Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

infected with home video virus


  • This topic is locked This topic is locked
38 replies to this topic

#1 rehan2001

rehan2001

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 24 December 2008 - 11:48 PM

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Version 1.0)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 11/20/2008 8:36:46 PM
System Uptime: 12/24/2008 11:02:10 PM (5 hours ago)

Motherboard: Hewlett-Packard | | 30D8
Processor: Intel® Core™2 Duo CPU T5470 @ 1.60GHz | U10 | 1596/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 24 GiB total, 9.361 GiB free.
D: is FIXED (NTFS) - 24 GiB total, 19.49 GiB free.
E: is FIXED (NTFS) - 24 GiB total, 19.716 GiB free.
F: is FIXED (NTFS) - 24 GiB total, 1.092 GiB free.
G: is FIXED (NTFS) - 14 GiB total, 9.12 GiB free.
H: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP59: 12/24/2008 4:12:15 PM - System Checkpoint

==== Installed Programs ======================

Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.1.3
Agere Systems HDA Modem
Broadcom 802.11 Wireless LAN Adapter
Broadcom Wireless Utility
Device Access Manager for HP ProtectTools
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB952287)
HP Integrated Module with Bluetooth wireless technology
HP Notebook Accessories Product Tour
HP ProtectTools Security Manager
HP Quick Launch Buttons 6.40 B2
HP Update
Intel® Graphics Media Accelerator Driver
Intel® PRO Network Connections Drivers
Intel® PROSet/Wireless Software
InterVideo DVD Check
Java™ 6 Update 10
LightScribe System Software 1.10.19.1
LiveUpdate 2.6 (Symantec Corporation)
mCore
mDrWiFi
Metacafe
mHelp
Microsoft .NET Framework 1.0 Hotfix (KB930494)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office Excel 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office PowerPoint 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Edition 2003
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft Visual C++ 2005 Redistributable
mIWA
mLogView
mMHouse
Mozilla Firefox (3.0.5)
mPfMgr
mPfWiz
mProSafe
mSCfg
MSXML 6 Service Pack 2 (KB954459)
mWlsSafe
mZConfig
PowerDVD
RealPlayer
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Skype™ 3.8
SoundMAX
Spelling Dictionaries Support For Adobe Reader 8
Symantec AntiVirus
Update for Windows XP (KB898461)
Update for Windows XP (KB904942)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
WebFldrs XP
Windows Driver Package - MSN (usbccgp) USB (02/14/2007 1.2.0.7)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Messenger
Windows Live Sign-in Assistant
Windows XP Service Pack 3
Yahoo! Install Manager
Yahoo! Messenger
Yahoo! Widgets

==== Event Viewer Messages From Past Week ========

12/21/2008 1:04:06 AM, error: Dhcp [1002] - The IP address lease 192.168.1.3 for the Network Card with network address 001B77C02B46 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
12/20/2008 11:57:41 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Akamai service.
12/20/2008 8:53:27 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x800706be: Windows XP Service Pack 3 (KB936929).
12/20/2008 1:14:09 PM, error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.1.3 with the system having network hardware address 00:1C:F0:18:C6:DA. Network operations on this system may be disrupted as a result.
12/20/2008 1:07:06 PM, error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.1.3 with the system having network hardware address 00:E0:4D:03:B2:35. Network operations on this system may be disrupted as a result.
12/19/2008 2:30:40 PM, error: Dhcp [1002] - The IP address lease 192.168.1.9 for the Network Card with network address 001B77C02B46 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
12/18/2008 7:34:20 PM, error: Dhcp [1002] - The IP address lease 192.168.1.8 for the Network Card with network address 001B77C02B46 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
12/18/2008 12:59:49 PM, error: Dhcp [1002] - The IP address lease 192.168.1.5 for the Network Card with network address 001B77C02B46 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
12/21/2008 2:37:44 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the hpqwmiex service to connect.
12/21/2008 2:37:44 PM, error: Service Control Manager [7000] - The hpqwmiex service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/21/2008 7:08:30 PM, error: Dhcp [1002] - The IP address lease 192.168.1.18 for the Network Card with network address 001B77C02B46 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
12/23/2008 8:43:33 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Symantec Event Manager service to connect.
12/24/2008 1:45:33 PM, error: Dhcp [1002] - The IP address lease 192.168.1.4 for the Network Card with network address 001B77C02B46 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

==== End Of File ===========================

Attached Files



BC AdBot (Login to Remove)

 


#2 Taz71498

Taz71498

  • Members
  • 101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:49 PM

Posted 06 January 2009 - 05:48 PM

Hello rehan2001,

Welcome to Bleepingcomputer!

Sorry for the delay.

Are you still out there in need of help? If so, post back to me and give me an update on your computer problem.

If by chance you do not get a response from me within 24hrs of answering, please Private mesage me. At times, I do not get an email to tell me you answered.

