LDTate
OK. It can take awhile to run.
Spyware / Malware / Virus Removal
daparker here are the logs you requested
7 min read
WOLFGAR
nearly done. 69 infections so far, 98% compleat, wont be long now.
WOLFGAR
ok, scan finnaly done. so far no sighn of that popup yet… YET.
here is the log from that scan
———————————————————
ewido security suite - Scan report
———————————————————
+ Created on: 9:59:26 PM, 9/12/2005
+ Report-Checksum: 5D115FCB
+ Scan result:
HKLM\SOFTWARE\Classes\CLSID\{83DC91DB-7896-43E3-B34D-A7D043F16BB1} -> Spyware.ClearStream : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BC333116-6EA1-40A1-9D07-ECB192DB8CEA} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\salm -> Spyware.180Solutions : Cleaned with backup
HKLM\SOFTWARE\Preview AdService -> Spyware.BlazeFind : Cleaned with backup
HKLM\SOFTWARE\salm -> Spyware.180Solutions : Cleaned with backup
HKLM\SOFTWARE\SecureWin -> Spyware.Adlogix : Cleaned with backup
C:\Documents and Settings\All Users\Application Data\x2ff\x2ff.dll -> Spyware.RiverAd : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temp\res1.tmp -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Aquatica Waterworlds\AQ3Helper.exe -> Adware.Gator : Cleaned with backup
C:\Program Files\Common Files\wwiq\wwiqp.exe -> Spyware.Xupiter : Cleaned with backup
C:\Program Files\ProSiteFinder\prositefinder.exe -> Spyware.ClearSearch : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP306\A0147014.ocx -> Spyware.Coupon : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147221.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147222.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147267.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147268.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147300.dll -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147301.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0148874.exe -> Spyware.NewDotNet : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0148907.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0148908.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP315\A0148916.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP315\A0148917.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/WINNT/System32/mscb.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/Program Files/CashBack/bin/cashback.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/Program Files/CashBack/bin/cb.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/Program Files/CashBack/bin/flash.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149337.vxd/C:/WINNT/System32/nvms.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149337.vxd/C:/Program Files/NaviSearch/bin/nls.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149349.exe -> Trojan.Stervis.b : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149350.exe -> Spyware.Suggestor : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149352.dll -> Spyware.Suggestor : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149722.dll -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149723.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149731.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149732.dll -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149742.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149743.dll -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149745.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149746.dll -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149747.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149837.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149838.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149839.dll -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149840.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149849.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149850.dll -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149851.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149852.dll -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149853.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149854.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149855.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149869.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149870.dll -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149875.exe -> Adware.Saha : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149877.dll -> Adware.SAHA : Cleaned with backup
C:\windows\bundles\runsearch.exe -> Spyware.MegaSearch.d : Cleaned with backup
C:\WINNT\dnvhcb.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINNT\gdehwv.exe -> Spyware.180Solutions : Cleaned with backup
C:\WINNT\hr50h6.sys -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\r1afhcbb.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\24a9911s.exe -> Adware.Saha : Cleaned with backup
C:\WINNT\system32\2wtb0q.dll -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\3eaf02bk.exe -> Adware.Saha : Cleaned with backup
C:\WINNT\system32\4ehjpirl.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\70tovmto.ini -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\Cache\MTE1NTA6ODoxMg.exe -> Spyware.iSearch : Cleaned with backup
C:\WINNT\system32\Cache\trgen-fran-default.exe -> Spyware.HotSearchBar.d : Cleaned with backup
C:\WINNT\system32\deivvp9j.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\dq0auj9.exe -> Trojan.Delf.cf : Cleaned with backup
C:\WINNT\system32\dsktrf.dll -> Spyware.Beginto : Cleaned with backup
C:\WINNT\system32\eaum3hko.exe -> Adware.Saha : Cleaned with backup
C:\WINNT\system32\g3nwuc.exe -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\guard.tmp -> Spyware.Look2Me : Cleaned with backup
C:\WINNT\system32\hr50h6.sys -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\jplec.dll -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\jplecf.exe -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\mj9nl3c.dll -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\mmviewer1112.dll -> TrojanDownloader.Agent.cu : Cleaned with backup
C:\WINNT\system32\mmviewer1113.dll -> TrojanDownloader.Agent.cu : Cleaned with backup
C:\WINNT\system32\nsy1122.dll -> Spyware.Beginto : Cleaned with backup
C:\WINNT\system32\nxzmt.dll -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\nxzmtf.exe -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\p9scie4l.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\r3n7tlg9.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\sgxpd.dll -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\sgxpdf.exe -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\sysmonnt.exe -> Trojan.VB.tq : Cleaned with backup
C:\WINNT\system32\tdv169u.exe -> Trojan.Delf.cf : Cleaned with backup
C:\WINNT\system32\windfhk32.exe -> Spyware.ZenoSearch : Cleaned with backup
C:\WINNT\vbkbsxvsiw.exe -> Adware.BetterInternet : Cleaned with backup
::Report End
———————————————————————————————————————————————————————————————-
