Results 1 to 10 of 55

Thread: Spybot and other AVs won't run, windows won't open

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Member
    Join Date
    Feb 2008
    Posts
    32

    Default Spybot and other AVs won't run, windows won't open

    Hi there,

    To help my saviours, I'll summarise my issues into two key points. However, I'd also like to give you as much detail as possible so I've included my history as well. If its too much detail, then just ignore it. I've attached the KAV log down the bottom. (I can;t attach Spybot or HJT logs because neither of them run on my computer).

    Unfortunately, I couldn't find the "save as text" function for KAV, so I've copy/pasted the html version in my second post. If that's inadequate, please give instuctions on how to get a text version.

    I know you like to know if I've posted elsewhere. I went to techguy.org, but have been waiting for a week without any response.

    1) Each time windows opens, there's a cascade of errors and the computer restarts in a never ending cycle.

    2) Spybot won't run. I click spybot.exe and nothing happens. However, the fileshredder works. AVG, nor Hijackthis and I can't install Norton. I can still use Adaware however (though scanning finds nothing). I suspect some virus, possibly braviax is blocking them, since they worked before.

    History and details of infection
    My computer's been freezing for a little while, and when I google something, and click a website it redirects me to some other dodgy website instead. (Only links from google redirect)

    I tried to fix the situation by dling spybot, adaware and grisoft's AVG. Each found a few viruses, and fixed them. However, the next time I used google, clicked a link, it not only redirected me, but my computer restarted. Each time I turn on my computer now, there's an error message about msnmessenger.exe then another message about osa.exe then a third message about a third program until the computer restarts. (My computer is in Chinese ,and I can't read Chinese, so I can;'t tell you the exact error). I've found that using msconfig to disable those programs stops the error messages but the computer still restarts. There is the blue "windows is restarting screen".

    I found two ways to overcome the auto-restart program. Firstly, is to use safemode (Spybot etc still don't work). The second way is to use ctrl-alt-del just as the windows is booting, then terminate explorer.exe. I suspect that this virus is disabling all my anti-viruses, including Windows Firewall. The computer shuts down shortly before Windows gives me an error message about braviax.exe and googletoolbar ie. (Again, I can't read Chinese- only the english words scattered inside).

    Spybot and other anti-viruses won;'t run
    Whenever I click the links for S+D on my desktop and in the start menu, nothing happens. If I go to the program files manually and click any of the .exe files, nothing happens either (except for fileshredder which works).

    The same thing happens with Grisoft's AVG. I tried reinstalling it, but now there's some sort of error. Part of it is in Chinese, but I'll transcribe the English:

    Local machine:installation failed
    Installation:
    Error: action failed for file avgamsvr.exe: starting service...
    [one line of Chinese] [ (1053

    Hijackthis doesn't work either. I installed it, seemed ok, but the program won't run. If I ctrl-alt-del, I can't find the program... it seems just not to open at all. Not even for a second.

    The AVs won't run in safe mode, nor will they run if I terminate explorer.exe at start-up (as described above). Not sure if their failure is because of my unique way of turning on th4e omputer or because the virus somehow blocks them.

    Thanks for your help in advance. The KAV log is in my second post below.

  2. #2
    Member
    Join Date
    Feb 2008
    Posts
    32

    Default

    <html>
    <head>
    <title>KASPERSKY ONLINE SCANNER REPORT</title>
    <meta http-equiv='Content-Type' content='text/html; charset=utf-8'>
    </head>
    <style>
    .pagetitle { font-size:20px; color:#FFFFFF; font-family: Arial, Geneva, sans-serif; }
    .text { font-size:11px; font-family: Arial, Geneva, sans-serif; }
    TD { font-size:11px; font-family: Arial, Geneva, sans-serif; }
    </style>

