Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win32rootkit.agent


  • This topic is locked This topic is locked
14 replies to this topic

#1 TTC

TTC

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:04:54 AM

Posted 23 June 2008 - 10:28 PM

Posted Image
This is what my ad-aware log said about it:

Family Id: 1333 Win32.Rootkit.Agent Malware TAI: 10
Item Id: [153835] File: C:\System Volume Information\_restore{C604D982-037A-488E-AB6B-D95B79A77ECD}\RP358\A0022553.exe

/edit: When I tried to remove it with ad-aware I got this message: http://i26.tinypic.com/v4bi36.png

Here's my Deckard/HijackThis log file:

Deckard's System Scanner v20071014.68
Run by User on 2008-06-23 23:21:23
Computer is in Normal Mode.
--------------------------------------------------------------------------------


-- HijackThis (run as User.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:21:41 PM, on 6/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\User\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\User.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1187973649515
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1187973716328
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5692 bytes

-- Files created between 2008-05-23 and 2008-06-23 -----------------------------

2008-06-23 23:21:36 0 d-------- C:\Program Files\Trend Micro


-- Find3M Report ---------------------------------------------------------------

2008-06-23 22:40:17 0 d-------- C:\Documents and Settings\User\Application Data\Skype
2008-06-23 22:39:53 0 d-------- C:\Documents and Settings\User\Application Data\AVG7
2008-06-23 11:11:38 0 d-------- C:\Program Files\SpeedFan
2008-06-22 19:19:58 0 d-------- C:\Program Files\Lineage II
2008-06-15 21:32:34 0 d-------- C:\Documents and Settings\User\Application Data\Ventrilo
2008-05-09 13:20:19 0 d-------- C:\Documents and Settings\User\Application Data\teamspeak2
2008-05-09 13:20:18 0 d-------- C:\Program Files\Teamspeak2_RC2
2008-04-29 17:25:29 0 d-------- C:\Program Files\Debugging Tools for Windows


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [08/24/2007 02:12 PM C:\WINDOWS\RTHDCPL.exe]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [04/19/2008 08:00 PM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [06/29/2007 06:24 AM]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe" [09/14/2006 07:55 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [07/12/2007 04:00 AM]
"Alcmtr"="ALCMTR.EXE" [08/24/2007 02:12 PM C:\WINDOWS\Alcmtr.exe]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [06/01/2006 05:22 AM]
"nwiz"="nwiz.exe" [06/01/2006 05:22 AM C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="NvMCTray.dll" [06/01/2006 05:22 AM C:\WINDOWS\system32\nvmctray.dll]
"KernelFaultCheck"="C:\WINDOWS\system32\dumprep 0 -k" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [02/28/2006 08:00 AM]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [08/20/2007 04:30 PM]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [01/19/2007 12:54 PM]
"AIM"="C:\Program Files\AIM\aim.exe" [08/01/2006 04:35 PM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hcwPVRReset]
C:\PROGRA~1\WinTV\hcwP1Utl.exe -Quiet -ResetHardware -NotifyResetFailure -KeepTrying


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{31690fcf-5256-11dc-8125-9c771083f540}]
AutoRun\command- K:\Programs\nu2menu\nu2menu.exe




-- End of Deckard's System Scanner: finished at 2008-06-23 23:21:55 ------------


Help me clean my computer please?
____________
Edit:

Question 1: Since the file is located in System Volume Information\_restore, section. Couldn't this be resolved by turning off the system restore? I got the idea for that here: http://nz.answers.yahoo.com/question/index...09081801AADURof

Question 2: Before I had found this said issue I was running a defrag on this computer. After noticing this problem, i realized some of the sections that had problems defragging were also in the same area as this trojan issue. Could this be related?

Fragments File Size Most fragmented files
1,697 127 MB \System Volume Information\_restore{C604D982-037A-488E-AB6B-D95B79A77ECD}\RP343\A0019084.utx
903 59 MB \System Volume Information\_restore{C604D982-037A-488E-AB6B-D95B79A77ECD}\RP343\A0019085.utx
860 55 MB \System Volume Information\_restore{C604D982-037A-488E-AB6B-D95B79A77ECD}\RP343\A0019088.utx

Edited by TTC, 24 June 2008 - 06:13 AM.


BC AdBot (Login to Remove)

 


#2 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 24 June 2008 - 04:27 PM

Hi,

These are leftovers in your System Restore points. To get rid of it, Flush your system restore points:
To do this, you have to disable systemrestore and enable it afterwards again.
(note: this will delete all your system restore points and malware that were present in it).

How to disable system restore in XP <= click me for instructions with screenshots
After you disabled System Restore.... Reboot.. and after rebooting, enable it again, so a new systemrestorepoint will be made. A clean one now! :thumbsup:

Let me know if that solved your issue.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 TTC

TTC
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:04:54 AM

Posted 24 June 2008 - 04:28 PM

Hello! : )

Funny you should mention it...I just did that some hours ago. xD I'm running another ad-aware scan now to make sure nothing was left behind.

May I ask you something? If it was just a leftover restore point why was it recognized as malware? (A false positive? ) oO; Or, was it just malware hiding out in a restore point?

Edited by TTC, 24 June 2008 - 04:31 PM.


