Ive been getting the popup from AVG that there is a Klone virus, also been getting popups from winantivirus pro, I'm a complete novice at this and have no clue what to do to remove them. please help!
thanks
ceara
I took this HijackThis log a few minutes ago
Logfile of HijackThis v1.99.1
Scan saved at 3:07:50 PM, on 10/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Rename your copy of hijackthis.exe to findstuff.exe and post a fresh log run in Normal Mode. It's possible that this nasty is interfering with the normal working of HJT in order to hide itself and renaming the .exe will get around this.
this is the program list
A Series of Unfortunate Events (remove only)
Absolute Fit-trix 1.0.2
Ad-Aware SE Personal
aditltheme.zip
Adobe Acrobat - Reader 6.0.2 Update
Adobe Acrobat 4.0, 5.0
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Download Manager 1.2 (Remove Only)
Adobe Photoshop 5.0 Limited Edition
Adobe Photoshop 7.0
Adobe Photoshop Album 2.0 Starter Edition
Adobe Reader 6.0.1
ahatfullofluckwp.zip
ArcSoft PhotoImpression
aspi
Atlantis (remove only)
Autumn Cardinals_SS
Autumn Flight
Autumn Glory Active
autumncardinalsss.exe
AVG Free Edition
BCM V.92 56K Modem
Beautiful Portrait Humming Bird Photography
Bejeweled 2 Deluxe 1.0
BestOn Software
bookoflife.zip
Canon i560
CCHelp
CCScore
Celestrial Birth Active
Christmas Lights
Christmas Ornaments
Christmas Time
ClarisWorks 4.0
Classic PhoneTools
Cold as Ice Wallpaper
Crime Puzzle 1.0
Da Vinci`s Secret (remove only)
Dell Digital Jukebox Driver
Dell Media Experience
Dell ResourceCD
Dell Solution Center
Dell Support 5.0.0 (766)
Desktop Angel
DVDSentry
earthandskyscr.zip
Easy CD Creator 5 Platinum
EKS Sherlock 5.0
eMazing Mazes
Emerald Skies
End Of A Long Journey 1024x768
EPSON Copy Utility
EPSON PERF 1670 Guide
EPSON Photo Print
EPSON Scan
EPSON Smart Panel
ESSAdpt
ESSANUP
ESSBrwr
ESSCAM
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSstore
ESSTUTOR
ESSvpaht
ESSvpot
Eye Candy 4000
eZshopper
Family Feud Hollywood Edition (remove only)
Family Tree Maker 9.0
Google Talk (remove only)
Google Toolbar for Internet Explorer
Happy Holiday
Harry Potter
Harry Potter and the Prisoner of Azkaban™
Harry Potter II
Harry Potter Lumos Screen Saver
Hidden Expedition - Titanic (remove only)
Hidden Expedition Titanic (remove only)
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
Hijackthis 1.99.1
HijackThis 1.99.1
Hogwarts4 Active
HummingbirdHaven2WP
ICQ
Images of Spring
Incrediball Level Pack 1 1.0
Intel® PRO Network Adapters and Drivers
Intel® PROSet
InterActual Player
Jasc Paint Shop Photo Album
Jasc Paint Shop Pro 8 Dell Edition
Java 2 Runtime Environment, SE v1.4.2
Jewel Quest
Kodak EasyShare software
KSU
Lighthouse Active
LimeWire
LimeWire 4.10.3
Lizardtech DjVu Control
Lizardtech Express View Browser Plug-in
Logitech Gaming Software
Looking For Santa
LOTR The Return of the King tm
Macromedia Flash Player 8
Macromedia Shockwave Player
Magic Ball 2 New Worlds
Magic Vines (remove only)
magical4 Screen Saver
Mahjong Quest
Mahjongg XP Championship 2006 Platinum Edition
Merry Christmas Darling Screen Saver
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Data Access Components KB870669
Microsoft Encarta Encyclopedia Standard 2004
Microsoft Money 2004
Microsoft Money 2004 System Pack
Microsoft Office 97, Professional Edition
Microsoft Windows Media Video 9 VCM
Microsoft Word 2000
Modem Helper
Moraff's Maximum MahJongg 1.0
MrSID Browser Plug-in 1.3
MSN
MuggleNet.com's Harry Potter and the Prisoner of Azkaban Screensaver
Music Visualizer Library 1.4.00
MUSICMATCH® Jukebox
Mystery Case Files - Huntsville (remove only)
Mystery Case Files - Prime Suspects (remove only)
Net MD Simple Burner
Night Before Christmas Saver
Notifier
NVIDIA Windows 2000/XP Display Drivers
OpenMG Limited Patch 3.2-03-02-21-08
OpenMG Limited Patch 3.2-03-04-14-02
OpenMG Limited Patch 3.2-03-04-17-02
OpenMG Secure Module 3.2
OTtBP
Paint Shop Pro 7
PC CameraQ
PCDLNCH
PICVideo Codecs
Pix-Fit 1.0
PowerDVD
Pretty Good MahJongg version 1.11
Pretty Good Solitaire - Additional Card Sets 1.0
Pretty Good Solitaire - Christmas Card Set 1.0.2
Pretty Good Solitaire - Elegant Card Set 1.1
Pretty Good Solitaire - Halloween Card Set 1.0
Pretty Good Solitaire version 9.1.0
Princess Diaries SE Screen Saver
Pumpkin Patch Babies
Pumpkin Pines
Quick! Toolbar
QuickTax 2003 Standard
QuickTax 2004
QuickTax 2005
RealArcade
RealPlayer
Red Hawk
RollerCoaster Tycoon Deluxe
Ruby Throated Hummingbird 1024x768
Sandlot Games Client Services
Santa Balls
ScanToWeb
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB925486)
SFR
SFR2
Shockwave
Snow Bench
Sonic DLA
Sonic RecordNow!
Sonic Update Manager
SonicStage 1.5.53
Sound Blaster Live!
Spybot - Search & Destroy 1.4
Sunset River with Birds
Super Slyder 1.09
SysProtect [removed]
The Da Vinci Code (remove only)
The Hobbit™
The Muse Wallpaper
The Polar Express Screen Saver
The Sims 2
The Sims 2 Family Fun Stuff
The Sims 2 HomeCrafter Plus
The Sims 2 Nightlife
The Sims 2 University
thunderonthef.zip
tranquilty.exe
Tumblebugs (remove only)
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
USB MassStorage CardReader
Viewpoint Manager (Remove Only)
Viewpoint Toolbar (Remove Only)
Virtual Villagers (remove only)
VPN Client
VSToolbar for Internet Explorer
waithalow1024wp.zip
Web Savings from Ebates
WebSearch Tools
Weeping Willow
Winamp (remove only)
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Live Messenger
Windows Media Format Runtime
Windows Media Player 10
Windows SR 5.0
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
Winnie the Pooh 010
Witches Home 1024x768
WordPerfect Office 11
Yahoo! Messenger
Zoo Tycoon: Complete Collection
ok…im not sure exactly how to rename hijackthis, i dont want to screw up the program, sorry
Navigate to C:\Program Files\Hijackthis\HijackThis.exe, right click HijackThis.exe and select Rename from the menu.
Change the name to findstuff.exe and then post a fresh HJT log run in Normal Mode.
Logfile of HijackThis v1.99.1
Scan saved at 7:46:48 PM, on 10/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Download VundoFix.exe by Atribune from here and save it to your desktop.to your desktop.
Close all open programs and windows as this may require a reboot.
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Post the contents of C:\vundofix.txt and a new HiJackThis log.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.
the vonduFix report
VundoFix V6.2.6
Checking Java version…
Scan started at 1:35:18 PM 10/20/2006
Listing files found while scanning….
C:\WINDOWS\colg.dll
C:\WINDOWS\fmcniet.dll
C:\WINDOWS\nifoloe.dll
C:\WINDOWS\odssmvc.dll
C:\WINDOWS\untocm.dll
C:\WINDOWS\ADDINS\smpi.dll
C:\WINDOWS\ADDINS\tuilbv.dll
C:\WINDOWS\AppPatch\atpiibn.dll
C:\WINDOWS\AppPatch\bvtfp.dll
C:\WINDOWS\AppPatch\smvcodc.dll
C:\WINDOWS\assembly\GAC\Accessibility\nietvdd.dll
C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\ualasis.dll
C:\WINDOWS\assembly\temp\ajvanati.dll
C:\WINDOWS\assembly\temp\ibnmws.dll
C:\WINDOWS\Config\idskrdv.dll
C:\WINDOWS\Config\ofntcm.dll
C:\WINDOWS\Cursors\arsva.dll
C:\WINDOWS\Cursors\awvemcd.dll
C:\WINDOWS\Cursors\dobccp.dll
C:\WINDOWS\Fonts\cpocm.dll
C:\WINDOWS\Fonts\ewbatpi.dll
C:\WINDOWS\Fonts\ilbodc.dll
C:\WINDOWS\Fonts\cdobli.tmp
C:\WINDOWS\Fonts\olgw.dll
C:\WINDOWS\Fonts\pas.dll
C:\WINDOWS\Help\ibnlpay.dll
C:\WINDOWS\Help\ibnsis.dll
C:\WINDOWS\Help\SBSI\sprul.dll
C:\WINDOWS\INF\acbibn.dll
C:\WINDOWS\INF\actidsk.dll
C:\WINDOWS\INF\ergajva.dll
C:\WINDOWS\INF\smamin.dll
C:\WINDOWS\Microsoft.NET\abkctp.dll
C:\WINDOWS\Microsoft.NET\arsent.dll
C:\WINDOWS\Microsoft.NET\miggva.dll
C:\WINDOWS\Microsoft.NET\avggim.bak1
C:\WINDOWS\Microsoft.NET\avggim.tmp
C:\WINDOWS\Microsoft.NET\ndsact.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ekys.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ibnent.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\odsw.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ruls.dll
C:\WINDOWS\MSAGENT\nifoiwn.dll
C:\WINDOWS\MSAGENT\odcabs.dll
C:\WINDOWS\MSAGENT\odcloe.dll
C:\WINDOWS\MSAGENT\tuilewb.dll
C:\WINDOWS\MSAGENT\urnnati.dll
C:\WINDOWS\REPAIR\abkocm.dll
C:\WINDOWS\REPAIR\ajvaca.dll
C:\WINDOWS\REPAIR\acavja.ini
C:\WINDOWS\SECURITY\cacnds.dll
C:\WINDOWS\SECURITY\LOGS\entfmc.dll
C:\WINDOWS\SECURITY\LOGS\smca.dll
C:\WINDOWS\ServicePackFiles\arsocm.dll
C:\WINDOWS\ServicePackFiles\cmc.dll
C:\WINDOWS\ServicePackFiles\dadobc.dll
C:\WINDOWS\ServicePackFiles\dobcc.dll
C:\WINDOWS\ServicePackFiles\mxlxep.dll
C:\WINDOWS\ServicePackFiles\rulloe.dll
C:\WINDOWS\ServicePackFiles\eollur.ini
C:\WINDOWS\ServicePackFiles\eollur.bak1
C:\WINDOWS\ServicePackFiles\eollur.bak2
C:\WINDOWS\ServicePackFiles\eollur.ini2
C:\WINDOWS\ServicePackFiles\eollur.tmp
C:\WINDOWS\ServicePackFiles\vddpm3.dll
C:\WINDOWS\SYSTEM\cpunt.dll
C:\WINDOWS\SYSTEM\ilbibn.dll
C:\WINDOWS\SYSTEM\ilblpay.dll
C:\WINDOWS\SYSTEM\loeidsk.dll
C:\WINDOWS\SYSTEM32\3COM_DMI\capm3.dll
C:\WINDOWS\SYSTEM32\Com\daafx.dll
C:\WINDOWS\SYSTEM32\DRVSTORE\entolg.dll
C:\WINDOWS\SYSTEM32\MsDtc\lpayolg.dll
C:\WINDOWS\Web\atskabk.dll
C:\WINDOWS\Web\iwncm.dll
C:\WINDOWS\Web\smw.dll
C:\WINDOWS\Web\PRINTERS\loemig.dll
C:\WINDOWS\SYSTEM32\brxxjsfe.exe
C:\WINDOWS\SYSTEM32\ghgyckjt.exe
C:\WINDOWS\SYSTEM32\ljlrmfmm.exe
C:\WINDOWS\SYSTEM32\xfeurorp.exe
C:\WINDOWS\SYSTEM32\yivvsqpj.exe
C:\WINDOWS\ServicePackFiles\rulloe.dll
C:\WINDOWS\Fonts\cdobli.tmp
C:\WINDOWS\Microsoft.NET\avggim.bak1
C:\WINDOWS\Microsoft.NET\avggim.tmp
C:\WINDOWS\REPAIR\acavja.ini
C:\WINDOWS\ServicePackFiles\eollur.ini
C:\WINDOWS\ServicePackFiles\eollur.bak1
C:\WINDOWS\ServicePackFiles\eollur.bak2
C:\WINDOWS\ServicePackFiles\eollur.ini2
C:\WINDOWS\ServicePackFiles\eollur.tmp
C:\WINDOWS\ServicePackFiles\eollur.ini
C:\WINDOWS\ServicePackFiles\eollur.bak1
C:\WINDOWS\ServicePackFiles\eollur.bak2
C:\WINDOWS\ServicePackFiles\eollur.ini2
C:\WINDOWS\ServicePackFiles\eollur.tmp
Beginning removal…
Attempting to delete C:\WINDOWS\colg.dll
C:\WINDOWS\colg.dll Has been deleted!
Attempting to delete C:\WINDOWS\fmcniet.dll
C:\WINDOWS\fmcniet.dll Has been deleted!
Attempting to delete C:\WINDOWS\nifoloe.dll
C:\WINDOWS\nifoloe.dll Has been deleted!
Attempting to delete C:\WINDOWS\odssmvc.dll
C:\WINDOWS\odssmvc.dll Has been deleted!
Attempting to delete C:\WINDOWS\untocm.dll
C:\WINDOWS\untocm.dll Has been deleted!
Attempting to delete C:\WINDOWS\ADDINS\smpi.dll
C:\WINDOWS\ADDINS\smpi.dll Has been deleted!
Attempting to delete C:\WINDOWS\ADDINS\tuilbv.dll
C:\WINDOWS\ADDINS\tuilbv.dll Has been deleted!
Attempting to delete C:\WINDOWS\AppPatch\atpiibn.dll
C:\WINDOWS\AppPatch\atpiibn.dll Has been deleted!
Attempting to delete C:\WINDOWS\AppPatch\bvtfp.dll
C:\WINDOWS\AppPatch\bvtfp.dll Has been deleted!
Attempting to delete C:\WINDOWS\AppPatch\smvcodc.dll
C:\WINDOWS\AppPatch\smvcodc.dll Has been deleted!
Attempting to delete C:\WINDOWS\assembly\GAC\Accessibility\nietvdd.dll
C:\WINDOWS\assembly\GAC\Accessibility\nietvdd.dll Has been deleted!
Attempting to delete C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\ualasis.dll
C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\ualasis.dll Has been deleted!
Attempting to delete C:\WINDOWS\assembly\temp\ajvanati.dll
C:\WINDOWS\assembly\temp\ajvanati.dll Has been deleted!
Attempting to delete C:\WINDOWS\assembly\temp\ibnmws.dll
C:\WINDOWS\assembly\temp\ibnmws.dll Has been deleted!
Attempting to delete C:\WINDOWS\Config\idskrdv.dll
C:\WINDOWS\Config\idskrdv.dll Has been deleted!
Attempting to delete C:\WINDOWS\Config\ofntcm.dll
C:\WINDOWS\Config\ofntcm.dll Has been deleted!
Attempting to delete C:\WINDOWS\Cursors\arsva.dll
C:\WINDOWS\Cursors\arsva.dll Has been deleted!
Attempting to delete C:\WINDOWS\Cursors\awvemcd.dll
C:\WINDOWS\Cursors\awvemcd.dll Has been deleted!
Attempting to delete C:\WINDOWS\Cursors\dobccp.dll
C:\WINDOWS\Cursors\dobccp.dll Has been deleted!
Attempting to delete C:\WINDOWS\Fonts\cpocm.dll
C:\WINDOWS\Fonts\cpocm.dll Has been deleted!
Attempting to delete C:\WINDOWS\Fonts\ewbatpi.dll
C:\WINDOWS\Fonts\ewbatpi.dll Has been deleted!
Attempting to delete C:\WINDOWS\Fonts\ilbodc.dll
C:\WINDOWS\Fonts\ilbodc.dll Has been deleted!
Attempting to delete C:\WINDOWS\Fonts\cdobli.tmp
C:\WINDOWS\Fonts\cdobli.tmp Has been deleted!
Attempting to delete C:\WINDOWS\Fonts\olgw.dll
C:\WINDOWS\Fonts\olgw.dll Has been deleted!
Attempting to delete C:\WINDOWS\Fonts\pas.dll
C:\WINDOWS\Fonts\pas.dll Has been deleted!
Attempting to delete C:\WINDOWS\Help\ibnlpay.dll
C:\WINDOWS\Help\ibnlpay.dll Has been deleted!
Attempting to delete C:\WINDOWS\Help\ibnsis.dll
C:\WINDOWS\Help\ibnsis.dll Has been deleted!
Attempting to delete C:\WINDOWS\Help\SBSI\sprul.dll
C:\WINDOWS\Help\SBSI\sprul.dll Has been deleted!
Attempting to delete C:\WINDOWS\INF\acbibn.dll
C:\WINDOWS\INF\acbibn.dll Has been deleted!
Attempting to delete C:\WINDOWS\INF\actidsk.dll
C:\WINDOWS\INF\actidsk.dll Has been deleted!
Attempting to delete C:\WINDOWS\INF\ergajva.dll
C:\WINDOWS\INF\ergajva.dll Has been deleted!
Attempting to delete C:\WINDOWS\INF\smamin.dll
C:\WINDOWS\INF\smamin.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\abkctp.dll
C:\WINDOWS\Microsoft.NET\abkctp.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\arsent.dll
C:\WINDOWS\Microsoft.NET\arsent.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\miggva.dll
C:\WINDOWS\Microsoft.NET\miggva.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\avggim.bak1
C:\WINDOWS\Microsoft.NET\avggim.bak1 Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\avggim.tmp
C:\WINDOWS\Microsoft.NET\avggim.tmp Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\ndsact.dll
C:\WINDOWS\Microsoft.NET\ndsact.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ekys.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ekys.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ibnent.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ibnent.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\odsw.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\odsw.dll Has been deleted!
