Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I Am Infected With Virtumonde And Vundo Virus/Trojan!


  • This topic is locked This topic is locked
3 replies to this topic

#1 rooncraz

rooncraz

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:34 PM

Posted 23 December 2008 - 10:10 AM

I Have Tries Malwarebytes But EveryTime It Removes It, It Keeps On Coming Back!! The Are Some Random Programs In The Startup List Such As - "Jebodoma", And They Command Rundll32.exe... Anyway I'm Posting A Log. Any Help Will Be Greatly Appreciated.

LOG:

Logfile of random's system information tool 1.05 (written by random/random)
Run by Fahad at 2008-12-23 15:00:56
Microsoft Windows XP Professional Service Pack 2
System drive C: has 3 GB (40%) free of 7 GB
Total RAM: 254 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:01:14, on 23/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
F:\Malwarebytes' Anti-Malware\mbam.exe
F:\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Fahad\Desktop\RSIT.exe
C:\Program Files\trend micro\Fahad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bbc.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: 80.190.241.30 home.edonkey.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {284868FA-A65D-4023-9DF0-BEA13E439695} - C:\WINDOWS\system32\efcAQHXp.dll (file missing)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C825B46-1F1E-477A-BDB8-0AAC4FDC944B} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {772384D8-1BD8-49CA-A440-6FF68E2BE2F8} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {E525B124-28E1-4D57-B784-B2AABFBBFA66} - (no file)
O2 - BHO: (no name) - {eaa300fa-3da5-468e-854e-05436c8b1e3e} - C:\WINDOWS\system32\venijija.dll (file missing)
O3 - Toolbar: (no name) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - (no file)
O3 - Toolbar: bgrqfetx - {D94F8861-8B9F-417B-960F-62212C452045} - (no file)
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O4 - HKLM\..\Run: [rajutugame] Rundll32.exe "C:\WINDOWS\system32\jebodoma.dll",s
O4 - HKUS\S-1-5-19\..\Run: [rajutugame] Rundll32.exe "C:\WINDOWS\system32\jebodoma.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [rajutugame] Rundll32.exe "C:\WINDOWS\system32\jebodoma.dll",s (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] E:\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] E:\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O8 - Extra context menu item: Add to AMV Convert Tool... - D:\Amv Converter\AMVConverter\grab.html
O8 - Extra context menu item: Add to Media Manager... - D:\Amv Converter\MediaManager\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\Microsoft\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {352797A0-EFD0-4FA6-B229-145120EA4B8A} - https://disneyblast.go.com/v3/setup/activex...wareControl.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\dumepiwo.dll C:\WINDOWS\system32\tohuzeno.dll ,
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

--
End of file - 4979 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\dnohewmo.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{284868FA-A65D-4023-9DF0-BEA13E439695}]
C:\WINDOWS\system32\efcAQHXp.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C825B46-1F1E-477A-BDB8-0AAC4FDC944B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{772384D8-1BD8-49CA-A440-6FF68E2BE2F8}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E525B124-28E1-4D57-B784-B2AABFBBFA66}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{eaa300fa-3da5-468e-854e-05436c8b1e3e}]
C:\WINDOWS\system32\venijija.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B}
{D94F8861-8B9F-417B-960F-62212C452045} - []
{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - Veoh Web Player Video Finder - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll [2008-11-03 463872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"rajutugame"=C:\WINDOWS\system32\jebodoma.dll []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CPM4fb91d75]
c:\windows\system32\lukumeyo.dll []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F:]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\rajutugame]
C:\WINDOWS\system32\jebodoma.dll []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ServiceLayer"=3
"ose"=3
"odserv"=3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\WINDOWS\system32\dumepiwo.dll C:\WINDOWS\system32\tohuzeno.dll , "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-04-10 236928]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\WINDOWS\system32\dumepiwo.dll
C:\WINDOWS\system32\tohuzeno.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\winlogon.exe"="C:\WINDOWS\system32\winlogon.exe:*:Enabled:winlogon"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Explorer"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"F:\Mozilla Firefox\firefox.exe"="F:\Mozilla Firefox\firefox.exe:*:Enabled:firefox"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======File associations======

.reg - open - regedit.exe "%1" %*
.scr - open - "%1" %*

======List of files/folders created in the last 1 months======

2008-12-23 15:00:58 ----D---- C:\Program Files\trend micro
2008-12-23 15:00:56 ----D---- C:\rsit
2008-12-23 14:52:50 ----D---- C:\Documents and Settings\Fahad\Application Data\UseNeXT
2008-12-23 13:40:55 ----A---- C:\WINDOWS\ntbtlog.txt
2008-12-23 13:33:44 ----A---- C:\WINDOWS\system32\tmp.txt
2008-12-23 13:33:12 ----A---- C:\rapport.txt
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\WS2Fix.exe
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\VCCLSID.exe
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\VACFix.exe
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\o4Patch.exe
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\IEDFix.exe
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
2008-12-23 13:31:54 ----A---- C:\WINDOWS\system32\404Fix.exe
2008-12-23 13:31:53 ----A---- C:\WINDOWS\system32\swxcacls.exe
2008-12-23 13:31:53 ----A---- C:\WINDOWS\system32\swsc.exe
2008-12-23 13:31:53 ----A---- C:\WINDOWS\system32\swreg.exe
2008-12-23 13:31:53 ----A---- C:\WINDOWS\system32\SrchSTS.exe
2008-12-23 13:31:53 ----A---- C:\WINDOWS\system32\Process.exe
2008-12-23 13:31:53 ----A---- C:\WINDOWS\system32\dumphive.exe
2008-12-22 13:52:30 ----D---- C:\Program Files\MSN Messenger
2008-12-22 13:23:59 ----D---- C:\WINDOWS\Temp
2008-12-22 12:45:33 ----D---- C:\Documents and Settings\Fahad\Application Data\Auslogics
2008-12-21 17:27:12 ----D---- C:\Program Files\Internet Download Manager
2008-12-18 16:00:55 ----A---- C:\WINDOWS\system32\sipr3260.dll
2008-12-18 16:00:55 ----A---- C:\WINDOWS\system32\Pncrt.dll
2008-12-18 16:00:54 ----A---- C:\WINDOWS\system32\drv43260.dll
2008-12-18 16:00:54 ----A---- C:\WINDOWS\system32\drv33260.dll
2008-12-18 16:00:53 ----A---- C:\WINDOWS\system32\drv23260.dll
2008-12-18 16:00:52 ----A---- C:\WINDOWS\system32\cook3260.dll
2008-12-18 16:00:46 ----A---- C:\WINDOWS\system32\wvc1dmod.dll
2008-12-18 16:00:46 ----A---- C:\WINDOWS\system32\vp7vfw.dll
2008-12-18 16:00:30 ----D---- C:\Program Files\VSO
2008-12-15 20:13:37 ----D---- C:\WINDOWS\Easy Rapidshare Points
2008-12-15 20:00:49 ----D---- C:\Documents and Settings\Fahad\Application Data\Jarte
2008-12-12 12:36:27 ----D---- C:\Documents and Settings\Fahad\Application Data\Malwarebytes
2008-12-12 12:36:01 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-11 19:57:24 ----A---- C:\WINDOWS\system32\TUKernel.exe
2008-12-11 18:51:14 ----D---- C:\Documents and Settings\Fahad\Application Data\TuneUp Software
2008-12-11 18:28:38 ----D---- C:\Documents and Settings\Fahad\Application Data\Mozilla
2008-12-11 09:40:35 ----SH---- C:\WINDOWS\system32\ohufogez.ini
2008-12-10 20:03:45 ----D---- C:\Documents and Settings\All Users\Application Data\TVU Networks
2008-12-07 18:24:46 ----D---- C:\Documents and Settings\Fahad\Application Data\ImgBurn
2008-12-06 20:12:19 ----ASH---- C:\WINDOWS\system32\eefedccf.ini2
2008-12-06 20:12:19 ----ASH---- C:\WINDOWS\system32\eefedccf.ini
2008-12-06 20:07:08 ----A---- C:\WINDOWS\system32\ddcAqQHX.dll
2008-12-05 18:25:30 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-12-05 18:06:30 ----A---- C:\WINDOWS\system32\47a9ea97-.txt
2008-12-05 18:06:10 ----ASH---- C:\WINDOWS\system32\tuwGNXbc.ini2
2008-12-05 18:06:10 ----ASH---- C:\WINDOWS\system32\tuwGNXbc.ini
2008-12-01 21:07:26 ----D---- C:\Documents and Settings\Fahad\Application Data\OpenOffice.org
2008-12-01 20:14:46 ----A---- C:\WINDOWS\system32\javaws.exe
2008-12-01 20:14:46 ----A---- C:\WINDOWS\system32\javaw.exe
2008-12-01 20:14:46 ----A---- C:\WINDOWS\system32\java.exe
2008-12-01 17:31:33 ----D---- C:\Program Files\Veoh Networks
2008-11-30 21:00:14 ----D---- C:\Documents and Settings\Fahad\Application Data\Help
2008-11-30 20:57:30 ----D---- C:\Program Files\Common Files\SureThing Shared
2008-11-30 20:57:28 ----D---- C:\WINDOWS\MVUNINST
2008-11-28 20:35:11 ----D---- C:\Documents and Settings\Fahad\Application Data\Moyea
2008-11-25 18:46:55 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2008-11-25 17:45:36 ----D---- C:\Documents and Settings\Fahad\Application Data\Canneverbe_Limited
2008-11-24 10:19:28 ----D---- C:\Documents and Settings\Fahad\Application Data\Clone2Go Video Converter Free Version

======List of files/folders modified in the last 1 months======

2008-12-23 15:00:58 ----RD---- C:\Program Files
2008-12-23 14:40:37 ----D---- C:\WINDOWS\system32\drivers
2008-12-23 14:40:37 ----D---- C:\WINDOWS\system32
2008-12-23 14:39:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-12-23 13:55:53 ----RSH---- C:\boot.ini
2008-12-23 13:55:53 ----AC---- C:\WINDOWS\win.ini
2008-12-23 13:55:53 ----AC---- C:\WINDOWS\system.ini
2008-12-23 13:55:19 ----D---- C:\Documents and Settings\Fahad\Application Data\DMCache
2008-12-23 13:46:42 ----SHD---- C:\RECYCLER
2008-12-23 13:40:55 ----D---- C:\WINDOWS
2008-12-23 13:28:17 ----D---- C:\Documents and Settings\Fahad\Application Data\uTorrent
2008-12-22 15:11:49 ----D---- C:\WINDOWS\Prefetch
2008-12-22 13:56:09 ----SHD---- C:\WINDOWS\Installer
2008-12-22 13:56:02 ----SHD---- C:\Config.Msi
2008-12-22 13:52:49 ----D---- C:\WINDOWS\WinSxS
2008-12-22 13:52:47 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-12-22 13:52:47 ----HD---- C:\WINDOWS\inf
2008-12-22 13:45:09 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-12-22 13:41:20 ----D---- C:\Program Files\Windows Live
2008-12-22 12:11:50 ----D---- C:\WINDOWS\SxsCaPendDel
2008-12-21 18:17:54 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-12-21 14:50:48 ----D---- C:\Program Files\Google
2008-12-21 14:36:46 ----D---- C:\WINDOWS\system32\CatRoot2
2008-12-21 14:21:00 ----SD---- C:\WINDOWS\Tasks
2008-12-18 16:22:39 ----D---- C:\Documents and Settings\Fahad\Application Data\Vso
2008-12-18 16:02:18 ----AC---- C:\Documents and Settings\Fahad\Application Data\inst.exe
2008-12-17 19:16:14 ----A---- C:\WINDOWS\NeroDigital.ini
2008-12-17 16:25:59 ----RSHD---- C:\WINDOWS\system32\dllcache
2008-12-16 23:24:54 ----D---- C:\Program Files\Common Files\Ahead
2008-12-16 23:24:54 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2008-12-16 19:54:27 ----D---- C:\WINDOWS\system32\CatRoot
2008-12-16 19:34:56 ----D---- C:\Documents and Settings\Fahad\Application Data\Ahead
2008-12-15 19:19:26 ----HD---- C:\Program Files\InstallShield Installation Information
2008-12-15 18:40:19 ----D---- C:\Documents and Settings
2008-12-15 18:33:21 ----D---- C:\Program Files\Common Files
2008-12-14 20:20:12 ----D---- C:\Documents and Settings\All Users\Application Data\Ahead
2008-12-14 19:40:11 ----D---- C:\Temp
2008-12-13 20:18:49 ----D---- C:\Documents and Settings\Fahad\Application Data\dvdcss
2008-12-11 21:40:45 ----ASHC---- C:\WINDOWS\system32\furihepi.dll
2008-12-11 20:56:52 ----RSD---- C:\WINDOWS\Fonts
2008-12-11 20:36:15 ----D---- C:\Documents and Settings\Fahad\Application Data\FVZilla
2008-12-11 09:40:19 ----ASHC---- C:\WINDOWS\system32\hupebogi.dll
2008-12-10 17:04:09 ----ASHC---- C:\WINDOWS\system32\hazikubu.dll
2008-12-09 17:52:33 ----ASHC---- C:\WINDOWS\system32\kulagira.dll
2008-12-09 16:52:24 ----ASHC---- C:\WINDOWS\system32\toyutabo.dll
2008-12-08 09:21:58 ----ASHC---- C:\WINDOWS\system32\wegahuwe.dll
2008-12-07 20:37:44 ----A---- C:\WINDOWS\IfoEdit.INI
2008-12-07 12:49:05 ----ASHC---- C:\WINDOWS\system32\haniyuga.dll
2008-12-06 21:06:38 ----ASHC---- C:\WINDOWS\system32\delejome.dll
2008-12-01 20:31:50 ----RSD---- C:\WINDOWS\assembly
2008-12-01 20:14:23 ----D---- C:\Program Files\Java
2008-11-25 18:58:47 ----D---- C:\Program Files\Common Files\Nero
2008-11-25 18:54:58 ----AC---- C:\WINDOWS\system32\MsiExec.exe.log

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 oreans32;oreans32; \??\C:\WINDOWS\system32\drivers\oreans32.sys []
R3 ac97intc;Intel® 82801 Audio Driver Install Service (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
R3 HCF_MSFT;HCF_MSFT; C:\WINDOWS\System32\DRIVERS\HCF_MSFT.sys [2001-08-17 907456]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2004-08-04 161020]
R3 LucentSoftModem;Lucent Technologies Soft Modem; C:\WINDOWS\System32\DRIVERS\LTSM.sys [2001-08-17 802683]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 Pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2008-12-18 47360]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
S3 BTCAMDRV;Mobiola Web Camera driver; C:\WINDOWS\system32\DRIVERS\BTCamDrv.sys [2006-11-01 219264]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 hidgame;Microsoft Hid to Joystick Port Enabler; C:\WINDOWS\System32\DRIVERS\hidgame.sys [2001-08-17 8576]
S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2004-08-04 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2004-08-04 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2004-08-04 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2004-08-04 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2004-08-04 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-04 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-04 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-04 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2004-08-04 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2004-08-04 19551]
S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2004-08-04 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2004-08-04 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-04 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-04 22271]
S3 idrmkl;idrmkl; \??\C:\DOCUME~1\Fahad\LOCALS~1\Temp\idrmkl.sys []
S3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys []
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 NtApm;NT Apm/Legacy Interface Driver; C:\WINDOWS\System32\DRIVERS\NtApm.sys [2001-08-17 9344]
S3 ntportio;ntportio; \??\C:\DOCUME~1\Fahad\LOCALS~1\Temp\Rar$EX02.589\USB-SMART-FULLY-CRACKED\Sony-Ericsson\ntportio.sys []
S3 ovt519;%USB\vid_054c&pid_0155.DeviceDesc%; C:\WINDOWS\System32\Drivers\ov519vid.sys [2003-10-15 174530]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\WINDOWS\system32\DRIVERS\s116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\WINDOWS\system32\DRIVERS\s116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\WINDOWS\system32\DRIVERS\s116unic.sys [2007-04-03 99080]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 sysrest.sys;sysrest.sys; \??\C:\WINDOWS\system32\sysrest.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-04 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\System32\DRIVERS\usbser.sys [2004-08-04 25600]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 w800bus;Sony Ericsson W800 driver (WDM); C:\WINDOWS\System32\DRIVERS\w800bus.sys [2005-06-13 60768]
S3 w800mdfl;Sony Ericsson W800 USB WMC Modem Filter; C:\WINDOWS\System32\DRIVERS\w800mdfl.sys [2005-06-13 9264]
S3 w800mdm;Sony Ericsson W800 USB WMC Modem Drivers; C:\WINDOWS\System32\DRIVERS\w800mdm.sys [2005-06-13 96224]
S3 w800mgmt;Sony Ericsson W800 USB WMC Device Management Drivers; C:\WINDOWS\System32\DRIVERS\w800mgmt.sys [2005-06-13 87792]
S3 w800obex;Sony Ericsson W800 USB WMC OBEX Interface Drivers; C:\WINDOWS\System32\DRIVERS\w800obex.sys [2005-06-13 85664]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 ACPI;ACPI; C:\WINDOWS\system32\drivers\ACPI.sys []
S4 sr;System Restore Filter Driver; C:\WINDOWS\System32\DRIVERS\sr.sys [2004-08-04 73472]
S4 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-23 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S4 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S4 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-08-07 575488]

-----------------EOF-----------------


INFO:

info.txt logfile of random's system information tool 1.05 2008-12-23 15:01:22

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
AusLogics Disk Defrag-->"F:\AusLogics Disk Defrag\unins000.exe"
CCleaner (remove only)-->"F:\CCleaner\uninst.exe"
DivX Web Player-->F:\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DVD Decrypter (Remove Only)-->"F:\DVD Decrypter\uninstall.exe"
FLV to AVI MPEG WMV 3GP MP4 iPod Converter 4.2.0622-->"F:\FLV to AVI MPEG WMV 3GP MP4 iPod Converter\unins000.exe"
Foxit Reader-->F:\Foxit PDF Reader\Foxit Reader\Uninstall.exe
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
ImgBurn-->"F:\ImgBurn\uninstall.exe"
Malwarebytes' Anti-Malware-->"F:\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.5)-->F:\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 4.00-->MsiExec.exe /I{7784A172-61F1-445E-8368-601607E0DD22}
Nokia Connectivity Cable Driver-->MsiExec.exe /X{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}
Nokia PC Suite-->MsiExec.exe /I{A8C3710A-0BCA-4F10-9EC3-A302A1F1FA82}
OpenOffice.org 3.0-->MsiExec.exe /I{F44DA61E-720D-4E79-871F-F6E628B33242}
PC Connectivity Solution-->MsiExec.exe /I{1A524CFE-DF85-4555-8BC2-0C89DBD8BC2C}
Security Update for Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Setup Wizard-->"C:\Program Files\Setup Wizard\unins000.exe"
Sony Eyetoy Webcam-->C:\WINDOWS\CleanDev.exe C:\WINDOWS\ov519.TXT
UseNeXT-->F:\UseNeXT\unins000.exe
Veoh Web Player Beta-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe"
VLC media player 0.9.6-->F:\VLC\uninstall.exe
WinAVI Video Converter-->"F:\WinAVI Video Converter\unins000.exe"
Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52}
Windows Live Messenger-->MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
WinRAR archiver-->F:\WinRAR\uninstall.exe
Yahoo! Messenger-->C:\PROGRA~1\YAHOO!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\YAHOO!\MESSEN~1\INSTALL.LOG

======Hosts File======


80.190.241.30 home.edonkey.com

Securitycenter WMI appears to be broken

System event log

Computer Name: AHMED
Event Code: 257
Message: Timed out sending notification of target device change to window of "WndClass_CWinDrivesNotifyerHelperWindow"

Record Number: 5681
Source Name: PlugPlayManager
Time Written: 20081125175340.000000+000
Event Type: warning
User:

Computer Name: AHMED
Event Code: 257
Message: Timed out sending notification of target device change to window of "WndClass_CWinDrivesNotifyerHelperWindow"

Record Number: 5680
Source Name: PlugPlayManager
Time Written: 20081125175339.000000+000
Event Type: warning
User:

Computer Name: AHMED
Event Code: 257
Message: Timed out sending notification of target device change to window of "WndClass_CWinDrivesNotifyerHelperWindow"

Record Number: 5679
Source Name: PlugPlayManager
Time Written: 20081125175339.000000+000
Event Type: warning
User:

Computer Name: AHMED
Event Code: 257
Message: Timed out sending notification of target device change to window of "WndClass_CWinDrivesNotifyerHelperWindow"

Record Number: 5678
Source Name: PlugPlayManager
Time Written: 20081125175339.000000+000
Event Type: warning
User:

Computer Name: AHMED
Event Code: 257
Message: Timed out sending notification of target device change to window of "WndClass_CWinDrivesNotifyerHelperWindow"

Record Number: 5677
Source Name: PlugPlayManager
Time Written: 20081125175339.000000+000
Event Type: warning
User:

Application event log

Computer Name: AHMED
Event Code: 1002
Message: The shell stopped unexpectedly and Explorer.exe was restarted.

Record Number: 918
Source Name: Winlogon
Time Written: 20080813142348.000000+060
Event Type: information
User:

Computer Name: AHMED
Event Code: 1002
Message: The shell stopped unexpectedly and Explorer.exe was restarted.

Record Number: 917
Source Name: Winlogon
Time Written: 20080813142319.000000+060
Event Type: information
User:

Computer Name: AHMED
Event Code: 1002
Message: The shell stopped unexpectedly and Explorer.exe was restarted.

Record Number: 916
Source Name: Winlogon
Time Written: 20080813142250.000000+060
Event Type: information
User:

Computer Name: AHMED
Event Code: 1002
Message: The shell stopped unexpectedly and Explorer.exe was restarted.

Record Number: 915
Source Name: Winlogon
Time Written: 20080813142220.000000+060
Event Type: information
User:

Computer Name: AHMED
Event Code: 1002
Message: The shell stopped unexpectedly and Explorer.exe was restarted.

Record Number: 914
Source Name: Winlogon
Time Written: 20080813142151.000000+060
Event Type: information
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;F:\ZipGenius 6\
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0801
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"DEVMGR_SHOW_NONPRESENT_DEVICES"=1

-----------------EOF-----------------

The Rich Earn, The Smart Learn!


BC AdBot (Login to Remove)

 


#2 rooncraz

rooncraz
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:34 PM

Posted 24 December 2008 - 08:16 AM

As Well As That I Keep On Getting Anti-Virus 2009 Pop-Ups, I've Tried Malware Bytes But Everytime I Reboot, It Keeps On Coming Back!!! I Need Some Help!! :thumbsup: :)

The Rich Earn, The Smart Learn!


#3 chryssi2001

chryssi2001

  • Members
  • 1,930 posts
  • OFFLINE
  •  
  • Local time:06:34 PM

Posted 31 December 2008 - 12:15 PM

Hello rooncraz,

I will be assisting you with your malware issues.
  • Whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.
  • Continue to respond to this thread until I give you the All Clean! If you have any question or you're stuck in there please reply it to me. I will try my best to help you!
  • Please bookmark or favourite this page. In case you need it as reference or etc.
  • If you fail to reply in 5 days period from now, this thread will close, and you will have to open another topic, and wait for another helper.
----------------------------------------------
I apologise for the delay, the forum is extremely busy.

If you still need help, post back a HijackThis log following my instructions below:
----------------------------------------------
Download and Run HijackThis
Download HJTInstall.exe to your Desktop.
  • Doubleclick HJTInstall.exe to install it.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Copy/Paste the log to your next reply please.
Don't use the Analyse This button, its findings are dangerous if misinterpreted.
Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
Posted Image
Private Messages for personal support will be ignored. If you need help post in the forum.

#4 chryssi2001

chryssi2001

  • Members
  • 1,930 posts
  • OFFLINE
  •  
  • Local time:06:34 PM

Posted 05 January 2009 - 11:50 AM

Due to the lack of feedback, this Topic is now closed and will not be reopened.
If you still need help, begin a new topic.

Applies only to the original poster, anyone else with similar problems please start a new topic.
Posted Image
Private Messages for personal support will be ignored. If you need help post in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users