#4 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 24 June 2008 - 04:41 PM

It could be that you were previously dealing with malware, which was deleted, but when you were infected, Windows also creates system restore points, so that one goes into the System Volume Information folder (which is the folder where your system restore points are present).
And scanners scan there as well. :thumbsup:
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#5 TTC

TTC
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:04:54 AM

Posted 24 June 2008 - 04:46 PM

It's interesting, because I don't think this computer has ever been infected by any malware before. @@ The only time I think it possibly could have was before I got a full system reformat done by a technician some months ago. So its a little bit odd to see that sort of thing there...I mean, the hard drive got completely wiped during the reformat. @___@;

Do you think I should check around a bit more to make sure there's no other malware lying around? I have yet to re-use my spybot & AVG to check, as well as my newly installed SUPERantispyware program...

And yes, the file specified in this thread is now gone. : )

Edited by TTC, 24 June 2008 - 04:47 PM.


#6 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 24 June 2008 - 04:59 PM

In that case, it could be a false positive. This is not so uncommon with Adaware. I've seen it detecting a lot of false positives lately as well.
To be honest, I don't think there's malware around though, otherwise your scanner should find it also outside the System Volume Information folder.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#7 TTC

TTC
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:04:54 AM

Posted 24 June 2008 - 05:06 PM

Hmmm. Perhaps...

I did try a scan with AVG and Spybot before posting about the issue and neither of the programs found anything. I figured since the AVG I was using was the free version, that it was just not picking it up. As for Spybot, I had heard that ad-aware can track some malware Spybot couldn't....So that's what lead me to posting here for assistance. xD; Hehe. It'd be funny if all this checking for solutions for the "infected" file and etc was just for a false positive.

There's no other traces of the said malware anywhere; ad-aware found nothing as well as SUPERantispyware. I didn't do these cleans in safe mode though. Do you think I should bother trying it in safe mode?

Edited by TTC, 24 June 2008 - 05:10 PM.


#8 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 24 June 2008 - 05:11 PM

I can't see anything strange in your Deckard System Scanner log either.
Yes, you can perform a scan in Windows Safe mode, but I doubt it will find anything :thumbsup:

By the way, you're still using the AVG7 version - maybe time to update to AVG8?
Also, please update your Sun Java, because it's outdated as well.

http://java.sun.com/javase/downloads/index.jsp: select Java Runtime Environment (JRE) 6 Update 6
Then download the file (choose offline install). But before you install it, uninstall previous versions via software > add&remove programs.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#9 TTC

TTC
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:04:54 AM

Posted 24 June 2008 - 05:14 PM

Yeah...K then, not going to make the extra effort to check lol.

I run AVG 7.5. Its regularly updated. I'm waiting until the final cut off of support to 7.5 this December before upgrading to 8.0. (I've heard 8.0 is kinna buggy atm... D: And since I'm a gamer, I don't want a buggy antivirus program getting in the way of my gaming. I mean it shouldn't...But I've heard bad things about the AVG 8.0 active shield + the game I play the most, lol. )

I'll make sure to update my java program as well. :)

Thanks for all your help! :thumbsup:

Edited by TTC, 24 June 2008 - 05:16 PM.


#10 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 24 June 2008 - 05:25 PM

And since I'm a gamer, I don't want a buggy antivirus program getting in the way of my gaming. I mean it shouldn't...But I've heard bad things about the AVG 8.0 active shield + the game I play the most, lol. )

Well, then you should try Avira instead - it's also free, great in detection and not such a resource hog as AVG is :thumbsup:
http://www.free-av.com/
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#11 TTC

TTC
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:04:54 AM

Posted 24 June 2008 - 06:47 PM

I'll make note of that. Thanks! : )

One quick question though...A friend of mine saw my HijackThis and assumed that the jusched.exe file I had was virus-related. oO; He used this to support his claim: http://www.bleepingcomputer.com/startups/j....exe-16011.html

The jusched I have (related to my outdated java file) is the following in Hijackthis:
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

I have nothing to worry about right? I'm thinking that the jusched.exe discussed in the bleepingcomputer section is different than the one I have because its apart of a different HijackThis Category, Service Display Name, and command.

#12 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 25 June 2008 - 01:46 AM

Nothing wrong with your jusched.exe. It's related with the Sun Java updater.
You should always look at the displayname, what folder it is running from etc... In your case it's present in the correct folder :thumbsup:
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#13 TTC

TTC
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:04:54 AM

Posted 25 June 2008 - 07:36 PM

http://java.sun.com/javase/downloads/index.jsp: select Java Runtime Environment (JRE) 6 Update 6
Then download the file (choose offline install). But before you install it, uninstall previous versions via software > add&remove programs.


Hmm. I accidentally started to try to install it before I had removed the previous version. The most that got installed was the Sun Download Manager. I saw the file you specified ready for download there, but I did not start the download of the file. This alright?

Btw, the only trace of Java in my ad/remove section is Java ™ 6 Update 2. That's the one you want me to delete? Or since its an update file, should I leave it be? (Sorry I'm a bit inexperienced with updating Java. ) : )

Edited by TTC, 25 June 2008 - 07:38 PM.


#14 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 26 June 2008 - 12:13 AM

Yes, uninstall Java 6 Update 2
The latest version is Java Runtime Environment (JRE) 6 Update 6
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#15 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:11:54 AM

Posted 04 July 2008 - 07:28 AM

Since this issue appears resolved ... this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users