Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected by Think Point


  • This topic is locked This topic is locked
2 replies to this topic

#1 Kenichiohme

Kenichiohme

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:29 AM

Posted 23 November 2010 - 12:57 PM

I was trying to download a KeyGen for Propellerhead Rebirth but I ended up with Think Point instead. The infection prevents me from opening the internet browser the traditional way, so I use the windows explorer to navigate this web site to find a solution. The infection also prevents me from opening links, and new tabs, I am also unable to attach files so i will be pasting the "Attach.txt file right after the DDS.txt file(which is pasted below)". It also prevents me from opening task manager (except in safe mode).


DDS (Ver_10-11-10.01) - NTFSx86 NETWORK
Run by Keniv at 11:41:16.28 on Tue 11/23/2010
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_21
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.503.251 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
svchost.exe
C:\Documents and Settings\Keniv\Application Data\hotfix.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Keniv\My Documents\Downloads\dds.com

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.blackle.com/
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
uWinlogon: Shell=c:\documents and settings\keniv\application data\hotfix.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Google Update] "c:\documents and settings\keniv\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [PRONoMgr.exe] c:\program files\intel\ncs\proset\PRONoMgr.exe
mRun: [AGRSMMSG] AGRSMMSG.exe
mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [DigidesignMMERefresh] c:\program files\digidesign\drivers\MMERefresh.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\keniv\applic~1\mozilla\firefox\profiles\sh96yz3h.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/?ref=hp
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\keniv\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\keniv\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\documents and settings\keniv\local settings\application data\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified

============= SERVICES / DRIVERS ===============

R0 DigiFilter;DigiFilter;c:\windows\system32\drivers\DigiFilt.sys [2010-11-21 16384]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-9-6 243024]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-9-6 216400]
S1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-9-6 29584]
S2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-9-6 308136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\drivers\diginet.sys [2010-11-21 11776]
S2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2007-5-28 275968]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg9\toolbar\ToolbarBroker.exe [2010-10-26 517448]
S3 dalwdmservice;dal service;c:\windows\system32\drivers\Dalwdm.sys [2010-11-21 109056]
S3 MBX2DFU;MBX2DFU;c:\windows\system32\drivers\mbx2dfu.sys [2010-11-21 15488]
S3 MBX2MIDK;Digidesign Mbox 2 Midi Driver;c:\windows\system32\drivers\mbx2midk.sys [2010-11-21 15232]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

=============== File Associations ===============

regfile="regedit.exe" "%1"

=============== Created Last 30 ================

2010-11-23 16:26:38 -------- d-----w- c:\program files\ESET
2010-11-23 02:54:03 702976 ----a-w- c:\docume~1\keniv\applic~1\hotfix.exe
2010-11-23 02:41:33 -------- d-----w- c:\program files\Pattern Master
2010-11-23 02:34:24 -------- d-----w- c:\docume~1\keniv\locals~1\applic~1\Apple Computer
2010-11-22 05:24:08 2240 ----a-w- c:\windows\LENDIG.sys
2010-11-22 01:35:08 -------- d-----w- c:\docume~1\keniv\applic~1\Digidesign
2010-11-22 01:35:02 -------- d-----w- c:\docume~1\keniv\applic~1\Renoise ReWire Engine
2010-11-22 01:34:50 -------- d-----w- C:\Digidesign Databases
2010-11-22 01:30:42 -------- d-----w- c:\program files\InterLok
2010-11-22 01:30:37 -------- d-----w- c:\windows\Downloaded Installations
2010-11-22 01:30:33 16384 ----a-w- c:\windows\system32\drivers\DigiFilt.sys
2010-11-22 01:29:10 126976 ----a-w- c:\windows\system32\Digi32.dll
2010-11-22 01:29:07 -------- d-----w- c:\program files\common files\PACE Anti-Piracy
2010-11-22 01:29:07 -------- d-----w- c:\docume~1\keniv\locals~1\applic~1\PACE Anti-Piracy
2010-11-22 01:29:07 -------- d-----w- c:\docume~1\keniv\applic~1\PACE Anti-Piracy
2010-11-22 01:29:07 -------- d-----w- c:\docume~1\alluse~1\applic~1\PACE Anti-Piracy
2010-11-22 01:26:54 -------- d-----w- c:\program files\common files\Digidesign
2010-11-13 23:13:07 -------- d-----w- c:\program files\MSXML 4.0
2010-11-13 07:10:02 -------- d-----w- c:\docume~1\keniv\locals~1\applic~1\Ahead
2010-11-13 07:01:06 -------- d-----w- c:\program files\Nero
2010-11-13 07:01:06 -------- d-----w- c:\docume~1\alluse~1\applic~1\Nero
2010-11-11 21:41:04 -------- d-----w- C:\02f43c91660dfb42b7b350
2010-11-06 16:37:34 103864 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
2010-11-04 16:10:21 417792 ----a-w- c:\program files\windows media player\plugins\wmp_scrobbler.dll
2010-11-04 16:10:21 -------- d-----w- c:\docume~1\alluse~1\applic~1\Last.fm
2010-11-04 16:09:11 -------- d-----w- c:\docume~1\keniv\locals~1\applic~1\Last.fm
2010-11-04 16:08:58 -------- d-----w- c:\program files\Last.fm
2010-10-25 17:59:46 0 ----a-w- C:\LOG4.tmp

==================== Find3M ====================

2010-11-23 02:32:37 1409 ----a-w- c:\windows\QTFont.for
2010-10-24 05:10:55 2892 ----a-w- c:\windows\system32\audcon.sys
2010-09-18 16:23:26 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53:25 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53:25 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53:25 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:58:06 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-09-07 01:09:31 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-09-05 04:24:04 233472 ----a-w- c:\windows\system32\REX Shared Library.dll
2010-09-05 04:24:03 368640 ----a-w- c:\windows\system32\ReWire.dll
2010-09-05 02:52:06 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-09-05 02:52:05 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-04 20:03:58 68096 ----a-w- c:\windows\system32\webclnt.dll
2010-09-04 20:02:52 56832 ----a-w- c:\windows\system32\sol.exe
2010-09-04 20:01:58 84992 ----a-w- c:\windows\system32\olepro32.dll
2010-09-04 20:00:50 60192 ----a-w- c:\windows\system32\msjter40.dll
2010-09-04 19:59:58 55808 ----a-w- c:\windows\system32\ipconfig.exe
2010-09-04 19:57:42 9216 ----a-w- c:\windows\system32\dot3dlg.dll
2010-09-04 19:56:58 549888 ----a-w- c:\windows\system32\appwiz.cpl
2010-09-01 11:51:14 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-08-31 13:42:52 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:02:29 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:57:43 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-26 12:52:45 5120 ----a-w- c:\windows\system32\xpsp4res.dll

============= FINISH: 11:41:29.53 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-11-10.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 9/5/2010 12:28:35 AM
System Uptime: 11/23/2010 10:56:30 AM (1 hours ago)

Motherboard: ASUSTeK Computer Inc. | | M3N
Processor: Intel® Pentium® M processor 1600MHz | X1 | 1600/100mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 233 GiB total, 165.485 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Intel® PRO/100 VM Network Connection
Device ID: PCI\VEN_8086&DEV_103E&SUBSYS_17451043&REV_83\4&22270378&0&40F0
Manufacturer: Intel
Name: Intel® PRO/100 VM Network Connection
PNP Device ID: PCI\VEN_8086&DEV_103E&SUBSYS_17451043&REV_83\4&22270378&0&40F0
Service: E100B

Class GUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
Description: ATK0100 ACPI UTILITY
Device ID: ACPI\ATK0100\1010100
Manufacturer: ATK
Name: ATK0100 ACPI UTILITY
PNP Device ID: ACPI\ATK0100\1010100
Service: MTsensor

==== System Restore Points ===================

RP1: 9/5/2010 12:31:31 AM - System Checkpoint
RP2: 9/5/2010 12:40:17 AM - Installed Intel® PROSet
RP3: 9/4/2010 10:51:32 PM - Installed Microsoft Office Enterprise 2007
RP4: 9/4/2010 11:03:02 PM - Software Distribution Service 3.0
RP5: 9/4/2010 11:07:38 PM - SPTD setup V1.50
RP6: 9/4/2010 11:15:08 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP7: 9/4/2010 11:15:32 PM - Printer Driver Microsoft Office Document Image Writer Installed
RP8: 9/6/2010 1:20:50 PM - Software Distribution Service 3.0
RP9: 9/6/2010 2:09:31 PM - Software Distribution Service 3.0
RP10: 9/6/2010 3:16:01 PM - Software Distribution Service 3.0
RP11: 9/6/2010 3:38:32 PM - Installed Windows XP WgaNotify.
RP12: 9/6/2010 9:08:55 PM - Installed AVG Free 9.0
RP13: 9/6/2010 10:20:36 PM - Software Distribution Service 3.0
RP14: 9/7/2010 1:30:58 AM - Software Distribution Service 3.0
RP15: 9/7/2010 10:41:28 AM - Software Distribution Service 3.0
RP16: 9/7/2010 9:13:00 PM - Installed Windows Media Format Runtime
RP17: 9/8/2010 1:50:07 AM - Software Distribution Service 3.0
RP18: 9/8/2010 9:59:23 AM - Software Distribution Service 3.0
RP19: 9/9/2010 2:51:02 PM - System Checkpoint
RP20: 9/10/2010 9:31:30 AM - Avg Update
RP21: 9/11/2010 3:35:57 PM - System Checkpoint
RP22: 9/11/2010 4:16:52 PM - Software Distribution Service 3.0
RP23: 9/13/2010 2:48:47 PM - System Checkpoint
RP24: 9/14/2010 4:43:50 PM - System Checkpoint
RP25: 9/15/2010 7:04:37 PM - Software Distribution Service 3.0
RP26: 9/19/2010 2:03:14 AM - System Checkpoint
RP27: 9/20/2010 1:58:31 AM - Installed Microsoft Visual C++ 2005 Redistributable
RP28: 9/20/2010 2:00:14 AM - Installed Sound Forge Pro 10.0
RP29: 9/20/2010 11:09:27 AM - Removed Sound Forge Pro 10.0
RP30: 9/22/2010 7:01:37 PM - Software Distribution Service 3.0
RP31: 9/23/2010 10:19:34 AM - Avg Update
RP32: 9/23/2010 10:24:31 AM - Avg Update
RP33: 9/27/2010 4:24:53 PM - System Checkpoint
RP34: 9/28/2010 6:03:29 PM - System Checkpoint
RP35: 9/30/2010 12:36:46 AM - System Checkpoint
RP36: 9/30/2010 4:23:01 AM - Software Distribution Service 3.0
RP37: 10/1/2010 4:46:19 AM - System Checkpoint
RP38: 10/2/2010 1:55:06 PM - Installed Windows Media Player 11
RP39: 10/2/2010 2:04:54 PM - Software Distribution Service 3.0
RP40: 10/3/2010 2:47:01 AM - Software Distribution Service 3.0
RP41: 10/3/2010 4:19:34 AM - Software Distribution Service 3.0
RP42: 10/3/2010 2:04:12 PM - Software Distribution Service 3.0
RP43: 10/4/2010 1:32:39 AM - Software Distribution Service 3.0
RP44: 10/5/2010 6:54:21 PM - Avg Update
RP45: 10/7/2010 1:38:37 AM - System Checkpoint
RP46: 10/7/2010 2:35:56 PM - Software Distribution Service 3.0
RP47: 10/7/2010 2:55:23 PM - Software Distribution Service 3.0
RP48: 10/9/2010 5:55:30 PM - System Checkpoint
RP49: 10/11/2010 1:37:54 AM - System Checkpoint
RP50: 10/14/2010 8:31:58 PM - Software Distribution Service 3.0
RP51: 10/14/2010 10:48:39 PM - Software Distribution Service 3.0
RP52: 10/15/2010 3:38:46 PM - Installed Project64 1.6
RP53: 10/15/2010 4:30:20 PM - Software Distribution Service 3.0
RP54: 10/17/2010 8:05:06 PM - System Checkpoint
RP55: 10/20/2010 12:19:00 AM - System Checkpoint
RP56: 10/21/2010 5:28:12 PM - Installed Vegas Movie Studio Platinum 9.0
RP57: 10/23/2010 1:56:50 AM - System Checkpoint
RP58: 10/26/2010 8:42:40 PM - Avg Update
RP59: 10/28/2010 1:43:58 AM - System Checkpoint
RP60: 10/29/2010 8:57:38 PM - System Checkpoint
RP61: 10/31/2010 10:06:05 PM - System Checkpoint
RP62: 11/2/2010 12:25:19 AM - System Checkpoint
RP63: 11/3/2010 1:13:43 PM - System Checkpoint
RP64: 11/7/2010 5:27:13 PM - System Checkpoint
RP65: 11/9/2010 11:00:05 AM - Avg Update
RP66: 11/9/2010 11:01:10 AM - Avg Update
RP67: 11/10/2010 8:48:48 PM - Software Distribution Service 3.0
RP68: 11/11/2010 4:40:21 PM - Software Distribution Service 3.0
RP69: 11/13/2010 12:54:34 AM - System Checkpoint
RP70: 11/13/2010 1:58:45 AM - Installed DirectX
RP71: 11/13/2010 2:00:50 AM - Installed Nero 7 Ultra Edition
RP72: 11/13/2010 3:27:41 AM - Removed Vegas Movie Studio Platinum 9.0b
RP73: 11/13/2010 6:12:55 PM - Software Distribution Service 3.0
RP74: 11/14/2010 8:52:27 PM - System Checkpoint
RP75: 11/16/2010 9:24:47 PM - Software Distribution Service 3.0
RP76: 11/17/2010 11:48:33 PM - System Checkpoint
RP77: 11/19/2010 11:50:44 AM - System Checkpoint
RP78: 11/20/2010 5:36:18 PM - System Checkpoint
RP79: 11/21/2010 4:29:57 AM - Software Distribution Service 3.0
RP80: 11/21/2010 8:26:45 PM - Installed Pro Tools LE
RP81: 11/21/2010 8:28:01 PM - Installed Digidesign Shared Plug-Ins
RP82: 11/21/2010 8:28:36 PM - Installed Free Bomb Factory Plug-Ins
RP83: 11/22/2010 8:02:56 PM - Unsigned driver install
RP84: 11/22/2010 8:37:51 PM - Unsigned driver install
RP85: 11/22/2010 9:31:21 PM - Installed QuickTime
RP86: 11/22/2010 9:48:09 PM - Installed MIDI Yoke

==== Installed Programs ======================


Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.1
Agere Systems AC'97 Modem v2134D
Antares Autotune Evo VST RTAS v6.0.9
Audacity 1.3.4 (Unicode)
AVG Free 9.0
CCleaner
db audioware Sidechain Compressor VST v1.1.0
Digidesign Pro Tools LE 7.3
Digidesign Shared Plug-Ins 7.3
Dropbox
eLicenser Control
Free Bomb Factory Plug-Ins 7.3
Google Talk Plugin
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB981793)
Image Line ToxicIII v1.4 VSTi
Intel® Extreme Graphics 2 Driver
Intel® PRO Network Adapters and Drivers
Intel® PROSet
InterLok Driver Kit
Java Auto Updater
Java™ 6 Update 21
LAME v3.98.2 for Audacity
Last.fm 1.5.4.27091
Lennar Digital Sylenth VSTi v1.2.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
MIDI Yoke
Mozilla Firefox (3.6.12)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 7 Ultra Edition
neroxml
Project64 1.6
QuickTime
Reason 4.0
Renoise 2.5.1
rgcAudio z3ta Plus v1.40
Rob Papen Albino 3
Rob Papen BLUE Version 1.7.0
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2289158)
Security Update for 2007 Microsoft Office System (KB2344875)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2345035)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
Security Update for Microsoft Office Publisher 2007 (KB982124)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2183461)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Synaptics Pointing Device Driver
The KMPlayer (remove only)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Microsoft Windows (KB971513)
Update for Outlook 2007 Junk Email Filter (KB2443839)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Player 11
WinRAR archiver

==== Event Viewer Messages From Past Week ========

11/23/2010 11:19:50 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MDM with arguments "" in order to run the server: {943B6A75-BB5E-41A7-A6D3-A1A5E892B33B}
11/23/2010 11:19:47 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MDM with arguments "" in order to run the server: {0C0A3666-30C9-11D0-8F20-00805F2CD064}
11/23/2010 10:58:46 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
11/23/2010 10:58:31 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AvgLdx86 AvgMfx86 Fips intelppm
11/22/2010 10:37:09 PM, error: dalwdmservice [43] -
11/20/2010 3:35:51 PM, error: ACPIEC [1] - \Device\ACPIEC: The embedded controller (EC) hardware didn't respond within the timeout period. This may indicate an error in the EC hardware or firmware, or possibly a poorly designed BIOS which accesses the EC in an unsafe manner. The EC driver will retry the failed transaction if possible.
11/16/2010 9:26:07 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Internet Explorer 8 for Windows XP.

==== End Of File ===========================


GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2010-11-23 12:44:35
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 WDC_WD2500BEVE-00WZT0 rev.01.01A01
Running: gmer.exe; Driver: C:\DOCUME~1\Keniv\LOCALS~1\Temp\kwpiqkow.sys


---- System - GMER 1.0.15 ----

SSDT sptd.sys ZwCreateKey [0xF90370D0]
SSDT sptd.sys ZwEnumerateKey [0xF903CFB2]
SSDT sptd.sys ZwEnumerateValueKey [0xF903D340]
SSDT sptd.sys ZwOpenKey [0xF90370B0]
SSDT sptd.sys ZwQueryKey [0xF903D418]
SSDT sptd.sys ZwQueryValueKey [0xF903D298]
SSDT sptd.sys ZwSetValueKey [0xF903D4AA]

---- Kernel code sections - GMER 1.0.15 ----

? C:\WINDOWS\system32\drivers\sptd.sys The process cannot access the file because it is being used by another process.
.text USBPORT.SYS!DllUnload F8DB98AC 5 Bytes JMP 82EE21C8
? System32\Drivers\ap90chxr.SYS The system cannot find the path specified. !
? C:\DOCUME~1\Keniv\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 82F681E8

AttachedDevice \FileSystem\Ntfs \Ntfs DigiFilt.sys (Digidesign Filter Driver/Digidesign, A Division of Avid Technology, Inc.)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

Device \Driver\usbuhci \Device\USBPDO-0 82EE11E8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 82FDB1E8
Device \Driver\dmio \Device\DmControl\DmConfig 82FDB1E8
Device \Driver\dmio \Device\DmControl\DmPnP 82FDB1E8
Device \Driver\dmio \Device\DmControl\DmInfo 82FDB1E8
Device \Driver\usbuhci \Device\USBPDO-1 82EE11E8
Device \Driver\usbuhci \Device\USBPDO-2 82EE11E8
Device \Driver\usbehci \Device\USBPDO-3 82EE01E8

AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Ftdisk \Device\HarddiskVolume1 82F6A1E8
Device \Driver\Cdrom \Device\CdRom0 82D991E8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 [F8F6DB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort0 [F8F6DB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort1 [F8F6DB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\NetBT \Device\NetBt_Wins_Export 8282D1E8
Device \Driver\PCI_NTPNP3184 \Device\0000004a sptd.sys
Device \Driver\NetBT \Device\NetbiosSmb 8282D1E8
Device \Driver\NetBT \Device\NetBT_Tcpip_{F636C37C-7E2D-4628-BC44-C31BE4C0756D} 8282D1E8

AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\usbuhci \Device\USBFDO-0 82EE11E8
Device \Driver\usbuhci \Device\USBFDO-1 82EE11E8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 8281C1E8
Device \Driver\usbuhci \Device\USBFDO-2 82EE11E8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 8281C1E8
Device \Driver\usbehci \Device\USBFDO-3 82EE01E8
Device \Driver\Ftdisk \Device\FtControl 82F6A1E8
Device \Driver\ap90chxr \Device\Scsi\ap90chxr1Port2Path0Target0Lun0 82E081E8
Device \Driver\ap90chxr \Device\Scsi\ap90chxr1 82E081E8
Device \FileSystem\Fastfat \Fat 827EA1E8
Device \FileSystem\Fastfat \Fat F7C0A297

AttachedDevice \FileSystem\Fastfat \Fat DigiFilt.sys (Digidesign Filter Driver/Digidesign, A Division of Avid Technology, Inc.)

Device \FileSystem\Cdfs \Cdfs 82809790

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files\Alcohol Soft\Alcohol 120\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xB5 0x7E 0x3D 0x2B ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@ujdew 0x6E 0x60 0xDF 0x12 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40@ujdew 0xA1 0x16 0x5E 0x07 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files\Alcohol Soft\Alcohol 120\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xB5 0x7E 0x3D 0x2B ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@ujdew 0x6E 0x60 0xDF 0x12 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40@ujdew 0xA1 0x16 0x5E 0x07 ...

---- EOF - GMER 1.0.15 ----

BC AdBot (Login to Remove)

 


#2 rigacci

rigacci

    Fiorentino


  • Members
  • 2,604 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:29 AM

Posted 01 December 2010 - 09:24 AM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.

Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

We also need a new log from the GMER anti-rootkit scanner. Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice


Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log


Thanks.

DR

#3 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:29 AM

Posted 16 April 2011 - 04:38 PM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users