Jump to content

FBI Moneypack Virus -- Need Help!

WAYNEBO
 Share

Recommended Posts

WAYNEBO

WAYNEBO

Posted
Posted

I was able to run the FRST.exe for the following logs, however could not get the DDS program to run a log.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-05-2013

Ran by SYSTEM on 03-05-2013 14:02:50

Running from F:\

Windows Vista Home Premium Service Pack 1 (X86) OS Language: English(US)

Internet Explorer Version 9

Boot Mode: Recovery

The current controlset is ControlSet001

ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-20] (Microsoft Corporation)

HKLM\...\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)

HKLM\...\Run: [KBD] C:\Program Files\Hewlett-Packard\KBD\KbdStub.EXE [12288 2008-07-21] (Microsoft)

HKLM\...\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup [13539872 2008-09-26] (NVIDIA Corporation)

HKLM\...\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit [92704 2008-09-26] (NVIDIA Corporation)

HKLM\...\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [updateP2GoShortCut] "c:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "c:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [updatePDIRShortCut] "c:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "c:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0" [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [updatePSTShortCut] "c:\Program Files\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe" "c:\Program Files\CyberLink\CyberLink DVD Suite Deluxe" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" [210216 2008-09-11] (CyberLink Corp.)

HKLM\...\Run: [TSMAgent] "c:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe" [1152296 2008-10-17] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer for HP TouchSmart] "c:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" [189736 2008-10-17] (CyberLink)

HKLM\...\Run: [smartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [912688 2008-09-23] (Hewlett-Packard)

HKLM\...\Run: [sSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot [210472 2006-10-25] (Nuance Communications, Inc.)

HKLM\...\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" [29984 2007-10-11] (Nuance Communications, Inc.)

HKLM\...\Run: [indexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" [46368 2007-10-11] (Nuance Communications, Inc.)

HKLM\...\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini" [346 2013-05-02] ()

HKLM\...\Run: [brMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1085440 2008-05-29] (Brother Industries, Ltd.)

HKLM\...\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun [86016 2007-12-21] (Brother Industries, Ltd.)

HKLM\...\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-02-18] (Hewlett-Packard)

HKLM\...\Run: [] [x]

HKLM\...\Run: [DVDAgent] "c:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe" [1148200 2009-09-09] (CyberLink Corp.)

HKLM\...\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)

HKLM\...\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe" [1644680 2013-01-28] (Ask)

HKLM\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [41208 2012-12-19] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [946352 2012-12-02] (Adobe Systems Incorporated)

HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)

HKLM\...\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe [2077536 2012-12-06] (AVG Technologies CZ, s.r.o.)

HKLM\...\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe" [1151152 2013-02-18] ()

HKLM\...\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)

HKLM\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858456 2013-04-30] (AVAST Software)

HKLM\...\Run: [PCFixSpeed] "C:\Program Files\PCFixSpeed\PCFixTray.exe" /startup [383648 2012-09-19] (Crawler.com)

HKLM\...\Run: [24x7HELP] "C:\Program Files\24x7Help\App24x7Help.exe" /STARTUP [1685144 2012-07-18] (PCRx.com, LLC)

HKU\Ben\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW,SYSTRAY [ 2010-06-29] (Hewlett-Packard)

HKU\Ben\...\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]

HKU\Ben\...\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [ 2009-03-05] (Safer-Networking Ltd.)

HKU\Default\...\Run: [HPADVISOR] [x]

HKU\Default User\...\Run: [HPADVISOR] [x]

HKU\jblow\...\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW [ 2010-06-29] (Hewlett-Packard)

HKU\jblow\...\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [ 2009-03-05] (Safer-Networking Ltd.)

HKU\jblow\...\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe [ 2008-01-20] (Microsoft Corporation)

HKU\jblow\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [ 2008-01-20] (Microsoft Corporation)

HKU\jblow\...\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]

HKU\jblow\...\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [ 2012-12-17] (Apple Inc.)

HKU\jblow\...\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [ 2012-12-17] (Apple Inc.)

Startup: C:ProgramData\Start Menu\Programs\Startup\Microsoft Office.lnk

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:ProgramData\Start Menu\Programs\Startup\PictureMover.lnk

ShortcutTarget: PictureMover.lnk -> C:\Program Files\PictureMover\Bin\PictureMover.exe (Hewlett-Packard Company)

Startup: C:\Users\Ben\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk

ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

Startup: C:\Users\jblow\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk

ShortcutTarget: ctfmon.lnk -> C:\Windows\System32\regsvr32.exe (Microsoft Corporation)

Startup: C:\Users\jblow\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

========================== Services (Whitelisted) =================

S2 24x7HelpSvc; C:\Program Files\24x7Help\App24x7Svc.exe [394392 2012-07-18] (PCRx.com, LLC)

S2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-04-30] (AVAST Software)

S2 avg9wd; C:\Program Files\AVG\AVG9\avgwdsvc.exe [308136 2012-12-06] (AVG Technologies CZ, s.r.o.)

S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [32808 2013-04-08] (Just Develop It)

S2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard)

S2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

S2 vToolbarUpdater14.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [968880 2013-02-18] ()

S3 msiserver; %systemroot%\system32\msiexec /V [x]

==================== Drivers (Whitelisted) ====================

S3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)

S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-04-30] (AVAST Software)

S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-04-30] (AVAST Software)

S1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-04-30] (AVAST Software)

S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-04-30] ()

S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [765736 2013-04-30] (AVAST Software)

S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [368944 2013-04-30] (AVAST Software)

S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-04-30] (AVAST Software)

S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [174536 2013-04-30] ()

S1 AvgLdx86; C:\Windows\System32\Drivers\avgldx86.sys [226016 2013-01-15] (AVG Technologies CZ, s.r.o.)

S1 AvgMfx86; C:\Windows\System32\Drivers\avgmfx86.sys [29712 2012-12-05] (AVG Technologies CZ, s.r.o.)

S1 AvgTdiX; C:\Windows\System32\Drivers\avgtdix.sys [243152 2012-12-05] (AVG Technologies CZ, s.r.o.)

S1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [33112 2013-02-18] (AVG Technologies)

S3 MREMP50; C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [21248 2009-01-26] (Printing Communications Assoc., Inc. (PCAUSA))

S3 MRESP50; C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [20096 2009-01-26] (Printing Communications Assoc., Inc. (PCAUSA))

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [x]

S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 PCD5SRVC{BD6912E3-AC9D80E8-05040000}; \??\C:\PROGRA~1\PC-DOC~1\PCD5SRVC.pkms [x]

========================== Drivers MD5 =======================

C:\Windows\System32\drivers\acpi.sys 82B296AE1892FE3DBEE00C9CF92F8AC7

C:\Windows\system32\drivers\adp94xx.sys 04F0FCAC69C7C71A3AC4EB97FAFC8303

C:\Windows\system32\drivers\adpahci.sys 60505E0041F7751BDBB80F88BF45C2CE

C:\Windows\system32\drivers\adpu160m.sys 8A42779B02AEC986EAB64ECFC98F8BD7

C:\Windows\system32\drivers\adpu320.sys 241C9E37F8CE45EF51C3DE27515CA4E5

C:\Windows\System32\drivers\Afc.sys FE3EA6E9AFC1A78E6EDCA121E006AFB7

C:\Windows\system32\drivers\afd.sys 3911B972B55FEA0478476B2E777B29FA

C:\Windows\system32\drivers\agp440.sys 13F9E33747E6B41A3FF305C37DB0D360

C:\Windows\system32\drivers\djsvs.sys ==> MD5 is legit

C:\Windows\system32\drivers\aliide.sys 9EAEF5FC9B8E351AFA7E78A6FAE91F91

C:\Windows\system32\drivers\amdagp.sys C47344BC706E5F0B9DCE369516661578

C:\Windows\system32\drivers\amdide.sys 9B78A39A4C173FDBC1321E0DD659B34C

C:\Windows\system32\drivers\amdk7.sys 18F29B49AD23ECEE3D2A826C725C8D48

C:\Windows\System32\DRIVERS\amdk8.sys 93AE7F7DD54AB986A6F1A1B37BE7442D

C:\Windows\system32\drivers\arc.sys 5D2888182FB46632511ACEE92FDAD522

C:\Windows\system32\drivers\arcsas.sys 5E2A321BD7C8B3624E41FDEC3E244945

C:\Windows\System32\Drivers\aswFsBlk.sys 550259985ABED458FF68217A53F22BB6

C:\Windows\system32\drivers\aswMonFlt.sys 04E511EED27703CAEF02BF2384A1E79D

C:\Windows\System32\Drivers\AswRdr.sys 8E7A2A1D1E57C6B50A88C9C526166EBF

C:\Windows\System32\Drivers\aswRvrt.sys 75F1F051C590368F64130101AD6EF8C3

C:\Windows\System32\Drivers\aswSnx.sys AACA5A01342EE3490375B4B4A31B75EC

C:\Windows\System32\Drivers\aswSP.sys 2DDBA1C67BFA2DD9263142A9EDC1FCF1

C:\Windows\System32\Drivers\aswTdi.sys CBB5F3E12632A2E79875899DAE00BE7D

C:\Windows\System32\Drivers\aswVmm.sys F3104136C6C57DDA13C81A87CA1ECF7B

C:\Windows\System32\DRIVERS\asyncmac.sys 53B202ABEE6455406254444303E87BE1

C:\Windows\System32\drivers\atapi.sys 1F05B78AB91C9075565A9D8A4B880BC4

C:\Windows\System32\Drivers\avgldx86.sys A9F4D19DE72C738759330D10D35C4398

C:\Windows\System32\Drivers\avgmfx86.sys 80FF2B1B7EEDA966394F0BAA895BBF4B

C:\Windows\System32\Drivers\avgtdix.sys 9A7A93388F503A34E7339AE7F9997449

C:\Windows\system32\drivers\avgtpx86.sys CAE7B6E4D7EB17829C526153D19B9C95

C:\Windows\System32\Drivers\Beep.sys 67E506B75BD5326A3EC7B70BD014DFB6

C:\Windows\system32\drivers\blbdrive.sys D4DF28447741FD3D953526E33A617397

C:\Windows\System32\DRIVERS\bowser.sys 35F376253F687BDE63976CCB3F2108CA

C:\Windows\system32\drivers\brfiltlo.sys ==> MD5 is legit

C:\Windows\system32\drivers\brfiltup.sys ==> MD5 is legit

C:\Windows\system32\drivers\brserid.sys ==> MD5 is legit

C:\Windows\system32\drivers\brserwdm.sys ==> MD5 is legit

C:\Windows\system32\drivers\brusbmdm.sys ==> MD5 is legit

C:\Windows\system32\drivers\brusbser.sys ==> MD5 is legit

C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\cdfs.sys 7ADD03E75BEB9E6DD102C3081D29840A

C:\Windows\System32\DRIVERS\cdrom.sys 6B4BFFB9BECD728097024276430DB314

C:\Windows\system32\drivers\circlass.sys E5D4133F37219DBCFE102BC61072589D

C:\Windows\System32\CLFS.sys D7659D3B5B92C31E84E53C1431F35132

C:\Windows\system32\drivers\cmdide.sys 0CA25E686A4928484E9FDABD168AB629

C:\Windows\system32\drivers\compbatt.sys 6AFEF0B60FA25DE07C0968983EE4F60A

C:\Windows\System32\drivers\crcdisk.sys 741E9DFF4F42D2D8477D0FC1DC0DF871

C:\Windows\system32\drivers\crusoe.sys 1F07BECDCA750766A96CDA811BA86410

C:\Windows\System32\Drivers\dfsc.sys 622C41A07CA7E6DD91770F50D532CB6C

C:\Windows\System32\drivers\disk.sys 5D4AEFC3386920236A548271F8F1AF6A

C:\Windows\System32\drivers\drmkaud.sys 97FEF831AB90BEE128C9AF390E243F80

C:\Windows\System32\drivers\dxgkrnl.sys C68AC676B0EF30CFBB1080ADCE49EB1F

C:\Windows\System32\DRIVERS\E1G60I32.sys 5425F74AC0C1DBD96A1E04F17D63F94C

C:\Windows\System32\drivers\ecache.sys 7F64EA048DCFAC7ACF8B4D7B4E6FE371

C:\Windows\system32\drivers\elxstor.sys 23B62471681A124889978F6295B3F4C6

C:\Windows\system32\drivers\errdev.sys 3DB974F3935483555D7148663F726C61

C:\Windows\System32\Drivers\exfat.sys 22B408651F9123527BCEE54B4F6C5CAE

C:\Windows\System32\Drivers\fastfat.sys 1E9B9A70D332103C52995E957DC09EF8

C:\Windows\System32\DRIVERS\fdc.sys AFE1E8B9782A0DD7FB46BBD88E43F89A

C:\Windows\System32\drivers\fileinfo.sys A8C0139A884861E3AAE9CFE73B208A9F

C:\Windows\System32\drivers\filetrace.sys 0AE429A696AECBC5970E3CF2C62635AE

C:\Windows\System32\DRIVERS\flpydisk.sys 85B7CF99D532820495D68D747FDA9EBD

C:\Windows\System32\drivers\fltmgr.sys 01334F9EA68E6877C4EF05D3EA8ABB05

C:\Windows\System32\DRIVERS\fssfltr.sys D909075FA72C090F27AA926C32CB4612

C:\Windows\System32\Drivers\Fs_Rec.sys B972A66758577E0BFD1DE0F91AAA27B5

C:\Windows\system32\drivers\gagp30kx.sys 34582A6E6573D54A07ECE5FE24A126B5

C:\Windows\System32\DRIVERS\GEARAspiWDM.sys 185ADA973B5020655CEE342059A86CBB

C:\Windows\System32\DRIVERS\HDAudBus.sys 062452B7FFD68C8C042A6261FE8DFF4A

C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit

C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit

C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit

C:\Windows\system32\drivers\hpcisss.sys 16EE7B23A009E00D835CDB79574A91A6

C:\Windows\System32\DRIVERS\HSX_DP.sys 78C88781FBD2FDD3BCBA09F58897FE45

C:\Windows\System32\DRIVERS\HSXHWBS2.sys 1E289F978D1E6F11DB88D4FCB2F9D92F

C:\Windows\System32\drivers\HTTP.sys F870AA3E254628EBEAFE754108D664DE

C:\Windows\system32\drivers\i2omp.sys C6B032D69650985468160FC9937CF5B4

C:\Windows\System32\DRIVERS\i8042prt.sys 22D56C8184586B7A1F6FA60BE5F5A2BD

C:\Windows\system32\drivers\iastorv.sys 54155EA1B0DF185878E0FC9EC3AC3A14

C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit

C:\Windows\System32\drivers\RTKVHDA.sys 84ED2154239F9D013BBD3220755ADA8B

C:\Windows\system32\drivers\intelide.sys 83AA759F3189E6370C30DE5DC5590718

C:\Windows\System32\DRIVERS\intelppm.sys 224191001E78C89DFA78924C3EA595FF

C:\Windows\System32\DRIVERS\ipfltdrv.sys 62C265C38769B864CB25B4BCF62DF6C3

C:\Windows\system32\drivers\ipmidrv.sys B25AAF203552B7B3491139D582B39AD1

C:\Windows\System32\DRIVERS\ipnat.sys 8793643A67B42CEC66490B2A0CF92D68

C:\Windows\System32\drivers\irenum.sys 109C0DFB82C3632FBD11949B73AEEAC9

C:\Windows\system32\drivers\isapnp.sys 6C70698A3E5C4376C6AB5C7C17FB0614

C:\Windows\System32\DRIVERS\msiscsi.sys 232FA340531D940AAC623B121A595034

C:\Windows\system32\drivers\iteatapi.sys ==> MD5 is legit

C:\Windows\system32\drivers\iteraid.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\kbdclass.sys 37605E0A8CF00CBBA538E753E4344C6E

C:\Windows\system32\drivers\kbdhid.sys 18247836959BA67E3511B62846B9C2E0

C:\Windows\System32\Drivers\ksecdd.sys 4A1445EFA932A3BAF5BDB02D7131EE20

C:\Windows\System32\DRIVERS\lltdio.sys D1C5883087A0C3F1344D9D55A44901F6

C:\Windows\system32\drivers\lsi_fc.sys C7E15E82879BF3235B559563D4185365

C:\Windows\system32\drivers\lsi_sas.sys EE01EBAE8C9BF0FA072E0FF68718920A

C:\Windows\system32\drivers\lsi_scsi.sys 912A04696E9CA30146A62AFA1463DD5C

C:\Windows\system32\drivers\luafv.sys 8F5C7426567798E62A3B3614965D62CC

C:\Windows\System32\DRIVERS\mdmxsdk.sys 0CEA2D0D3FA284B85ED5B68365114F76

C:\Windows\system32\drivers\megasas.sys 0001CE609D66632FA17B84705F658879

C:\Windows\system32\drivers\megasr.sys C252F32CD9A49DBFC25ECF26EBD51A99

C:\Windows\System32\drivers\modem.sys E13B5EA0F51BA5B1512EC671393D09BA

C:\Windows\System32\DRIVERS\monitor.sys 0A9BB33B56E294F686ABB7C1E4E2D8A8

C:\Windows\System32\DRIVERS\mouclass.sys 5BF6A1326A335C5298477754A506D263

C:\Windows\system32\drivers\mouhid.sys 93B8D4869E12CFBE663915502900876F

C:\Windows\System32\drivers\mountmgr.sys BDAFC88AA6B92F7842416EA6A48E1600

C:\Windows\system32\drivers\mpio.sys 511D011289755DD9F9A7579FB0B064E6

C:\Windows\System32\drivers\mpsdrv.sys 22241FEBA9B2DEFA669C8CB0A8DD7D2E

C:\Windows\system32\drivers\mraid35x.sys ==> MD5 is legit

C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS 9BD4DCB5412921864A7AACDEDFBD1923

C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS 07C02C892E8E1A72D6BF35004F0E9C5E

C:\Windows\system32\drivers\mrxdav.sys 82CEA0395524AACFEB58BA1448E8325C

C:\Windows\System32\DRIVERS\mrxsmb.sys 1E94971C4B446AB2290DEB71D01CF0C2

C:\Windows\System32\DRIVERS\mrxsmb10.sys 4FCCB34D793B116423209C0F8B7A3B03

C:\Windows\System32\DRIVERS\mrxsmb20.sys C3CB1B40AD4A0124D617A1199B0B9D7C

C:\Windows\system32\drivers\msahci.sys 28023E86F17001F7CD9B15A5BC9AE07D

C:\Windows\system32\drivers\msdsm.sys 4468B0F385A86ECDDAF8D3CA662EC0E7

C:\Windows\System32\Drivers\Msfs.sys A9927F4A46B816C92F461ACB90CF8515

C:\Windows\System32\drivers\msisadrv.sys 0F400E306F385C56317357D6DEA56F62

C:\Windows\System32\drivers\MSKSSRV.sys D8C63D34D9C9E56C059E24EC7185CC07

C:\Windows\System32\drivers\MSPCLOCK.sys 1D373C90D62DDB641D50E55B9E78D65E

C:\Windows\System32\drivers\MSPQM.sys B572DA05BF4E098D4BBA3A4734FB505B

C:\Windows\System32\Drivers\MsRPC.sys B49456D70555DE905C311BCDA6EC6ADB

C:\Windows\System32\DRIVERS\mssmbios.sys E384487CB84BE41D09711C30CA79646C

C:\Windows\System32\drivers\MSTEE.sys 7199C1EEC1E4993CAF96B8C0A26BD58A

C:\Windows\System32\Drivers\mup.sys 6A57B5733D4CB702C8EA4542E836B96C

C:\Windows\System32\DRIVERS\nwifi.sys 85C44FDFF9CF7E72A40DCB7EC06A4416

C:\Windows\System32\drivers\ndis.sys 1357274D1883F68300AEADD15D7BBB42

C:\Windows\System32\DRIVERS\ndistapi.sys 0E186E90404980569FB449BA7519AE61

C:\Windows\System32\DRIVERS\ndisuio.sys D6973AA34C4D5D76C0430B181C3CD389

C:\Windows\System32\DRIVERS\ndiswan.sys 818F648618AE34F729FDB47EC68345C3

C:\Windows\System32\Drivers\NDProxy.sys 71DAB552B41936358F3B541AE5997FB3

C:\Windows\System32\DRIVERS\netbios.sys BCD093A5A6777CF626434568DC7DBA78

C:\Windows\System32\DRIVERS\netbt.sys ECD64230A59CBD93C85F1CD1CAB9F3F6

C:\Windows\System32\DRIVERS\netr73.sys 6CEE3BF2AB2839E6DCEE7C71D1C83E7B

C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Npfs.sys D36F239D7CCE1931598E8FB90A0DBC26

C:\Windows\System32\drivers\nsiproxy.sys 609773E344A97410CE4EBF74A8914FCF

C:\Windows\System32\Drivers\Ntfs.sys 2C1121F2B87E9A6B12485DF53CD848C7

C:\Windows\system32\drivers\ntrigdigi.sys ==> MD5 is legit

C:\Windows\System32\Drivers\Null.sys C5DBBCDA07D780BDA9B685DF333BB41E

C:\Windows\System32\DRIVERS\nvmfdx32.sys D958A2B5F6AD5C3B8CCDC4D7DA62466C

C:\Windows\System32\DRIVERS\nvlddmkm.sys 7BC6FB1F3AA696944CEB46D038FA90ED

C:\Windows\System32\drivers\nvraid.sys 2EDF9E7751554B42CBB60116DE727101

C:\Windows\system32\drivers\nvrd32.sys 085E88101D0D4B321ABF9C7E2B6EE99D

C:\Windows\system32\drivers\nvsmu.sys 62754E376185EACBB73D06FEA0FFC54A

C:\Windows\system32\drivers\nvstor.sys ABED0C09758D1D97DB0042DBB2688177

C:\Windows\System32\DRIVERS\nvstor32.sys 1199B2052F7861C1D39C2318E70904C9

C:\Windows\system32\drivers\nv_agp.sys 18BBDF913916B71BD54575BDB6EEAC0B

C:\Windows\System32\DRIVERS\ohci1394.sys 6F310E890D46E246E0E261A63D9B36B4

C:\Windows\system32\drivers\parport.sys ==> MD5 is legit

C:\Windows\System32\drivers\partmgr.sys B9C2B89F08670E159F7181891E449CD9

C:\Windows\system32\drivers\parvdm.sys ==> MD5 is legit

C:\Windows\System32\drivers\pci.sys 941DC1D19E7E8620F40BBC206981EFDB

C:\Windows\System32\drivers\pciide.sys 1636D43F10416AEB483BC6001097B26C

C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit

C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\raspptp.sys ECFFFAEC0C1ECD8DBC77F39070EA1DB1

C:\Windows\system32\drivers\processr.sys 2027293619DD0F047C584CF2E7DF4FFD

C:\Windows\System32\DRIVERS\PS2.sys 390C204CED3785609AB24E9C52054A84

C:\Windows\System32\DRIVERS\pacer.sys 99514FAA8DF93D34B5589187DB3AA0BA

C:\Windows\system32\drivers\ql2300.sys 0A6DB55AFB7820C99AA1F3A1D270F4F6

C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit

C:\Windows\system32\drivers\qwavedrv.sys 9F5E0E1926014D17486901C88ECA2DB7

C:\Windows\System32\DRIVERS\rasacd.sys 147D7F9C556D259924351FEB0DE606C3

C:\Windows\System32\DRIVERS\rasl2tp.sys A214ADBAF4CB47DD2728859EF31F26B0

C:\Windows\System32\DRIVERS\raspppoe.sys 509A98DD18AF4375E1FC40BC175F1DEF

C:\Windows\System32\DRIVERS\rassstp.sys 2005F4A1E05FA09389AC85840F0A9E4D

C:\Windows\System32\DRIVERS\rdbss.sys B14C9D5B9ADD2F84F70570BBBFAA7935

C:\Windows\System32\DRIVERS\RDPCDD.sys 89E59BE9A564262A3FB6C4F4F1CD9899

C:\Windows\system32\drivers\rdpdr.sys FBC0BACD9C3D7F6956853F64A66E252D

C:\Windows\System32\drivers\rdpencdd.sys 9D91FE5286F748862ECFFA05F8A0710C

C:\Windows\System32\Drivers\RDPWD.sys C127EBD5AFAB31524662C48DFCEB773A

C:\Windows\System32\DRIVERS\rspndr.sys 9C508F4074A39E8B4B31D27198146FAD

C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit

C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit

C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit

C:\Windows\system32\drivers\serial.sys ==> MD5 is legit

C:\Windows\system32\drivers\sermouse.sys 8AF3D28A879BF75DB53A0EE7A4289624

C:\Windows\system32\drivers\sffdisk.sys 3EFA810BDCA87F6ECC24F9832243FE86

C:\Windows\system32\drivers\sffp_mmc.sys E95D451F7EA3E583AEC75F3B3EE42DC5

C:\Windows\system32\drivers\sffp_sd.sys 3D0EA348784B7AC9EA9BD9F317980979

C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit

C:\Windows\system32\drivers\sisagp.sys 1D76624A09A054F682D746B924E2DBC3

C:\Windows\system32\drivers\sisraid2.sys 43CB7AA756C7DB280D01DA9B676CFDE2

C:\Windows\system32\drivers\sisraid4.sys A99C6C8B0BAA970D8AA59DDC50B57F94

C:\Windows\System32\DRIVERS\smb.sys 7B75299A4D201D6A6533603D6914AB04

C:\Windows\System32\Drivers\spldr.sys 7AEBDEEF071FE28B0EEF2CDD69102BFF

C:\Windows\System32\DRIVERS\srv.sys 41987F9FC0E61ADF54F581E15029AD91

C:\Windows\System32\DRIVERS\srv2.sys FF33AFF99564B1AA534F58868CBE41EF

C:\Windows\System32\DRIVERS\srvnet.sys 7605C0E1D01A08F3ECD743F38B834A44

C:\Windows\System32\DRIVERS\serscan.sys EF70B3D22B4BFFDA6EA851ECB063EFAA

C:\Windows\System32\DRIVERS\swenum.sys 7BA58ECF0C0A9A69D44B3DCA62BECF56

C:\Windows\system32\drivers\symc8xx.sys ==> MD5 is legit

C:\Windows\system32\drivers\sym_hi.sys ==> MD5 is legit

C:\Windows\system32\drivers\sym_u3.sys ==> MD5 is legit

C:\Windows\System32\drivers\tcpip.sys 74E2D020C47BB2B2FCCBA29A518A7EB4

C:\Windows\System32\DRIVERS\tcpip.sys 74E2D020C47BB2B2FCCBA29A518A7EB4

C:\Windows\System32\drivers\tcpipreg.sys 608C345A255D82A6289C2D468EB41FD7

C:\Windows\System32\drivers\tdpipe.sys 5DCF5E267BE67A1AE926F2DF77FBCC56

C:\Windows\System32\drivers\tdtcp.sys 389C63E32B3CEFED425B61ED92D3F021

C:\Windows\System32\DRIVERS\tdx.sys 76B06EB8A01FC8624D699E7045303E54

C:\Windows\System32\DRIVERS\termdd.sys 3CAD38910468EAB9A6479E2F01DB43C7

C:\Windows\System32\DRIVERS\tssecsrv.sys DCF0F056A2E4F52287264F5AB29CF206

C:\Windows\System32\DRIVERS\tunmp.sys CAECC0120AC49E3D2F758B9169872D38

C:\Windows\System32\DRIVERS\tunnel.sys 300DB877AC094FEAB0BE7688C3454A9C

C:\Windows\system32\drivers\uagp35.sys 7D33C4DB2CE363C8518D2DFCF533941F

C:\Windows\System32\DRIVERS\udfs.sys D9728AF68C4C7693CB100B8441CBDEC6

C:\Windows\system32\drivers\uliagpkx.sys B0ACFDC9E4AF279E9116C03E014B2B27

C:\Windows\system32\drivers\uliahci.sys 9224BB254F591DE4CA8D572A5F0D635C

C:\Windows\system32\drivers\ulsata.sys ==> MD5 is legit

C:\Windows\system32\drivers\ulsata2.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\umbus.sys 32CFF9F809AE9AED85464492BF3E32D2

C:\Windows\System32\Drivers\usbaapl.sys 6E421CCC57059B0186C6259CA3B6DFC9

C:\Windows\system32\drivers\usbccgp.sys ==> MD5 is legit

C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\usbehci.sys 79E96C23A97CE7B8F14D310DA2DB0C9B

C:\Windows\System32\DRIVERS\usbhub.sys 4673BBCB006AF60E7ABDDBE7A130BA42

C:\Windows\System32\DRIVERS\usbohci.sys CE697FEE0D479290D89BEC80DFE793B7

C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\USBSTOR.SYS BE3DA31C191BC222D9AD503C5224F2AD

C:\Windows\System32\DRIVERS\usbuhci.sys 814D653EFC4D48BE3B04A307ECEFF56F

C:\Windows\System32\DRIVERS\vgapnp.sys 87B06E1F30B749A114F74622D013F8D4

C:\Windows\System32\drivers\vga.sys 2E93AC0A1D8C79D019DB6C51F036636C

C:\Windows\system32\drivers\viaagp.sys 5D7159DEF58A800D5781BA3A879627BC

C:\Windows\system32\drivers\viac7.sys C4F3A691B5BAD343E6249BD8C2D45DEE

C:\Windows\system32\drivers\viaide.sys AADF5587A4063F52C2C3FED7887426FC

C:\Windows\System32\drivers\volmgr.sys 69503668AC66C77C6CD7AF86FBDF8C43

C:\Windows\System32\drivers\volmgrx.sys 23E41B834759917BFD6B9A0D625D0C28

C:\Windows\System32\drivers\volsnap.sys 786DB5771F05EF300390399F626BF30A

C:\Windows\system32\drivers\vsmraid.sys 587253E09325E6BF226B299774B728A9

C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit

C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26

C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26

C:\Windows\system32\drivers\wd.sys 78FE9542363F297B18C027B2D7E7C07F

C:\Windows\System32\drivers\Wdf01000.sys A840213F1ACDCC175B4D1D5AAEAC0D7A

C:\Windows\System32\DRIVERS\HSX_CNXT.sys 0869C31E0FF995BF00628AF8C1658E26

C:\Windows\system32\drivers\wmiacpi.sys 2E7255D172DF0B8283CDFB7B433B864E

C:\Windows\System32\DRIVERS\wpdusb.sys DE9D36F91A4DF3D911626643DEBF11EA

C:\Windows\system32\drivers\ws2ifsl.sys E3A3CB253C0EC2494D4A61F5E43A389C

C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070

C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF

C:\Windows\System32\DRIVERS\xaudio.sys BFCC507ECA58F11C5FED96E192B878CB

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-05-03 13:55 - 2013-05-03 13:55 - 00000000 ____D C:\FRST

2013-05-02 19:38 - 2013-05-02 20:08 - 00000000 ____D C:\Users\Ben\Application Data\PCFixSpeed

2013-05-02 19:38 - 2013-05-02 20:08 - 00000000 ____D C:\Users\Ben\AppData\Roaming\PCFixSpeed

2013-05-02 19:37 - 2013-05-03 12:45 - 00000000 ____D C:\Program Files\MyPC Backup

2013-05-02 19:37 - 2013-05-02 21:41 - 00000000 ____D C:\Users\jblow\Application Data\PCFixSpeed

2013-05-02 19:37 - 2013-05-02 21:41 - 00000000 ____D C:\Users\jblow\AppData\Roaming\PCFixSpeed

2013-05-02 19:37 - 2013-05-02 19:37 - 00000886 ____A C:\Users\jblow\Desktop\MyPC Backup.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000861 ____A C:\Users\jblow\Desktop\Optimizer Pro.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000821 ____A C:ProgramData\Desktop\24x7 Help.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000821 ____A C:\Users\Public\Desktop\24x7 Help.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000774 ____A C:ProgramData\Desktop\Optimize Your PC.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000774 ____A C:\Users\Public\Desktop\Optimize Your PC.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000000 ____D C:ProgramData\PCFixSpeed

2013-05-02 19:37 - 2013-05-02 19:37 - 00000000 ____D C:ProgramData\Application Data\PCFixSpeed

2013-05-02 19:37 - 2013-05-02 19:37 - 00000000 ____D C:\Program Files\24x7Help

2013-05-02 19:36 - 2013-05-02 19:37 - 00000000 ____D C:\Program Files\PCFixSpeed

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Users\jblow\Local Settings\getsavin

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Users\jblow\Local Settings\Application Data\getsavin

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Users\jblow\AppData\Local\getsavin

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Program Files\Optimizer Pro

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____A C:\extensions.sqlite

2013-05-02 19:35 - 2013-05-02 19:35 - 00001831 ____A C:ProgramData\Desktop\avast! Free Antivirus.lnk

2013-05-02 19:35 - 2013-05-02 19:35 - 00001831 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk

2013-05-02 19:35 - 2013-04-30 05:19 - 00765736 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys

2013-05-02 19:35 - 2013-04-30 05:19 - 00368944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys

2013-05-02 19:35 - 2013-04-30 05:19 - 00174536 ____A C:\Windows\System32\Drivers\aswVmm.sys

2013-05-02 19:35 - 2013-04-30 05:19 - 00066336 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys

2013-05-02 19:35 - 2013-04-30 05:19 - 00056080 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys

2013-05-02 19:35 - 2013-04-30 05:19 - 00049760 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr.sys

2013-05-02 19:35 - 2013-04-30 05:19 - 00049376 ____A C:\Windows\System32\Drivers\aswRvrt.sys

2013-05-02 19:35 - 2013-04-30 05:19 - 00029816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys

2013-05-02 19:35 - 2013-04-30 05:18 - 00229648 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe

2013-05-02 19:34 - 2013-04-30 05:18 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr

2013-05-02 19:33 - 2013-05-02 19:33 - 00000000 ____D C:\Program Files\AVAST Software

2013-05-02 19:32 - 2013-05-02 19:33 - 00000000 ____D C:ProgramData\AVAST Software

2013-05-02 19:32 - 2013-05-02 19:33 - 00000000 ____D C:ProgramData\Application Data\AVAST Software

2013-05-02 19:03 - 2013-05-02 19:03 - 02042584 ____A (LiveSoftAction) C:\Users\Ben\Downloads\avast! Free Antivirus provided through GetNow.exe

2013-05-02 04:47 - 2013-05-02 17:01 - 00000181 ____A C:\Users\jblow\Desktop\avgrep.txt

2013-05-01 18:50 - 2013-05-01 18:50 - 00000000 ____D C:\sh4ldr

2013-05-01 18:50 - 2013-05-01 18:50 - 00000000 ____D C:\Program Files\Enigma Software Group

2013-05-01 11:45 - 2013-05-01 11:45 - 00000000 ____D C:\Users\Ben\Local Settings\Application Data\Apple

2013-05-01 11:45 - 2013-05-01 11:45 - 00000000 ____D C:\Users\Ben\Local Settings\Apple

2013-05-01 11:45 - 2013-05-01 11:45 - 00000000 ____D C:\Users\Ben\AppData\Local\Apple

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:ProgramData\ztumnelk.oon

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:ProgramData\Application Data\ztumnelk.oon

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:\Users\jblow\Local Settings\nkvedzm.qeh

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:\Users\jblow\Local Settings\Application Data\nkvedzm.qeh

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:\Users\jblow\AppData\Local\nkvedzm.qeh

2013-04-17 21:48 - 2013-04-17 21:48 - 03895169 ____A C:\Users\jblow\Downloads\1004.wmv

2013-04-11 06:47 - 2013-02-21 20:05 - 12324352 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-04-11 06:47 - 2013-02-21 19:47 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-04-11 06:47 - 2013-02-21 19:46 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-04-11 06:47 - 2013-02-21 19:38 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-04-11 06:47 - 2013-02-21 19:38 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-04-11 06:47 - 2013-02-21 19:37 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2013-04-11 06:47 - 2013-02-21 19:36 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll

2013-04-11 06:47 - 2013-02-21 19:35 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-04-11 06:47 - 2013-02-21 19:34 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-04-11 06:47 - 2013-02-21 19:34 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2013-04-11 06:47 - 2013-02-21 19:34 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2013-04-11 06:47 - 2013-02-21 19:33 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-04-11 06:47 - 2013-02-21 19:32 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-04-11 06:47 - 2013-02-21 19:31 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-04-11 06:47 - 2013-02-21 19:31 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2013-04-11 06:47 - 2013-02-21 19:28 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-04-11 06:41 - 2013-04-11 06:47 - 00000000 ____D C:\963bb6f86dee5d1804315f5a323ae6

2013-04-10 07:13 - 2013-03-11 05:25 - 03603816 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe

2013-04-10 07:13 - 2013-03-11 05:25 - 03551080 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2013-04-10 07:13 - 2013-03-08 19:45 - 00049152 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll

2013-04-10 07:13 - 2013-03-08 17:28 - 00064000 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe

2013-04-10 07:13 - 2013-03-07 19:53 - 00376320 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll

2013-04-10 07:13 - 2013-03-07 19:52 - 02067968 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll

2013-04-10 07:13 - 2013-03-04 17:40 - 02049024 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2013-04-10 07:13 - 2013-03-03 11:07 - 01082232 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys

==================== One Month Modified Files and Folders ========

2013-05-03 13:55 - 2013-05-03 13:55 - 00000000 ____D C:\FRST

2013-05-03 12:49 - 2009-02-04 16:51 - 01979222 ____A C:\Windows\WindowsUpdate.log

2013-05-03 12:49 - 2006-11-02 05:01 - 00032550 ____A C:\Windows\Tasks\SCHEDLGU.TXT

2013-05-03 12:49 - 2006-11-02 05:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-05-03 12:45 - 2013-05-02 19:37 - 00000000 ____D C:\Program Files\MyPC Backup

2013-05-03 12:45 - 2006-11-02 04:47 - 00003616 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-05-03 12:45 - 2006-11-02 04:47 - 00003616 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-05-02 21:41 - 2013-05-02 19:37 - 00000000 ____D C:\Users\jblow\Application Data\PCFixSpeed

2013-05-02 21:41 - 2013-05-02 19:37 - 00000000 ____D C:\Users\jblow\AppData\Roaming\PCFixSpeed

2013-05-02 21:38 - 2011-09-25 17:46 - 00000880 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-05-02 21:29 - 2011-09-25 17:46 - 00000884 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-05-02 21:13 - 2012-07-15 12:40 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-05-02 20:08 - 2013-05-02 19:38 - 00000000 ____D C:\Users\Ben\Application Data\PCFixSpeed

2013-05-02 20:08 - 2013-05-02 19:38 - 00000000 ____D C:\Users\Ben\AppData\Roaming\PCFixSpeed

2013-05-02 19:37 - 2013-05-02 19:37 - 00000886 ____A C:\Users\jblow\Desktop\MyPC Backup.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000861 ____A C:\Users\jblow\Desktop\Optimizer Pro.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000821 ____A C:ProgramData\Desktop\24x7 Help.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000821 ____A C:\Users\Public\Desktop\24x7 Help.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000774 ____A C:ProgramData\Desktop\Optimize Your PC.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000774 ____A C:\Users\Public\Desktop\Optimize Your PC.lnk

2013-05-02 19:37 - 2013-05-02 19:37 - 00000000 ____D C:ProgramData\PCFixSpeed

2013-05-02 19:37 - 2013-05-02 19:37 - 00000000 ____D C:ProgramData\Application Data\PCFixSpeed

2013-05-02 19:37 - 2013-05-02 19:37 - 00000000 ____D C:\Program Files\24x7Help

2013-05-02 19:37 - 2013-05-02 19:36 - 00000000 ____D C:\Program Files\PCFixSpeed

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Users\jblow\Local Settings\getsavin

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Users\jblow\Local Settings\Application Data\getsavin

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Users\jblow\AppData\Local\getsavin

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____D C:\Program Files\Optimizer Pro

2013-05-02 19:36 - 2013-05-02 19:36 - 00000000 ____A C:\extensions.sqlite

2013-05-02 19:36 - 2013-02-24 11:37 - 00000000 ____A C:\END

2013-05-02 19:35 - 2013-05-02 19:35 - 00001831 ____A C:ProgramData\Desktop\avast! Free Antivirus.lnk

2013-05-02 19:35 - 2013-05-02 19:35 - 00001831 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk

2013-05-02 19:35 - 2006-11-02 02:23 - 00002577 ____A C:\Windows\System32\config.nt

2013-05-02 19:33 - 2013-05-02 19:33 - 00000000 ____D C:\Program Files\AVAST Software

2013-05-02 19:33 - 2013-05-02 19:32 - 00000000 ____D C:ProgramData\AVAST Software

2013-05-02 19:33 - 2013-05-02 19:32 - 00000000 ____D C:ProgramData\Application Data\AVAST Software

2013-05-02 19:05 - 2012-12-05 18:41 - 00000000 ____D C:\Windows\System32\Drivers\Avg

2013-05-02 19:03 - 2013-05-02 19:03 - 02042584 ____A (LiveSoftAction) C:\Users\Ben\Downloads\avast! Free Antivirus provided through GetNow.exe

2013-05-02 17:01 - 2013-05-02 04:47 - 00000181 ____A C:\Users\jblow\Desktop\avgrep.txt

2013-05-02 04:57 - 2009-03-06 21:54 - 00001356 ____A C:\Users\jblow\Local Settings\d3d9caps.dat

2013-05-02 04:57 - 2009-03-06 21:54 - 00001356 ____A C:\Users\jblow\Local Settings\Application Data\d3d9caps.dat

2013-05-02 04:57 - 2009-03-06 21:54 - 00001356 ____A C:\Users\jblow\AppData\Local\d3d9caps.dat

2013-05-02 04:22 - 2012-12-13 18:30 - 00000314 ____A C:\Windows\Tasks\HPCeeScheduleForBen.job

2013-05-01 21:10 - 2009-03-04 21:28 - 00000000 ____D C:ProgramData\Spybot - Search & Destroy

2013-05-01 21:10 - 2009-03-04 21:28 - 00000000 ____D C:ProgramData\Application Data\Spybot - Search & Destroy

2013-05-01 21:10 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\System32\spool

2013-05-01 21:10 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\System32\Msdtc

2013-05-01 21:10 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\registration

2013-05-01 21:10 - 2006-11-02 02:22 - 53477376 ____A C:\Windows\System32\config\software_previous

2013-05-01 21:10 - 2006-11-02 02:22 - 33292288 ____A C:\Windows\System32\config\system_previous

2013-05-01 21:07 - 2006-11-02 02:22 - 41156608 ____A C:\Windows\System32\config\components_previous

2013-05-01 21:07 - 2006-11-02 02:22 - 00262144 ____A C:\Windows\System32\config\sam_previous

2013-05-01 20:03 - 2006-11-02 02:22 - 03932160 ____A C:\Windows\System32\config\default_previous

2013-05-01 20:03 - 2006-11-02 02:22 - 00262144 ____A C:\Windows\System32\config\security_previous

2013-05-01 18:50 - 2013-05-01 18:50 - 00000000 ____D C:\sh4ldr

2013-05-01 18:50 - 2013-05-01 18:50 - 00000000 ____D C:\Program Files\Enigma Software Group

2013-05-01 11:45 - 2013-05-01 11:45 - 00000000 ____D C:\Users\Ben\Local Settings\Application Data\Apple

2013-05-01 11:45 - 2013-05-01 11:45 - 00000000 ____D C:\Users\Ben\Local Settings\Apple

2013-05-01 11:45 - 2013-05-01 11:45 - 00000000 ____D C:\Users\Ben\AppData\Local\Apple

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:ProgramData\ztumnelk.oon

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:ProgramData\Application Data\ztumnelk.oon

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:\Users\jblow\Local Settings\nkvedzm.qeh

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:\Users\jblow\Local Settings\Application Data\nkvedzm.qeh

2013-04-30 21:02 - 2013-04-30 21:02 - 00055808 ____A C:\Users\jblow\AppData\Local\nkvedzm.qeh

2013-04-30 21:00 - 2013-03-10 13:40 - 00000464 ____A C:\Users\jblow\Desktop\MSN.com.website

2013-04-30 05:19 - 2013-05-02 19:35 - 00765736 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys

2013-04-30 05:19 - 2013-05-02 19:35 - 00368944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys

2013-04-30 05:19 - 2013-05-02 19:35 - 00174536 ____A C:\Windows\System32\Drivers\aswVmm.sys

2013-04-30 05:19 - 2013-05-02 19:35 - 00066336 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys

2013-04-30 05:19 - 2013-05-02 19:35 - 00056080 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys

2013-04-30 05:19 - 2013-05-02 19:35 - 00049760 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr.sys

2013-04-30 05:19 - 2013-05-02 19:35 - 00049376 ____A C:\Windows\System32\Drivers\aswRvrt.sys

2013-04-30 05:19 - 2013-05-02 19:35 - 00029816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys

2013-04-30 05:18 - 2013-05-02 19:35 - 00229648 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe

2013-04-30 05:18 - 2013-05-02 19:34 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr

2013-04-26 20:14 - 2009-07-29 18:48 - 00000000 ____D C:\Users\jblow\Application Data\HpUpdate

2013-04-26 20:14 - 2009-07-29 18:48 - 00000000 ____D C:\Users\jblow\AppData\Roaming\HpUpdate

2013-04-22 09:50 - 2009-05-25 09:13 - 00000052 ____A C:\Windows\System32\DOErrors.log

2013-04-17 21:48 - 2013-04-17 21:48 - 03895169 ____A C:\Users\jblow\Downloads\1004.wmv

2013-04-15 19:39 - 2009-03-04 19:12 - 00000322 ____A C:\Windows\Tasks\HPCeeScheduleForjblow.job

2013-04-14 17:37 - 2009-07-22 21:00 - 00000000 ____D C:ProgramData\Application Data\Adobe

2013-04-14 17:37 - 2009-07-22 21:00 - 00000000 ____D C:ProgramData\Adobe

2013-04-14 17:35 - 2012-04-03 17:08 - 00691592 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe

2013-04-14 17:35 - 2011-05-12 20:07 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl

2013-04-13 17:05 - 2009-03-06 21:54 - 00000456 ____A C:\Windows\Tasks\PCDRScheduledMaintenance.job

2013-04-11 08:02 - 2006-11-02 04:47 - 00336400 ____A C:\Windows\System32\FNTCACHE.DAT

2013-04-11 08:01 - 2008-01-20 18:47 - 00237616 ____A C:\Windows\PFRO.log

2013-04-11 06:47 - 2013-04-11 06:41 - 00000000 ____D C:\963bb6f86dee5d1804315f5a323ae6

2013-04-11 06:42 - 2006-11-02 02:24 - 70490256 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe

2013-04-10 12:30 - 2012-07-09 21:13 - 00001973 ____A C:ProgramData\Desktop\Google Chrome.lnk

2013-04-10 12:30 - 2012-07-09 21:13 - 00001973 ____A C:\Users\Public\Desktop\Google Chrome.lnk

==================== Known DLLs (Whitelisted) ============

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK

HKLM\...\exefile\DefaultIcon: %1 => OK

HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

Restore point made on: 2013-05-02 19:33:52

==================== BCD ================================

Windows Boot Manager

--------------------

identifier {bootmgr}

device partition=C:

description Windows Boot Manager

locale en-US

inherit {globalsettings}

default {default}

resumeobject {5db5f3cb-ac5b-11dd-98bc-0023543a840b}

displayorder {default}

toolsdisplayorder {memdiag}

timeout 30

resume No

customactions 0x1000085000001

0x54000001

custom:54000001 {863df33e-9817-11dc-b72e-001b24047e4e}

Windows Boot Loader

-------------------

identifier {current}

device ramdisk=[D:]\sources\boot.wim,{ramdiskoptions}

path \windows\system32\boot\winload.exe

description HP Recovery Manager

osdevice ramdisk=[D:]\sources\boot.wim,{ramdiskoptions}

systemroot \windows

nx OptIn

detecthal Yes

winpe Yes

Windows Boot Loader

-------------------

identifier {default}

device partition=C:

path \Windows\system32\winload.exe

description Microsoft Windows Vista

locale en-US

inherit {bootloadersettings}

recoverysequence {current}

recoveryenabled Yes

osdevice partition=C:

systemroot \Windows

resumeobject {5db5f3cb-ac5b-11dd-98bc-0023543a840b}

nx OptIn

Windows Boot Loader

-------------------

identifier {863df33e-9817-11dc-b72e-001b24047e4e}

device ramdisk=[D:]\sources\boot.wim,{ramdiskoptions}

path \windows\system32\boot\winload.exe

description F11 Boot from BCD

osdevice ramdisk=[D:]\sources\boot.wim,{ramdiskoptions}

systemroot \windows

nx OptIn

detecthal Yes

winpe Yes

Resume from Hibernate

---------------------

identifier {5db5f3cb-ac5b-11dd-98bc-0023543a840b}

device partition=C:

path \Windows\system32\winresume.exe

description Windows Resume Application

locale en-US

inherit {resumeloadersettings}

filedevice partition=C:

filepath \hiberfil.sys

pae Yes

debugoptionenabled No

Windows Memory Tester

---------------------

identifier {memdiag}

device partition=C:

path \boot\memtest.exe

description Windows Memory Diagnostic

locale en-US

inherit {globalsettings}

badmemoryaccess Yes

Windows Legacy OS Loader

------------------------

identifier {ntldr}

device partition=C:

path \ntldr

description Earlier Version of Windows

EMS Settings

------------

identifier {emssettings}

bootems Yes

Debugger Settings

-----------------

identifier {dbgsettings}

debugtype Serial

debugport 1

baudrate 115200

RAM Defects

-----------

identifier {badmemory}

Global Settings

---------------

identifier {globalsettings}

inherit {dbgsettings}

{emssettings}

{badmemory}

extendedinput Yes

Boot Loader Settings

--------------------

identifier {bootloadersettings}

inherit {globalsettings}

Resume Loader Settings

----------------------

identifier {resumeloadersettings}

inherit {globalsettings}

Device options

--------------

identifier {ad6c7bc8-fa0f-11da-8ddf-0013200354d8}

description Ramdisk Device Options

ramdisksdidevice partition=D:

ramdisksdipath \boot\boot.sdi

Setup Ramdisk Options

---------------------

identifier {ramdiskoptions}

description RAM Disk Settings

ramdisksdidevice partition=D:

ramdisksdipath \boot\boot.sdi

==================== Memory info ===========================

Percentage of memory in use: 19%

Total physical RAM: 2941.83 MB

Available physical RAM: 2370.88 MB

Total Pagefile: 2625.66 MB

Available Pagefile: 2452.99 MB

Total Virtual: 2047.88 MB

Available Virtual: 1972.74 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:286.43 GB) (Free:240.36 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (FACTORY_IMAGE) (Fixed) (Total:11.66 GB) (Free:1.59 GB) NTFS ==>[system with boot components (obtained from reading drive)]

Drive f: (USB DISK) (Removable) (Total:1.86 GB) (Free:1.86 GB) FAT32

Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status Size Free Dyn Gpt

-------- ---------- ------- ------- --- ---

Disk 0 Online 298 GB 0 B

Disk 1 Online 1912 MB 0 B

Disk 2 No Media 0 B 0 B

Disk 3 No Media 0 B 0 B

Disk 4 No Media 0 B 0 B

Disk 5 No Media 0 B 0 B

Partitions of Disk 0:

===============

Partition ### Type Size Offset

------------- ---------------- ------- -------

Partition 1 Primary 286 GB 32 KB

Partition 2 Primary 12 GB 286 GB

==================================================================================

Disk: 0

Partition 1

Type : 07

Hidden: No

Active: Yes

Volume ### Ltr Label Fs Type Size Status Info

---------- --- ----------- ----- ---------- ------- --------- --------

* Volume 1 C HP NTFS Partition 286 GB Healthy

=========================================================

Disk: 0

Partition 2

Type : 07

Hidden: No

Active: No

Volume ### Ltr Label Fs Type Size Status Info

---------- --- ----------- ----- ---------- ------- --------- --------

* Volume 2 D FACTORY_IMA NTFS Partition 12 GB Healthy

=========================================================

Partitions of Disk 1:

===============

Partition ### Type Size Offset

------------- ---------------- ------- -------

Partition 1 Primary 1912 MB 240 KB

==================================================================================

Disk: 1

Partition 1

Type : 06

Hidden: No

Active: No

Volume ### Ltr Label Fs Type Size Status Info

---------- --- ----------- ----- ---------- ------- --------- --------

* Volume 3 F USB DISK FAT32 Removable 1912 MB Healthy

=========================================================

============================== MBR & Partition Table ==================

====================================================================

Disk: 0 (Size: 298 GB) (Disk ID: 1549F232)

Partition 1: (Active) - (Size=286 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=12 GB) - (Type=07 NTFS)

====================================================================

Disk: 1 (Size: 2 GB) (Disk ID: F2128805)

Partition 1: (Not Active) - (Size=2 GB) - (Type=06)

Last Boot: 2013-05-02 20:17

==================== End Of Log ============================

Link to post
Share on other sites
  • Staff
gringo_pr

gringo_pr

Posted
  • Staff
Posted

Hello WAYNEBO

I would like to welcome you to the Malware Removal section of the forum.

Around here they call me Gringo and I will be glad to help you with your malware problems.

Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!


  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.

    [*]Please do not attach logs or use code boxes, just copy and paste the text.

    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.

    [*]Please read every post completely before doing anything.

    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.

    [*]Please provide feedback about your experience as we go.

    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.

NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the flash drive as fixlist.txt 

 
Startup: C:\Users\jblow\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
C:ProgramData\Application Data\ztumnelk.oon
C:\Users\jblow\Local Settings\nkvedzm.qeh
C:\Users\jblow\Local Settings\Application Data\nkvedzm.qeh
C:\Users\jblow\AppData\Local\nkvedzm.qeh
C:ProgramData\ztumnelk.oon

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

On Vista or Windows 7: Now please enter System Recovery Options.

Run FRST again like we did before but this time press the Fix button just once and wait.

The tool will make a log on the flash drive (Fixlog.txt) please post it to your reply.

Also boot the computer into normal mode and let me know how things are looking.

Gringo

Link to post
Share on other sites
  • Staff
gringo_pr

gringo_pr

Posted
  • Staff
Posted

Hello

48 Hour bump

It has been more than 48 hours since my last post.

  • do you still need help with this?
  • do you need more time?
  • are you having problems following my instructions?
  • if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo

Link to post
Share on other sites
LDTate

LDTate

Posted
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.