HJL here
Logfile of HijackThis v1.99.1
Scan saved at 10:06:46 PM, on 09/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
C:\PCWolfTech\security suite\ewidoctrl.exe
C:\PCWolfTech\security suite\ewidoguard.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\wuauclt.exe
C:\WINNT\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINNT\system32\NOTEPAD.EXE
J:\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wolfchat.org/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PCWOLF~1\PROTEC~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)
O4 - HKLM\..\Run: [AVG7_CC] C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\RRIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: ssqpq - ssqpq.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\PCWolfTech\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\PCWolfTech\security suite\ewidoguard.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
———————————————————————————————————————————————————————————————-
Please advise if pc is clean or not, and if its secure or not :-)
and once again , Thank You, all of you, for all your help, inerest and time :-)
WOLFGAR
here is the log from that scan
———————————————————
ewido security suite - Scan report
———————————————————
+ Created on: 9:59:26 PM, 9/12/2005
+ Report-Checksum: 5D115FCB
+ Scan result:
HKLM\SOFTWARE\Classes\CLSID\{83DC91DB-7896-43E3-B34D-A7D043F16BB1} -> Spyware.ClearStream : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BC333116-6EA1-40A1-9D07-ECB192DB8CEA} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\salm -> Spyware.180Solutions : Cleaned with backup
HKLM\SOFTWARE\Preview AdService -> Spyware.BlazeFind : Cleaned with backup
HKLM\SOFTWARE\salm -> Spyware.180Solutions : Cleaned with backup
HKLM\SOFTWARE\SecureWin -> Spyware.Adlogix : Cleaned with backup
C:\Documents and Settings\All Users\Application Data\x2ff\x2ff.dll -> Spyware.RiverAd : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temp\res1.tmp -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Aquatica Waterworlds\AQ3Helper.exe -> Adware.Gator : Cleaned with backup
C:\Program Files\Common Files\wwiq\wwiqp.exe -> Spyware.Xupiter : Cleaned with backup
C:\Program Files\ProSiteFinder\prositefinder.exe -> Spyware.ClearSearch : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP306\A0147014.ocx -> Spyware.Coupon : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147221.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147222.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147267.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147268.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147300.dll -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0147301.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0148874.exe -> Spyware.NewDotNet : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0148907.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP312\A0148908.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP315\A0148916.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP315\A0148917.exe -> Spyware.GogoTools : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/WINNT/System32/mscb.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/Program Files/CashBack/bin/cashback.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/Program Files/CashBack/bin/cb.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149336.ax/C:/Program Files/CashBack/bin/flash.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149337.vxd/C:/WINNT/System32/nvms.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149337.vxd/C:/Program Files/NaviSearch/bin/nls.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149349.exe -> Trojan.Stervis.b : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149350.exe -> Spyware.Suggestor : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP316\A0149352.dll -> Spyware.Suggestor : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149722.dll -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149723.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149731.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149732.dll -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149742.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149743.dll -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149745.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149746.dll -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149747.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149837.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149838.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149839.dll -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149840.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149849.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149850.dll -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149851.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149852.dll -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149853.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149854.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149855.exe -> Spyware.WinAD : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149869.exe -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149870.dll -> Spyware.180Solutions : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149875.exe -> Adware.Saha : Cleaned with backup
C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP341\A0149877.dll -> Adware.SAHA : Cleaned with backup
C:\windows\bundles\runsearch.exe -> Spyware.MegaSearch.d : Cleaned with backup
C:\WINNT\dnvhcb.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINNT\gdehwv.exe -> Spyware.180Solutions : Cleaned with backup
C:\WINNT\hr50h6.sys -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\r1afhcbb.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\24a9911s.exe -> Adware.Saha : Cleaned with backup
C:\WINNT\system32\2wtb0q.dll -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\3eaf02bk.exe -> Adware.Saha : Cleaned with backup
C:\WINNT\system32\4ehjpirl.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\70tovmto.ini -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\Cache\MTE1NTA6ODoxMg.exe -> Spyware.iSearch : Cleaned with backup
C:\WINNT\system32\Cache\trgen-fran-default.exe -> Spyware.HotSearchBar.d : Cleaned with backup
C:\WINNT\system32\deivvp9j.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\dq0auj9.exe -> Trojan.Delf.cf : Cleaned with backup
C:\WINNT\system32\dsktrf.dll -> Spyware.Beginto : Cleaned with backup
C:\WINNT\system32\eaum3hko.exe -> Adware.Saha : Cleaned with backup
C:\WINNT\system32\g3nwuc.exe -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\guard.tmp -> Spyware.Look2Me : Cleaned with backup
C:\WINNT\system32\hr50h6.sys -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\jplec.dll -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\jplecf.exe -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\mj9nl3c.dll -> Trojan.Kolweb.a : Cleaned with backup
C:\WINNT\system32\mmviewer1112.dll -> TrojanDownloader.Agent.cu : Cleaned with backup
C:\WINNT\system32\mmviewer1113.dll -> TrojanDownloader.Agent.cu : Cleaned with backup
C:\WINNT\system32\nsy1122.dll -> Spyware.Beginto : Cleaned with backup
C:\WINNT\system32\nxzmt.dll -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\nxzmtf.exe -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\p9scie4l.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\r3n7tlg9.exe -> Adware.SAHA : Cleaned with backup
C:\WINNT\system32\sgxpd.dll -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\sgxpdf.exe -> Spyware.Adstart : Cleaned with backup
C:\WINNT\system32\sysmonnt.exe -> Trojan.VB.tq : Cleaned with backup
C:\WINNT\system32\tdv169u.exe -> Trojan.Delf.cf : Cleaned with backup
C:\WINNT\system32\windfhk32.exe -> Spyware.ZenoSearch : Cleaned with backup
C:\WINNT\vbkbsxvsiw.exe -> Adware.BetterInternet : Cleaned with backup
::Report End
———————————————————————————————————————————————————————————————-
HJL here
Logfile of HijackThis v1.99.1
Scan saved at 10:06:46 PM, on 09/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
C:\PCWolfTech\security suite\ewidoctrl.exe
C:\PCWolfTech\security suite\ewidoguard.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\wuauclt.exe
C:\WINNT\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINNT\system32\NOTEPAD.EXE
J:\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wolfchat.org/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PCWOLF~1\PROTEC~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)
O4 - HKLM\..\Run: [AVG7_CC] C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\RRIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: ssqpq - ssqpq.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\PCWolfTech\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\PCWolfTech\security suite\ewidoguard.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
———————————————————————————————————————————————————————————————-
Please advise if pc is clean or not, and if its secure or not :-)
and once again , Thank You, all of you, for all your help, inerest and time :-)
WOLFGAR
LDTate
Looking alot better 
I suggest you do this:
In HijackThis click Config > Misc Tools > Delete file on reboot …
and use it to delete:
C:\WINDOWS\System32\ssqpq.dll
Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:
O20 - Winlogon Notify: ssqpq - ssqpq.dll (file missing)
Close ALL windows and browsers except HijackThis and click "Fix checked"
Empty Recycle Bin
Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment.
I suggest you do this:
In HijackThis click Config > Misc Tools > Delete file on reboot …
and use it to delete:
C:\WINDOWS\System32\ssqpq.dll
Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:
O20 - Winlogon Notify: ssqpq - ssqpq.dll (file missing)
Close ALL windows and browsers except HijackThis and click "Fix checked"
Empty Recycle Bin
Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment.
WOLFGAR
Logfile of HijackThis v1.99.1
Scan saved at 10:44:40 PM, on 09/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
C:\PCWolfTech\security suite\ewidoctrl.exe
C:\PCWolfTech\security suite\ewidoguard.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\wuauclt.exe
C:\WINNT\System32\wuauclt.exe
J:\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wolfchat.org/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PCWOLF~1\PROTEC~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)
O4 - HKLM\..\Run: [AVG7_CC] C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\RRIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\PCWolfTech\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\PCWolfTech\security suite\ewidoguard.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
Scan saved at 10:44:40 PM, on 09/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
C:\PCWolfTech\security suite\ewidoctrl.exe
C:\PCWolfTech\security suite\ewidoguard.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\wuauclt.exe
C:\WINNT\System32\wuauclt.exe
J:\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wolfchat.org/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PCWOLF~1\PROTEC~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)
O4 - HKLM\..\Run: [AVG7_CC] C:\PCWOLF~1\PROTEC~1\AVG\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PCWOLF~1\PROTEC~1\AVG\avgemc.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\RRIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PCWOLF~1\PROTEC~1\AVG\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\PCWolfTech\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\PCWolfTech\security suite\ewidoguard.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
LDTate
This is my clean speech 
Great Job
Log looks good How is it running any issues?
Note: This will remove all previous Restore Points
Turn off System Restore:
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Restart your computer, turn it back on.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.
Click Start> My Computer, select the Tools menu and then Folder Options, after the new window appears select the View tab…]
This time select the: Restore Defaults
Select: Apply, and click OK
If you dont have these three programs I would recommend that you get them. Spywareblaster, Spywareguard and IESPY AD. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.
It is critical to have both a firewall and anti virus to protect your system.
Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.
Safe Surfing.
Great Job
Log looks good
How is it running any issues?Note: This will remove all previous Restore Points
Turn off System Restore:
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Restart your computer, turn it back on.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.
Click Start> My Computer, select the Tools menu and then Folder Options, after the new window appears select the View tab…]
This time select the: Restore Defaults
Select: Apply, and click OK
If you dont have these three programs I would recommend that you get them. Spywareblaster, Spywareguard and IESPY AD. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.
It is critical to have both a firewall and anti virus to protect your system.
Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.
Safe Surfing.
WOLFGAR
Thank You Sir. id have never been able to get this right with out you.
your advice was both profesional, and helpful. most importaintly we got the desired results ;-)
Hope to see you and every one else, in that great chat server WolfChat.org :-)
WOLFGAR
LDTate
Great job
You're more then welcome.
Glad we were able to help
Peace be with you 
You're more then welcome.
Glad we were able to help
Peace be with you
LDTate
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoyote.org/index.php?showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoyote.org/index.php?showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI