 Search engines giving pop-up redirects..., Searh engines seem hijacked on my computer. |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.
To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.
  |
 Jun 30 2009, 01:10 AM
Post
#1
|
|
|
New Member  Group: Members Posts: 12 Joined: 30-June 09 Member No.: 346,766  |
I did a full scan with Malwarebytes, but it says my system is clean. Also ran Combofix and it says my computer is good as well. Anyone else have this problem or have any solutions? About ready to just reformat. |
 |
 
|
|
Jun 30 2009, 08:28 AM
Post
#2
|
|
 BC 1st Responder Group: Global Moderator Posts: 9,962 Joined: 21-October 04 From: South Carolina - USA Member No.: 3,905 |
Install RootRepeal
Click here - Official Rootrepeal Site, and download RootRepeal.zip. I recommend downloading to your desktop. Fatdcuk at Malwarebytes posted a comprehensive tutorial - Self Help guide can be found here if needed.: Malwarebytes Removal and Self Help Guides. Click RootRepeal.exe to open the scanner. Click the Report tab, now click on Scan. A Window will open asking what to include in the scan. Check the following items: Drivers Files Processes SSDT Stealth Objects Hidden Services Click OK Scan your C Drive (Or your current system drive) and click OK. The scan will begin. This my take a moment, so please be patient. When the scan completes, click Save Report. Name the log RootRepeal.txt and save it to your Documents folder - (Default folder). Paste the log into your next reply. -------------------- "In a world where you can be anything, be yourself." ~ unknown Become a BleepingComputer fan: Facebook |
|
|
|
|
Jun 30 2009, 11:10 AM
Post
#3
|
|
|
New Member Group: Members Posts: 12 Joined: 30-June 09 Member No.: 346,766 |
Scanned the wrong thing. Sorry bout that... just ignore this.
This post has been edited by Kunotron: Jun 30 2009, 02:31 PM |
|
|
|
|
Jun 30 2009, 11:32 AM
Post
#4
|
|
|
BC 1st Responder Group: Global Moderator Posts: 9,962 Joined: 21-October 04 From: South Carolina - USA Member No.: 3,905 |
I really need the files section. Let me check something.
-------------------- "In a world where you can be anything, be yourself." ~ unknown Become a BleepingComputer fan: Facebook |
|
|
|
|
Jun 30 2009, 11:35 AM
Post
#5
|
|
|
New Member Group: Members Posts: 3 Joined: 30-June 09 Member No.: 346,876 |
i have a similar problem with the redirect issue can somebody take a look? thank you
http://www.bleepingcomputer.com/forums/topic237791.html |
|
|
|
|
Jun 30 2009, 12:01 PM
Post
#6
|
|
|
BC 1st Responder Group: Global Moderator Posts: 9,962 Joined: 21-October 04 From: South Carolina - USA Member No.: 3,905 |
Click the Report tab, now click on Scan. A Window will open asking what to include in the scan.
Check the following items: files and drivers -------------------- "In a world where you can be anything, be yourself." ~ unknown Become a BleepingComputer fan: Facebook |
|
|
|
|
Jun 30 2009, 02:33 PM
Post
#7
|
|
|
New Member Group: Members Posts: 12 Joined: 30-June 09 Member No.: 346,766 |
Ok, this should be better.
ROOTREPEAL © AD, 2007-2009 ================================================== Scan Time: 2009/06/30 15:26 Program Version: Version 1.3.0.0 Windows Version: Windows XP Media Center Edition SP3 ================================================== Drivers ------------------- Name: dump_atapi.sys Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys Address: 0xECC62000 Size: 98304 File Visible: No Signed: - Status: - Name: dump_WMILIB.SYS Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS Address: 0xF7A2A000 Size: 8192 File Visible: No Signed: - Status: - Name: hjgruidctjtdul.sys Image Path: C:\WINDOWS\system32\drivers\hjgruidctjtdul.sys Address: 0xED078000 Size: 163840 File Visible: - Signed: - Status: Hidden from Windows API! Name: rootrepeal.sys Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys Address: 0xB88E8000 Size: 49152 File Visible: No Signed: - Status: - Hidden/Locked Files ------------------- Path: C:\hiberfil.sys Status: Locked to the Windows API! Path: C:\WINDOWS\system32\hjgruiciptiokt.dat Status: Invisible to the Windows API! Path: C:\WINDOWS\system32\hjgruidilnuwog.dat Status: Invisible to the Windows API! Path: C:\WINDOWS\system32\hjgruirxfaroof.dll Status: Invisible to the Windows API! Path: C:\WINDOWS\system32\hjgruiyfuxrpsk.dll Status: Invisible to the Windows API! Path: C:\WINDOWS\Temp\hjgruibvtiqemnwx.tmp Status: Invisible to the Windows API! Path: C:\WINDOWS\Temp\hjgruimukdsrqrnq.tmp Status: Invisible to the Windows API! Path: C:\WINDOWS\system32\drivers\hjgruidctjtdul.sys Status: Invisible to the Windows API! Path: c:\documents and settings\hp_administrator\local settings\temp\etilqs_netzoilb0bwmfzwne8tv Status: Allocation size mismatch (API: 32768, Raw: 0) Path: C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a Status: Locked to the Windows API! Path: C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a Status: Locked to the Windows API! Stealth Objects ------------------- Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: winlogon.exe (PID: 892) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: services.exe (PID: 936) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: lsass.exe (PID: 948) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: Ati2evxx.exe (PID: 1108) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruirxfaroof.dll] Process: svchost.exe (PID: 1140) Address: 0x00670000 Size: 57344 Object: Hidden Module [Name: hjgruimukdsrqrnq.tmpll] Process: svchost.exe (PID: 1140) Address: 0x01570000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 1140) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 1220) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 1300) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 1404) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 1540) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: Ati2evxx.exe (PID: 1616) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: Explorer.EXE (PID: 1692) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: spoolsv.exe (PID: 1864) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 1956) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: arservice.exe (PID: 2020) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: ehtray.exe (PID: 240) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: RTHDCPL.EXE (PID: 264) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: cli.exe (PID: 276) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: HPWuSchd2.exe (PID: 356) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: KBD.EXE (PID: 368) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: WPNT121.exe (PID: 400) Address: 0x014d0000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: ctfmon.exe (PID: 416) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: hpqtra08.exe (PID: 724) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: ehRecvr.exe (PID: 1072) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: ehSched.exe (PID: 1176) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: LSSrvc.exe (PID: 1508) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: MDM.EXE (PID: 1520) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: HPZIPM12.EXE (PID: 1980) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 1448) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: svchost.exe (PID: 2052) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: mcrdsvc.exe (PID: 2436) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: dllhost.exe (PID: 3200) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: alg.exe (PID: 3496) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruibvtiqemnwx.tmpll] Process: ehmsas.exe (PID: 3932) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruimukdsrqrnq.tmpll] Process: hpsysdrv.exe (PID: 176) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruimukdsrqrnq.tmpll] Process: iTunesHelper.exe (PID: 508) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruimukdsrqrnq.tmpll] Process: iPodService.exe (PID: 292) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruiyfuxrpsk.dll] Process: firefox.exe (PID: 3912) Address: 0x10000000 Size: 32768 Object: Hidden Module [Name: hjgruiyfuxrpsk.dll] Process: RootRepeal.exe (PID: 6000) Address: 0x10000000 Size: 32768 ==EOF== |
|
|
|
|
Jun 30 2009, 03:07 PM
Post
#8
|
|
|
BC 1st Responder Group: Global Moderator Posts: 9,962 Joined: 21-October 04 From: South Carolina - USA Member No.: 3,905 |
Our next step...
1st - update Malwarebytes. Do not run it yet... Rerun Rootrepeal. After the scan completes, go to the files tab and find these files:
Then use your mouse to highlight it in the Rootrepeal window. Next right mouse click on it and select *wipe file* option only then immediately reboot the computer. Rerun Malwarebytes in full mode. - Let me know if you need any help with these steps. -------------------- "In a world where you can be anything, be yourself." ~ unknown Become a BleepingComputer fan: Facebook |
|
|
|
|
Jun 30 2009, 08:46 PM
Post
#9
|
|
|
New Member Group: Members Posts: 12 Joined: 30-June 09 Member No.: 346,766 |
After taking those steps, it looks like things are starting to work again. Not getting different links when a use a search engine now. Really appreciate the help. Is there anything else I need to do now? malwarebytes did pick up on the remaining files this time.
|
|
|
|
|
Jul 1 2009, 06:30 AM
Post
#10
|
|
|
BC 1st Responder Group: Global Moderator Posts: 9,962 Joined: 21-October 04 From: South Carolina - USA Member No.: 3,905 |
Yes, we need to run more scans. This rootkit is wounded, but not dead yet.
 Please download ATF Cleaner by Atribune & save it to your desktop. alternate download link DO NOT use yet. Please download and install SUPERAntiSpyware Free
Double-click ATF-Cleaner.exe to run the program.
