Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HELP!! Win32/Kryptik.BAT Trojan CANT REMOVE!!!!!!!, Trojan Dectated My NOD32 Cant remove


  • This topic is locked This topic is locked
2 replies to this topic

#1 nathan2009

nathan2009

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:15 AM

Posted 01 December 2009 - 11:50 AM

Referred from here: http://www.bleepingcomputer.com/forums/t/274535/help-win32kryptikbat-trojan-cant-remove/ ~ OB

Hi

I have been in the the process where one of the team had tried to help me remove the virus but he refered me to this as he cant do it.

Nod32 keeps poping up saying i have Win32/Kryptik.BAT trojan. When scanned it cant be found. I have attach the image of what it says on NOD32 quarnatined. Also i have attched the "ATTACH.EXE" file on the DSS scan and posted the "DSS" results and RootRepeal results.

When i enter internet explorer it keeps saying "internet explorer needs to be shut down" but when clicked ok it stays open for some strange reason, it also keeps sending me to "FAKE" antivirus websites via internet explorer. Also the compluter is "slower" than usual but still quick.

Now and agen it pops up saying "The Windows CardSpace service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion" which i dont know if is anything to do with it.

Any more Infomation please ask.

I hope you can help guys. Its P***ing me off

Thanks (Y)





DDS (Ver_09-12-01.01) - NTFSx86
Run by Nathan at 16:28:35.29 on 01/12/2009
Internet Explorer: 7.0.6002.18005
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6002.2.1252.44.1033.18.3000.1792 [GMT 0:00]

AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: ESET NOD32 Antivirus 3.0 *enabled* (Updated) {E5E70D32-0101-4B98-A4D6-D1D15C3BB448}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\svchost.exe -k netsvc
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Nathan\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.co.uk/
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockw~1\SWHELP~1.EXE -Update -1103471 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; Embedded Web Browser from: http://bsalsa.com/; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)" -"http://www.hellstick.com/games/hellstick2.html"
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} - hxxp://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} - hxxp://www.vexcast.com/download/vexcast.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-gb.cab
Notify: igfxcui - igfxdev.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\nathan\appdata\roaming\mozilla\firefox\profiles\yyjua3n5.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/home.php?
FF - plugin: c:\program files\veetle\player\npvlc.dll
FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2008-2-20 33800]
R2 ekrn;Eset Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2008-2-20 472320]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\sony ericsson\sony ericsson pc suite\SupServ.exe [2009-8-28 90112]
R2 SPService;SPService;c:\windows\system32\svchost.exe -k netsvc [2008-1-21 21504]
R3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2008-11-17 3668480]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [2009-8-28 27632]
S0 OemBiosDevice;Royalty OEM Bios Extension;c:\windows\system32\drivers\royal.sys [2009-2-7 240128]
S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2006-11-2 9216]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2009-3-19 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2009-3-19 8320]
S3 PRODIGY;PRODIGY;c:\windows\system32\drivers\prodigy.sys [2009-5-28 32377]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [2009-2-10 89256]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\drivers\s0017bus.sys [2009-8-28 86824]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\drivers\s0017mdfl.sys [2009-8-28 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\drivers\s0017mdm.sys [2009-8-28 114600]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0017mgmt.sys [2009-8-28 108328]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\drivers\s0017nd5.sys [2009-8-28 26024]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\drivers\s0017obex.sys [2009-8-28 104616]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\drivers\s0017unic.sys [2009-8-28 109736]

=============== Created Last 30 ================

2009-12-01 15:48:27 834048 -c--a-w- c:\windows\system32\wininet.dll
2009-12-01 15:48:18 78336 -c--a-w- c:\windows\system32\ieencode.dll
2009-11-30 20:47:37 0 dc----w- c:\programdata\F-Secure
2009-11-29 13:57:31 38224 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-29 13:57:29 19160 -c--a-w- c:\windows\system32\drivers\mbam.sys
2009-11-29 13:57:28 0 dc----w- c:\program files\Malwarebytes' Anti-Malware
2009-11-28 11:19:17 0 dc----w- c:\programdata\SP
2009-11-27 22:36:48 0 dc----w- c:\program files\Trend Micro
2009-11-25 16:00:44 2048 -c--a-w- c:\windows\system32\tzres.dll
2009-11-25 15:38:56 1401856 -c--a-w- c:\windows\system32\msxml6.dll
2009-11-25 15:38:55 1248768 -c--a-w- c:\windows\system32\msxml3.dll
2009-11-25 15:38:51 714240 -c--a-w- c:\windows\system32\timedate.cpl
2009-11-24 15:52:47 0 dcsh--w- c:\users\nathan\appdata\roaming\lowsec
2009-11-23 16:33:38 0 dc----w- c:\programdata\Sports Interactive
2009-11-23 08:32:14 0 dc----w- c:\users\nathan\appdata\roaming\Sports Interactive
2009-11-23 08:20:42 0 dc-h--w- c:\program files\Zero G Registry
2009-11-23 08:20:42 0 dc----w- c:\program files\Sports Interactive
2009-11-23 08:20:03 0 dc-h--w- c:\users\nathan\InstallAnywhere
2009-11-22 11:33:49 0 dc----w- c:\programdata\SUPERAntiSpyware.com
2009-11-18 17:32:43 0 dc----w- c:\program files\Activision
2009-11-18 17:16:52 0 dc----w- c:\program files\DAEMON Tools Lite
2009-11-18 17:16:33 0 dc----w- c:\users\nathan\appdata\roaming\DAEMON Tools Lite
2009-11-18 17:16:27 0 dc----w- c:\programdata\DAEMON Tools Lite
2009-11-18 17:11:13 116736 -c--a-w- c:\windows\system32\drivers\mcdbus.sys
2009-11-18 17:11:09 0 dc----w- c:\program files\MagicDisc
2009-11-18 17:08:24 0 dc----w- c:\program files\MagicISO
2009-11-17 20:19:13 0 dc----w- c:\program files\Windows Portable Devices
2009-11-17 20:18:45 0 -c-ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-11-17 20:18:25 0 -c-ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-17 16:03:31 92672 -c--a-w- c:\windows\system32\UIAnimation.dll
2009-11-17 16:03:30 3023360 -c--a-w- c:\windows\system32\UIRibbon.dll
2009-11-17 16:03:30 1164800 -c--a-w- c:\windows\system32\UIRibbonRes.dll
2009-11-17 16:00:39 555520 -c--a-w- c:\windows\system32\UIAutomationCore.dll
2009-11-17 16:00:39 4096 -c--a-w- c:\windows\system32\oleaccrc.dll
2009-11-17 16:00:39 234496 -c--a-w- c:\windows\system32\oleacc.dll
2009-11-14 11:15:26 0 dc----w- c:\program files\Veetle
2009-11-11 16:36:14 2036736 -c--a-w- c:\windows\system32\win32k.sys
2009-11-11 16:36:00 355328 -c--a-w- c:\windows\system32\WSDApi.dll
2009-11-07 15:31:01 0 dc----w- c:\windows\system32\TVUAx
2009-11-07 15:21:51 0 dc----w- c:\program files\Microsoft
2009-11-04 16:34:18 0 dc----w- c:\users\nathan\appdata\roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

==================== Find3M ====================

2009-11-29 14:20:09 87608 -c--a-w- c:\users\nathan\appdata\roaming\inst.exe
2009-11-29 14:20:09 47360 -c--a-w- c:\users\nathan\appdata\roaming\pcouffin.sys
2009-11-23 21:13:36 86016 ----a-w- c:\windows\inf\infpub.dat
2009-11-23 21:13:36 143360 ----a-w- c:\windows\inf\infstrng.dat
2009-11-18 17:17:25 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-11-18 17:12:12 143360 ----a-w- c:\windows\inf\infstor.dat
2009-11-17 20:19:06 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-02 20:42:06 195456 -c----w- c:\windows\system32\MpSigStub.exe
2009-10-01 01:02:17 2537472 -c--a-w- c:\windows\system32\wpdshext.dll
2009-10-01 01:02:05 30208 -c--a-w- c:\windows\system32\WPDShextAutoplay.exe
2009-10-01 01:02:04 334848 -c--a-w- c:\windows\system32\PortableDeviceApi.dll
2009-10-01 01:02:02 87552 -c--a-w- c:\windows\system32\WPDShServiceObj.dll
2009-10-01 01:02:00 31232 -c--a-w- c:\windows\system32\BthMtpContextHandler.dll
2009-10-01 01:01:59 546816 -c--a-w- c:\windows\system32\wpd_ci.dll
2009-10-01 01:01:59 160256 -c--a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-10-01 01:01:56 60928 -c--a-w- c:\windows\system32\PortableDeviceConnectApi.dll
2009-10-01 01:01:56 350208 -c--a-w- c:\windows\system32\WPDSp.dll
2009-10-01 01:01:56 196608 -c--a-w- c:\windows\system32\PortableDeviceWMDRM.dll
2009-10-01 01:01:56 100864 -c--a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-10-01 01:01:54 81920 -c--a-w- c:\windows\system32\wpdbusenum.dll
2009-10-01 01:01:50 226816 -c--a-w- c:\windows\system32\WpdMtp.dll
2009-10-01 01:01:49 61952 -c--a-w- c:\windows\system32\WpdMtpUS.dll
2009-10-01 01:01:49 33280 -c--a-w- c:\windows\system32\WpdConns.dll
2009-09-25 02:10:10 974848 -c--a-w- c:\windows\system32\WindowsCodecs.dll
2009-09-25 02:07:08 189440 -c--a-w- c:\windows\system32\WindowsCodecsExt.dll
2009-09-25 02:04:32 321024 -c--a-w- c:\windows\system32\PhotoMetadataHandler.dll
2009-09-25 01:49:22 1554432 -c--a-w- c:\windows\system32\xpsservices.dll
2009-09-25 01:48:08 351232 -c--a-w- c:\windows\system32\XpsPrint.dll
2009-09-25 01:38:29 847360 -c--a-w- c:\windows\system32\OpcServices.dll
2009-09-25 01:36:13 280064 -c--a-w- c:\windows\system32\XpsGdiConverter.dll
2009-09-25 01:35:31 135680 -c--a-w- c:\windows\system32\XpsRasterService.dll
2009-09-25 01:33:25 195584 -c--a-w- c:\windows\system32\dxdiagn.dll
2009-09-25 01:33:15 829440 -c--a-w- c:\windows\system32\d3d10warp.dll
2009-09-25 01:33:01 369664 -c--a-w- c:\windows\system32\WMPhoto.dll
2009-09-25 01:32:59 252928 -c--a-w- c:\windows\system32\dxdiag.exe
2009-09-25 01:31:53 519680 -c--a-w- c:\windows\system32\d3d11.dll
2009-09-25 01:31:26 486912 -c--a-w- c:\windows\system32\d3d10level9.dll
2009-09-25 01:31:21 161280 -c--a-w- c:\windows\system32\d3d10_1.dll
2009-09-25 01:31:19 218112 -c--a-w- c:\windows\system32\d3d10_1core.dll
2009-09-25 01:31:16 1030144 -c--a-w- c:\windows\system32\d3d10.dll
2009-09-25 01:31:15 828928 -c--a-w- c:\windows\system32\d2d1.dll
2009-09-25 01:30:23 481792 -c--a-w- c:\windows\system32\dxgi.dll
2009-09-25 01:30:23 190464 -c--a-w- c:\windows\system32\d3d10core.dll
2009-09-25 01:27:04 793088 -c--a-w- c:\windows\system32\FntCache.dll
2009-09-25 01:27:04 37888 -c--a-w- c:\windows\system32\cdd.dll
2009-09-25 01:27:04 1064448 -c--a-w- c:\windows\system32\DWrite.dll
2009-09-24 22:54:55 258048 -c--a-w- c:\windows\system32\winspool.drv
2009-09-24 22:54:53 667648 -c--a-w- c:\windows\system32\printfilterpipelinesvc.exe
2009-09-24 22:54:52 26112 -c--a-w- c:\windows\system32\printfilterpipelineprxy.dll
2009-09-10 16:48:01 218624 -c--a-w- c:\windows\system32\msv1_0.dll
2009-09-10 14:59:26 8147456 -c--a-w- c:\windows\system32\wmploc.DLL
2009-09-10 14:58:28 310784 -c--a-w- c:\windows\system32\unregmp2.exe
2009-09-04 17:44:40 69464 -c--a-w- c:\windows\system32\XAPOFX1_3.dll
2009-09-04 17:44:40 515416 -c--a-w- c:\windows\system32\XAudio2_5.dll
2009-09-04 17:44:40 238936 -c--a-w- c:\windows\system32\xactengine3_5.dll
2009-09-04 17:29:34 453456 -c--a-w- c:\windows\system32\d3dx10_42.dll
2009-09-04 17:29:34 235344 -c--a-w- c:\windows\system32\d3dx11_42.dll
2009-09-04 17:29:32 5501792 -c--a-w- c:\windows\system32\d3dcsx_42.dll
2009-09-04 17:29:32 1974616 -c--a-w- c:\windows\system32\D3DCompiler_42.dll
2009-09-04 17:29:30 1892184 -c--a-w- c:\windows\system32\D3DX9_42.dll
2009-09-04 11:41:59 60928 -c--a-w- c:\windows\system32\msasn1.dll
2008-01-21 02:43:21 174 --sha-w- c:\program files\desktop.ini
2006-11-02 12:42:02 30674 -c--a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:42:02 30674 -c--a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:42:02 287440 -c--a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:42:02 287440 -c--a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 -c--a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 -c--a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 -c--a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 -c--a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-01-26 00:38:38 16384 -csha-w- c:\windows\temp\cookies\index.dat
2009-01-26 00:38:38 16384 -csha-w- c:\windows\temp\history\history.ie5\index.dat
2009-01-26 00:38:38 32768 -csha-w- c:\windows\temp\temporary internet files\content.ie5\index.dat

============= FINISH: 16:29:33.75 ===============

Attached Files


Edited by Orange Blossom, 01 December 2009 - 10:30 PM.


BC AdBot (Login to Remove)

 


#2 nathan2009

nathan2009
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:15 AM

Posted 02 December 2009 - 06:17 PM

Hi team . sorry but i couldnt wait any longer it was just trashing my system so i rest vista with a new copy cheers for help any way (Y)

#3 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,250 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:04:15 AM

Posted 02 December 2009 - 07:55 PM

Closed per OP request.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users