Attempting to delete C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ruls.dll
C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\ruls.dll Has been deleted!
Attempting to delete C:\WINDOWS\MSAGENT\nifoiwn.dll
C:\WINDOWS\MSAGENT\nifoiwn.dll Has been deleted!
Attempting to delete C:\WINDOWS\MSAGENT\odcabs.dll
C:\WINDOWS\MSAGENT\odcabs.dll Has been deleted!
Attempting to delete C:\WINDOWS\MSAGENT\odcloe.dll
C:\WINDOWS\MSAGENT\odcloe.dll Has been deleted!
Attempting to delete C:\WINDOWS\MSAGENT\tuilewb.dll
C:\WINDOWS\MSAGENT\tuilewb.dll Has been deleted!
Attempting to delete C:\WINDOWS\MSAGENT\urnnati.dll
C:\WINDOWS\MSAGENT\urnnati.dll Has been deleted!
Attempting to delete C:\WINDOWS\REPAIR\abkocm.dll
C:\WINDOWS\REPAIR\abkocm.dll Has been deleted!
Attempting to delete C:\WINDOWS\REPAIR\ajvaca.dll
C:\WINDOWS\REPAIR\ajvaca.dll Has been deleted!
Attempting to delete C:\WINDOWS\REPAIR\acavja.ini
C:\WINDOWS\REPAIR\acavja.ini Has been deleted!
Attempting to delete C:\WINDOWS\SECURITY\cacnds.dll
C:\WINDOWS\SECURITY\cacnds.dll Has been deleted!
Attempting to delete C:\WINDOWS\SECURITY\LOGS\entfmc.dll
C:\WINDOWS\SECURITY\LOGS\entfmc.dll Has been deleted!
Attempting to delete C:\WINDOWS\SECURITY\LOGS\smca.dll
C:\WINDOWS\SECURITY\LOGS\smca.dll Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\arsocm.dll
C:\WINDOWS\ServicePackFiles\arsocm.dll Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\cmc.dll
C:\WINDOWS\ServicePackFiles\cmc.dll Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\dadobc.dll
C:\WINDOWS\ServicePackFiles\dadobc.dll Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\dobcc.dll
C:\WINDOWS\ServicePackFiles\dobcc.dll Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\mxlxep.dll
C:\WINDOWS\ServicePackFiles\mxlxep.dll Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\rulloe.dll
C:\WINDOWS\ServicePackFiles\rulloe.dll Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\eollur.ini
C:\WINDOWS\ServicePackFiles\eollur.ini Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\eollur.bak1
C:\WINDOWS\ServicePackFiles\eollur.bak1 Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\eollur.bak2
C:\WINDOWS\ServicePackFiles\eollur.bak2 Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\eollur.ini2
C:\WINDOWS\ServicePackFiles\eollur.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\eollur.tmp
C:\WINDOWS\ServicePackFiles\eollur.tmp Has been deleted!
Attempting to delete C:\WINDOWS\ServicePackFiles\vddpm3.dll
C:\WINDOWS\ServicePackFiles\vddpm3.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM\cpunt.dll
C:\WINDOWS\SYSTEM\cpunt.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM\ilbibn.dll
C:\WINDOWS\SYSTEM\ilbibn.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM\ilblpay.dll
C:\WINDOWS\SYSTEM\ilblpay.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM\loeidsk.dll
C:\WINDOWS\SYSTEM\loeidsk.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\3COM_DMI\capm3.dll
C:\WINDOWS\SYSTEM32\3COM_DMI\capm3.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\Com\daafx.dll
C:\WINDOWS\SYSTEM32\Com\daafx.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\DRVSTORE\entolg.dll
C:\WINDOWS\SYSTEM32\DRVSTORE\entolg.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\MsDtc\lpayolg.dll
C:\WINDOWS\SYSTEM32\MsDtc\lpayolg.dll Has been deleted!
Attempting to delete C:\WINDOWS\Web\atskabk.dll
C:\WINDOWS\Web\atskabk.dll Has been deleted!
Attempting to delete C:\WINDOWS\Web\iwncm.dll
C:\WINDOWS\Web\iwncm.dll Has been deleted!
Attempting to delete C:\WINDOWS\Web\smw.dll
C:\WINDOWS\Web\smw.dll Has been deleted!
Attempting to delete C:\WINDOWS\Web\PRINTERS\loemig.dll
C:\WINDOWS\Web\PRINTERS\loemig.dll Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\brxxjsfe.exe
C:\WINDOWS\SYSTEM32\brxxjsfe.exe Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\ghgyckjt.exe
C:\WINDOWS\SYSTEM32\ghgyckjt.exe Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\ljlrmfmm.exe
C:\WINDOWS\SYSTEM32\ljlrmfmm.exe Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\xfeurorp.exe
C:\WINDOWS\SYSTEM32\xfeurorp.exe Has been deleted!
Attempting to delete C:\WINDOWS\SYSTEM32\yivvsqpj.exe
C:\WINDOWS\SYSTEM32\yivvsqpj.exe Has been deleted!
Performing Repairs to the registry.
Done!
Logfile of HijackThis v1.99.1
Scan saved at 1:49:21 PM, on 10/20/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
also since this started a trojen has started popping up called generic or something like that
It's going to be very difficult to identify the infection if you don't give me the information that AVG is giving you.
If AVG tells you what the infection is and the file names and paths, make a note of them and include them in your next reply.
You will need to make a copy of these instructions because you have to disconnect from the internet to complete the fix. Either print them out or copy and paste them into Notepad.
Preparation
1) Download the trial version of AVG Anti-Spyware 7.5 from here and save it to your Desktop. If you already have this program installed, skip to Updating AVG Anti-Spyware: below.
* Please note that this program was formerly known as Ewido anti-spyware 4.0.
Taken from the Ewido website -
ewido anti-spyware 4.0 will now continue under the new product name AVG Anti-Spyware 7.5. AVG Anti-Spyware 7.5 contains the same ewido technology, but with some further enhanced features:
Highly improved cleaning
Lower resource usage
Additional languages supported
All current licenses for ewido anti-spyware 4.0 will continue to be valid, and users can change over to the new AVG Anti-Spyware 7.5 for free.
Double click the avgas-setup file to begin installation and follow the prompts.
When the program has been installed, and you click the Finish button, AVG A-S will open.
Updating AVG Anti-Spyware:
By default AVG A-S is configured to update automatically so, if you have an active internet connection, it should do so following installation. If you are unsure whether or not it has done so, do the following:
Click the Update icon at the top and under "Manual Update" - click the Start update button.
Either AVG A-S will update or inform you that no update was available.
If you cannot access the internet with the infected PC, or you are having problems updating, you can download the signatures file from here.
Once you have installed AVG A-S, double click ewido-signatures-full-current.exe to update it.
Disabling the Resident Shield:
By default the Resident Shield is active but as it may interfere with the process of cleaning your PC, it will need to be disabled.
(When the PC has been cleaned you can activate the shield again, if you wish.)
Click the Shield icon at the top and under "Resident shield is…" - click active.
This should now change to inactive.
Changing Recommended Actions
Click the Scanner icon at the top and then click the Settings Tab.
Under "How to act?" click Recommended actions and select "Quarantine" from the menu.
You can now close AVG A-S.
AVG A-S is designed to be used to both scan for and remove malicious files and also to run in real-time alongside, but not replace, your existing anti-virus program to give an added layer of protection.
Both the Resident Shield and Automatic Updates will only be available for the thirty day trial period, after that AVG A-S will revert to a stand-alone scanner which you can keep and manually update for free and use in a similar way to Ad-Aware SE Personal, Spybot S&D etc.
Should you wish to benefit from the real-time protection, you will need to upgrade the program. To do this, simply open it and click on the Buy now button.
2) You will need to know how to boot into Safe Mode.
Instructions can be found here.
3) You will need to set Windows to show All Hidden Files and Folders.
Instructions can be found here. ** These files are hidden to stop you accidentally removing something important.
It is advisable to hide them again after fixing your computer. **
4) Log off from the internet and disconnect your modem cable for the duration of the fix.
Removal
1) Go to Start > Control Panel > Add/Remove Programs and remove the following, and then reboot your PC:
VSToolBar
1) Run HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: (no name) - {1109F444-EFA0-446F-BFB0-F755B1278153} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\mcxwlgsd.dll (file missing)
O2 - BHO: ohb Class - {285B5CCD-C3F0-4EB6-9632-7D0A3C3AF824} - C:\WINDOWS\system32\hsrb.dll (file missing)
O2 - BHO: (no name) - {291EBEDD-5645-48B7-B0D1-805582EC3B29} - C:\WINDOWS\system32\hntutrnq.dll
O2 - BHO: (no name) - {2E5C7C61-C031-4CC9-8A4D-AAA00C57F635} - C:\WINDOWS\system32\hntutrnq.dll
O2 - BHO: (no name) - {4A22E1FE-5793-490D-8259-9F4F0CABF117} - (no file)
O2 - BHO: Quick! - {4E7BD74F-2B8D-469E-C0FF-FD67B79CAF2C} - C:\PROGRA~1\quickbar\quickbar.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {54AAEFC7-9717-4A6C-A676-A1E04DC1D34D} - (no file)
O2 - BHO: (no name) - {7AE965D0-E0D3-4C94-8E1A-2ABCD63905EC} - (no file)
O2 - BHO: (no name) - {7C1ADA1D-3AA1-4ACF-AE4B-F80B30EDEDC2} - (no file)
O2 - BHO: (no name) - {80A6BD25-4DC6-4549-AD72-A2E39D69D7B7} - (no file)
O2 - BHO: (no name) - {AF01BD28-6E72-4D9E-A333-8E8C0B245236} - C:\WINDOWS\system32\hntutrnq.dll
O2 - BHO: (no name) - {B04AEE3A-FADF-47A8-97D0-E68FE029E8C1} - C:\WINDOWS\ServicePackFiles\rulloe.dll (file missing)
O2 - BHO: (no name) - {B7A016B6-127C-4C94-A53A-AF9082D4FB2c} - C:\WINDOWS\system32\hntutrnq.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked
2) Boot into Safe Mode.
3) Navigate to the C:\Windows\Temp folder and delete all the files that you find there.
Do this for all Usernames.
4) Navigate to C:\Documents and Settings\Username\Local Settings\Temp and delete all the files that you find there.
Do this for all Usernames.
5) Go to Start > Control Panel > Internet Options and under Temporary Internet files, click on Delete Files…
Check the box to the left of 'Delete all offline content' and then click on OK.
6) Ensure that ALL open Windows / Programs / Folders are closed and then run AVG Anti-Spyware.
If it is not already selected, click the Scanner icon at the top and then select the Scan Tab.
Click "Complete System Scan"
While the scan is in progress the PC should be left otherwise idle - so if you fancy a cuppa, now's the time to put the kettle on!
When the scan has completed, any threats that AVG A-S has detected will be displayed.
Click the Apply all actions button at the bottom.
When AVG A-S has finished, it will display the message "All actions have been applied".
Saving a report:
Click the Save Report button at the bottom left and the "Reports" window will open.
The content of the scan report will be displayed in the right hand pane and a copy will be automatically saved as Report-Scan-date-time.txt into the C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Reports folder.
You will need to post a copy of this report into your next reply, so if it is more convenient, you can save another copy of this report elsewhere:
Click the Save report as button and select a destination by clicking the down arrow to the right of the Save in: text box and then click Save.
Close AVG Anti-Spyware.
7) Remove any/all of the following files/folders that you can find:
As an example:
To delete C:\WINDOWS\system32\foldertogo
Double click the My Computer icon on your Desktop.
Double click on Local Disc (C:)
Double click on the Windows folder,
Double click on the System 32 folder,
Right click on foldertogo and from the menu that appears, click on 'Delete'
EDIT: Do this as well before you run HJT and create the logs:
Download DelDomains.inf from here and save it to your Desktop. * If you use Firefox, right click the link and from the menu that appears, click on Save Link As…*
Right click on DelDomains.inf and from the menu that appears, click on Install.
* Please Note: If you use SpywareBlaster and/or IE/Spyads, it will be necessary to re-install the protection both afford. For SpywareBlaster, run the program and re-protect all items. For IE/Spyads, run the batch file and reinstall the protection *
Logfile of HijackThis v1.99.1
Scan saved at 1:34:28 PM, on 10/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
program list file
A Series of Unfortunate Events (remove only)
Absolute Fit-trix 1.0.2
Ad-Aware SE Personal
aditltheme.zip
Adobe Acrobat - Reader 6.0.2 Update
Adobe Acrobat 4.0, 5.0
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Download Manager 1.2 (Remove Only)
Adobe Photoshop 5.0 Limited Edition
Adobe Photoshop 7.0
Adobe Photoshop Album 2.0 Starter Edition
Adobe Reader 6.0.1
ahatfullofluckwp.zip
ArcSoft PhotoImpression
aspi
Atlantis (remove only)
Autumn Cardinals_SS
Autumn Flight
Autumn Glory Active
autumncardinalsss.exe
AVG Anti-Spyware 7.5
AVG Free Edition
BCM V.92 56K Modem
Beautiful Portrait Humming Bird Photography
Bejeweled 2 Deluxe 1.0
BestOn Software
bookoflife.zip
Canon i560
CCHelp
CCScore
Celestrial Birth Active
Christmas Lights
Christmas Ornaments
Christmas Time
ClarisWorks 4.0
Classic PhoneTools
Cold as Ice Wallpaper
Crime Puzzle 1.0
Da Vinci`s Secret (remove only)
Dell Digital Jukebox Driver
Dell Media Experience
Dell ResourceCD
Dell Solution Center
Dell Support 5.0.0 (766)
Desktop Angel
DVDSentry
earthandskyscr.zip
Easy CD Creator 5 Platinum
EKS Sherlock 5.0
eMazing Mazes
Emerald Skies
End Of A Long Journey 1024x768
EPSON Copy Utility
EPSON PERF 1670 Guide
EPSON Photo Print
EPSON Scan