    <body><table width='100%' height='110' border='0'>
    <tr height='30' align='center' bgcolor='#005447'>
    <td colspan='2' height='30' class='pagetitle'>
    <b>KASPERSKY ONLINE SCANNER REPORT</b>
    </td>
    </tr>
    <tr height='70'><td colspan='2' height='70'> Sunday, February 10, 2008 12:15:50 PM<br> Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)<br> Kaspersky Online Scanner version: 5.0.98.0<br> Kaspersky Anti-Virus database last update: 10/02/2008<br> Kaspersky Anti-Virus database records: 555893<br></td></tr><tr height='10'><td colspan='2' height='10'></td>
    </tr></table><table width='100%' height='145' border='0'><tr height='20' bgcolor='#EFEBDE'><td colspan='2' height='20'><b>Scan Settings</b></td></tr><tr height='15'><td height='15' width='250'>Scan using the following antivirus database</td><td>extended</td></tr><tr height='15'><td height='15'>Scan Archives</td><td>true</td> </tr><tr height='15'><td height='15'>Scan Mail Bases</td><td>true</td></tr><tr height='10'><td colspan='2' height='10'></td></tr><tr height='20' bgcolor='#EFEBDE'><td height='20'><b>Scan Target</b></td><td>My Computer</td></tr><tr height='20'><td colspan='2' height='20'>A:\<br>C:\<br>D:\<br> E:\<br>
    F:\
    </td>
    </tr>
    <tr height='10'>
    <td colspan='2' height='10'>
    </td>
    </tr>
    <tr height='20' bgcolor='#EFEBDE'>
    <td colspan='2' height='20'><b>Scan Statistics</b></td>
    </tr>
    <tr height='15'>
    <td height='15'>Total number of scanned objects</td>
    <td>35306</td>
    </tr>
    <tr height='15'>
    <td height='15'>Number of viruses found</td>
    <td>12</td>
    </tr>
    <tr height='15'>
    <td height='15'>Number of infected objects</td>
    <td>20</td>
    </tr>
    <tr height='15'>
    <td height='15'>Number of suspicious objects</td>
    <td>0</td>
    </tr>
    <tr height='15'>
    <td height='15'>Duration of the scan process</td>
    <td>00:22:06</td>
    </tr>
    </table>
    <br>
    <table width='100%' border='0'>
    <tr height='20' bgcolor='#EFEBDE'>
    <td height='20'><b>Infected Object Name</b></td>
    <td width='200'><b>Virus Name</b></td>
    <td width='100'><b>Last Action</b></td>
    </tr>
    <tr height='20'>
    <td height='20'>C:\621e9ee29d7e0684dbd9e6\sp2\update\update.exe </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator\「開始」功能表\程式集\啟動\Reboot.exe </td>
    <td>Infected: not-a-virus:RiskTool.Win32.Reboot.e </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Cookies\index.dat </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\History\History.IE5\index.dat </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\History\History.IE5\MSHist012008021020080211\index.dat </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Temporary Internet Files\Content.IE5\4HIVK96V\profile_pic[1].php </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Temporary Internet Files\Content.IE5\index.dat </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Temporary Internet Files\Content.IE5\KPQRS1EJ\profile_pic[2].php </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Temporary Internet Files\Content.IE5\W1MZCTUV\profile_pic[2].php </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\NTUSER.DAT </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\ntuser.dat.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\All Users.WINDOWS\Application Data\Nero\Nero8\Nero BackItUp\Cache\NeroBackItUpScheduler3.log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\All Users.WINDOWS\「開始」功能表\程式集\啟動\dzfp.exe </td>
    <td>Infected: not-a-virus:FraudTool.Win32.UltimateDefender.am </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\LocalService\NTUSER.DAT </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\LocalService\ntuser.dat.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Program Files\Nero\Nero8\Nero BackItUp\BIU1.txt </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\access_log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\error.log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\error_log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\ssl_request_log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\sysevgu.exe </td>
    <td>Infected: Trojan-Downloader.Win32.Tibs.up </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\sysfudk.exe </td>
    <td>Infected: Email-Worm.Win32.Zhelatin.uv </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\sysmrxt.exe </td>
    <td>Infected: Email-Worm.Win32.Zhelatin.uv </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\sysrqzp.exe </td>
    <td>Infected: Email-Worm.Win32.Zhelatin.uv </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\sysuxmz.exe </td>
    <td>Infected: Trojan-Downloader.Win32.Tibs.up </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\syswpof.exe </td>
    <td>Infected: Trojan-Downloader.Win32.Tibs.up </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\braviax.exe </td>
    <td>Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\Debug\PASSWD.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\pss\venm.exeCommon Startup </td>
    <td>Infected: not-a-virus:FraudTool.Win32.UltimateDefender.am </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\SchedLgU.Txt </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\Sti_Trace.log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\braviax.exe </td>
    <td>Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\cmdow.exe </td>
    <td>Infected: not-a-virus:RiskTool.Win32.HideWindows </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\AppEvent.Evt </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\default </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\default.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\SAM </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\SAM.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\SecEvent.Evt </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\SECURITY </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\SECURITY.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\software </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\software.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\SysEvent.Evt </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\system </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\config\system.LOG </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\dllcache\beep.sys </td>
    <td>Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\drivers\beep.sys </td>
    <td>Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\drivers\sptd.sys </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\h323log.txt </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\L9E0.tmp </td>
    <td>Infected: Trojan-PSW.Win32.LdPinch.dis </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\LF8C9.tmp </td>
    <td>Infected: Trojan-Spy.Win32.Zbot.nd </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\nmp.log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\users32.dat </td>
    <td>Infected: not-a-virus:AdWare.Win32.Agent.zo </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\system32\_nvidia_xxx_.log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\TEMP\4.tmp </td>
    <td>Infected: Trojan-Spy.Win32.Zbot.ya </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\TEMP\NERO14399\Toolbar.exe </td>
    <td>Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\TEMP\~DF6CEA.tmp </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\TEMP\~DFEEE6.tmp </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\wiadebug.log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\WINDOWS\wiaservc.log </td>
    <td>Object is locked </td>
    <td>skipped </td>
    </tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
    <tr height='20'>
    <td height='20'>C:\winonbp.exe </td>
    <td>Infected: not-virus:Hoax.Win32.Renos.asa </td>
    <td>skipped </td></tr>
    <tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr><tr height='20'> <td colspan='3' height='20'><b>Scan process completed.</b></td></tr>
    </table>
    </body>
    </html>

  3. #3
    Member
    Join Date
    Feb 2008
    Posts
    32

    Default

    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Wednesday, February 13, 2008 11:39:05 PM
    Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
    Kaspersky Online Scanner version: 5.0.98.0
    Kaspersky Anti-Virus database last update: 13/02/2008
    Kaspersky Anti-Virus database records: 563353
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    A:\
    C:\
    D:\
    E:\
    F:\

    Scan Statistics:
    Total number of scanned objects: 34698
    Number of viruses found: 17
    Number of infected objects: 33
    Number of suspicious objects: 0
    Duration of the scan process: 00:19:51

    Infected Object Name / Virus Name / Last Action
    C:\621e9ee29d7e0684dbd9e6\sp2\update\update.exe Object is locked skipped
    C:\Documents and Settings\Administrator\「開始」功能表\程式集\啟動\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.e skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\History\History.IE5\MSHist012008021320080214\index.dat Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\My Documents\John\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\My Documents\John\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\My Documents\John\SmitfraudFix.exe RarSFX: infected - 2 skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\My Documents\John\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\My Documents\John\SmitfraudFix.zip ZIP: infected - 1 skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\Administrator.LINUX-3V3JPXBEO\桌面\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
    C:\Documents and Settings\All Users.WINDOWS\Application Data\Nero\Nero8\Nero BackItUp\Cache\NeroBackItUpScheduler3.log Object is locked skipped
    C:\Documents and Settings\All Users.WINDOWS\「開始」功能表\程式集\啟動\dzfp.exe Infected: not-a-virus:FraudTool.Win32.UltimateDefender.am skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\Nero\Nero8\Nero BackItUp\BIU1.txt Object is locked skipped
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\access_log Object is locked skipped
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\error.log Object is locked skipped
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\error_log Object is locked skipped
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\logs\ssl_request_log Object is locked skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc85\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc86.exe Infected: not-virus:Hoax.Win32.Renos.asa skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc87.exe Infected: Trojan-Downloader.Win32.Tibs.up skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc88.exe Infected: Email-Worm.Win32.Zhelatin.uv skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc89.exe Infected: Email-Worm.Win32.Zhelatin.uv skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc90.exe Infected: Email-Worm.Win32.Zhelatin.uv skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc91.exe Infected: Trojan-Downloader.Win32.Tibs.up skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc92.exe Infected: Trojan-Downloader.Win32.Tibs.up skipped
    C:\RECYCLER\S-1-5-21-789336058-725345543-839522115-500\Dc93.exe Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af skipped
    C:\WINDOWS\braviax.exe Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af skipped
    C:\WINDOWS\cru629.dat Infected: Backdoor.Win32.Small.cum skipped
    C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
    C:\WINDOWS\expacc.exe Infected: Trojan-Downloader.Win32.Diehard.ef skipped
    C:\WINDOWS\pss\venm.exeCommon Startup Infected: not-a-virus:FraudTool.Win32.UltimateDefender.am skipped
    C:\WINDOWS\SchedLgU.Txt Object is locked skipped
    C:\WINDOWS\Sti_Trace.log Object is locked skipped
    C:\WINDOWS\system32\braviax.exe Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af skipped
    C:\WINDOWS\system32\cmdow.exe Infected: not-a-virus:RiskTool.Win32.HideWindows skipped
    C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\default Object is locked skipped
    C:\WINDOWS\system32\config\default.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SAM Object is locked skipped
    C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
    C:\WINDOWS\system32\config\software Object is locked skipped
    C:\WINDOWS\system32\config\software.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\system Object is locked skipped
    C:\WINDOWS\system32\config\system.LOG Object is locked skipped
    C:\WINDOWS\system32\cru629.dat Infected: Backdoor.Win32.Small.cum skipped
    C:\WINDOWS\system32\dllcache\beep.sys Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af skipped
    C:\WINDOWS\system32\drivers\beep.sys Infected: not-a-virus:FraudTool.Win32.UltimateDefender.af skipped
    C:\WINDOWS\system32\drivers\Qjm40.sys Infected: Trojan-Downloader.Win32.Agent.ici skipped
    C:\WINDOWS\system32\drivers\secdrv.sys Infected: Trojan-Downloader.Win32.Diehard.dr skipped
    C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
    C:\WINDOWS\system32\h323log.txt Object is locked skipped
    C:\WINDOWS\system32\L9E0.tmp Infected: Trojan-PSW.Win32.LdPinch.dis skipped
    C:\WINDOWS\system32\LF8C9.tmp Infected: Trojan-Spy.Win32.Zbot.nd skipped
    C:\WINDOWS\system32\LogCrypt.dll Infected: Trojan.Win32.Agent.eub skipped
    C:\WINDOWS\system32\nmp.log Object is locked skipped
    C:\WINDOWS\system32\users32.dat Infected: not-a-virus:AdWare.Win32.Agent.zo skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
    C:\WINDOWS\system32\_nvidia_xxx_.log Object is locked skipped
    C:\WINDOWS\TEMP\NERO14399\Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
    C:\WINDOWS\TEMP\~DF1775.tmp Object is locked skipped
    C:\WINDOWS\TEMP\~DF41AF.tmp Object is locked skipped
    C:\WINDOWS\wiadebug.log Object is locked skipped
    C:\WINDOWS\wiaservc.log Object is locked skipped

    Scan process completed.

  4. #4
    Member
    Join Date
    Feb 2008
    Posts
    32

    Default

    Here is my HJT file. Only just figured out how to unblock it. Also, the kapersky log is above (as you can easily tell).

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:46:01, on 2008-2-12
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\WINDOWS\System32\RUNDLL32.EXE
    C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\vsnpstd3.exe
    C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
    C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\progra~1\yahoo!\assistant\yassistse.exe
    C:\Program Files\V-Gear LiveShow\LiveShow.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\FaxTalk NetOnHold\Ftnohmgr.exe
    C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
    C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
    C:\WINDOWS\System32\taskmgr.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
    C:\Program Files\DNA\btdna.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\msnshell\MSNShell.exe
    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    C:\Program Files\LevelOne\Common\RaUI.exe
    C:\WINDOWS\Explorer.exe
    C:\Program Files\highjakdis\hijakdis.exe

    R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\System32\ntos.exe,C:\WINDOWS\System32\idaw64.exe,
    O3 - Toolbar: 收音機(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: ALiBaBar - {0A1375E1-56C2-11D6-8E45-8933A0FB5235} - C:\PROGRA~1\ALiBaBar\ALiBaBar.dll
    O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4A40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [nTrayFw] C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
    O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
    O4 - HKLM\..\Run: [yassistse] c:\progra~1\yahoo!\assistant\yassistse.exe
    O4 - HKLM\..\Run: [V-Gear LiveShow] "C:\Program Files\V-Gear LiveShow\LiveShow.exe" -m
    O4 - HKLM\..\Run: [NetOnHold] C:\Program Files\FaxTalk NetOnHold\Ftnohmgr.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
    O4 - HKLM\..\Run: [Super Rabbit SRRestore] C:\PROGRA~1\SUPERR~1\magicset\SRRest.exe /autosave
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Steam] "d:\pat\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [MSNShell] C:\Program Files\msnshell\MSNShell.exe
    O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
    O4 - HKCU\..\Run: [Firewall auto setup] C:\WINDOWS\TEMP\winlogon.exe
    O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] ctfmon.exe (User 'Default user')
    O4 - Global Startup: dzfp.exe
    O4 - Global Startup: Levelone Wireless Utility.lnk = C:\Program Files\LevelOne\Common\RaUI.exe
    O4 - Global Startup: Wireless LAN Utility.lnk = ?
    O8 - Extra context menu item: 使用影音傳送帶下載 - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
    O8 - Extra context menu item: 使用影音傳送帶下載全部連結 - C:\Program Files\Xi\NetTransport 2\NTAddList.html
    O8 - Extra context menu item: 剪貼簿文字: 簡 > 繁 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToTrad
    O8 - Extra context menu item: 剪貼簿文字: 繁 > 簡 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToSim
    O8 - Extra context menu item: 匯出至 Microsoft Excel(&X) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT
    O8 - Extra context menu item: 網頁: [簡體] 顯示 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToSim
    O8 - Extra context menu item: 網頁: [繁體] 顯示 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToTrad
    O8 - Extra context menu item: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/203
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O14 - IERESET.INF: START_PAGE_URL=tw.yahoo.com
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
    O18 - Protocol: bw+0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw+0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw-0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw-0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw00 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw00s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw10 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw10s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw20 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw20s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw30 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw30s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw40 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw40s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw50 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw50s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw60 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw60s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw70 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw70s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw80 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw80s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw90 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bw90s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwa0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwa0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwb0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwb0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwc0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwc0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwd0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwd0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwe0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwe0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwf0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwf0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwg0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwg0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwh0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwh0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwi0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwi0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwj0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwj0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwk0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwk0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwl0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwl0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwm0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwm0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwn0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwn0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwo0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwo0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwp0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwp0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwq0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwq0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwr0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwr0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bws0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bws0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwt0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwt0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwu0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwu0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwv0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwv0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bww0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bww0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwx0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwx0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  5. #5
    Member
    Join Date
    Feb 2008
    Posts
    32

    Default

    O18 - Protocol: bwx0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwy0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwy0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwz0 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: bwz0s - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O18 - Protocol: offline-8876480 - {B9156DC7-C1D3-46E0-8C36-E4C92DF9BE1D} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
    O20 - AppInit_DLLs: C:\WINDOWS\system32\cru629.dat
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Unknown owner - C:\PROGRA~1\anti\avgamsvr.exe (file missing)
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Unknown owner - C:\PROGRA~1\anti\avgupsvc.exe (file missing)
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

    --
    End of file - 21955 bytes

  6. #6
    Emeritus
    Join Date
    Nov 2005
    Location
    Texas
    Posts
    1,144

    Default

    Download ComboFix from Here or Here to your Desktop.

    In the event you already have Combofix, this is a new version that I need you to download.
    It must be saved directly to your desktop.



    1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

    • Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan.
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Remember to re enable the protection again afterwards before connecting to the net



    2. Close any open browsers and make sure you are disconnected from the net. Unplug the cable if need be before running combofix.
    • IF you have not already done so Combofix will disconnect your machine from the Internet when it starts.
    • If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.


    3. Now double click on combofix.exe & follow the prompts.
    When finished, it will produce a report for you.
    Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review


    Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze.
    MS-MVP Windows Security 2006,2007,2008 & 2009
    ASAP member since 2004

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •