Guild Wars Forums - GW Guru
 
 

Go Back   Guild Wars Forums - GW Guru > Forest of True Sight > Technician's Corner > Software

Notices

Reply
 
Thread Tools Display Modes
Old Oct 25, 2008, 11:03 AM // 11:03   #1
Lion's Arch Merchant
 
Fowler's Avatar
 
Join Date: Feb 2006
Location: USA
Profession: E/
Advertisement

Disable Ads
Default Virtumonde and Privacy remover!

GUYS! Hey all! I have just installed new Win Xp.I use Avast Antivirus.I receive msg that my cmop is infected with this...And my desktop picture changed and I c Windows Message. Avas cant detect them.PLZ help me! WHAT CAN I DO! I AM IN PANIC!
Fowler is offline   Reply With Quote
Old Oct 25, 2008, 02:47 PM // 14:47   #2
rattus rattus
 
Snograt's Avatar
 
Join Date: Jan 2006
Location: London, UK GMT±0 ±1hr DST
Guild: [GURU]GW [wiki]GW2
Profession: R/
Default

Bah, Vundo and/or SmitFraud again. Tarun's asleep, so try this:

VundoFix:
http://www.symantec.com/content/en/u...s/FixVundo.exe
Disconnect your computer from the internet
Run FixVundo.exe
Restart your computer
Run the tool again to ensure no traces are left.

Repair your wallpaper with Wallpaper Hijacker Removal Tool:
http://www.majorgeeks.com/Wallpaper_...ver_d4816.html
Note: You should hit all "Repair" buttons even though it may not say "Found!" This will fix a wallpaper hijack everytime if all repair buttons are pressed.
__________________
Si non confectus, non reficiat
Snograt is offline   Reply With Quote
Old Oct 25, 2008, 03:22 PM // 15:22   #3
Lion's Arch Merchant
 
Fowler's Avatar
 
Join Date: Feb 2006
Location: USA
Profession: E/
Default Greeat trooubles!

Hey all! I am sorry for creating new thread but I have great troubles.
This is my story!

Few days ago My Pc(I DONT DOWNLOAD OR WATCH PORN) got infected with Virtumode and like 19 trojans...Avast coudnt detect them Malicious Software removal couldnt do too...I tried defferent programs but nothing helps...Then I have decided to format my Local disk C. I did it when I wanted to install new 1...I started to receive errors that system cant be installed...I took my comp to service in order to install their Windows...In 7 hours after it Service guys called me and said that He cant install system 2.In a few hours said that everything is ok BUT my old proc AMD Athlon 62-3200+(S-AM20) wasnt stabil and he had to set another 1.HMMM I thought its ok.

I came home started to install new priogs AND I RECEIVE ANOTHER MSg!
According to Total Secure I have following ...

1) Trojan Win 32.BHO
2)SpySpy
3)Instant Access
4)7ad Power Dialer...
5)this 2
I also receice different windows with lile cmd commands but these commands have like rly strange names like fgfgfv.exe or dfdfdfgfg.exe OMG!
I have no cash to pay for Total Secure...

WHAT CAN I DO!THANKS all!
ty Snograt for helping remove Wallpler...

Fix fundo says that there are no virus I also have this according to Total secure HELP PLZ!
qappsrv.exe winsrv.exe antivirus exe...
Fowler is offline   Reply With Quote
Old Oct 25, 2008, 04:13 PM // 16:13   #4
Ascalonian Squire
 
Βєτā™'s Avatar
 
Join Date: Oct 2008
Location: china
Guild: We are all minted [MinT]
Profession: W/
Default

It sounds to me like you have a boot sector virus, it infects the hard-drive and spreads itself onto all hardware which can hold information, it gradually degrades your pc and opens ports to the internet to allow other viruses to download.

If it is a boot sector virus my first tip is to get off the internet, remove all cds, floppy discs, portable media drives etc out of your pc as it will infect them too, and do not insert them to other pcs, next up i would ask a trusted friend on another PC to change your GW login details just as a precaution.

The problem with boot sector viruses is they spread, fast... I would advise taking your PC to a professional technician to get it sorted, if you leave it too late the pc would just become an unusable stud. Sorry to hear about this.

As to how it could have got onto your pc... I cannot provide an accurate answer as you have not told me all possible ways, but it is most likly that you have plugged in a mates storage drive or something to your pc which is infected.

PM me if you need any more advise.
[Βєτā™]
Βєτā™ is offline   Reply With Quote
Old Oct 25, 2008, 05:36 PM // 17:36   #5
rattus rattus
 
Snograt's Avatar
 
Join Date: Jan 2006
Location: London, UK GMT±0 ±1hr DST
Guild: [GURU]GW [wiki]GW2
Profession: R/
Default

Quote:
Originally Posted by Fowler View Post
Hey all! I am sorry for creating new thread but I have great troubles.
I merged 'em - don't need a new thread.

Ignore what Total Secure tells you - Total Secure IS THE VIRUS!

Use MalwareByte's Anti-Malware and, just in case, SmitFraudFix
__________________
Si non confectus, non reficiat

Last edited by Snograt; Oct 25, 2008 at 05:38 PM // 17:38..
Snograt is offline   Reply With Quote
Old Oct 25, 2008, 05:59 PM // 17:59   #6
Technician's Corner Moderator
 
Tarun's Avatar
 
Join Date: Jan 2006
Location: The TARDIS
Guild: http://www.lunarsoft.net/ http://forums.lunarsoft.net/
Default

@Fowler
Please download my Anti-Malware Toolkit and get the Professional package. Then follow the directions in the PC Cleanup guide.

After that post your HijackThis log.