#3 Hoov

Hoov

  • Malware Response Team
  • 3,519 posts
  • OFFLINE
  •  
  • Location:Mikado Michigan
  • Local time:01:49 PM

Posted 06 January 2009 - 05:52 PM

OOPS Taz got to it just minutes before me.

Edited by Hoov, 06 January 2009 - 08:24 PM.

Visiting From SpywareHammer.com and DonHoover.net

Tilting at windmills hurts you more than the windmills.
-From the Notebooks of Lazarus Long
Senior of the Howard Families

Posted Image

#4 Taz71498

Taz71498

  • Members
  • 101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:49 PM

Posted 12 January 2009 - 05:38 PM

rehan,

I need you to post to this topic. Do not private message me for the help. We can not help via private messages.

Please download Malwarebytes' Anti-Malware from http://www.besttechie.net/tools/mbam-setup.exe or http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.html

Double Click mbam-setup.exe to install the application.

* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select "Perform Quick Scan", then click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
* Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts,
click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,
please do so immediately.

#5 rehan2001

rehan2001
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 15 January 2009 - 12:00 AM

Admin Edit: Removed unnecessary quote.


this is the result of scan
Malwarebytes' Anti-Malware 1.33
Database version: 1654
Windows 5.1.2600 Service Pack 3

1/15/2009 4:58:39 AM
mbam-log-2009-01-15 (04-58-39).txt

Scan type: Quick Scan
Objects scanned: 70275
Time elapsed: 13 minute(s), 31 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\runonce (Backdoor.Bot) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\krnln.fnr (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\CSRSS.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\autorun.inf (Trojan.Agent) -> Quarantined and deleted successfully.
C:\CSRSS.exe (Trojan.Agent) -> Quarantined and deleted successfully.

#6 Taz71498

Taz71498

  • Members
  • 101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:49 PM

Posted 15 January 2009 - 07:54 PM

Hello, thanks for posting here. This may not be looking good. Let's run this scan to see if it pops up what I think it will find.

Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen and exit the program.
  • Do not run a scan just yet.
Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with SUPERAntiSpyware as follows:
  • Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.


#7 rehan2001

rehan2001
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 21 January 2009 - 09:25 AM

Admin Edit: Removed unnecessary quote.



ok i m actually sendin u all dese 4 log results bcz ov dese reasons..1.initially i had installed dis suermalware bt it was nt bein run ..den finally i managed 2 run it n den it got hold of 18 trojan horse fake video files dat were causin all dis nonsense.nw i think virus ov home video has partially removed..partially bcz still da name of my document is ahsan document,my computer name as ahasan computer,recycle bin as G.W.Bush n internet explorer page as ahasan manan bhutta page....n wen i tried to give command of comamnd in run ..dfat was also infected askin progm 2 open it..please do more n take dis virus completely from my system....dese r logs as per dates


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/20/2009 at 02:42 PM

Application Version : 4.24.1004

Core Rules Database Version : 3688
Trace Rules Database Version: 1664

Scan type : Quick Scan
Total Scan Time : 00:25:55

Memory items scanned : 451
Memory threats detected : 3
Registry items scanned : 394
Registry threats detected : 1
File items scanned : 58292
File threats detected : 18

Trojan.VideoClip/Fake
C:\WINDOWS\FIREWALL.EXE
C:\WINDOWS\FIREWALL.EXE
C:\WINDOWS\CSRSS.EXE
C:\WINDOWS\CSRSS.EXE
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\STARTUP\A.M.K.B_PK.EXE
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\STARTUP\A.M.K.B_PK.EXE
[Runonce] C:\WINDOWS\CSRSS.EXE
C:\CSRSS.EXE
C:\HOME VIDEO.AVI.EXE
C:\WINDOWS\HOME VIDEO.EXE
D:\CSRSS.EXE
D:\HOME VIDEO.AVI.EXE
E:\CSRSS.EXE
E:\HOME VIDEO.AVI.EXE
F:\CSRSS.EXE
F:\HOME VIDEO.AVI.EXE
G:\CSRSS.EXE
G:\HOME VIDEO.AVI.EXE
C:\WINDOWS\Prefetch\CSRSS.EXE-0FD9A347.pf
C:\WINDOWS\Prefetch\CSRSS.EXE-180DE959.pf
C:\WINDOWS\Prefetch\CSRSS.EXE-30716FA9.pf
C:\WINDOWS\Prefetch\CSRSS.EXE-38A5B5BB.pf



log no..2
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/21/2009 at 01:41 AM

Application Version : 4.24.1004

Core Rules Database Version : 3688
Trace Rules Database Version: 1664

Scan type : Complete Scan
Total Scan Time : 00:40:37

Memory items scanned : 530
Memory threats detected : 0
Registry items scanned : 5142
Registry threats detected : 0
File items scanned : 95770
File threats detected : 2

Adware.Tracking Cookie
C:\Documents and Settings\me\Cookies\me@content.yieldmanager.edgesuite[1].txt
C:\Documents and Settings\me\Cookies\me@ad.yieldmanager[1].txt



log no.3


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/21/2009 at 04:34 AM

Application Version : 4.25.1012

Core Rules Database Version : 3719
Trace Rules Database Version: 1693

Scan type : Complete Scan
Total Scan Time : 01:56:50

Memory items scanned : 223
Memory threats detected : 0
Registry items scanned : 5130
Registry threats detected : 0
File items scanned : 57694
File threats detected : 1

Adware.Tracking Cookie
C:\Documents and Settings\me\Cookies\me@ad.yieldmanager[2].txt
log 4....last n most recent 1....
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/21/2009 at 11:57 AM

Application Version : 4.25.1012

Core Rules Database Version : 3719
Trace Rules Database Version: 1693

Scan type : Complete Scan
Total Scan Time : 04:48:24

Memory items scanned : 221
Memory threats detected : 0
Registry items scanned : 5131
Registry threats detected : 0
File items scanned : 93612
File threats detected : 7

Adware.Tracking Cookie
C:\Documents and Settings\me\Cookies\me@content.yieldmanager.edgesuite[1].txt
C:\Documents and Settings\me\Cookies\me@content.yieldmanager[2].txt
C:\Documents and Settings\me\Cookies\me@ad.yieldmanager[1].txt
C:\Documents and Settings\me\Cookies\me@media6degrees[2].txt
C:\Documents and Settings\me\Cookies\me@serving-sys[2].txt
C:\Documents and Settings\me\Cookies\me@bs.serving-sys[2].txt
C:\Documents and Settings\me\Cookies\me@content.yieldmanager[3].txt

#8 Taz71498

Taz71498

  • Members
  • 101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:49 PM

Posted 21 January 2009 - 05:57 PM

Hello rehan2001,

I am having a hard time reading your responses. From what I understand you are using abbreviated language, sorry but could you please use full english for me?

Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop.

Link 1
Link 2
Link 3

Posted Image


Posted Image
--------------------------------------------------------------------

Double click on Combo-Fix.exe & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt along with a HijackThis log so we can continue cleaning the system.

Edited by Taz71498, 21 January 2009 - 05:59 PM.


#9 rehan2001

rehan2001
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 21 January 2009 - 10:08 PM

Admin Edit: Removed unnecessary quote.


yea i hav tried to do it but it wont becuase it asks for progm fro net and wen i click on that many windows start to open

#10 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 35,539 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:10:49 AM

Posted 22 January 2009 - 02:37 PM

Hello rehan2001,

I am having a hard time reading your responses. From what I understand you are using abbreviated language, sorry but could you please use full english for me?


rehan2001, it appears that you are not understanding that you need to communicate in complete English not chat speak. In case you are unaware this is a rule on Bleeping Computer. Let me quote it for you in case there is any doubt.

When posting, please use proper grammar. Refrain from 'text-message' style substitutions of words like 'u' for 'you', and 'ur' for 'your'. This is a multi-national forum, and some of our non-english speaking members must use translation software which is confused by abbreviations. Most of our volunteer members are very busy helping as many people as they can, and a post that is hard to read will often be overlooked.


You may want to take a look at our rules as a refresher.

I have also edited and deleted the unnecessary and repeated use of quotes of the previous post references. All you need to do is click the reply button and enter the information. Only quote when it might be out of sequence, or when addressing just a portion of a previous post.

Following the rules and guidelines will enable us to better help you with your issues. Thank you for understanding in these matters..

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#11 rehan2001

rehan2001
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 22 January 2009 - 09:26 PM

ok i have got your point and i will take care of this aspect while conversating next time...now as i told you that as soon as i down load combo fix and i double click it it asks for a program to open it and when i click to find the appropriate program from net many windows start opening..tell me what to do now

#12 Taz71498

Taz71498

  • Members
  • 101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:49 PM

Posted 23 January 2009 - 10:22 AM

The first thing I want to ask about that is did you rename combofix before downloading?

#13 rehan2001

rehan2001
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 23 January 2009 - 11:37 AM

yes i did rename it but it does not support the content and same thing happens

#14 Taz71498

Taz71498

  • Members
  • 101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:49 PM

Posted 24 January 2009 - 11:02 AM

I would like to see if Regedit works for you.

Can you go to Start>Run and type:
regedit

Tell me if regedit works for you. Don't do anything in it, just let me know if it opens.

#15 Taz71498

Taz71498

  • Members
  • 101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:49 PM

Posted 25 January 2009 - 07:38 PM

While I await your response from my last question, I would also like you to back-up your registry if possible:

Go to this link and download ERUNT:

http://www.snapfiles.com/get/erunt.html

Install the program and create the backup. Remember where you have your backup if you move it to a place other than the default setting.

Also, what are your D,E,F and G drives?

I know you had asked for a solution other than reformatting but I again am going to suggest that it is your best option here.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users