Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with Smaltroj.JVTG


  • This topic is locked This topic is locked
4 replies to this topic

#1 JensP

JensP

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Norway
  • Local time:01:45 PM

Posted 06 June 2009 - 06:37 AM

Hi my Norman antivirus reports a trojan infection but are not able to removethe file (c:\WINDOWS\system32\nhwpppbv.dll) it says that it is a W32/Smalltroj.JVTG

Have tried to use the Spyboot ver 1.6.2 with the latest updates. It finds the files, report a removal but are still there after a reboot.

Hope you can help me.

Enclosed is the DDS log:

DDS (Ver_09-05-14.01) - NTFSx86
Run by Roar Aas at 13:27:52,21 on 06.06.2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.47.1044.18.1012.402 [GMT 2:00]

AV: Norman Security Suite *On-access scanning enabled* (Updated) {EB9EFB40-AE72-4C43-B204-0FCD0E92D5F1}
FW: Norman Security Suite *enabled* {83B29CE9-9DE2-2CB5-9AB3-780D70FF12B0}

============== Running Processes ===============

C:\Programfiler\Norman\Npm\Bin\Elogsvc.exe
C:\Programfiler\Norman\Ngs\Bin\Nprosec.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Programfiler\Norman\Npm\Bin\Zanda.exe
C:\Programfiler\Norman\npm\bin\nvoy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Programfiler\Norman\npf\bin\npfsvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k bthsvcs
C:\Programfiler\WIDCOMM\Bluetooth-programvare\bin\btwdins.exe
C:\Programfiler\Fellesfiler\InterVideo\RegMgr\iviRegMgr.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programfiler\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Programfiler\Norman\Npm\Bin\scheduler.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programfiler\Norman\Npm\Bin\ZLH.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programfiler\Spybot - Search & Destroy\TeaTimer.exe
C:\Programfiler\Norman\Npm\Bin\Njeeves.exe
C:\Programfiler\Norman\npc\bin\npcsvc32.exe
C:\Programfiler\WIDCOMM\Bluetooth-programvare\BTTray.exe
C:\Programfiler\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Programfiler\Norman\nse\bin\NSESVC.EXE
C:\Programfiler\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programfiler\Norman\npc\bin\nuaa.exe
C:\Programfiler\Norman\Nvc\Bin\nvcoas.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\System32\alg.exe
C:\Programfiler\Norman\Nvc\Bin\Nip.exe
C:\Programfiler\Norman\Nvc\Bin\cclaw.exe
C:\DOCUME~1\ROARAA~1\LOKALE~1\Temp\RtkBtMnt.exe
C:\Programfiler\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\DOCUME~1\ROARAA~1\LOKALE~1\Temp\Temporary Internet Files\Content.IE5\DSGLQY48\dds[1].scr
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.yasp.no/
mDefault_Page_URL = hxxp://global.acer.com
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0414&s=0&o=xph&d=1108&m=aoa150
uInternet Settings,ProxyServer = 212.125.176.132:8080
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Påloggingshjelp for Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\programfiler\fellesfiler\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\programfiler\java\jre6\bin\jp2ssv.dll
BHO: : {faa986e7-dbd3-4f01-a4d1-2cdb97e6db18} - c:\windows\system32\iumugpv.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [MsnMsgr] "c:\programfiler\windows live\messenger\MsnMsgr.Exe" /background
uRun: [SpybotSD TeaTimer] c:\programfiler\spybot - search & destroy\TeaTimer.exe
mRun: [LaunchApp] Alaunch
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [AzMixerSel] c:\programfiler\realtek\audio\installshield\AzMixerSel.exe
mRun: [SynTPEnh] c:\programfiler\synaptics\syntp\SynTPEnh.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [LManager] c:\progra~1\launch~1\QtZgAcer.EXE
mRun: [PLFSetL] c:\windows\PLFSetL.exe
mRun: [snp2uvc] c:\windows\vsnp2uvc.exe
mRun: [eRecoveryService] c:\acer\empowering technology\erecovery\eRAgent.exe
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [Norman ZANDA] "c:\programfiler\norman\npm\bin\ZLH.EXE" /LOAD /SPLASH
mRun: [NPCTray] c:\programfiler\norman\npc\bin\npc_tray.exe /LOAD
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\start-~1\progra~1\oppstart\bttray.lnk - c:\programfiler\widcomm\bluetooth-programvare\BTTray.exe
StartupFolder: c:\docume~1\alluse~1\start-~1\progra~1\oppstart\interv~1.lnk - c:\programfiler\intervideo\common\bin\WinCinemaMgr.exe
StartupFolder: c:\docume~1\alluse~1\start-~1\progra~1\oppstart\logite~1.lnk - c:\programfiler\logitech\desktop messenger\8876480\program\LogitechDesktopMessenger.exe
IE: E&ksporter til Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Send til &Bluetooth - c:\programfiler\widcomm\bluetooth-programvare\btsendto_ie_ctx.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programfiler\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: c:\programfiler\norman\npc\bin\nlf.dll
DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} - hxxp://www.tele2mail.com/static/apps/utils/AccountHelper.cab
DPF: {C237A80A-4C55-4C68-BAA9-CBE4408D12B2} - hxxp://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
DPF: {E6ACF817-0A85-4EBE-9F0A-096C6488CFEA} - hxxp://eu.ntrsupport.com/inquiero/mod/setup/ntractivex118_28.cab
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\programfiler\logitech\desktop messenger\8876480\program\GAPlugProtocol-8876480.dll
Notify: 28db0366579 - c:\windows\system32\dmutil32.dll
Notify: igfxcui - igfxdev.dll
Notify: vpihnetg - iumugpv.dll
AppInit_DLLs: c:\progra~1\google\google~1\goec62~1.dll,c:\windows\system32\dmutil32.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R0 jvmvqwao;jvmvqwao;c:\windows\system32\drivers\jvmvqwao.sys [2008-4-16 23424]
R0 NDIS_RD;Norman Firewall NDIS driver;c:\windows\system32\drivers\ndis_rd.sys [2008-11-10 79752]
R1 NGS;Norman General Security Driver;c:\programfiler\norman\ngs\bin\ngs.sys [2009-3-2 22712]
R1 NPROSEC;Norman Security driver;c:\programfiler\norman\ngs\bin\nprosec.sys [2008-11-10 53816]
R1 TDI_RD;Norman Firewall TDI driver;c:\windows\system32\drivers\tdi_rd.sys [2008-11-10 74624]
R2 dseieegs; for VolumbehandlingMonitor;c:\windows\system32\svchost.exe -k netsvcs [2008-4-16 14336]
R2 Ndiskio;Ndiskio;c:\programfiler\norman\nse\bin\Ndiskio.sys [2008-11-10 20448]
R2 Norman ZANDA;Norman ZANDA;c:\programfiler\norman\npm\bin\Zanda.exe [2008-4-24 408696]
R2 NPFSvc32;Norman Personal Firewall Service;c:\programfiler\norman\npf\bin\npfsvc32.exe [2008-11-10 597104]
R2 NPROSECSVC;Norman Security service;c:\programfiler\norman\ngs\bin\nprosec.exe [2008-11-10 121912]
R2 NVOY;Norman Resource Provider;c:\programfiler\norman\npm\bin\nvoy.exe [2008-11-10 126008]
R3 NPC;Norman Parental Control;c:\programfiler\norman\npc\bin\npcsvc32.exe [2008-11-10 416880]
R3 nsesvc;Norman Scanner Engine Service;c:\programfiler\norman\nse\bin\Nsesvc.exe [2009-5-27 310328]
R3 NUAA;Norman User Activity Agent;c:\programfiler\norman\npc\bin\nuaa.exe [2008-11-10 121912]
R3 NvcMFlt;NvcMFlt;c:\windows\system32\drivers\nvcw32mf.sys [2008-11-10 19512]
R3 nvcoas;Norman Virus Control on-access component;c:\programfiler\norman\nvc\bin\Nvcoas.exe [2009-2-20 195640]
R3 Scheduler;Norman Scheduler Service;c:\programfiler\norman\npm\bin\scheduler.exe [2009-5-12 130104]
S3 NVCScheduler;Norman Virus Control Scheduler;"c:\programfiler\norman\npm\bin\nvcsched.exe" --> c:\programfiler\norman\npm\bin\Nvcsched.exe [?]

=============== Created Last 30 ================

2009-06-06 10:54 <DIR> --d----- c:\windows\SxsCaPendDel
2009-06-05 08:07 289 a------- c:\windows\wininit.ini
2009-06-03 17:11 <DIR> --d----- c:\programfiler\Spybot - Search & Destroy
2009-06-03 17:11 <DIR> --d----- c:\docume~1\alluse~1\progra~1\Spybot - Search & Destroy
2009-05-27 18:11 <DIR> --dsh--- c:\windows\system32\SystemService32
2009-05-15 22:44 <DIR> --d----- c:\docume~1\roaraa~1\progra~1\ntr
2009-05-11 21:39 0 a------- c:\windows\system32\4.tmp
2009-05-09 21:12 0 a------- c:\windows\system32\2E.tmp

==================== Find3M ====================

2009-06-06 13:24 406,754 a------- c:\windows\system32\perfh014.dat
2009-06-06 13:24 71,936 a------- c:\windows\system32\perfc014.dat
2009-06-04 11:54 1,208 a------- c:\docume~1\roaraa~1\progra~1\wklnhst.dat
2009-03-09 05:19 410,984 a------- c:\windows\system32\deploytk.dll
2008-11-07 23:03 32,768 a--sh--- c:\windows\system32\config\systemprofile\lokale innstillinger\logg\history.ie5\mshist012008110720081108\index.dat
2008-11-07 23:03 16,384 a--sh--- c:\windows\temp\cookies\index.dat
2008-11-07 23:03 16,384 a--sh--- c:\windows\temp\history\history.ie5\index.dat
2008-11-07 23:03 16,384 a--sh--- c:\windows\temp\temporary internet files\content.ie5\index.dat

============= FINISH: 13:29:22,50 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:06:45 AM

Posted 06 June 2009 - 12:34 PM

Hello! :thumbup2:
My name is Sam and I will be helping you.

In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.


Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2
  • Make sure you are connected to the Internet.
  • Double-click on Download_mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.




We need to create an OTListIt2 Report
  • Please download OTListIt2 from here
  • Save it to your desktop.
  • Double click on the icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Push the "Run Scan" button.
  • The scan should take just a few minutes.
  • Copy the log that opens up and paste it back here in your next reply.

Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#3 JensP

JensP
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Norway
  • Local time:01:45 PM

Posted 11 June 2009 - 01:25 AM

Hi Sam,
Tanks for your help on this issue.
I have installed the Malwarebytes antimalware, updated it and here are the log from the first scan.
Malwarebytes' Anti-Malware 1.37
Database version: 2259
Windows 5.1.2600 Service Pack 3

10.06.2009 21:46:37
mbam-log-2009-06-10 (21-46-37).txt

Scan type: Quick Scan
Objects scanned: 88400
Time elapsed: 8 minute(s), 42 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 8
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 17

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\system32\iumugpv.dll (Trojan.Vundo.H) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{faa986e7-dbd3-4f01-a4d1-2cdb97e6db18} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vpihnetg (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{faa986e7-dbd3-4f01-a4d1-2cdb97e6db18} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dseieegs (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\dseieegs (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dseieegs (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{faa986e7-dbd3-4f01-a4d1-2cdb97e6db18} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jvmvqwao (Rootkit.Sentinel) -> Delete on reboot.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\WINDOWS\system32\SystemService32 (Worm.Archive) -> Quarantined and deleted successfully.

Files Infected:
c:\WINDOWS\system32\iumugpv.dll (Trojan.Vundo.H) -> Delete on reboot.
c:\WINDOWS\system32\fhrqklj.dll (Trojan.Vundo.H) -> Delete on reboot.
c:\WINDOWS\system32\nhwpppbv.dll (Trojan.Agent) -> Delete on reboot.
c:\WINDOWS\system32\systemservice32\149.crack.zip (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\149.crack.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\150.keygen.zip (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\150.keygen.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\151.serial.zip (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\151.serial.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\152.setup.zip (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\152.setup.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\153.music.au.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\154.music.mp3.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\155.music.wma.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemservice32\156.music.snd.kwd (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\4.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\jvmvqwao.sys (Rootkit.Sentinel) -> Delete on reboot.

I scanned once more and got this log.
Malwarebytes' Anti-Malware 1.37
Database version: 2259
Windows 5.1.2600 Service Pack 3

11.06.2009 08:13:46
mbam-log-2009-06-11 (08-13-46).txt

Scan type: Quick Scan
Objects scanned: 88213
Time elapsed: 5 minute(s), 44 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Then i tried to download OTListIt2 but the link you gave me was dead.

I didnt dare to download it from elsewere.

best regards
Jens

#4 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:06:45 AM

Posted 11 June 2009 - 10:16 AM

Looks good! Here is the updated link for OTL.

http://oldtimer.geekstogo.com/OTL.exe
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#5 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:06:45 AM

Posted 23 June 2009 - 02:10 PM

As there has been no response, this thread will now be closed.

If you need this topic reopened, please contact a member of the HJT Team and we will reopen it for you.
Include the address of this thread in your request.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users