ATF-Cleaner must be "Run as an Administrator". Scan with SUPERAntiSpyware as follows:
-------------------- "In a world where you can be anything, be yourself." ~ unknown Become a BleepingComputer fan: Facebook |
|
|
|
|
Jul 2 2009, 01:54 AM
Post
#11
|
|
|
New Member Group: Members Posts: 12 Joined: 30-June 09 Member No.: 346,766 |
Here's the log. Just finished the scan.
SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 07/02/2009 at 02:51 AM Application Version : 4.26.1006 Core Rules Database Version : 3966 Trace Rules Database Version: 1906 Scan type : Complete Scan Total Scan Time : 01:00:12 Memory items scanned : 593 Memory threats detected : 0 Registry items scanned : 5867 Registry threats detected : 0 File items scanned : 99606 File threats detected : 0 |
|
|
|
|
Jul 2 2009, 12:15 PM
Post
#12
|
|
|
BC 1st Responder Group: Global Moderator Posts: 9,962 Joined: 21-October 04 From: South Carolina - USA Member No.: 3,905 |
Please download Dr.Web CureIt and save it to your desktop. DO NOT perform a scan yet.
alternate download link Note: The file will be randomly named (i.e. 5mkuvc4z.exe). Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode". Scan with Dr.Web CureIt as follows:
-------------------- "In a world where you can be anything, be yourself." ~ unknown Become a BleepingComputer fan: Facebook |
|
|
|
|
Jul 5 2009, 10:59 AM
Post
#13
|
|
|
New Member Group: Members Posts: 12 Joined: 30-June 09 Member No.: 346,766 |
Been having a problem with that Virus scanner. The quick scan went well, but every time I do a full scan, I eventually get an error that says " kj789.exe has had an error and needs to shut down ", which stops the full scan.
Hope everyone had a nice 4th of July by the way... |
|
|
|
|
Jul 5 2009, 04:55 PM
Post
#14
|
|
|
BC 1st Responder Group: Global Moderator Posts: 9,962 Joined: 21-October 04 From: South Carolina - USA Member No.: 3,905 |
Please download SmitfraudFix
Double-click SmitfraudFix.exe Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that report into your next reply. Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. http://www.beyondlogic.org/consulting/proc...processutil.htm -------------------- "In a world where you can be anything, be yourself." ~ unknown Become a BleepingComputer fan: Facebook |
|
|
|
|
Jul 6 2009, 12:18 AM
Post
#15
|
|
|
New Member Group: Members Posts: 12 Joined: 30-June 09 Member No.: 346,766 |
SmitFraudFix v2.423
Scan done at 1:15:38.87, Mon 07/06/2009 Run from C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» Process C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\arservice.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\ehome\ehtray.exe C:\WINDOWS\ARPWRMSG.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\HP\KBD\KBD.EXE C:\Program Files\NETGEAR\WPNT121\WPNT121.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe c:\windows\system\hpsysdrv.exe C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\Policies.exe C:\WINDOWS\system32\cmd.exe »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Administrator »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Administrator\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\HP_ADM~1\FAVORI~1 »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files C:\Program Files\Google\googletoolbar1.dll FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" »»»»»»»»»»»»»»»»»»»»»»»» o4Patch !!!Attention, following keys are not inevitably infected!!! o4Patch Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» IEDFix !!!Attention, following keys are not inevitably infected!!! IEDFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix !!!Attention, following keys are not inevitably infected!!! Agent.OMZ.Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» VACFix !!!Attention, following keys are not inevitably infected!!! VACFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» 404Fix !!!Attention, following keys are not inevitably infected!!! 404Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] »»»»»»»»»»»»»»»»»»»»»»»» Winlogon !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"="C:\\WINDOWS\\system32\\userinit.exe," »»»»»»»»»»»»»»»»»»»»»»»» RK [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» DNS Description: NETGEAR RangeMax™ 240 Wireless USB 2.0 Adapter WPNT121 - Packet Scheduler Miniport DNS Server Search Order: 192.168.1.254 HKLM\SYSTEM\CCS\Services\Tcpip\..\{4A438D08-2235-4EF3-84BA-8FF4ABFE3F36}: DhcpNameServer=192.168.1.254 HKLM\SYSTEM\CS1\Services\Tcpip\..\{4A438D08-2235-4EF3-84BA-8FF4ABFE3F36}: DhcpNameServer=192.168.1.254 HKLM\SYSTEM\CS2\Services\Tcpip\..\{4A438D08-2235-4EF3-84BA-8FF4ABFE3F36}: DhcpNameServer=192.168.1.254 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254 »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 21st November 2009 - 01:42 AM |
© 2003-2009 All Rights Reserved Bleeping Computer LLC.