Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Operating Memory Trojan Infection


  • This topic is locked This topic is locked
2 replies to this topic

#1 Gornot

Gornot

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Location:Belgrade
  • Local time:09:28 PM

Posted 03 August 2009 - 11:35 AM

Hi,
Back in June I switched from Avast Home Edition 4.8 to ESET NOD32 Antivirus 4 and immediately noticed a pop-up after the reboot:
"Operating memory - Win32/Rootkit.Agent.ODG trojan - unable to clean"
I ignored this because I had absolutely no problems with my OS at all, except that strange message... But after a while I also realised that Nero7 doesn't recognize my CD/DVD drives. After some time I installed Windows7 RC to give it a try and used the same antivirus (NOD32). The first thing I noticed was that the same pop-up doesn't show up at all, NOD32 didn't report an infection of the operating memory, and Nero7 was working fine (although I didn't try burning a disc).
After trying out the RC I switched back to Windows XP because my PC configuration is quite old (bought it in 2004), I seem to have a problem with my motherboard and it's not working correctly, and I couldn't use certain programs I used on XP.
After switching back to XP (exactly 3 days ago), and knowing that I had a problem with a Trojan, I installed NOD32 again even before installing any drivers. Yet, right after the next boot, the message saying that I'm infected appeared again. Nero7 still diesn't recognize my CD/DVD drives, but apart from that, everything seems to work just fine. Occasional WinAmp crashes and IE7 freezes are happening a bit more often than before, but everything else is in working order. I tried using CMDiskCleaner for scanning the registry and removing junk files from my HDD, but that didn't solve it. Google searches led me to trying out Malwarebytes' Anti-Malware but it didn't work either.

I am curious about this pesky trojan and I'm wondering if it's somehow connected to the fact that Nero7 doesn't recognize my DVD drive (I cannot burn any kind of discs but I can read and rip AudioCDs, watch DVDs etc.)
I have been looking for a long time (even when I was running Windows7 RC) for a solution to this problem, but since I saw that the help provided may be different for each PC I took an advice from one of the helpers from this forum and decided to post my own thread.


DDS Log:

DDS (Ver_09-07-30.01) - NTFSx86
Run by Gornot at 20:41:06,34 on pon 03.08.2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1250.381.1033.18.1023.599 [GMT 2:00]

AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
svchost.exe
C:\Program Files\Vista Rainbar\Rainmeter.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\mIRC\mirc.exe
C:\Program Files\Last.fm\LastFM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Programi\Security Tools\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/ig?hl=en&source=iglk
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Vista Rainbar] c:\program files\vista rainbar\Rainmeter.exe
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [NVMixerTray] "c:\program files\nvidia corporation\nvmixer\NVMixerTray.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [PAC7302_Monitor] c:\windows\pixart\pac7302\Monitor.exe
mRun: [WinFast Schedule] c:\program files\winfast\wftvfm\WFWIZ.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [Startup Cleaner] c:\program files\cm data software\cm diskcleaner\Startup Cleaner.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Notify: WBSrv - c:\program files\stardock\object desktop\windowblinds\wbsrv.dll
AppInit_DLLs: wbsys.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\gornot\applic~1\mozilla\firefox\profiles\bu46da7r.default\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");

============= SERVICES / DRIVERS ===============

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-3-19 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2009-3-19 93848]
R2 BT848;WinFast TV2000 XP WDM Video Capture;c:\windows\system32\drivers\wf2kvcap.sys [2009-8-1 75925]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-3-19 731840]
R2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;c:\windows\system32\drivers\wf2ktunr.sys [2009-8-1 36583]
R2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;c:\windows\system32\drivers\wf2kXbar.sys [2009-8-1 10005]
R3 PAC7302;Look 317;c:\windows\system32\drivers\PAC7302.SYS [2007-6-14 457856]
R3 WFIOCTL;WFIOCTL;c:\program files\winfast\wftvfm\WFIOCTL.sys [2009-8-1 9510]

