Jump to content

dank

Honorary Members
  • Posts

    35
  • Joined

  • Last visited

Everything posted by dank

  1. I wasnt running a scan. Malwarebytes notification popped up that a malicious program was trying to start.. My options were to ignore or quarantine. I quarantined it and looked in there. It says there is a trojan in the cberlink dvd 9 folder. It says the CES particle engine dll file is a trojan. The program has been on the pc since I bought it though. And I have never used it.
  2. Just a heads up. I went to scan a specific file tonight and mbam updated, and then asked to restart the pc. So I did. When I opened mbam up again my paid version was gone and the option to purchase or activate was there again. I had to go into my emails and find my 2 year old receipt and input my id and key again. It worked and thanked me for purchasing mbam. But I have never had mbam do that after an update before. Good thing i save my receipts. So something was little wonky in the latest update. Just wanted to let you guys know.
  3. pc comes back as clean. No abnormal issues either, well other than this page with the media player popping up after a reboot.
  4. When opening the ie browser, the address says www.newversionchecker.com/redirect google.ca and after a few seconds the google page opens. and after a reboot of the pc , when the browser is opened for the first time a page comes up with a media player onit, the address bar says. kolcsonolda1/onlinewebshop.net if the browser is then closed and reopened it goes just goes to the home page.
  5. I dont think you understand what I am saying. I dont have malware on my pc. But I get emails from places that are obviously trying to sucker me into downloading their malware or cliocking on links that will take me to infected drive by sites.. I want to know how to take the files in the emails I get and send them to Malwarebytes so that you guys can examine them. Should I just forward the emails to you? I do get a lot of spam because we run many businesses and our email addresses are all over the internet. I just figured instead of deleting the messages , I could send Malwarebytes the ones that I suspect have malware attached. I just want to know the best way to do it?
  6. I get a lot of spam and many have links to drive by malware sites and "text" , "pdf" etc... flies attached that contain viruse and malware. I want to know how can I safely send these to Malwarebytes. Do I just forward the emails to you? I really dont want to download the file from the email to my pc to send it to Malwarebytes. Let me know what to do to help.
  7. wow so far i have removed 6 objects with mbam this morning then 2 diferent ones thois afternoon. now another 3 diferent ones. And my browers finally let me use the infected pc to get on this site. No redirection. I am going to run a new mbam and a new hjt and post them if you dont mind?
  8. So here is the mbam log. I have just restarted the pc. Malwarebytes' Anti-Malware 1.33 Database version: 1705 Windows 5.1.2600 Service Pack 3 1/29/2009 9:18:49 PM mbam-log-2009-01-29 (21-18-49).txt Scan type: Quick Scan Objects scanned: 85309 Time elapsed: 17 minute(s), 46 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\RECYCLER\S-6-0-68-100008928-100017696-100025811-5432.com (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\gaopdxuofpcwxx.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\gaopdxogyyavdc.sys (Trojan.Agent) -> Quarantined and deleted successfully.
  9. Hey guys I have about 300000 files for mbam to scan so it may take a few hours for me to post that result.
  10. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:04:52 PM, on 1/29/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Protexis\License Service\PSIService.exe C:\Program Files\Winsim\ConnectionManager\SimplyConnectionManager.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE C:\Program Files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe F:\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: (no name) - AutorunsDisabled - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - F:\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [saveDate] C:\WINDOWS\SaveStartDate.Exe O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe O4 - HKLM\..\Run: [EPSON Stylus C88 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE /P23 "EPSON Stylus C88 Series" /O5 "LPT1:" /M "Stylus C88" O4 - HKLM\..\Run: [ConnectionManager] C:\Program Files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe O4 - HKLM\..\Run: [GrooveMonitor] "F:\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [PrevxRootkitRemovalTool] "\\Homepc\C\Documents and Settings\All Users\Desktop\B99B64C.exe" -scan O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [sUPERAntiSpyware] \\Homepc\C\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - Global Startup: AutorunsDisabled O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Config.Msi\3598709.rbf O4 - Global Startup: Microsoft Office.lnk = F:\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200707...ex/qtplugin.cab O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab O16 - DPF: {4369271D-E5C2-4C40-BC1B-6F2311364238} (PurolatorWeightScale.WeightScaleControl) - https://eshiponline.purolator.com/ShipOnlin...WeightScale.CAB O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo...toUploader3.cab O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shock...ash/swflash.cab O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h20264.www2.hp.com/ediags/hpfix/sj/.../qdiagh.cab?326 O16 - DPF: {EBF85371-A38F-485B-B28F-0B4C82D25937} (CUpdateCtl Object) - http://update.hpphoto.com/download/HPSWUpdate.ocx O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by141fd.bay141.hotmail.msn.com/activex/HMAtchmt.ocx O18 - Protocol: AutorunsDisabled - (no CLSID) - (no file) O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Program Files\Common Files\Protexis\License Service\PSIService.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: Simply Accounting Database Connection Manager - Sage Software - C:\Program Files\Winsim\ConnectionManager\SimplyConnectionManager.exe -- End of file - 11312 bytes