@Snog, MBAM takes care of what SmitfraudFix and other tools do. It's very awesome.
Tarun is offline   Reply With Quote
Old Oct 26, 2008, 02:49 PM // 14:49   #7
Lion's Arch Merchant
 
Fowler's Avatar
 
Join Date: Feb 2006
Location: USA
Profession: E/
Default

GUYS! I LOVE YOU!!! NO S*** u know what on my comp!!!

This is HiJack log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:48:17, on 23.02.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\SpywareBlaster\spywareblaster.exe
C:\Program Files\SpywareBlaster\spywareblaster.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{05D039CC-C3EE-411E-9F4A-DF52E86DC7F4}: NameServer = 212.73.65.41 212.73.65.40
O17 - HKLM\System\CS1\Services\Tcpip\..\{05D039CC-C3EE-411E-9F4A-DF52E86DC7F4}: NameServer = 212.73.65.41 212.73.65.40
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Сервис iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Network Driver Interface - Unknown owner - F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1015\svchost.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\WINDOWS\SYSTEM32\VundoFixSVC.exe

--
End of file - 3979 bytes
Fowler is offline   Reply With Quote
Old Oct 26, 2008, 06:17 PM // 18:17   #8
Technician's Corner Moderator
 
Tarun's Avatar
 
Join Date: Jan 2006
Location: The TARDIS
Guild: http://www.lunarsoft.net/ http://forums.lunarsoft.net/
Default

You are very behind in updates that would help secure your computer. Go to Windows Updates. Make sure you install Internet Explorer 7 and all other fixes available. After that, get SP3 installed.

Rename HijackThis to Scanner and rerun it, posting a new log.
Tarun is offline   Reply With Quote
Old Oct 26, 2008, 07:21 PM // 19:21   #9
rattus rattus
 
Snograt's Avatar
 
Join Date: Jan 2006
Location: London, UK GMT±0 ±1hr DST
Guild: [GURU]GW [wiki]GW2
Profession: R/
Default

Quote:
Originally Posted by Tarun View Post
Rename HijackThis to Scanner and rerun it, posting a new log.
What does that do, Tarun?
__________________
Si non confectus, non reficiat
Snograt is offline   Reply With Quote
Old Oct 26, 2008, 09:37 PM // 21:37   #10
Technician's Corner Moderator
 
Tarun's Avatar
 
Join Date: Jan 2006
Location: The TARDIS
Guild: http://www.lunarsoft.net/ http://forums.lunarsoft.net/
Default

Some malware will watch for the hijackthis.exe name in running processes and it then hides itself from HJT. Renaming it masks HJT and can often show the malware that hides itself from a normally named HijackThis.
Tarun is offline   Reply With Quote
Old Oct 27, 2008, 02:09 AM // 02:09   #11
Lion's Arch Merchant
 
Fowler's Avatar
 
Join Date: Feb 2006
Location: USA
Profession: E/
Default

THANKS ALL AGAIN! I also installed COMDO firewall...
This is new log!Guys, I use Mozilla Firefox last version from official site.I dot rly like IE...
GUYS THIS 1st LOG ISNR CORRECT! I CHANGED NAME IN A WRONG PLACE!!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:08:12, on 27.10.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Guild Wars\Gw.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{05D039CC-C3EE-411E-9F4A-DF52E86DC7F4}: NameServer = 212.73.65.41 212.73.65.40
O17 - HKLM\System\CS1\Services\Tcpip\..\{05D039CC-C3EE-411E-9F4A-DF52E86DC7F4}: NameServer = 212.73.65.41 212.73.65.40
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Сервис iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\WINDOWS\SYSTEM32\VundoFixSVC.exe

--
End of file - 4606 bytes

THIS IS RIGHT 1!
THIS IS RIGHT 1!
THIS IS RIGHT 1!



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:30:46, on 27.10.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
D:\Guild Wars\Gw.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\I WILL REMOVE U DAMN MALS!.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{05D039CC-C3EE-411E-9F4A-DF52E86DC7F4}: NameServer = 212.73.65.41 212.73.65.40
O17 - HKLM\System\CS1\Services\Tcpip\..\{05D039CC-C3EE-411E-9F4A-DF52E86DC7F4}: NameServer = 212.73.65.41 212.73.65.40
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Сервис iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\WINDOWS\SYSTEM32\VundoFixSVC.exe

--
End of file - 4511 bytes

Last edited by Fowler; Oct 27, 2008 at 02:32 AM // 02:32..
Fowler is offline   Reply With Quote
Old Oct 27, 2008, 02:56 AM // 02:56   #12
Technician's Corner Moderator
 
Tarun's Avatar
 
Join Date: Jan 2006
Location: The TARDIS
Guild: http://www.lunarsoft.net/ http://forums.lunarsoft.net/
Default

Please complete this step:
Quote:
Originally Posted by Tarun View Post
You are very behind in updates that would help secure your computer. Go to Windows Updates. Make sure you install Internet Explorer 7 and all other fixes available. After that, get SP3 installed.
Tarun is offline   Reply With Quote
Reply

Share This Forum!  
 
 
           

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Enchanted Warrior Sardelac Sanitarium 0 Dec 03, 2006 09:59 PM // 21:59
Privacy option for Observer Mode Lagg Sardelac Sanitarium 4 Dec 22, 2005 06:06 PM // 18:06
DirectSong's Privacy Policy (FYI) Ambre Finian The Riverside Inn 22 Jun 06, 2005 07:48 PM // 19:48


All times are GMT. The time now is 01:37 AM // 01:37.


Powered by: vBulletin
Copyright ©2000 - 2016, Jelsoft Enterprises Ltd.
jQuery(document).ready(checkAds()); function checkAds(){if (document.getElementById('adsense')!=undefined){document.write("_gaq.push(['_trackEvent', 'Adblock', 'Unblocked', 'false',,true]);");}else{document.write("