EPSON Smart Panel
ESSAdpt
ESSANUP
ESSBrwr
ESSCAM
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSstore
ESSTUTOR
ESSvpaht
ESSvpot
Eye Candy 4000
eZshopper
Family Feud Hollywood Edition (remove only)
Family Tree Maker 9.0
Google Talk (remove only)
Google Toolbar for Internet Explorer
Happy Holiday
Harry Potter
Harry Potter and the Prisoner of Azkaban™
Harry Potter II
Harry Potter Lumos Screen Saver
Hidden Expedition - Titanic (remove only)
Hidden Expedition Titanic (remove only)
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
Hijackthis 1.99.1
HijackThis 1.99.1
Hogwarts4 Active
HummingbirdHaven2WP
ICQ
Images of Spring
Incrediball Level Pack 1 1.0
Intel® PRO Network Adapters and Drivers
Intel® PROSet
InterActual Player
Jasc Paint Shop Photo Album
Jasc Paint Shop Pro 8 Dell Edition
Java 2 Runtime Environment, SE v1.4.2
Jewel Quest
Kodak EasyShare software
KSU
Lighthouse Active
LimeWire
LimeWire 4.10.3
Lizardtech DjVu Control
Lizardtech Express View Browser Plug-in
Logitech Gaming Software
Looking For Santa
LOTR The Return of the King tm
Macromedia Flash Player 8
Macromedia Shockwave Player
Magic Ball 2 New Worlds
Magic Vines (remove only)
magical4 Screen Saver
Mahjong Quest
Mahjongg Artifacts
Mahjongg XP Championship 2006 Platinum Edition
Merry Christmas Darling Screen Saver
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Data Access Components KB870669
Microsoft Encarta Encyclopedia Standard 2004
Microsoft Money 2004
Microsoft Money 2004 System Pack
Microsoft Office 97, Professional Edition
Microsoft Windows Media Video 9 VCM
Microsoft Word 2000
Modem Helper
Moraff's Maximum MahJongg 1.0
MrSID Browser Plug-in 1.3
MSN
MuggleNet.com's Harry Potter and the Prisoner of Azkaban Screensaver
Music Visualizer Library 1.4.00
MUSICMATCH® Jukebox
Mystery Case Files - Huntsville (remove only)
Mystery Case Files - Prime Suspects (remove only)
Net MD Simple Burner
Night Before Christmas Saver
Notifier
NVIDIA Windows 2000/XP Display Drivers
OpenMG Limited Patch 3.2-03-02-21-08
OpenMG Limited Patch 3.2-03-04-14-02
OpenMG Limited Patch 3.2-03-04-17-02
OpenMG Secure Module 3.2
OTtBP
Paint Shop Pro 7
PC CameraQ
PCDLNCH
PICVideo Codecs
Pix-Fit 1.0
PowerDVD
Pretty Good MahJongg version 1.11
Pretty Good Solitaire - Additional Card Sets 1.0
Pretty Good Solitaire - Christmas Card Set 1.0.2
Pretty Good Solitaire - Elegant Card Set 1.1
Pretty Good Solitaire - Halloween Card Set 1.0
Pretty Good Solitaire version 9.1.0
Princess Diaries SE Screen Saver
Pumpkin Patch Babies
Pumpkin Pines
Quick! Toolbar
QuickTax 2003 Standard
QuickTax 2004
QuickTax 2005
RealArcade
RealPlayer
Red Hawk
RollerCoaster Tycoon Deluxe
Ruby Throated Hummingbird 1024x768
Sandlot Games Client Services
Santa Balls
ScanToWeb
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB925486)
SFR
SFR2
Shockwave
Snow Bench
Sonic DLA
Sonic RecordNow!
Sonic Update Manager
SonicStage 1.5.53
Sound Blaster Live!
Spybot - Search & Destroy 1.4
Sunset River with Birds
Super Slyder 1.09
SysProtect [removed]
The Da Vinci Code (remove only)
The Hobbit™
The Muse Wallpaper
The Polar Express Screen Saver
The Sims 2
The Sims 2 Family Fun Stuff
The Sims 2 HomeCrafter Plus
The Sims 2 Nightlife
The Sims 2 University
thunderonthef.zip
tranquilty.exe
Tumblebugs (remove only)
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
USB MassStorage CardReader
Viewpoint Manager (Remove Only)
Viewpoint Toolbar (Remove Only)
Virtual Villagers (remove only)
VPN Client
waithalow1024wp.zip
Web Savings from Ebates
WebSearch Tools
Weeping Willow
Winamp (remove only)
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Live Messenger
Windows Media Format Runtime
Windows Media Player 10
Windows SR 5.0
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
Winnie the Pooh 010
Witches Home 1024x768
WordPerfect Office 11
Yahoo! Messenger
Zoo Tycoon: Complete Collection
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI