Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus/trojan that tricks(?) MB into thinking its deleted


  • This topic is locked This topic is locked
11 replies to this topic

#1 hapless

hapless

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:51 AM

Posted 06 March 2009 - 05:58 PM

Referred here from: http://www.bleepingcomputer.com/forums/t/208470/hkey-local-machinesoftwaremicrosoftwindows-ntcurrentversionwinlogonuserinit-trojanvirus-keeps-coming-up-in-mb-lof/ ~ OB

A few weeks ago i got a problem:

I got a blue screen a few times while I was working, something I've never had happen to me before, and then, all of a sudden, everything went crazy. I had these stupid little pop ups telling me my computer was infected, but the wording was strange, and I was suspicious that they were fake, and then my desktop changed to a big red box telling me Warning! My computer is infected....but then I knew it was definitely fake. I read up on what was happening on the internet, and saw Malwarebytes often cited as a solution, so I downloaded this and ran it in safemode a few times, and that seemed to take care of the problem.

Now, the pop ups and red warning box on my desktop are gone, but every time I run Malwarebytes, it finds two problems and they are always the same:

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\userinit.exe -> Quarantined and deleted successfully.

i posted a thread in the am i infected forum and after running DrWebb and getting this log:

DXwnd.exe;C:\DXwind;Trojan.PWS.Akak.13;Deleted.;
BlazingMs NO DMG CAP launcher2.exe_.MCQ;C:\Program Files\McAfee\McAfee VirusScan\QUARANT;Trojan.Starter.origin;Incurable.Moved.;
npclntax.dll;C:\Program Files\Mozilla Firefox\plugins;Adware.Zango;;
A0132864.exe;C:\System Volume Information\_restore{2999E5FE-5A52-47FD-82AB-04FD720880B6}\RP1211;Trojan.PWS.Akak.13;Deleted.;
pcload.exe;C:\WINDOWS\system32;Trojan.Fakealert.3457;Deleted.;

i was forwarded to this forum here is my DDS log:


DDS (Ver_09-02-01.01) - NTFSx86
Run by Navid at 17:50:38.26 on Fri 03/06/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.511.132 [GMT -5:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Documents and Settings\Navid\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Navid\Desktop\dds.scr

============== Pseudo HJT Report ===============

uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = local
uURLSearchHooks: AIM Toolbar Search Class: {03402f96-3dc7-4285-bc50-9e81fefafe43} - c:\program files\aim toolbar\aimtb.dll
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
mURLSearchHooks: AIM Toolbar Search Class: {03402f96-3dc7-4285-bc50-9e81fefafe43} - c:\program files\aim toolbar\aimtb.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: IeCatch5 Class: {2f364306-aa45-47b5-9f9d-39a8b94e7ef7} - c:\progra~1\flashget\jccatch.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: AIM Toolbar Loader: {b0cda128-b425-4eef-a174-61a11ac5dbf8} - c:\program files\aim toolbar\aimtb.dll
BHO: gFlash Class: {f156768e-81ef-470c-9057-481ba8380dba} - c:\progra~1\flashget\getflash.dll
TB: McAfee VirusScan: {acb1e670-3217-45c4-a021-6b829a8a27cb} - c:\program files\mcafee\mcafee virusscan\VSCShellExtension.dll
TB: FlashGet Bar: {e0e899ab-f487-11d5-8d29-0050ba6940e3} - c:\progra~1\flashget\fgiebar.dll
TB: AIM Toolbar: {61539ecd-cc67-4437-a03c-9aaccbd14326} - c:\program files\aim toolbar\aimtb.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [Aim6] "c:\program files\aim6\aim6.exe" /d locale=en-US ee://aol/imApp
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe"
mRun: [Smapp] c:\program files\analog devices\soundmax\SMTray.exe
mRun: [HP Component Manager] "c:\program files\hp\hpcoretech\hpcmpmgr.exe"
mRun: [RoxioEngineUtility] "c:\program files\common files\roxio shared\system\EngUtil.exe"
mRun: [RoxioAudioCentral] "c:\program files\roxio\easy cd creator 6\audiocentral\RxMon.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
dPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
IE: &AIM Toolbar Search - c:\documents and settings\all users\application data\aim toolbar\ietoolbar\resources\en-us\local\search.html
IE: &Search - ?p=ZCfox000
IE: Download All by FlashGet - c:\program files\flashget\jc_all.htm
IE: Download using FlashGet - c:\program files\flashget\jc_link.htm
IE: {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - c:\progra~1\flashget\flashget.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {0b83c99c-1efa-4259-858f-bcb33e007a5b} - {61539ecd-cc67-4437-a03c-9aaccbd14326} - c:\program files\aim toolbar\aimtb.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: c:\windows\system32\CSLSP.DLL
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1117219076218
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
AppInit_DLLs: aqexlr.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\navid\applic~1\mozilla\firefox\profiles\s4irf1xh.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&query=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/home.php
FF - prefs.js: keyword.URL - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrab&query=
FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll
FF - plugin: c:\documents and settings\navid\local settings\application data\google\update\1.2.141.5\npGoogleOneClick7.dll
FF - plugin: c:\program files\microsoft silverlight\npctrl.1.0.20926.0.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll
FF - plugin: c:\program files\mozilla firefox\plugins\nphclx.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll

============= SERVICES / DRIVERS ===============

R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2008-12-22 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2008-12-22 55024]
R2 AvSynMgr;AVSync Manager;c:\program files\mcafee\mcafee virusscan\Avsynmgr.exe [2002-8-5 196625]
R3 Eacfilt;Eacfilt Miniport;c:\windows\system32\drivers\eacfilt.sys [2006-4-27 24521]
R3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys [2008-11-22 113896]
R3 McShield;McShield;c:\program files\common files\network associates\mcshield\Mcshield.exe [2002-8-5 237663]
R3 NaiFiltr;NaiFiltr;c:\windows\system32\drivers\NaiFiltr.sys [2004-10-5 23296]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2008-12-22 7408]
S3 IPSECEXT;Nortel Extranet Access Protocol;c:\windows\system32\drivers\ipsecw2k.sys [2006-4-27 155184]
S3 maxD20081102;maxD20081102;c:\documents and settings\navid\desktop\ \imax\binary\max20081102.sys [2009-2-25 20224]

=============== Created Last 30 ================

2009-03-05 16:07 --d----- c:\docume~1\alluse~1\applic~1\PMB Files
2009-03-05 16:06 --d----- c:\program files\Pando Networks
2009-03-04 20:41 --d----- c:\documents and settings\navid\DoctorWeb
2009-03-04 17:25 --d----- c:\windows\pss
2009-03-02 00:14 --d----- c:\program files\AviSynth 2.5
2009-02-22 16:32 --d----- c:\docume~1\navid\applic~1\Systenance
2009-02-18 20:41 --d----- c:\program files\Hide Window Hotkey

==================== Find3M ====================

2009-03-04 17:17 1,744 a------- c:\windows\system32\d3d9caps.dat
2009-02-27 17:34 2,180 a------- c:\windows\system32\d3d8caps.dat
2009-01-31 20:04 36,928 a---h--- c:\windows\system32\mlfcache.dat
2009-01-06 02:11 111,616 a------- c:\windows\system32\userinit.exe
2009-01-03 20:06 86,327 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2008-07-14 11:24 23 a------- c:\documents and settings\navid\jagex_runescape_preferences.dat

============= FINISH: 17:51:56.03 ===============





edit:also if it can be any help my problem seems to be very similar to the one in this thread: http://www.bleepingcomputer.com/forums/t/196297/windows-ntcurrentversionwinlogonuserinit-trojanvirus/

Attached Files


Edited by hapless, 06 March 2009 - 06:30 PM.


BC AdBot (Login to Remove)

 


#2 hapless

hapless
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:51 AM

Posted 08 March 2009 - 02:09 PM

woops i installed java so here are the new logs

Attached Files



#3 hapless

hapless
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:51 AM

Posted 11 March 2009 - 07:15 PM

downloaded more stuff

Attached Files



#4 suebaby41

suebaby41

    W.A.M. (Women Against Malware)


  • Malware Response Team
  • 6,248 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:South Carolina, USA
  • Local time:01:51 AM

Posted 19 March 2009 - 09:46 AM

Welcome to the BleepingComputer Forums.

Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. Please download Trend Micro - HijackThis. Do a new scan with Trend Micro - HijackThis and post it in your next reply. Thank you for your patience.

Please see Preparation Guide for use before posting about your potential Malware problem.

If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped.

Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so.

While we are working on your HijackThis log, please:
  • Reply to this thread; do not start another!
  • Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so.
  • Do not run any other tool until instructed to do so!
  • Let me know if any of the links do not work or if any of the tools do not work.
  • Tell me about problems or symptoms that occur during the fix.
  • Do not run any other programs or open any other windows while doing a fix.
  • Ask any questions that you have regarding the fix(es), the infection(s), the performance of your computer, etc.
Thanks.
You don't stop laughing when you get old; you get old when you stop laughing.
A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)
Malware Removal University Masters Graduate

Posted Image
Join The Fight Against Malware
No reply within 5 days will result in your topic being closed. If you need more time, please let me know by posting in this topic so that your topic will not be closed.

#5 hapless

hapless
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:51 AM

Posted 19 March 2009 - 04:59 PM

hey thank you for your help
today i tried to log onto my computer but in both safe mode and regular mode the second it logs me on it loads then goes automatically into that thing that says saving your settings, logging off

i dont know how to get around this

#6 suebaby41

suebaby41

    W.A.M. (Women Against Malware)


  • Malware Response Team
  • 6,248 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:South Carolina, USA
  • Local time:01:51 AM

Posted 20 March 2009 - 06:08 AM

It may be your computer is stuck in a loop after using msconfig.
  • Configure the computer to start from the CD-ROM or DVD-ROM drive. For information about how to do this, see your computer documentation or contact your computer manufacturer.
  • Insert the Windows XP CD-ROM into your CD-ROM or DVD-ROM drive, and then restart your computer.
  • When you receive the "Press any key to boot from CD" message, press a key to start your computer from the Windows XP CD-ROM.
  • When you receive the "Welcome to Setup" message, press R to start the Recovery Console.
  • If you have a dual-boot or multiple-boot computer, select the installation that you have to use from the Recovery Console.
  • When you are prompted, type the administrator password, and then press ENTER (if none was set, leave it blank and press ENTER).
  • At the command prompt, type bootcfg /list, and then press ENTER. The entries in your current Boot.ini file appear on the screen.
  • At the command prompt, type bootcfg /rebuild, and then press ENTER. This command scans the hard disks of the computer for Windows XP, Microsoft Windows 2000, or Microsoft Windows NT installations, and then displays the results. Follow the instructions that appear on the screen to add the Windows installations to the Boot.ini file. For example, follow these steps to add a Windows XP installation to the Boot.ini file:
    • When you receive a message that is similar to the following message:

      Total Identified Windows Installs: 1
      [1] C:\Windows
      Add installation to boot list? Yes/No/All)

    • Press Y then ENTER.
  • When, you receive a message that is similar to the following message:

    Enter Load Identifier

    This is the name of the operating system. Type the name of your operating system, and then press ENTER. The name is either Microsoft Windows XP Professional or Microsoft Windows XP Home Edition.
  • When you receive a message that is similar to the following:

    Enter OS Load options

    • Type /fastdetect, and then press ENTER.
    • Take the CD out of the drive.
    • Type exit then press [b]ENTER.
    • Note: The instructions that appear on your screen may be different, depending on the configuration of your computer.

You don't stop laughing when you get old; you get old when you stop laughing.
A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)
Malware Removal University Masters Graduate

Posted Image
Join The Fight Against Malware
No reply within 5 days will result in your topic being closed. If you need more time, please let me know by posting in this topic so that your topic will not be closed.

#7 hapless

hapless
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:51 AM

Posted 20 March 2009 - 10:25 AM

Hey
I probably wont be able to do taht until sunday because im really bogged down until then

Also i wanted to add that the day before i couldnt log on spybot kept telling me about these registry changes and when i would say deny change spybot would bring up the registry changed pop up again

so yah ill try to post wat happened on sunday

Thanks

#8 suebaby41

suebaby41

    W.A.M. (Women Against Malware)


  • Malware Response Team
  • 6,248 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:South Carolina, USA
  • Local time:01:51 AM

Posted 20 March 2009 - 07:35 PM

If you need more time, please let me know.
You don't stop laughing when you get old; you get old when you stop laughing.
A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)
Malware Removal University Masters Graduate

Posted Image
Join The Fight Against Malware
No reply within 5 days will result in your topic being closed. If you need more time, please let me know by posting in this topic so that your topic will not be closed.

#9 hapless

hapless
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:51 AM

Posted 22 March 2009 - 08:14 PM

hey i did that process but whenever i turn on the computer it says:
please select the operating system to start:

Microsoft windows xp professional
Microsoft windows xp professional

and when i click the first one it says:

windows could not start because of a computer disk hardware configuration problem.
could not read from selected boot disk. check boot path and disk hardware.
please check the Windows documentation about hardware disk configuration and your harware reference manuals for additional information.

when i click the second option it goes on like it did before and when i click my user's icon it loads then saves settings settings and logs off automatically without even showing my desktop icons

#10 suebaby41

suebaby41

    W.A.M. (Women Against Malware)


  • Malware Response Team
  • 6,248 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:South Carolina, USA
  • Local time:01:51 AM

Posted 23 March 2009 - 07:12 AM

today i tried to log onto my computer but in both safe mode and regular mode the second it logs me on it loads then goes automatically into that thing that says saving your settings, logging off

Please post your question(s) regarding inability to log on in BleepingComputer's Computer Forum, Windows XP Home and Professional, where the computer experts may help you. My expertise is dealing with malware and I prefer that you get the help of computer expert(s) in answering your question(s) and/or solving your problem(s). Please include a link to this thread so that the computer experts may see what we have done.
You don't stop laughing when you get old; you get old when you stop laughing.
A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)
Malware Removal University Masters Graduate

Posted Image
Join The Fight Against Malware
No reply within 5 days will result in your topic being closed. If you need more time, please let me know by posting in this topic so that your topic will not be closed.

#11 hapless

hapless
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:51 AM

Posted 23 March 2009 - 03:26 PM

ok thanks i linked to this thread and when that problem is fixed ill message you to see about this problem

Edited by hapless, 23 March 2009 - 03:26 PM.


#12 suebaby41

suebaby41

    W.A.M. (Women Against Malware)


  • Malware Response Team
  • 6,248 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:South Carolina, USA
  • Local time:01:51 AM

Posted 23 March 2009 - 04:53 PM

I will close this thread. When you are able to log on and do a HijackThis log, please start a new thread. Thanks.
You don't stop laughing when you get old; you get old when you stop laughing.
A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)
Malware Removal University Masters Graduate

Posted Image
Join The Fight Against Malware
No reply within 5 days will result in your topic being closed. If you need more time, please let me know by posting in this topic so that your topic will not be closed.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users