  11. Ok I will follow the instructions. I had to use another pc to get on this site cause my browser will not let me come here on the infected pc. It either redirects or says the link is broken.
  12. I started having my browser hijacked today. Malware bytes detected 6 issues, removd them and 2 came back after start up. Scanned again and deleted successfully. But problem remained. I ran superantispyware and it detected gromozon rootkit. i tried to fix issue and restart but still same problem and root kit is detected again. But i am scanning in safe mode right now. Still in the process of scanning. If any body has an idea howw to eradicate this gromozon , it sure would help.
  13. Well that took a while. But it works. Malwarebytes' Anti-Malware 1.25 Database version: 1064 Windows 5.1.2600 Service Pack 3 6:07:41 AM 8/18/2008 mbam-log-08-18-2008 (06-07-41).txt Scan type: Full Scan (C:\|F:\|) Objects scanned: 246232 Time elapsed: 2 hour(s), 41 minute(s), 57 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
  14. Here is my quick scan. All is well. Will post a full scan when I wake up. See if I can make it over to Adams to post his logs. Malwarebytes' Anti-Malware 1.25 Database version: 1064 Windows 5.1.2600 Service Pack 3 11:15:20 PM 8/17/2008 mbam-log-08-17-2008 (23-15-20).txt Scan type: Quick Scan Objects scanned: 69979 Time elapsed: 16 minute(s), 58 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
  15. New version was able to remove the remaining 4900 or so files on my buddy adams pc. Thank you so much Rubber Ducky. He had his pc professor over on 3 diferent days to look at it. I looked at the paper work she was using and knew right away that that she didnt have a clue. When I said I could fix it they laughed at me. So I had something to prove here. Thank you. We ran Rogue and about blank, and found nothing. But re instaleed an anti virus called avast(free) and it found a file called Win32.Hupigon.kme , it was in documents and settings /photoshop. I think he got the photoshop off some warez site. The scan is still running on his pc right now. So I dont know if there is more. mbam did not find this file though. Thought I should let you know. Also we noticed on a restart of his pc after we ran mbam that a warning came up saying that 1 of the C modules was missing. And now his desktop tab in the display settings is gone. We have no way of changing the desktop picture anymore. It is supposed to say Themes-Desktop-Screen saver0-Appearance-Settings But now the entire tab for Desktop has just disappeared. I dont know how to fix it.
  16. AboutBuster 6.07 Scan started on [8/17/2008] at [4:11:40 AM] ------------------------------------------------------------- C:\WINDOWS\system32\S32EVNT1.DLL C:\WINDOWS\system32\SymNeti.dll C:\WINDOWS\system32\SymRedir.dll ------------------------------------------------------------- Scan was COMPLETED SUCCESSFULLY at 4:16:13 AM mbam and rogue remover find nothing , but about buster list these when I ran a scan. Any imput people? Are these malicious?
  17. Did a machine tonght that had over 5600. Mbam could not hold it all and ran out of memory before it could remove them. I was able to abort the removal on the second try and actually removed about 700. The scan is down to about 4900 now. The majority being infectewd in the fonts` folder. To many for mbam to handle until version 1.25 comes out.
  18. Ok then. Adam is very illiterate on the pc. So I will wait till tomorrow to use 1.25. Cuase I can`t see if he is typing the right command or not. I`ll stop by his place tomorrow and run the 1.25
  19. Why did it work on your computer then? Do you have that malicious folder? I think I am just doing something wrong on our end.
  20. I have run mbam and rogue and dont have any infections. But I am working with someone over the phone that has 5600 infections that mbam found earlier today when I was at his place,4600 in the fonts` folder. Everything you have told me to do so far, we have both tried. Him on his pc and me on mine. He cant communicate with you right now because his infections are poping crap up all over his desktop and redirecting his webpages. I figuered that when he said he couldnt get your instructions to work over the phone that I would try as well on my pc to make sure that it wasnt just his infections preventing him from being able to carry out your instructions. By the way, thank you so much. In the last week I have run mbam on 8 pc`s in town because of this bloody facebook virus video codec. And it has found so many infected files beyond the video codec and cleaned up every pc so far. They are all running great. Just this guys has so many files that mbam 1.24 cant hold it all and times out and overloads and cant complete the removal process. Until tomorrow when the 1.25 gets released. I figure that I work on my pc right now so going back and forth with you guys isnt fustrating me. But if you would rather I wait for the 1.25, no problem. I`ll stop badgering you.
  21. I am the administrator account , when i cmd and click ok I get the black window, but it says C:\Documents & Settings \Dan> When I type the rest del C:\WINDOWS\Fonts\'\*.* and hit enter It just repeats C:\Documents & Settings \Dan> And says The system cannot find the file specified, under the first C:\Documents & Settings \Dan>
  22. I attached a screen shot of what my window does when cmd click ok and type the rest in. c.bmp c.bmp
  23. Ok it doesnt work on adams pc or mine. I followed your instructions and when i click ok the black window appears. It says C:\Documents & Settings \Dan> When I type the rest del C:\WINDOWS\Fonts\'\*.* It just repeats C:\Documents & Settings \Dan> And says The system cannaot find the file specified, under the first C:\Documents & Settings \Dan>
  24. Ok great cause when i type CMD del C:\WINDOWS\Fonts\'\*.* into the run and click ok it does not go to C\user\adam and ask if im sure. it just says C documents and settings adam >
  25. Hey Rubber Ducky? Will version 1.25 be able to handle 5600 infected files? I never a pc so bad as this guys before.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.