UNSOLVED

Zophar007

updated

19 years ago

Z

Zophar007

6 Posts

0

1356

September 30th, 2007 14:00

Clicksring.PuritySCAN

Just got this today,  Pop ups and something called internet speed monitor?
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:36:23 AM, on 9/30/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\America Online 9.0\waol.exe
C:\Program Files\America Online 9.0\shellmon.exe
C:\Program Files\Common Files\Aol\aoltpspd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ISM\ISMModule4.exe
C:\Program Files\ISM2\ISMPack5.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2070709
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2070709
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.blizzard.com/support/wow/?id=aww01849p
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: BndDrive2 BHO Class - {8B27CC68-110C-46a9-80D3-F3107DE6EB98} - C:\Program Files\ISM\BndDrive3.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ISMModule4] "C:\Program Files\ISM\ISMModule4.exe"
O4 - HKCU\..\Run: [ISMPack5] "C:\Program Files\ISM2\ISMPack5.exe"
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00000014-9593-4264-8B29-930B3E4EDCCD} (HPVirtualRooms14 Class) - https://www.rooms.hp.com/vRoom_Cab/WebHPVCInstall14.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/control/en-US/activex/TmHcmsX.CAB
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase2474.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A1CB3AA-D37E-4990-9353-A9383122BEBD}: NameServer = 205.188.146.145
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 6662 bytes
  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    383

    0

    Posted September 30th, 2007 16:00

    Welcome to DCF :)
    * Please let me know if you have posted this log on another forum.

    * I will not handle your log if you are using any cracked software, so if you are, either remove it, or repost your log in a New Message so that someone else will have the option of continuing with it.

    * Please let me know if you are an employee and this system is owned by your employer. If so, do you have permission to make changes to it?

    * Please print or copy all instructions to Notepad in order to assist you when carrying out instructions.
    In some cases you may be working in Safemode and you will not have the internet available to read information. Please follow all instructions in sequence.

    * If your reply does not fit in one post, please reply to yourself until all text is submitted. It may take several posts.

    * Please disable realtime monitoring so it does not interfere while we are fixing your system. We need to disable your Microsoft Windows Defender Real-time Protection as it may interfere with the fixes that we need to make.

    * Open Microsoft Windows Defender. Click Start, Programs, Windows Defender
    * Click on Tools, General Settings
    * Under Real-time protection options, deselect the Turn on real-time protection check box
    * Click Save

    After all of the fixes are complete it is very important that you enable Real-time Protection again.

    Look in your Control Panel's Add/Remove Programs for any of these and uninstall them:

    Oin
    Yazzle by Oin
    Purityscan by Oin
    Snowballwars by Oin
    or anything similar with Oin or Outerinfo in it.
    Zolero
    Tizzletalk
    MediaTickets


    Reboot and download and run this uninstaller:
    http://www.outerinfo.com/OiUninstaller.exe

    Tutorial for the uninstaller if needed

    Reboot

    Find the Internet Speed Monitor folder, select Uninstall. Then go to C:\Program Files\ ISM and delete that folder.
    Also, delete this file: bndloader.dll

    Download and scan with SUPERAntiSpyware Free for Home Users
    • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
    • An icon will be created on your desktop. Double-click that icon to launch the program.
    • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
    • Under "Configuration and Preferences", click the Preferences button.
    • Click the Scanning Control tab.
    • Under Scanner Options make sure the following are checked (leave all others unchecked):
      • Close browsers before scanning.
      • Scan for tracking cookies.
      • Terminate memory threats before quarantining.
    • Click the "Close" button to leave the control center screen.
    • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
    • On the left, make sure you check C:\Fixed Drive.
    • On the right, under "Complete Scan", choose Perform Complete Scan.
    • Click "Next" to start the scan. Please be patient while it scans your computer.
    • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
    • Make sure everything has a checkmark next to it and click "Next".
    • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
    • If asked if you want to reboot, click "Yes".
    • To retrieve the removal information after reboot, launch SUPERAntispyware again.
      • Click Preferences, then click the Statistics/Logs tab.
      • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
      • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
      • Please copy and paste the Scan Log results in your next reply along with a fresh HijackThis log.
    • Click Close to exit the program.


    Please let me know what anti-virus program you are running. Thanks. :)

    Message Edited by Bugbatter on 09-30-2007 01:39 PM
  • Zophar007

    6 Posts

    383

    0

    Posted October 1st, 2007 01:00

    Nope this is the only forum that Ive posted in.
     
