thanks again. You're the best! P.S. I'm glad I hit 50 posts in this thread. I was half-way to my old 20mb upload quota. 150mb quota should get me through at least another couple days of this. sfctodo.txt AVG_resshield.txt
  9. If this is a problem with the uninstall of Comodo and AVG (so the logs are unintelligible), I could always reinstall them to get a look at the logs if that could point us to the issue. If you want to go the SP1 route, I'll go that route. If it would be helpful to go with the reinstall of the overzealous scanners in order to read logs, I can do that as well. Let me know. I'm guessing SP1 is easier because it does't require diving through any more logs. Worst case, and all of this fails, what next? I realize it's likely still a long way from the root of the problem. But for things like my Wireless card, that's depending on WLAN Service which won't run because of the ndisuio.sys issue that is in the Non-PnP drivers area you had me look into. I haven't ever traced a driver issue this deep into the O/S, but it seems like you probably have. Is it worth me following these down the line to the root, or from your experience, do you know if I'm going to bump into some MS binary that's custom to my system 15 steps down the line which prevents further tracing/troubleshooting? If that's the case, I guess I'm forced to go with the reinstall.
  10. I'm going to ignore anything my computer says to the contrary and say yes, everything is perfect. After opening my eyes, unfortunately nothing has changed. Same problems as before in Device Manager (except the McAfee driver is gone). Audio and keyboard still behave the same but I don't know that I'd call completely not working a type of behavior. Although I don't know for certain, I believe the McAfee driver was level over from the Summer of 2010, as that was the last time I had any part of a McAfee suite installed on this computer (that was when the 24-months free with the laptop ran out). Uninstaller must've missed that driver.
  11. FSS: Farbar Service Scanner Version: 13-02-2012 Ran by edshead (administrator) on 19-02-2012 at 09:56:39 Running from "C:\Users\edshead\Desktop\fixes" Microsoft Windows 7 Home Premium Service Pack 1 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Yahoo IP is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Security Center: ============ Windows Update: ============ File Check: ======== C:\Windows\system32\nsisvc.dll => MD5 is legit C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit C:\Windows\system32\dhcpcore.dll => MD5 is legit C:\Windows\system32\Drivers\afd.sys => MD5 is legit C:\Windows\system32\Drivers\tdx.sys => MD5 is legit C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit C:\Windows\system32\dnsrslvr.dll => MD5 is legit C:\Windows\system32\mpssvc.dll => MD5 is legit C:\Windows\system32\bfe.dll => MD5 is legit C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit C:\Windows\system32\SDRSVC.dll => MD5 is legit C:\Windows\system32\vssvc.exe => MD5 is legit C:\Windows\system32\wscsvc.dll => MD5 is legit C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\system32\wuaueng.dll => MD5 is legit C:\Windows\system32\qmgr.dll => MD5 is legit C:\Windows\system32\es.dll => MD5 is legit C:\Windows\system32\cryptsvc.dll => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit **** End of log **** Running McAfee removal and rebooting now.
  12. And again with the forgetting to click attach. dvmg.zip
  13. Couldn't find those on the tree. Here's screenshots of the tree, plus hopefully detailed enough screenshots of the three 'devices' error'd out in the tree. (Screenshots for each device showing General tab, Driver tab + error when clicking Start service msgbox, and Driver Details.)
  14. Here ya go! SystemLook 30.07.11 by jpshortstuff Log created at 08:14 on 19/02/2012 by edshead Administrator - Elevation successful ========== reg ========== [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\i8042prt] "Start"= 0x0000000003 (3) "Type"= 0x0000000001 (1) "ErrorControl"= 0x0000000001 (1) "ImagePath"="system32\DRIVERS\i8042prt.sys" "DisplayName"="i8042 Keyboard and PS/2 Mouse Port Driver" "Group"="Keyboard Port" "DriverPackageId"="keyboard.inf_x86_neutral_0c4a1880f2aa5a72" "Tag"= 0x0000000006 (6) [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\i8042prt\Parameters] "PollingIterations"= 0x0000002ee0 (12000) "PollingIterationsMaximum"= 0x0000002ee0 (12000) "ResendIterations"= 0x0000000003 (3) "LayerDriver JPN"="kbd101.dll" "LayerDriver KOR"="kbd101a.dll" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\i8042prt\Enum] "Count"= 0x0000000002 (2) "NextInstance"= 0x0000000002 (2) "INITSTARTFAILED"= 0x0000000001 (1) "0"="ACPI\PNP0F13\4&2d25c4a5&0" "1"="ACPI\PNP0303\4&2d25c4a5&0" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HDAUDBUS] "Start"= 0x0000000003 (3) "Type"= 0x0000000001 (1) "ErrorControl"= 0x0000000001 (1) "ImagePath"="system32\DRIVERS\HDAudBus.sys" "DisplayName"="Microsoft UAA Bus Driver for High Definition Audio" "Group"="Extended Base" "DriverPackageId"="hdaudbus.inf_x86_neutral_349139f09f579763" "Tag"= 0x000000000f (15) [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HDAUDBUS\Enum] "Count"= 0x0000000001 (1) "NextInstance"= 0x0000000001 (1) "INITSTARTFAILED"= 0x0000000001 (1) "0"="PCI\VEN_8086&DEV_284B&SUBSYS_022E1028&REV_02\3&2b8e0b4b&0&D8" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbehci] "Start"= 0x0000000003 (3) "Type"= 0x0000000001 (1) "ErrorControl"= 0x0000000001 (1) "ImagePath"="\SystemRoot\system32\drivers\usbehci.sys" "DisplayName"="Microsoft USB 2.0 Enhanced Host Controller Miniport Driver" "Group"="Base" "DriverPackageId"="usbport.inf_x86_neutral_ba59fa32fc6a596d" "BootFlags"= 0x0000000004 (4) "Tag"= 0x0000000012 (18) [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbehci\Enum] "0"="PCI\VEN_8086&DEV_283A&SUBSYS_022E1028&REV_02\3&2b8e0b4b&0&D7" "Count"= 0x0000000002 (2) "NextInstance"= 0x0000000002 (2) "1"="PCI\VEN_8086&DEV_2836&SUBSYS_022E1028&REV_02\3&2b8e0b4b&0&EF" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_i8042prt] (Unable to open key - key not found) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_hdaudbus] (Unable to open key - key not found) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_usbehci] (Unable to open key - key not found) -= EOF =-
  15. Here I was thinking I hadn't made that many changes since bringing the system back up b/c I was still using ubuntu mainly. Wrong. The information I gave you was 4 days old. Just tried to restore and was greeted with the following screen. I remember thinking... maybe I should backup/save/cling to for dear life that 1/30 restore. Oops. Well at least world hasn't ended yet. Mayans were really just talking about my computer.
  16. Infection was 2/6 or 2/7 I believe, and the most recent restore point I have is 1/30. Also have two before that, one for each of the two prior weeks in January. I'm having a lot of trouble (hour plus) deciphering my AVG logs since I uninstalled AVG per post 65, point 3, so I don't have the AVG log viewer. Lines look like the following. I can only assume that hash either is decrypted to a log entry, or matches a specific message string. [AVG.SCAN] ERROR 2012-02-15 14:31:04,327 DERENOPHOCIM PID:3540 THID:5028 ID:LMK:3410.1773.d945c8f.0 MSG:aA8raDbvt6OqeJRq77TW/O8HsKdadlPIw (Through narrowing down the timestamp by inference from several files, I've isolated all the lines like the one above that pertain to the suspect scans. Unfortunately, that's why I've given up. All lines that do have appropriate timestamps look like the one above, or are so generic - e.g. 5 threats found - that they're unhelpful. Sorry! - At least I got a refreshing in my advanced regex searching.) If you'd like (almost 100% positive you wouldn't), I can turn over the whole log folder to you. Only 258 files totally 200 mb that I've wrapped into a wonderful 19mb zip package. Based on the forum we're at, I'm assuming you trust that MBAM has only an appropriate amount of zealousness, and thus should not have removed my keyboard's functionality. That is still installed so I see no problem getting logs there if you'd like. Also, I had been using Comodo's free personal firewall for firewall protection. It was actually the first to detect the infection. Although I thought that the Defense+ auxiliary component only did heuristic detection based on both system usage and program behavior, it popped up pointing out the rootkit infection and "helpfully" suggested I upgrade to Comodo's virus protection. Even though I chose not to upgrade (by closing the window), looking independently on Comodo's site, the alert appeared to be legitimate. (Way to make one's self look like malware though, right? Long story not so short, I'm wondering if there might be something helpful in Comodo's logs. Given that I didn't even know it had a full virus scanner, and the fact that Comodo along with AVG has been uninstalled, I'd greatly appreciate advice on exactly how to provide Comodo log files if you'd like them. Thank you again for your continued efforts.
  17. Helps if I attach the file doesn't it. Too late at early in the morning. esetscan.txt
  18. So Microsoft must've designed the progress bar for ESET. Got to 99% in 45 minutes. Scan took 3 hours. Unfortunately (b/c I'm guessing they're not causing the problem), just an adware toolbar probably for a browser I don't really use. ESET did not repair these, per instructions.
  19. I had assumed that the log didn't have scan from the Win7 Install CD because the date accessed hadn't changed but after looking further, I think it may in fact be in there. Here's the full log dating back to January (pre-ZA). (Uncompressed file is 14mb) CBS.zip
  20. And apparently my prior post didn't go up. I tried your suggestion in #84 (swapped the mentioned file from ubuntu), and results are the same. Hence the post above to give you something hopefully helpful.
  21. I know you didn't ask for it, but I was bored and it's only a scan. Here's the results of: sfc /VERIFYONLY
  22. Made the switch, and same error unfortunately. No change at all.
  23. OTL logfile created on: 2/17/2012 12:31:49 AM - Run 9 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\edshead\Desktop\fixes Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.50 Gb Total Physical Memory | 1.90 Gb Available Physical Memory | 54.45% Memory free 6.99 Gb Paging File | 5.16 Gb Available in Paging File | 73.83% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 410.15 Gb Total Space | 149.73 Gb Free Space | 36.50% Space Free | Partition Type: NTFS Drive F: | 970.13 Mb Total Space | 886.09 Mb Free Space | 91.34% Space Free | Partition Type: FAT Computer Name: DERENOPHOCIM | User Name: edshead | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< MD5 for: HDAUDBUS.SYS >[/color] [2009/04/10 20:42:44 | 000,561,152 | ---- | M] (Microsoft Corporation) MD5=062452B7FFD68C8C042A6261FE8DFF4A -- C:\Temp\sandbox\x86_hdaudbus.inf_31bf3856ad364e35_6.0.6002.18005_none_790d0bed83a8ec35\hdaudbus.sys [2009/04/10 20:42:44 | 000,561,152 | ---- | M] (Microsoft Corporation) MD5=062452B7FFD68C8C042A6261FE8DFF4A -- C:\Temp\x86_hdaudbus.inf_31bf3856ad364e35_6.0.6002.18005_none_790d0bed83a8ec35\hdaudbus.sys [2010/11/20 13:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=9036377B8A6C15DC2EEC53E489D159B5 -- C:\Windows\System32\drivers\HDAudBus.sys [2010/11/20 13:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=9036377B8A6C15DC2EEC53E489D159B5 -- C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_x86_neutral_77479a4820fb8643\hdaudbus.sys [2010/11/20 13:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=9036377B8A6C15DC2EEC53E489D159B5 -- C:\Windows\winsxs\x86_hdaudbus.inf_31bf3856ad364e35_6.1.7601.17514_none_7928fccce4c939f4\hdaudbus.sys [color=#A23BEC]< MD5 for: I8042PRT.SYS >[/color] [2008/01/18 21:49:20 | 000,054,784 | ---- | M] (Microsoft Corporation) MD5=22D56C8184586B7A1F6FA60BE5F5A2BD -- C:\Temp\sandbox\x86_keyboard.inf_31bf3856ad364e35_6.0.6002.18005_none_9939e6e4d61ab7ca\i8042prt.sys [2008/01/18 21:49:20 | 000,054,784 | ---- | M] (Microsoft Corporation) MD5=22D56C8184586B7A1F6FA60BE5F5A2BD -- C:\Temp\x86_keyboard.inf_31bf3856ad364e35_6.0.6002.18005_none_9939e6e4d61ab7ca\i8042prt.sys [2009/07/13 15:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\System32\drivers\i8042prt.sys [2009/07/13 15:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_x86_neutral_50ad659974198591\i8042prt.sys [2009/07/13 15:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_x86_neutral_7a9084e0177406eb\i8042prt.sys [2009/07/13 15:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_9955d7c4373b0589\i8042prt.sys [2009/07/13 15:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_4e0a61a033aec8c3\i8042prt.sys [color=#A23BEC]< MD5 for: USBEHCI.SYS >[/color] [2009/04/10 20:42:54 | 000,039,936 | ---- | M] (Microsoft Corporation) MD5=79E96C23A97CE7B8F14D310DA2DB0C9B -- C:\Temp\sandbox\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbehci.sys [2009/04/10 20:42:54 | 000,039,936 | ---- | M] (Microsoft Corporation) MD5=79E96C23A97CE7B8F14D310DA2DB0C9B -- C:\Temp\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbehci.sys [2011/03/24 18:54:29 | 000,043,008 | ---- | M] (Microsoft Corporation) MD5=B1E46B8058AF716729D874B4DF7C68E0 -- C:\Windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.1.7601.21692_none_bffae6357b300705\usbehci.sys [2010/11/20 13:29:03 | 000,042,496 | ---- | M] (Microsoft Corporation) MD5=CFBCE999C057D78979A181C9C60F208E -- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_f9abf85fd00186bd\usbehci.sys [2010/11/20 13:29:03 | 000,042,496 | ---- | M] (Microsoft Corporation) MD5=CFBCE999C057D78979A181C9C60F208E -- C:\Windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.1.7601.17514_none_bfc9c95e61cfba61\usbehci.sys [2011/03/24 18:57:58 | 000,043,008 | ---- | M] (Microsoft Corporation) MD5=F92DE757E4B7CE9C07C5E65423F3AE3B -- C:\Windows\System32\drivers\usbehci.sys [2011/03/24 18:57:58 | 000,043,008 | ---- | M] (Microsoft Corporation) MD5=F92DE757E4B7CE9C07C5E65423F3AE3B -- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_18e46bb8fd6f032e\usbehci.sys [2011/03/24 18:57:58 | 000,043,008 | ---- | M] (Microsoft Corporation) MD5=F92DE757E4B7CE9C07C5E65423F3AE3B -- C:\Windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.1.7601.17586_none_bf801a7e6206b0a6\usbehci.sys < End of report >
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.