Jump to content

Infected with csrss.exe trojan, conhost.exe backdoor.bot, and maybe more


Recommended Posts

DDS (Ver_10-12-05.01) - NTFSx86

Run by AA538860 at 13:18:54.05 on Mon 12/06/2010

Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_21

Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.3536.2570 [GMT -5:00]

============== Running Processes ===============

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_d511891fb5bff1e2\STacSV.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\WUDFHost.exe

C:\Program Files\Symantec\Smc.exe

C:\Windows\system32\ngvpnmgr.exe

C:\Program Files\Symantec\SNAC.EXE

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_d511891fb5bff1e2\aestsrv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

C:\Windows\system32\crypserv.exe

C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Symantec\Rtvscan.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Xobni\XobniService.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\sqlservr.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskhost.exe

C:\Program Files\Symantec\SmcGui.exe

C:\Program Files\DellTPad\Apoint.exe

C:\Program Files\DellTPad\ApMsgFwd.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\DellTPad\Apntex.exe

C:\Program Files\DellTPad\HidFind.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

C:\Windows\system32\sppsvc.exe

C:\Users\AA538860\Desktop\dds.scr

C:\Windows\system32\conhost.exe

============== Pseudo HJT Report ===============

uStart Page = https://fieldnet.massmutual.com/fldnet/public/index.html

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\mif5ba~1\office14\GROOVEEX.DLL

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files\windows live\companion\companioncore.dll

BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5805.1910\swg.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\mif5ba~1\office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll

TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File

uRun: [iSUSPM] "c:\programdata\flexnet\connect\11\ISUSPM.exe -scheduler"

uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"

mRun: [Apoint] c:\program files\delltpad\Apoint.exe

mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"

mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

mPolicies-system: PromptOnSecureDesktop = 0 (0x0)

IE: E&xport to Microsoft Excel - c:\progra~1\mif5ba~1\office14\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html

IE: Se&nd to OneNote - c:\progra~1\mif5ba~1\office14\ONBttnIE.dll/105

IE: Send image to &Bluetooth Device... - c:\program files\thinkpad\bluetooth software\btsendto_ie_ctx.htm

IE: Send page to &Bluetooth Device... - c:\program files\thinkpad\bluetooth software\btsendto_ie.htm

IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\thinkpad\bluetooth software\btsendto_ie.htm

IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\windows live\companion\companioncore.dll

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll

Trusted Zone: GeoLearning.com

Trusted Zone: Massmutual.com

Trusted Zone: Massmutualdesigns.com

Trusted Zone: winflexweb.com\www

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll

Notify: igfxcui - igfxdev.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\mif5ba~1\office14\GROOVEEX.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\users\aa538860\appdata\roaming\mozilla\firefox\profiles\r9vptzq4.default\

FF - prefs.js: browser.startup.homepage - hxxps://fieldnet.massmutual.com/fldnet/public/index.html

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 53584

FF - prefs.js: network.proxy.type - 1

FF - plugin: c:\progra~1\mif5ba~1\office14\NPAUTHZ.DLL

FF - plugin: c:\progra~1\mif5ba~1\office14\NPSPWRAP.DLL

FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll

FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll

FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll

FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Extension: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

============= SERVICES / DRIVERS ===============

R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2010-9-21 95024]

R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-13 48128]

R2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\driverstore\filerepository\stwrt.inf_x86_neutral_d511891fb5bff1e2\AEstSrv.exe [2010-9-21 81920]

R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\logmein\x86\LMIGuardianSvc.exe [2010-9-27 374152]

R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2010-5-31 12856]

R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2010-11-1 47640]

R2 NgVpnMgr;Aventail VPN Client;c:\windows\system32\ngvpnmgr.exe [2009-9-10 235648]

R2 Symantec AntiVirus;Symantec Endpoint Protection;c:\program files\symantec\Rtvscan.exe [2009-9-25 2477304]

R2 XobniService;XobniService;c:\program files\xobni\XobniService.exe [2010-10-21 62184]

R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-4-14 45736]

R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2010-10-8 29472]

R3 e1yexpress;Intel® Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y6232.sys [2009-6-13 221912]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-10-3 102448]

R3 NgLog;Aventail VPN Logging;c:\windows\system32\drivers\nglog.sys [2009-9-10 27160]

R3 NgVpn;Aventail VPN Adapter;c:\windows\system32\drivers\ngvpn.sys [2009-9-10 79896]

R3 NgWfp;Aventail VPN Callout;c:\windows\system32\drivers\ngwfp.sys [2009-9-10 25112]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\drivers\VSTAZL3.SYS [2009-7-13 207360]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT3.SYS [2009-7-13 661504]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 FlexService;Remote Connections Service;"c:\program files\rapidbit\cisvc.exe" --> c:\program files\rapidbit\cisvc.exe [?]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]

S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2010-10-19 39272]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2010-3-25 30969208]

S3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\drivers\netaapl.sys [2010-4-19 18432]

S3 NgFilter;Aventail VPN Filter;c:\windows\system32\drivers\ngfilter.sys [2009-9-10 22552]

S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-13 14336]

S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-9-14 1343400]

S4 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-9-22 1493352]

S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-9-15 136176]

S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\microsoft sql server\100\shared\sqladhlp.exe [2009-3-30 47128]

S4 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [2009-3-30 239336]

S4 SQLAgent$MSSMLBIZ;SQL Server Agent (MSSMLBIZ);c:\program files\microsoft sql server\mssql10.mssmlbiz\mssql\binn\SQLAGENT.EXE [2010-9-17 370008]

S4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\windows live\mesh\wlcrasvc.exe [2010-9-22 51040]

=============== Created Last 30 ================

2010-12-03 21:00:17 -------- d-----w- c:\users\aa538860\appdata\roaming\Malwarebytes

2010-12-03 21:00:04 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-12-03 21:00:01 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-12-03 21:00:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-12-02 17:37:50 -------- d-----w- c:\users\aa538860\appdata\local\Tracker Software

2010-12-02 17:35:48 -------- d-----w- c:\program files\Tracker Software

2010-12-02 16:34:54 -------- d-----w- c:\users\aa538860\appdata\roaming\Anagram Technologies

2010-12-02 16:34:50 5816 ----a-w- c:\windows\system32\casigmgr32s.dll

2010-12-02 16:34:40 -------- d-----w- c:\program files\Anagram Technologies

2010-12-02 16:31:05 -------- d-----w- C:\BTGUARD

2010-12-01 17:51:15 72536 ----a-w- c:\windows\system32\perf-MSSQL$MSSMLBIZ-sqlctr10.2.4000.0.dll

2010-12-01 17:51:14 89944 ----a-w- c:\windows\system32\SQSRVRES.DLL

2010-11-30 22:33:19 -------- d-----w- c:\users\aa538860\appdata\roaming\WindSolutions

2010-11-30 22:33:19 -------- d-----w- c:\progra~2\WindSolutions

2010-11-30 22:09:56 -------- d-----w- c:\users\aa538860\appdata\roaming\ImTOO

2010-11-30 21:43:53 -------- d-----w- c:\program files\Defraggler

2010-11-29 03:04:17 -------- d-----w- c:\program files\PlayReady

2010-11-29 02:59:23 4277016 ----a-w- c:\progra~2\microsoft\ehome\packages\mceclientux\updateablemarkup\markup.dll

2010-11-29 02:58:48 42776 ----a-w- c:\progra~2\microsoft\ehome\packages\mceclientux\dsm\StartResources.dll

2010-11-29 02:58:44 588096 ----a-w- c:\progra~2\microsoft\ehome\packages\mcespotlight\mcespotlight\SpotlightResources.dll

2010-11-29 02:38:42 -------- d-----w- c:\program files\LiveUpload

2010-11-29 01:11:26 -------- d-----r- c:\program files\Skype

2010-11-23 18:49:14 7680 ----a-w- c:\program files\internet explorer\iecompat.dll

2010-11-23 16:38:52 -------- d-----w- c:\users\aa538860\appdata\local\Mozilla

2010-11-22 22:46:24 -------- d-----w- c:\users\aa538860\appdata\roaming\MassMutual Designs

2010-11-22 22:04:36 -------- d-----w- c:\program files\WinSCP

2010-11-22 18:05:24 -------- d-----w- c:\program files\iTunes

2010-11-22 18:05:24 -------- d-----w- c:\program files\iPod

2010-11-22 18:03:15 -------- d-----w- c:\program files\Bonjour

2010-11-22 17:57:15 -------- d-----w- c:\program files\Keir Educational Resources

2010-11-18 19:38:32 -------- d-----w- c:\program files\one-click-easy

2010-11-18 19:37:49 -------- d-----w- c:\users\aa538860\appdata\roaming\AddressGrabber Standard 2011

2010-11-10 23:10:19 -------- d-----w- c:\users\aa538860\appdata\roaming\JGsoft

2010-11-08 17:37:29 -------- d-----w- c:\users\aa538860\appdata\local\BBHybridsTool

==================== Find3M ====================

2010-11-01 15:11:18 737280 ----a-w- c:\windows\iun6002.exe

2010-10-27 03:40:24 501424 ----a-w- c:\windows\system32\SGrid4Team.ocx

2010-10-27 03:40:22 231088 ----a-w- c:\windows\system32\CompareLib.dll

2010-10-08 15:32:27 615936 ----a-w- c:\windows\AutoKMS.exe

2010-10-07 17:23:02 91424 ----a-w- c:\windows\system32\dnssd.dll

2010-10-07 17:23:02 75040 ----a-w- c:\windows\system32\jdns_sd.dll

2010-10-07 17:23:02 197920 ----a-w- c:\windows\system32\dnssdX.dll

2010-10-07 17:23:02 107808 ----a-w- c:\windows\system32\dns-sd.exe

2010-09-30 16:02:22 597664 ----a-w- c:\windows\system32\Lib4Team.dll

2010-09-30 16:02:20 22720 ----a-w- c:\windows\system32\ForTeam.Licensing.Wrapper.dll

2010-09-29 19:08:05 163 ----a-w- c:\windows\system32\Uninst.bat

2010-09-29 19:07:35 163 ----a-w- c:\windows\system32\Uninst_ENU.bat

2010-09-28 20:44:52 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll

2010-09-27 18:50:44 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll

2010-09-27 18:49:26 53632 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\LMIproc.dll

2010-09-27 18:49:18 87424 ----a-w- c:\windows\system32\LMIinit.dll

2010-09-27 18:49:18 29568 ----a-w- c:\windows\system32\LMIport.dll

2010-09-23 20:38:42 423656 ----a-w- c:\windows\system32\deployJava1.dll

2010-09-23 04:47:28 49016 ----a-w- c:\windows\system32\sirenacm.dll

2010-09-23 04:32:56 301936 ----a-w- c:\windows\WLXPGSS.SCR

2010-09-21 18:03:14 208768 ----a-w- c:\windows\system32\LIVESSP.DLL

2010-09-17 15:16:58 234328 ----a-w- c:\windows\system32\SqlServerSpatial.dll

2010-09-17 15:16:56 2565976 ----a-w- c:\windows\system32\sqlncli10.dll

2010-09-08 18:17:46 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2010-09-08 18:17:46 69632 ----a-w- c:\windows\system32\QuickTime.qts

2010-09-08 04:30:04 978432 ----a-w- c:\windows\system32\wininet.dll

2010-09-08 04:28:15 44544 ----a-w- c:\windows\system32\licmgr10.dll

2010-09-08 03:22:31 386048 ----a-w- c:\windows\system32\html.iec

2010-09-08 02:48:16 1638912 ----a-w- c:\windows\system32\mshtml.tlb

=================== ROOTKIT ====================

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net

Windows 6.1.7600 Disk: ST9250421ASG rev.DE14 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0

device: opened successfully

user: MBR read successfully

Disk trace:

called modules: >>UNKNOWN [0x82E49000]<< >>UNKNOWN [0x8C5C0000]<< >>UNKNOWN [0x8C600000]<< >>UNKNOWN [0x8C19F000]<< >>UNKNOWN [0x82E12000]<< >>UNKNOWN [0x8C3B7000]<< >>UNKNOWN [0x8C3BE000]<< >>UNKNOWN [0x8C216000]<<

_asm { DEC EBP; POP EDX; NOP ; ADD [EBX], AL; ADD [EAX], AL; ADD [EAX+EAX], AL; ADD [EAX], AL; }

1 ntkrnlpa!IofCallDriver[0x82E85458] -> \Device\Harddisk0\DR0[0x864DC030]

\Driver\Disk[0x864DBC48] -> IRP_MJ_CREATE -> 0x8C5C439F

3 [0x8C5C459E] -> ntkrnlpa!IofCallDriver[0x82E85458] -> \Device\Ide\IdeDeviceP0T0L0-0[0x85715908]

\Driver\atapi[0x863DC3C0] -> IRP_MJ_CREATE -> 0x8C1B98C4

kernel: MBR read successfully

_asm { JMP FAR 0x0:0x7c1e; }

user & kernel MBR OK

sectors 488397166 (+255): user != kernel

Warning: possible TDL3 rootkit infection !

============= FINISH: 13:20:00.90 ===============

I have run malwarebytes a few times and it fixes the issue temporarily so I'm just not sure when I am in the clear. Let me know if you need anthing else

Attach.rar

mbam_log_2010_12_03__16_37_51_.txt

mbam_log_2010_12_03__16_44_15_.txt

mbam_log_2010_12_06__14_41_41_.txt

rkill.log

SEP.txt

SEPrisklog.txt

SEPlog2.txt

Link to post
Share on other sites

  • 2 weeks later...
  • Staff

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.