    I am not running any cracked software to best of my knowledge,  I just got this computer a month or so ago.
     
    This computer is owned by me.
     
    There was no folder C:\Program Files\ ISM nor the file bndloader.dll
    I am now running SuperAntiSpyware and will post a fresh Hijackthis log with the SuperAntiSpyware log
  • Zophar007

    6 Posts

    383

    0

    Posted October 1st, 2007 02:00

    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com
    Generated 09/30/2007 at 10:51 PM
    Application Version : 3.9.1008
    Core Rules Database Version : 3316
    Trace Rules Database Version: 1317
    Scan type       : Complete Scan
    Total Scan Time : 00:28:42
    Memory items scanned      : 474
    Memory threats detected   : 0
    Registry items scanned    : 4842
    Registry threats detected : 2
    File items scanned        : 42044
    File threats detected     : 183
    Adware.Tracking Cookie
     C:\Documents and Settings\D\Cookies\d@brightcove.112.2o7[1].txt
     C:\Documents and Settings\D\Cookies\d@counter2.sextracker[2].txt
     C:\Documents and Settings\D\Cookies\d@ [smut filter]
    .serving-sys[2].txt
     C:\Documents and Settings\D\Cookies\d@adultbouncer[1].txt
     C:\Documents and Settings\D\Cookies\d@paypal.112.2o7[1].txt
     C:\Documents and Settings\D\Cookies\d@ehg-viacom.hitbox[1].txt
     C:\Documents and Settings\D\Cookies\d@citi.bridgetrack[1].txt
     C:\Documents and Settings\D\Cookies\d@sextracker[1].txt
     C:\Documents and Settings\D\Cookies\d@counter7.sextracker[1].txt
     C:\Documents and Settings\D\Cookies\d@cz8.clickzs[2].txt
     C:\Documents and Settings\D\Cookies\d@casalemedia[2].txt
     C:\Documents and Settings\D\Cookies\d@www.burstbeacon[2].txt
     C:\Documents and Settings\D\Cookies\d@revsci[1].txt
     C:\Documents and Settings\D\Cookies\d@ehg-youtube.hitbox[2].txt
     C:\Documents and Settings\D\Cookies\d@mediaplex[2].txt
     C:\Documents and Settings\D\Cookies\d@ad.iconadserver[2].txt
     C:\Documents and Settings\D\Cookies\d@www.ticketsnow[1].txt
     C:\Documents and Settings\D\Cookies\d@html[1].txt
     C:\Documents and Settings\D\Cookies\d@bluestreak[1].txt
     C:\Documents and Settings\D\Cookies\d@adbrite[1].txt
     C:\Documents and Settings\D\Cookies\d@cpvfeed[2].txt
     C:\Documents and Settings\D\Cookies\d@questionmarket[2].txt
     C:\Documents and Settings\D\Cookies\d@tradedoubler[1].txt
     C:\Documents and Settings\D\Cookies\d@burstnet[1].txt
     C:\Documents and Settings\D\Cookies\d@2o7[1].txt
     C:\Documents and Settings\D\Cookies\d@edge.ru4[1].txt
     C:\Documents and Settings\D\Cookies\d@cgi-bin[2].txt
     C:\Documents and Settings\D\Cookies\d@ad.yieldmanager[1].txt
     C:\Documents and Settings\D\Cookies\d@ehg-myspaceinc.hitbox[2].txt
     C:\Documents and Settings\D\Cookies\d@ads.addynamix[2].txt
     C:\Documents and Settings\D\Cookies\d@adrevolver[2].txt
     C:\Documents and Settings\D\Cookies\d@azjmp[2].txt
     C:\Documents and Settings\D\Cookies\d@serving-sys[1].txt
     C:\Documents and Settings\D\Cookies\d@anad.tacoda[1].txt
     C:\Documents and Settings\D\Cookies\d@anat.tacoda[1].txt
     C:\Documents and Settings\D\Cookies\d@its-sexy-time[1].txt
     C:\Documents and Settings\D\Cookies\d@specificclick[2].txt
     C:\Documents and Settings\D\Cookies\d@counter12.sextracker[1].txt
     C:\Documents and Settings\D\Cookies\d@advertising[1].txt
     C:\Documents and Settings\D\Cookies\d@realmedia[1].txt
     C:\Documents and Settings\D\Cookies\d@zedo[2].txt
     C:\Documents and Settings\D\Cookies\d@adopt.specificclick[2].txt
     C:\Documents and Settings\D\Cookies\d@www.burstnet[1].txt
     C:\Documents and Settings\D\Cookies\d@doubleclick[1].txt
     C:\Documents and Settings\D\Cookies\d@hitbox[1].txt
     C:\Documents and Settings\D\Cookies\d@tacoda[1].txt
     C:\Documents and Settings\D\Cookies\d@trafficmp[2].txt
     C:\Documents and Settings\D\Cookies\d@adlegend[1].txt
     C:\Documents and Settings\D\Cookies\d@adserver.incgamers[1].txt
     C:\Documents and Settings\D\Cookies\d@tribalfusion[1].txt
     C:\Documents and Settings\D\Cookies\d@247realmedia[1].txt
     C:\Documents and Settings\D\Cookies\d@metacafe.122.2o7[1].txt
     C:\Documents and Settings\D\Cookies\d@xxxcounter[1].txt
     C:\Documents and Settings\D\Cookies\d@interclick[1].txt
     C:\Documents and Settings\D\Cookies\d@xxxpower[2].txt
     C:\Documents and Settings\D\Cookies\d@adrevolver[3].txt
     C:\Documents and Settings\D\Cookies\d@reduxads.valuead[2].txt
     C:\Documents and Settings\D\Cookies\d@pornaccess[1].txt
     C:\Documents and Settings\D\Cookies\d@fastclick[1].txt
     C:\Documents and Settings\D\Cookies\d@ads.adbrite[2].txt
     C:\Documents and Settings\D\Cookies\d@www.teenjill[1].txt
     C:\Documents and Settings\D\Cookies\d@partner2profit[2].txt
     C:\Documents and Settings\D\Cookies\d@atwola[1].txt
     C:\Documents and Settings\D\Cookies\d@adserving[3].txt
     C:\Documents and Settings\D\Cookies\d@jays-xxx-links[1].txt
     C:\Documents and Settings\D\Cookies\d@nextag[2].txt
     C:\Documents and Settings\D\Cookies\d@ehg-dig.hitbox[2].txt
     C:\Documents and Settings\D\Cookies\d@tremor.adbureau[2].txt
     C:\Documents and Settings\D\Cookies\d@image.masterstats[1].txt
     C:\Documents and Settings\D\Cookies\d@sexlist[1].txt
     C:\Documents and Settings\D\Cookies\d@ads.pointroll[1].txt
     C:\Documents and Settings\D\Cookies\d@cs.sexcounter[2].txt
     C:\Documents and Settings\D\Cookies\d@counter3.sextracker[1].txt
     C:\Documents and Settings\D\Cookies\d@apmebf[2].txt
     C:\Documents and Settings\D\Cookies\d@ads.cnn[1].txt
     C:\Documents and Settings\D\Cookies\d@adserver.easyad[2].txt
     C:\Documents and Settings\D\Cookies\d@adserving[2].txt
     C:\Documents and Settings\D\Cookies\d@ad.musicmatch[2].txt
     C:\Documents and Settings\D\Cookies\d@ads.us.e-planning[1].txt
     C:\Documents and Settings\D\Cookies\d@ads.web.aol[1].txt
     C:\Documents and Settings\D\Cookies\d@statse.webtrendslive[2].txt
     C:\Documents and Settings\D\Cookies\d@adtech[2].txt
     C:\Documents and Settings\D\Cookies\d@adopt.euroclick[1].txt
     C:\Documents and Settings\D\Cookies\d@xiti[1].txt
     C:\Documents and Settings\D\Cookies\d@counter.hitslink[1].txt
     C:\Documents and Settings\D\Cookies\d@cgm.adbureau[2].txt
     C:\Documents and Settings\D\Cookies\d@out[1].txt
     C:\Documents and Settings\D\Cookies\d@media.adrevolver[1].txt
     C:\Documents and Settings\D\Cookies\d@sixapart.adbureau[1].txt
     C:\Documents and Settings\D\Cookies\d@ad[2].txt
     C:\Documents and Settings\D\Cookies\d@statcounter[2].txt
     C:\Documents and Settings\D\Cookies\d@ehg-foxmovies.hitbox[2].txt
     C:\Documents and Settings\D\Cookies\d@www.adulteryporn[1].txt
     C:\Documents and Settings\D\Cookies\d@eas.apm.emediate[1].txt
     C:\Documents and Settings\D\Cookies\d@adecn[1].txt
     C:\Documents and Settings\D\Cookies\d@atdmt[2].txt
     C:\Documents and Settings\D\Cookies\d@adultadworld[2].txt
     C:\Documents and Settings\D\Cookies\d@itxt.vibrantmedia[1].txt
     C:\Documents and Settings\D\Cookies\d@rotator.adjuggler[1].txt
     C:\Documents and Settings\D\Cookies\d@ehg-foxsports.hitbox[2].txt
     C:\Documents and Settings\D\Cookies\d@ads.realtechnetwork[1].txt
     C:\Documents and Settings\D\Cookies\d@ad1.clickhype[1].txt
     C:\Documents and Settings\D\Cookies\d@cz6.clickzs[2].txt
     C:\Documents and Settings\D\Cookies\d@eyewonder[1].txt
     C:\Documents and Settings\D\Cookies\d@pornL[1].txt
     C:\Documents and Settings\D\Cookies\d@paycounter[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@2o7[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ad.outerinfo[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ad.yieldmanager[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adbrite[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adopt.euroclick[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adopt.specificclick[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adrevolver[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adrevolver[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ads.adbrite[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ads.addynamix[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ads.cnn[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ads.pointroll[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ads.web.aol[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adserver.adreactor[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adserver[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adserving.cpxinteractive[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@adserving[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@advertising[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@angleinteractive.directtrack[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@atdmt[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@atwola[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@bluestreak[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ [smut filter]
    .serving-sys[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@burstnet[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@casalemedia[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@clickbank[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@counter12.sextracker[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@directtrack[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@doubleclick[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@eas.apm.emediate[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@edge.ru4[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@ehg-dig.hitbox[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@exitexchange[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@eyewonder[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@fastclick[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@heavycom.122.2o7[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@hitbox[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@media.adrevolver[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@mediaplex[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@msnportal.112.2o7[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@msnservices.112.2o7[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@partner2profit[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@paycounter[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@perf.overture[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@questionmarket[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@realmedia[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@reduxads.valuead[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@revsci[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@rotator.adjuggler[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@serving-sys[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@sexlist[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@sextracker[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@specificclick[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@statcounter[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@statse.webtrendslive[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@tacoda[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@trafficmp[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@tremor.adbureau[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@tribalfusion[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@www.xctrk[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@xxxpower[1].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@xxxtronic[2].txt
     C:\Documents and Settings\D\Local Settings\Temp\Cookies\d@zedo[1].txt
    Adware.ClickSpring
     HKLM\Software\ClickSpring
     HKLM\Software\ClickSpring#UBWKR
     C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP92\A0008407.DLL
    Adware.ClickSpring/Outer Info Network
     C:\DOCUMENTS AND SETTINGS\D\DESKTOP\OIUNINSTALLER.EXE
     C:\WINDOWS\Prefetch\OIUNINSTALLER.EXE-2480D0C2.pf
    Adware.ClickSpring/Yazzle
     C:\PROGRAM FILES\COMMON FILES\YAZZLE1552OINUNINSTALLER.EXE
     C:\WINDOWS\PREFETCH\YAZZLE1552OINADMIN.EXE-3231BBC3.PF
    Trojan.Unknown Origin
     C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP91\A0008392.EXE
     C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP92\A0008441.EXE
     C:\WINDOWS\SYSTEM32\WNSCPICOMSV.EXE
    Adware.AdSponsor/ISM
     C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP92\A0008466.EXE
     C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP92\A0008468.DLL
     C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP92\A0008470.EXE
     C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP92\A0008471.EXE
    Trace.Known Threat Sources
     C:\Documents and Settings\D\Local Settings\Temp\Temporary Internet Files\Content.IE5\CTMJSP6Z\minify[1].php
     C:\Documents and Settings\D\Local Settings\Temp\Temporary Internet Files\Content.IE5\IVK9Y5OP\minify[1].php
  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    383

    0

    Posted October 1st, 2007 02:00

    Please post the SAS log, and in the area that has that text simply remove those two letters and insert [smut filter]

    Let me know if you are still having symptoms of malware. Thanks.

    Message Edited by Bugbatter on 09-30-2007 11:40 PM
  • Zophar007

    6 Posts

    383

    0

    Posted October 1st, 2007 02:00

    ogfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:04:23 PM, on 9/30/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\Dell\Media Experience\DMXLauncher.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
    C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\America Online 9.0\waol.exe
    C:\Program Files\America Online 9.0\shellmon.exe
    C:\Program Files\Common Files\Aol\aoltpspd.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2070709
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2070709
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.blizzard.com/support/wow/?id=aww01849p
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00000014-9593-4264-8B29-930B3E4EDCCD} (HPVirtualRooms14 Class) - https://www.rooms.hp.com/vRoom_Cab/WebHPVCInstall14.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/control/en-US/activex/TmHcmsX.CAB
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase2474.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{5A1CB3AA-D37E-4990-9353-A9383122BEBD}: NameServer = 205.188.146.145
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    --
    End of file - 6473 bytes
  • Zophar007

    6 Posts

    383

    0

    Posted October 1st, 2007 02:00

    Will not let me post the log of SAS cause it says the forums wont allow a B and a S together lol
  • Zophar007

    6 Posts

    383

    0

    Posted October 1st, 2007 03:00

    Nope,  none that I see.  I even ran Windows Defender and it came up as no errors.  Before it would bring up Clickspring.PuritySCAN and then it would say there was an error deleting this or something.  So I believe it is gone.  Thanks soo much :)   I am not running any antivirus software.  Any suggestions?  I always hear that one is better then the other and vice cersa so I am not sure which one would be a better choice,  any Antivirus software you recommend?
  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    383

    0

    Posted October 1st, 2007 03:00

    Run Disk Cleanup in each user's profile:
    Click "Start > Programs > Accessories > System Tools > Disk Cleanup"
    Please make sure the following are checked:
    -- Downloaded Program Files
    -- Temporary Internet Files
    -- Recycle Bin
    -- Temporary Files
    Click "OK" and Disk Cleanup will delete those files for you.

    Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. It is possible that you may be running Java code in your applications that absolutely require a specific version of the JRE to run. Please follow these steps to remove older version Java components and update.

    Updating Java:
    • Download the latest version of Java Runtime Environment (JRE) 6.
    • Scroll down to where it says "Java Runtime Environment (JRE) 6u2 allows end-users to run Java applications".
    • Click the "Download" button to the right.
    • Check the box that says: "Accept License Agreement".
    • The page will refresh.
    • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
    • Close any programs you may have running - especially your web browser.
    • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
    • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
    • Click the Remove or Change/Remove button.
    • Repeat as many times as necessary to remove each Java versions.

    • Reboot your computer once all Java components are removed.
    • Then from your desktop double-click on jre-6u2-windows-i586-p.exe to install the newest version.

    Official JAVA Installation Instructions if needed.


    Free Anti-virus Programs: (Select only ONE.)
    1. Grisoft’s AVG Free:
    http://free.grisoft.com/freeweb.php/doc/2/
    Before installing it, however, be sure that the remnants of all prior anti-virus software have been removed. If you need support for AVG, their forum is located here: http://forum.grisoft.cz/freeforum/

    2. Avast also has a free version for home users:
    http://www.avast.com/eng/programs.html
    Their forums are here: http://forum.avast.com/

    After something like this it is a good idea to purge the Restore Points and start fresh.
    If everything is running well....
    To flush the XP System Restore Points:
    (Using XP, you must be logged in as Administrator to do this.)
    Go to Start>Run and type msconfig Press enter.
    When msconfig opens, click the Launch System Restore Button.
    On the next page, click the System Restore Settings Link on the left.
    Check the box labeled Turn Off System Restore.

    Reboot. Go back in and turn System Restore ON. A new Restore Point will be created.

    Here is my standard list of simple steps that you can take to reduce the chance of infection in the future.

    You may have already taken some of these steps:
    1. Visit Windows Update:
    Make sure that you have all the Critical Updates recommended for your operating system and IE. The first defense against infection is a properly patched OS.
    Windows Update: http://v4.windowsupdate.microsoft.com/en/default.asp

    2. Adjust your security settings for ActiveX:
    Go to Internet Options/Security/Internet, press 'default level', then OK.
    Now press "Custom Level."
    In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to 'prompt', and 'Initialize and Script ActiveX controls not marked as safe" to 'disable'.

    3. Download and install the following free programs:
    a. SpywareBlaster: (Not recommended for Vista)
    http://www.javacoolsoftware.com/spywareblaster.html
    Tutorial here: http://www.bleepingcomputer.com/forums/tutorial49.html
    b. SpywareGuard:
    http://www.javacoolsoftware.com/spywareguard.html
    Tutorial here: http://www.bleepingcomputer.com/tutorials/tutorial50.html
    Periodically check for updates in both programs.

    4. Please use a firewall and realtime anti-virus. Keep the anti-virus software and firewall software up to date.
    Note: Zone Alarm Firewall (Zone Labs) http://www.zonelabs.com/store/content/company/products/trial_zaFamily/trial_zaFamily.jsp?lid=home_freedownloads
    Sunbelt Kerio has a free version: http://www.kerio.com/kpf_download.html

    5. You might consider installing Mozilla / Firefox.
    http://www.mozilla.org/

    6. Install spyware detection and removal programs:
    You may also want to consider installing either or both of AdAware (free version) and Spybot S&D (freeware). Use these programs to regularly scan your system for and remove many forms of spyware/malware.

    a. Ad-aware: http://www.lavasoft.de/software/adaware/

    b. SpyBot S&D: http://safer-networking.org/en/news/2005-05-31.html

    I would check for updates in SpyBot once a week or so.
    Check for updates in Ad-aware frequently.

    7. Before using or purchasing any Spyware/Malware protection/removal program, always check the following Rogue/Suspect Spyware Lists.
    http://www.spywarewarrior.com/rogue_anti-spyware.htm
    http://www.malwarebytes.org/database.php

    8. If you have not already done so, you might want to install CCleaner and run it in each user's profile: http://www.ccleaner.com/
    ** UNcheck the option to install the Yahoo toolbar that is checked by default for the Standard version, or download the toolbar-free versions (Slim or Basic) when given the option for those.

    9. If you use Adobe Reader it may need to be updated to be sure that you have a more secure version. If you are using a version prior to v. 6.05, you should update to 6.05, preferably version 8.1.0 or higher.
    It would be best to remove prior versions before updating to a new version.
    If you need additional assistance, the Adobe forums are here: http://www.adobe.com/support/forums/main.html

    10. Make sure you are using the most updated version of Java.
    The current version is Java Runtime Environment (JRE) 6u2

    You can go here to download the latest version of Java Runtime Environment (JRE) 6.
    Scroll down to where it says " Java Runtime Environment (JRE) 6u2 allows end-users to run Java applications".

    Click the link to download the Windows (Offline Installation) package: Save it, do not run it. When the download is complete, close the browser.

    Remove all prior versions using Add/Remove Programs, and delete the Java folder in Program Files.
    Reboot your computer once all Java components are removed.
    Then from your desktop double-click on jre-6u2-windows-i586-p.exe to install the newest version.
    Official JAVA Installation Instructions if needed.
    Reboot.

    11. Practice Safe Surfing with with TrendProtect by Trendmicro.
    TrendProtect is a browser plugin that assigns a safety rating to domains listed in your search engine. TrendProtect also adds a new button to your browser's toolbar area. The icon and color of the button changes to indicate whether the page currently open is safe, unsafe, trusted, or unrated, or whether it contains unwanted content.

    The following color codes are used by TrendProtect to indicate the safety of each site.

    Red for Warning
    Yellow for Use Caution
    Green for Safe
    Grey for Unknown


    12. Here are some helpful articles:
    "So how did I get infected in the first place?"
    by TonyKlein
    http://computercops.biz/postlite7736-.html

    "I'm not pulling your leg, honest"
    by Sandi Hardmeier
    http://www.microsoft.com/windows/IE/community/columns/pulling.mspx

    13. This is an excellent resource for users of all levels. General computer maintenance as well as internet security is covered.
    Rootkits for Dummies
    (Paperback)
    by Larry Stevenson (Author), Nancy Altholz (Author)


    Let us know if we have not resolved your problem. Otherwise, you are good to go.
    Happy and Safe Surfing!

    Message Edited by Bugbatter on 10-01-2007 12:44 AM
  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    383

    0

    Posted October 1st, 2007 03:00

    Are you still having ClickSpring.PurityScan problems?
    What anti-virus program are you using?

    Message Edited by Bugbatter on 10-01-2007 12:25 AM