Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected! Advanced VirusRemover 2009 [Computer 2]


  • This topic is locked This topic is locked
14 replies to this topic

#1 a9642

a9642

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:03:15 PM

Posted 04 September 2009 - 06:03 PM

I have a laptop which has been infected with Advanced VirusRemover 2009. I'm locked out of everything on my computer, including the Task Manager, System Restore, and even Notepad. I can't run DDS, but I can run RootRepeal, and I'll post the report below. I need this laptop for work, so please help as soon as you can.

Edit: As someone has noted in the title of this post, this is the second computer to be infected with this malware. We have six computers on a home network, and three of them are used for business, one of which (this laptop) has now become infected. I'm afraid that it may spread to the others if I don't take action. What should I do?


ROOTREPEAL AD, 2007-2009
==================================================
Scan Start Time: 2009/09/04 18:31
Program Version: Version 1.3.5.0
Windows Version: Windows XP SP1
==================================================

Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xF0571000 Size: 90112 File Visible: No Signed: -
Status: -

Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xF983C000 Size: 8192 File Visible: No Signed: -
Status: -

Name: rootrepeal.sys
Image Path: C:\WINDOWS\System32\drivers\rootrepeal.sys
Address: 0xEFDA7000 Size: 49152 File Visible: No Signed: -
Status: -

Name: SKYNEThpyymbnm.sys
Image Path: C:\WINDOWS\system32\drivers\SKYNEThpyymbnm.sys
Address: 0xF0B06000 Size: 151552 File Visible: - Signed: -
Status: Hidden from the Windows API!

Name: srescan.sys
Image Path: srescan.sys
Address: 0xF9128000 Size: 81920 File Visible: No Signed: -
Status: -

Hidden/Locked Files
-------------------
Path: C:\WINDOWS\system32\SKYNETdibitlwl.dll
Status: Invisible to the Windows API!

Path: C:\WINDOWS\system32\SKYNETkgmhrnvt.dll
Status: Invisible to the Windows API!

Path: C:\WINDOWS\system32\SKYNETlog.dat
Status: Invisible to the Windows API!

Path: C:\WINDOWS\system32\SKYNETnnvmnqqo.dat
Status: Invisible to the Windows API!

Path: C:\WINDOWS\system32\SKYNETowbmuelv.dat
Status: Invisible to the Windows API!

Path: C:\WINDOWS\Temp\SKYNETvtjwfoxxno.tmp
Status: Invisible to the Windows API!

Path: c:\windows\temp\zlt01d0d.tmp
Status: Allocation size mismatch (API: 256, Raw: 0)

Path: C:\WINDOWS\system32\drivers\SKYNEThpyymbnm.sys
Status: Invisible to the Windows API!

Path: C:\Program Files\Microsoft Games\Age of Empires II\SOUND\scenario\b6j.mp3
Status: Locked to the Windows API!

Path: C:\Program Files\Microsoft Games\Age of Empires II\SOUND\scenario\b6k.mp3
Status: Locked to the Windows API!

Path: C:\Program Files\Microsoft Games\Age of Empires II\SOUND\scenario\b6l.mp3
Status: Locked to the Windows API!

Path: C:\Program Files\Microsoft Games\Age of Empires II\SOUND\scenario\b6m.mp3
Status: Locked to the Windows API!

Stealth Objects
-------------------
Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: winlogon.exe (PID: 668) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: services.exe (PID: 712) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: lsass.exe (PID: 724) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETdibitlwl.dll]
Process: svchost.exe (PID: 880) Address: 0x005d0000 Size: 53248

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: svchost.exe (PID: 880) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: svchost.exe (PID: 944) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: svchost.exe (PID: 1092) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: svchost.exe (PID: 1132) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: vsmon.exe (PID: 1176) Address: 0x003d0000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: spoolsv.exe (PID: 1364) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: svchost.exe (PID: 1548) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: wdfmgr.exe (PID: 1628) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: smss.exe (PID: 1936) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: Explorer.EXE (PID: 2016) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: SynTPLpr.exe (PID: 1016) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: SynTPEnh.exe (PID: 1068) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: hkcmd.exe (PID: 1112) Address: 0x00880000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: AirPlusCFG.exe (PID: 1476) Address: 0x003d0000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: WZCSLDR.exe (PID: 1588) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: zlclient.exe (PID: 760) Address: 0x00c40000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: winupdate.exe (PID: 1704) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: wuauclt.exe (PID: 2268) Address: 0x10000000 Size: 32768

Object: Hidden Module [Name: SKYNETkgmhrnvt.dll]
Process: RootRepeal.exe (PID: 2508) Address: 0x10000000 Size: 32768

Hidden Services
-------------------
Service Name: SKYNETrcrivint
Image Path: C:\WINDOWS\system32\drivers\SKYNEThpyymbnm.sys

Shadow SSDT
-------------------
#: 460 Function Name: NtUserMessageCall
Status: Hooked by "C:\WINDOWS\System32\vsdatant.sys" at address 0xf0762250

#: 475 Function Name: NtUserPostMessage
Status: Hooked by "C:\WINDOWS\System32\vsdatant.sys" at address 0xf07622e0

#: 476 Function Name: NtUserPostThreadMessage
Status: Hooked by "C:\WINDOWS\System32\vsdatant.sys" at address 0xf0762360

#: 502 Function Name: NtUserSendInput
Status: Hooked by "C:\WINDOWS\System32\vsdatant.sys" at address 0xf0762520

==EOF==


-----------------------------------------------------------------------------------------------
:(

I spent upwards of eight hours last night trying to address this myself. Because I was denied admin rights on my own computer I tried to boot in safe mode and use the admin account, but the admin account had been locked. I had to use a tiny linux boot cd I found online with a program to unlock user accounts and change passwords. Once I got into the admin account I discovered that it wasn't an admin problem, but a Group Policy issue... Group Policy? What the hell is that!? That's where most of my night was spent, reading up on Group Policy and trying to see if I could edit it myself, but I'm lost. I tried deleting the DisableSR keys in my registry, but something puts them back the moment they're deleted. Please help! I REALLY need this computer up and running for work, and I don't know what to do.

Edited by a9642, 04 September 2009 - 07:19 PM.


BC AdBot (Login to Remove)

 


#2 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 21 September 2009 - 07:23 AM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.


Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#3 a9642

a9642
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:03:15 PM

Posted 21 September 2009 - 07:35 AM

The situation with this computer has not changed. Since first running RootRepeal (results in original topic) I have only booted the computer once (I backed up a few files to a USB drive, then shut it down). I cannot run DDS without booting into safe mode, which I understand doesn't give you the info you need (if I am mistaken, please inform me and I'll run the scan in safe mode). In fact, I can't run most programs, including Notepad. When I try to run them, an error dialogue pops up. The error dialogue is simply titled "Error" and all it says is the path to the exe I tried to run.

#4 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 21 September 2009 - 07:45 AM

Hello a9642,
  • Welcome to Bleeping Computer.
  • Sorry for delayed response. Forums have been really busy.
  • My name is fireman4it and I will be helping you with your Malware problem.
  • As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts.
Please take note of some guidelines for this fix:
  • Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.
  • If you do not understand any step(s) provided, please do not hesitate to ask before continuing.
  • Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean".
  • Finally, please reply using the Posted Image button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.
  • I will be analyzing your log. I will get back to you with instructions after it is approved.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#5 a9642

a9642
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:03:15 PM

Posted 21 September 2009 - 08:56 PM

Okay, will do.
Ready when you are. :(

#6 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 23 September 2009 - 05:39 PM

Hello a9642,

1.
One or more of the identified infections is a backdoor trojan.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
When Should I Format, How Should I Reinstall

We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do.

2.
Download Combofix from any of the links below. You must rename it to a9642.scr before saving it. Save it to your desktop.

Link 1
Link 2


Posted Image


Posted Image
--------------------------------------------------------------------

Double click on a9642.scr & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt along with a HijackThis log so we can continue cleaning the system.
*Note:
If you can't get Combofix to run in Normal mode please try running it in safemode
Now reboot into Safe Mode.
This can be done tapping the F8 key as soon as you start your computer
You will be brought to a menu where you can choose to boot into safe mode.
Make sure you choose the option without networking support.
Please see here for additional details.

3.
We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.
  • Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
  • Open Posted Image on your desktop.
  • Click the Posted Image tab.
  • Click the Posted Image button.
  • Check all seven boxes: Posted Image
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the Posted Image button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.
4
Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.

* When done, DDS will open two (2) logs:

1. DDS.txt
2. Attach.txt

Save both reports to your desktop post the contents of the DDS.txt log. Save the other report incase I need to look at it later.



Things to include in your next reply:
Combofix.txt
Rootrepeal log.
DDS.txt
Attach.txt
How is your machine running now?

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#7 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 24 September 2009 - 09:21 PM

Hello.

Are you still there?

If you are please follow the instructions in my previous post.

If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.

Please reply back telling us so. If you don't reply within 5-7 days the topic will need to be closed.

Thanks for understanding :(

With Regards,
fireman4it

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#8 a9642

a9642
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:03:15 PM

Posted 24 September 2009 - 11:22 PM

Sorry for the silence. I'd normally be all over this like noun on a noun, but I had a gig today. I'll be running the scans and posting again tomorrow. Thanks again for helping out.

#9 a9642

a9642
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:03:15 PM

Posted 26 September 2009 - 02:10 AM

I've removed the wireless card, but ComboFix says that it needs access to the internet to download a system recovery tool. I plugged the wireless card back in (and waited a minute so it would be detected) before clicking the OK button, but ComboFix popped up another dialogue saying the files could not be located, and then continued scanning anyway. After a couple minutes it displayed another dialogue and said to write down these files:

C:\WINDOWS\system32\drivers\SKYNEThpyymbnm.sys
C:\WINDOWS\system32\SKYNETdibitlwl.dll
C:\WINDOWS\system32\SKYNETowbmuelv.dat
C:\WINDOWS\system32\SKYNETkgmhrnvt.dll
C:\WINDOWS\system32\SKYNETnnvmnqqo.dat

After it rebooted it opened the same dialogue asking for internet access. I put the network card back in, waited until its LED's came on stable, and then hit okay. It then output a bunch of messages about "Completed Stage_1" all the way up to stage_6A, when it unexpectedly shut down. I booted the system back up, but this time ComboFix didn't autorun, and I don't see a log anywhere. Elsewhere I read that I shouldn't continue with any other steps if I am unsure of something, so I don't want to mess things up by doing the other steps if this first scan didn't run correctly or completely.

This may have been a power issue. This laptop's power supply has a bad connection, and I've had it unexpectedly quit like that in the past. Talk about bad timing, though :/

Edited by a9642, 26 September 2009 - 02:11 AM.


#10 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 26 September 2009 - 09:51 AM

Hello a9642,

There should be a log located at C:Combofix.txt. Will you please see if it is there, if so post it if not go ahead a rerun Combofix. This time make sure you have your wireless card and laptop fully charged. Also please proceed with the other step even if Combofix don't run.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#11 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 27 September 2009 - 12:22 PM

Hello.

Are you still there?

If you are please follow the instructions in my previous post.

If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.

Please reply back telling us so. If you don't reply within 5-7 days the topic will need to be closed.

Thanks for understanding :(

With Regards,
fireman4it

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#12 a9642

a9642
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:03:15 PM

Posted 28 September 2009 - 12:49 AM

I ran the Combo fix as requested but when it was finished it left no document for me in my Documents or on the desktop. As for everything else, they're attached.

Attached Files



#13 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 29 September 2009 - 06:34 PM

Hello a9642,

Please do the following:


Open up the ComboFix log and provide its contents in your next reply:

1. Go to Start -> Run... and in the "Open:" box that opens, copy & paste the following command (the entire blue-colored text):
Notepad C:\ComboFix.txt
NOTE there is a space between "Notepad" and "C:\ComboFix.txt"; the space should be there!
2. Click OK or press Enter.
3. Please provide the entire contents of the Notepad file that opens in your next reply.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#14 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:03:15 PM

Posted 01 October 2009 - 04:48 PM

Hello.

Are you still there?

If you are please follow the instructions in my previous post.

If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.

Please reply back telling us so. If you don't reply within 5-7 days the topic will need to be closed.

Thanks for understanding :(

With Regards,
fireman4it

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#15 htv8

htv8

  • Members
  • 1,694 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:15 PM

Posted 05 October 2009 - 03:57 AM

Due to the lack of feedback, this topic is now closed.
If you need this topic reopened, please PM a staff member and we will reopen it for you (include the address of this thread in your request). This applies to the original topic starter only. Everyone else with similar problems, please start a new topic.
If I have not posted back within 24 hours, feel free to send me a PM with your topic link.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users