=============== Created Last 30 ================

2009-08-03 18:49 <DIR> --d----- c:\program files\Trend Micro
2009-08-03 18:28 30,512 a------- c:\windows\system32\mdimon.dll
2009-08-03 18:24 <DIR> --d----- c:\windows\SHELLNEW
2009-08-03 16:33 <DIR> --d----- c:\program files\THQ
2009-08-03 16:18 98,304 a------- c:\windows\system32\CmdLineExt.dll
2009-08-03 15:17 <DIR> --d----- c:\windows\vbSkinner
2009-08-03 15:15 737,280 a------- c:\windows\iun6002.exe
2009-08-03 15:15 <DIR> --d----- c:\program files\CM Data Software
2009-08-03 15:03 <DIR> --d----- c:\docume~1\gornot\applic~1\Malwarebytes
2009-08-03 15:03 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-08-02 22:48 268,648 a------- c:\windows\system32\mucltui.dll
2009-08-02 22:48 208,744 a------- c:\windows\system32\muweb.dll
2009-08-02 22:48 27,496 a------- c:\windows\system32\mucltui.dll.mui
2009-08-01 21:53 49 a------- c:\windows\NeroDigital.ini
2009-08-01 21:12 45,056 a------- c:\windows\system32\WNASPI32.DLL
2009-08-01 21:12 16,877 a------- c:\windows\system32\drivers\ASPI32.SYS
2009-08-01 21:12 5,600 a------- c:\windows\system\WINASPI.DLL
2009-08-01 21:12 4,672 a------- c:\windows\system\WOWPOST.EXE
2009-08-01 21:09 <DIR> --d----- C:\adaptec
2009-08-01 20:49 <DIR> --d----- c:\program files\Nero
2009-08-01 20:49 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Nero
2009-08-01 20:13 <DIR> --d----- c:\program files\MSXML 4.0
2009-08-01 20:10 <DIR> --d----- c:\windows\system32\appmgmt
2009-08-01 20:10 1,414,440 a------- c:\windows\system32\ShellManager310E2D762.dll
2009-08-01 20:10 774,144 a------- c:\windows\system32\NEROINSTAEC43759.DB
2009-08-01 19:58 266,360 a------- c:\windows\system32\TweakUI.exe
2009-08-01 19:58 160,217 a------- c:\windows\system32\PowerToysLicense.rtf
2009-08-01 18:29 225,280 a------- c:\windows\system32\rewire.dll
2009-08-01 18:29 <DIR> --d----- c:\program files\VstPlugins
2009-08-01 18:29 1,294,336 a------- c:\windows\system32\vorbis.acm
2009-08-01 18:29 <DIR> --d----- c:\program files\Outsim
2009-08-01 18:28 <DIR> --d----- c:\program files\Image-Line
2009-08-01 16:59 <DIR> --dsh--- c:\documents and settings\gornot\IECompatCache
2009-08-01 16:58 <DIR> --dsh--- c:\documents and settings\gornot\PrivacIE
2009-08-01 16:54 <DIR> --d----- c:\documents and settings\gornot\Tracing
2009-08-01 16:53 <DIR> --d----- c:\program files\Microsoft
2009-08-01 16:53 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-08-01 16:33 <DIR> --d----- c:\program files\common files\Windows Live
2009-08-01 16:30 <DIR> --dsh--- c:\documents and settings\gornot\IETldCache
2009-08-01 16:19 118 a------- c:\windows\system32\MRT.INI
2009-08-01 16:17 <DIR> --d----- c:\program files\mIRC
2009-08-01 16:17 <DIR> --d----- c:\docume~1\gornot\applic~1\mIRC
2009-08-01 16:14 4,444 a------- c:\windows\system32\pid.PNF
2009-08-01 16:13 <DIR> --d----- c:\program files\uTorrent
2009-08-01 16:12 <DIR> --d----- c:\docume~1\gornot\applic~1\uTorrent
2009-08-01 16:12 57,600 a------- c:\windows\system32\drivers\redbook.sys
2009-08-01 16:12 6,557,408 ac------ c:\windows\system32\dllcache\nv4_mini.sys
2009-08-01 16:12 6,557,408 a------- c:\windows\system32\drivers\nv4_mini.sys
2009-08-01 16:12 6,108,928 a------- c:\windows\system32\nv4_disp.dll
2009-08-01 16:11 74,240 a------- c:\windows\system32\usbui.dll
2009-08-01 16:11 6,400 a------- c:\windows\system32\drivers\enum1394.sys
2009-08-01 16:11 <DIR> --d----- c:\docume~1\gornot\applic~1\Foxit
2009-08-01 16:11 <DIR> --d----- c:\program files\Foxit Software
2009-08-01 16:10 <DIR> --d----- c:\program files\common files\ODBC
2009-08-01 16:10 <DIR> --d----- c:\program files\common files\SpeechEngines
2009-08-01 16:09 <DIR> --d--r-- c:\documents and settings\all users\Documents
2009-08-01 16:09 <DIR> --d----- c:\program files\Windows Media Connect 2
2009-08-01 16:08 <DIR> --d----- C:\Documents and Settings
2009-08-01 16:07 261 a------- c:\windows\system32\$winnt$.inf
2009-08-01 16:07 <DIR> --d----- c:\windows\system32\LogFiles
2009-08-01 16:06 272,128 -c------ c:\windows\system32\dllcache\bthport.sys
2009-08-01 16:06 272,128 -------- c:\windows\system32\drivers\bthport.sys
2009-08-01 16:06 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Last.fm
2009-08-01 16:05 <DIR> --d----- c:\program files\Last.fm
2009-08-01 16:04 2,145,280 -c------ c:\windows\system32\dllcache\ntkrnlmp.exe
2009-08-01 16:04 2,189,056 -c------ c:\windows\system32\dllcache\ntoskrnl.exe
2009-08-01 16:04 2,023,936 -c------ c:\windows\system32\dllcache\ntkrpamp.exe
2009-08-01 15:31 <DIR> --d----- c:\program files\Vista Rainbar
2009-08-01 15:28 <DIR> --d----- c:\program files\common files\Stardock
2009-08-01 15:19 <DIR> --d----- c:\program files\Stardock
2009-08-01 15:18 <DIR> --d----- c:\docume~1\alluse~1\applic~1\DAEMON Tools Pro
2009-08-01 15:18 <DIR> --d----- c:\docume~1\gornot\applic~1\DAEMON Tools Pro
2009-08-01 15:17 <DIR> --d----- c:\program files\DAEMON Tools Pro
2009-08-01 15:14 <DIR> --d----- c:\program files\K-Lite Codec Pack
2009-08-01 15:08 <DIR> --d----- c:\program files\Ulead Systems
2009-08-01 15:08 <DIR> --d----- c:\program files\common files\Ulead Systems
2009-08-01 15:08 <DIR> --d----- c:\program files\WinFast
2009-08-01 15:03 <DIR> --d----- c:\documents and settings\gornot\WINDOWS
2009-08-01 14:58 <DIR> --d----- c:\program files\common files\PAC7302
2009-08-01 14:57 <DIR> --d----- c:\program files\KYE
2009-08-01 14:45 <DIR> --d----- c:\program files\NVIDIA Corporation
2009-08-01 14:45 <DIR> --d----- c:\program files\common files\NVIDIA Shared
2009-08-01 14:40 <DIR> --d----- c:\program files\ESET
2009-08-01 14:22 <DIR> --dsh--- c:\documents and settings\all users\DRM
2009-08-01 14:21 <DIR> --d-h--- c:\program files\WindowsUpdate
2009-08-01 14:20 <DIR> --d----- c:\program files\common files\MSSoap
2009-08-01 14:18 <DIR> --d----- c:\program files\Online Services
2009-08-01 14:18 <DIR> --d----- c:\program files\Messenger
2009-08-01 14:18 <DIR> --d----- c:\program files\MSN Gaming Zone
2009-08-01 14:17 <DIR> --d----- c:\program files\Windows NT

==================== Find3M ====================

2009-08-02 23:52 86,327 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2009-08-01 15:45 410,984 a------- c:\windows\system32\deploytk.dll
2009-08-01 15:16 685,816 a------- c:\windows\system32\drivers\sptd.sys
2009-08-01 14:18 21,640 a------- c:\windows\system32\emptyregdb.dat
2009-06-29 18:12 827,392 a------- c:\windows\system32\wininet.dll
2009-06-29 18:12 78,336 a------- c:\windows\system32\ieencode.dll
2009-06-29 18:12 17,408 a------- c:\windows\system32\corpol.dll
2009-06-16 16:36 119,808 a------- c:\windows\system32\t2embed.dll
2009-06-16 16:36 81,920 a------- c:\windows\system32\fontsub.dll
2009-06-03 21:09 1,291,264 a------- c:\windows\system32\quartz.dll
2009-05-07 17:32 345,600 a------- c:\windows\system32\localspl.dll

============= FINISH: 20:44:13,64 ===============

Edited by Gornot, 03 August 2009 - 01:47 PM.


BC AdBot (Login to Remove)

 


#2 Gornot

Gornot
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Location:Belgrade
  • Local time:09:28 PM

Posted 08 August 2009 - 02:20 AM

Since patience is not my virtue, I downloaded ComboFix and ran a scan... It found a bunch of files in the system32 folder:
2 .dll files
2 .dat files
1 .sys file

all starting with "kungs" and continuing with just random letters. ComboFix deleted them and after rebooting, the problem was gone. Also, Nero7 can now detect my CD/DVD drives and I can burn discs without any problems.

Consider this as feedback, since "you get overwhelmed at times bla bla bla and nobody is ignored"... The fact that you mention about a thousand times that ComboFix should only be run by professionals etc. made me open the topic in the first place, but there was nothing that could go wrong since I couldn't actually DO anything except double-cliking the .exe file.
So, yeah, thanks for nothing.

#3 Billy O'Neal

Billy O'Neal

    Visual C++ STL Maintainer


  • Malware Response Team
  • 12,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Redmond, Washington
  • Local time:12:28 PM

Posted 09 August 2009 - 12:33 AM

Due to lack of feedback, this topic has been closed. Everyone, please start a new topic.
Twitter - My statements do not establish the official position of Microsoft Corporation, and are my own personal opinion. (But you already knew that, right?)
Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users