Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Privacy Alert in Web Browser [CLOSED]


  • This topic is locked This topic is locked

#1
bthtubgin1

bthtubgin1

    New Member

  • Member
  • Pip
  • 3 posts
Hello. The web browser on my wife's computer appears to have been hijacked. When you open it it gives her a Privacy Alert and tells her her information is sent to our ISP and to click on the clink to get some software. I ran adaware, spybot s&D, my Norton Antivirus and removed any suspicious stuff, but it still hasn't gone away.
Here is the log
Thanks
Hello everyone. My wife's Toshiba laptop, running Windows XP and internet Explorer has gotten infected with something. I ran adaware and spybot and it hasn't removed the problem. Whenever we start up internet explorer it takes us to a Privacy alert page wanting us to click on a link to take us to software.
the link is this
res://C:\WINDOWS\system32\shdocsv.dll/API32.htm#ID=347;065D

I downloaded hijack this and here is my log

Any help would be greatly appreciated!

Thanks

Logfile of HijackThis v1.99.1
Scan saved at 8:52:09 PM, on 7/25/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\acs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\System32\TFNF5.exe
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\toshiba\ivp\ism\pinger.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\svcnt.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Hijack This\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\system32\shdocsv.dll/API32.htm#ID=347;065D
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshiba.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://shdocsv.dll/asst.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 20
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [Fast Start] C:\WINDOWS\system32\svcnt.exe home
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterf...ds/Uploader.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zone...ctor/WebAAS.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) - http://cdn.digitalci...illama/ampx.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\System32\acs.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  • 0

Advertisements


#2
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Hello and welcome.

Download CWShredder Here.
Save this file somewhere you will remember like to the Desktop.

Download and install CleanUp! Here

Run the CleanUp! installer. You dont need to do anything with it right now.

Update CWShredder
  • Open CWShredder and click I AGREE
  • Click Check For Update
  • Close CWShredder
Boot into Safe Mode:
Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.


Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about.

Now run CleanUp! Click CleanUp and allow it to delete all the temporary files. REBOOT!!


Please run an free online anti-virus scan; TrendMicro or BitDefender. (Please post the results of the scan(s) in your next reply)

Run a new scan with HiJackThis and post the fresh log here along with the online scan log.

- Rawe :tazz:
  • 0

#3
bthtubgin1

bthtubgin1

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
Hi Rawe. Thank you so much for the response. I followed your instructions.
After I ran CWShredder and CleanUp and went back to the browser to connect to BitDefender I noticed that it no longer was taking me to a privacy alert but to a web search screen.
I ran Bit Defender's Virus Scan.
Here are the results
BitDefender Online Scanner

Scan report generated at: Tue, Jul 26, 2005 - 23:24:56

Scan path: A:\;C:\;D:\;

Statistics

Time
00:35:48

Files
141081

Folders
2607

Boot Sectors
2

Archives
2275

Packed Files
18185


Results

Identified Viruses
3

Infected Files
8

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
7


Engines Info

Virus Definitions
197245

Engine build
AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)

Scan plugins
13

Archive plugins
39

Unpack plugins
4

E-mail plugins
6

System plugins
1



Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes


Scanned File
Status

C:\Program Files\AIM\Sysfiles\WxBug.EXE=>wise0008
Detected with: Adware.Wheaterbug.A

C:\Program Files\AIM\Sysfiles\WxBug.EXE=>wise0008
Disinfection failed

C:\Program Files\AIM\Sysfiles\WxBug.EXE=>wise0008
Deleted

C:\Program Files\AIM\Sysfiles\WxBug.EXE
Update failed

C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll
Detected with: Adware.Wheaterbug.A

C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll
Disinfection failed

C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll
Deleted

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP128\A0010833.exe
Infected with: Trojan.Downloader.Small.APM

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP128\A0010833.exe
Deleted

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP159\A0013454.com
Infected with: Trojan.Downloader.Delf.KS

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP159\A0013454.com
Deleted

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP159\A0013455.com
Infected with: Trojan.Downloader.Delf.KS

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP159\A0013455.com
Deleted

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP159\A0013456.exe
Infected with: Trojan.Downloader.Delf.KS

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP159\A0013456.exe
Deleted

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP160\A0014734.dll
Detected with: Adware.Wheaterbug.A

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP160\A0014734.dll
Disinfection failed

C:\System Volume Information\_restore{93217781-D447-4723-AA7E-DBCD9BF40656}\RP160\A0014734.dll
Deleted

C:\WINDOWS\system32\svcnt.exe
Infected with: Trojan.Downloader.Delf.KS

C:\WINDOWS\system32\svcnt.exe
Disinfection failed

C:\WINDOWS\system32\svcnt.exe
Delete failed

I then ran HiJack This again and here are those results
Logfile of HijackThis v1.99.1
Scan saved at 11:46:05 PM, on 7/26/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\acs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\System32\TFNF5.exe
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\svcnt.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://shdocsv.dll/blank.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshiba.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://shdocsv.dll/asst.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 20
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [Fast Start] C:\WINDOWS\system32\svcnt.exe home
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefend...can8/oscan8.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterf...ds/Uploader.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zone...ctor/WebAAS.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) - http://cdn.digitalci...illama/ampx.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\System32\acs.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Thanks!
  • 0

#4
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Hi again!

Please print these instructions out, or write them down, as you can't read them during the fix.

Ok, please uninstall Viewpoint Manager using Add/Remove programs.
Delete this folder; C:\Program Files\Viewpoint\

Empty recycle bin.

If you have not already installed Ad-Aware SE 1.06, follow these download and setup instructions, otherwise, check for updates:
Ad-Aware SE Setup
Don't run it yet!

First;

Please download Ewido Security Suite it is a free version of the program.
  • Install Ewido Security Suite
  • When installing, under "Additional Options" uncheck..
    • Install background guard
    • Install scan via context menu
  • Launch Ewido, there should be an icon on your desktop, double-click it.
  • The program will now open to the main screen.
  • When you run Ewido for the first time, you will get a warning "Database could not be found!". Click OK. We will fix this in a moment.
  • You will need to update Ewido to the latest definition files.
    • On the left hand side of the main screen click update.
    • Then click on Start Update.
  • The update will start and a progress bar will show the updates being installed.
    (the status bar at the bottom will display "Update successful")
  • Exit Ewido. DO NOT run a scan yet.
If you are having problems with the updater, you can use this link to manually update Ewido.
Ewido manual updates


Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.


Now open Ewido and do a scan of your system.
  • Click on scanner
  • Click on Complete System Scan and the scan will begin.
  • NOTE; During some scans with Ewido it is finding cases of false positives.**
    • You will need to step through the process of cleaning files one-by-one.
    • If Ewido detects a file you KNOW to be legitimate, select none as the action.
    • DO NOT select "Perform action on all infections"
    • If you are unsure of any entry found, select none for now as the action.
  • Once the scan has completed, there will be a button located on the bottom of the screen named Save report
  • Click Save report.
  • Save the report .txt file to your desktop or a location where you can find it easily.
Launch Ad-Aware, run a Full System Scan, let it remove anything it finds.

Run CleanUp!
making sure to reboot.

Run a new scan with HiJackThis and post the fresh log here along with the Ewido log using Add Reply.

- Rawe :tazz:
  • 0

#5
bthtubgin1

bthtubgin1

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
Thanks for the help here are the new log files. First is the Ewido log then the Hijack this
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 10:21:32 AM, 7/30/2005
+ Report-Checksum: CDA61C90

+ Scan result:

:mozilla.16:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Doubleclick : Ignored
:mozilla.24:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Bluestreak : Ignored
:mozilla.25:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Questionmarket : Ignored
:mozilla.26:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Atdmt : Ignored
:mozilla.27:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Adserver : Ignored
:mozilla.28:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Fastclick : Ignored
:mozilla.29:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Fastclick : Ignored
:mozilla.30:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Fastclick : Ignored
:mozilla.31:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Adserver : Ignored
:mozilla.32:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Serving-sys : Ignored
:mozilla.33:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Serving-sys : Ignored
:mozilla.34:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Serving-sys : Ignored
:mozilla.35:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Serving-sys : Ignored
:mozilla.36:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Serving-sys : Ignored
:mozilla.37:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Mediaplex : Ignored
:mozilla.63:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Specificclick : Ignored
:mozilla.64:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Specificclick : Ignored
:mozilla.65:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Specificclick : Ignored
:mozilla.66:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Specificclick : Ignored
:mozilla.67:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Specificclick : Ignored
:mozilla.92:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Valueclick : Ignored
:mozilla.93:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Valueclick : Ignored
:mozilla.102:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Overture : Ignored
:mozilla.109:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Esomniture : Ignored
:mozilla.110:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Esomniture : Ignored
:mozilla.111:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Esomniture : Ignored
:mozilla.113:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Hitbox : Ignored
:mozilla.114:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Hitbox : Ignored
:mozilla.115:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Hitbox : Ignored
:mozilla.116:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Ru4 : Ignored
:mozilla.117:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Ru4 : Ignored
:mozilla.121:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.122:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.123:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.124:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.125:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.126:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.127:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.129:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Ignored
:mozilla.136:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Bridgetrack : Ignored
:mozilla.137:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Bridgetrack : Ignored
:mozilla.161:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Linksynergy : Ignored
:mozilla.162:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Linksynergy : Ignored
:mozilla.170:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Onestat : Ignored
:mozilla.171:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Onestat : Ignored
:mozilla.172:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Burstnet : Ignored
:mozilla.173:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Burstnet : Ignored
:mozilla.174:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Burstnet : Ignored
:mozilla.175:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Ignored
:mozilla.178:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.247realmedia : Ignored
:mozilla.193:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Hitbox : Ignored
:mozilla.194:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Hitbox : Ignored
:mozilla.203:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.2o7 : Ignored
:mozilla.204:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.2o7 : Ignored
:mozilla.205:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.2o7 : Ignored
:mozilla.218:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Casalemedia : Ignored
:mozilla.219:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Casalemedia : Ignored
:mozilla.220:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Casalemedia : Ignored
HKLM\SOFTWARE\Classes\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} -> Spyware.MiniBug : Cleaned with backup
:mozilla.130:C:\Documents and Settings\vip\Application Data\Mozilla\Firefox\Profiles\1qqe58n6.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\WINDOWS\system32\svcnt.exe -> TrojanDownloader.Delf.ks : Cleaned with backup


::Report End


Logfile of HijackThis v1.99.1
Scan saved at 10:46:48 AM, on 7/30/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\acs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\System32\TFNF5.exe
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\toshiba\ivp\ism\pinger.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\system32\shdocsv.dll/API32.htm#ID=347;065D
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshiba.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 20
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefend...can8/oscan8.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterf...ds/Uploader.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zone...ctor/WebAAS.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) - http://cdn.digitalci...illama/ampx.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\System32\acs.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  • 0

#6
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Ok,
doesn't look too bad. I want you to run the following online scan for me;
Panda Activescan

Post the results. (Use the Auto-clean option or something similar.)

- Rawe :tazz:
  • 0

#7
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP