UNSOLVED

Kaktuuus

updated

20 years ago

K

Kaktuuus

5 Posts

0

748

June 8th, 2006 17:00

TopAdwareReviews

Hello Dell Team,
 
some weeks ago my computer was infected by an annoying spyware that i cannot remove. Can anyone help me...the Logfile fo HijackThis is:
 
Logfile of HijackThis v1.99.1
Scan saved at 20:41:04, on 08.06.2006
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Programme\Java\jre1.5.0_03\bin\jusched.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\QuickTime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programme\Messenger\msmsgs.exe
C:\WINDOWS\wupdmgr.exe
C:\WINDOWS\osaupd.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\srvany.exe
C:\WINDOWS\system32\resetservice.exe
C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\WINDOWS\system32\wguserv.exe
C:\PROGRA~1\FRNDSL\FRNDSL.exe
C:\Programme\Winamp\Winamp.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Dokumente und Einstellungen\Mami\Lokale Einstellungen\Temporary Internet Files\Content.IE5\01MRGDEV\HijackThis[1].exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.freenet.de
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer von freenet.de
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {e52dedbb-d168-4bdb-b229-c48160800e81} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CaAvTray] "C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [windows] c:\zx\svchost.exe
O4 - HKLM\..\Run: [Adware.Srv32] C:\WINDOWS\System32\runsrv32.exe
O4 - HKLM\..\Run: [Transponder] C:\WINDOWS\System32\susp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O14 - IERESET.INF: START_PAGE_URL=http://www.freenet.de
O16 - DPF: {2F003D51-39FD-4D18-9016-95CF70B92ABE} - http://download.movienetworks.com/install/US/altpmtscab.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {33331111-1111-1111-1111-611111193423} -
O16 - DPF: {33331111-1111-1111-1111-611111193429} -
O16 - DPF: {33331111-1111-1111-1111-615111193427} -
O16 - DPF: {33331111-1131-1111-1111-611111193428} -
O16 - DPF: {43331111-1111-1111-1111-611111195622} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{9AA05188-E2E3-494D-B48E-ABBAF4B7EF1D}: NameServer = 194.97.173.125 194.97.173.124
O17 - HKLM\System\CCS\Services\Tcpip\..\{BB1F0418-1ED5-4B66-B898-6FB4C5776800}: NameServer = 85.255.116.106,85.255.112.230
O20 - Winlogon Notify: reset5 - C:\WINDOWS\SYSTEM32\reset5.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Reset 5 - Unknown owner - C:\WINDOWS\system32\srvany.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
 
 
I was trying to fix it by my own but i couldnt. Hope you guys can help me.
Thank you,
Kaktuuus
 
  • bamajim

    10376 Posts

    438

    0

    Posted June 8th, 2006 18:00

    Kaktuuus

    You currently have Hijackthis in a temp folder. It needs to be moved to it's own folder such as C:\HJT.

    The program creates backups that we may need, and don't want them lost as could happen in a Temp folder

    Create a folder on the C: drive called C:\HJT.
    You can do this by going to My Computer (Windows key+e) then double click on C:
    then right click and select New then Folder and name it HJT.

    Then Re run Hijackthis and post a new log

    Thanks

    bamajim

    Training at Malware Removal University

     

     

  • Kaktuuus

    5 Posts

    438

    0

    Posted June 8th, 2006 19:00

    okay, sorry. Here is the new log:

     

    Logfile of HijackThis v1.99.1
    Scan saved at 22:07:40, on 08.06.2006
    Platform: Windows XP  (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
    C:\Programme\Java\jre1.5.0_03\bin\jusched.exe
    C:\Programme\Winamp\winampa.exe
    C:\Programme\QuickTime\qttask.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Programme\Messenger\msmsgs.exe
    C:\WINDOWS\wupdmgr.exe
    C:\WINDOWS\osaupd.exe
    C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\srvany.exe
    C:\WINDOWS\system32\resetservice.exe
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
    C:\WINDOWS\system32\wguserv.exe
    C:\PROGRA~1\FRNDSL\FRNDSL.exe
    C:\Programme\Winamp\Winamp.exe
    C:\Programme\Internet Explorer\iexplore.exe
    C:\Programme\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
    C:\HijackThis\HijackThis.exe
     

  • bamajim

    10376 Posts

    438

    0

    Posted June 8th, 2006 19:00

    Kaktuuus

    We're almost there, this time we didn't get a complete log

    Please repost

    Thanks

    bamajim

    Training at Malware Removal University

  • Kaktuuus

    5 Posts

    438

    0

    Posted June 9th, 2006 06:00

    i hope this time i did everything right...
     
     
    Logfile of HijackThis v1.99.1
    Scan saved at 09:40:59, on 09.06.2006
    Platform: Windows XP  (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
    C:\Programme\Java\jre1.5.0_03\bin\jusched.exe
    C:\Programme\Winamp\winampa.exe
    C:\Programme\QuickTime\qttask.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Programme\Messenger\msmsgs.exe
    C:\WINDOWS\wupdmgr.exe
    C:\WINDOWS\osaupd.exe
    C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\srvany.exe
    C:\WINDOWS\system32\resetservice.exe
    C:\WINDOWS\system32\wguserv.exe
    C:\Programme\Internet Explorer\iexplore.exe
    C:\PROGRA~1\FRNDSL\FRNDSL.exe
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
    C:\Programme\Internet Explorer\iexplore.exe
    C:\HijackThis\HijackThis.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.freenet.de
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer von freenet.de
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: (no name) - {e52dedbb-d168-4bdb-b229-c48160800e81} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [CaAvTray] "C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
    O4 - HKLM\..\Run: [CAVRID] "C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_03\bin\jusched.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
    O4 - HKLM\..\Run: [windows] c:\zx\svchost.exe
    O4 - HKLM\..\Run: [Adware.Srv32] C:\WINDOWS\System32\runsrv32.exe
    O4 - HKLM\..\Run: [Transponder] C:\WINDOWS\System32\susp.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
    O14 - IERESET.INF: START_PAGE_URL=http://www.freenet.de
    O16 - DPF: {2F003D51-39FD-4D18-9016-95CF70B92ABE} - http://download.movienetworks.com/install/US/altpmtscab.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {33331111-1111-1111-1111-611111193423} -
    O16 - DPF: {33331111-1111-1111-1111-611111193429} -
    O16 - DPF: {33331111-1111-1111-1111-615111193427} -
    O16 - DPF: {33331111-1131-1111-1111-611111193428} -
    O16 - DPF: {43331111-1111-1111-1111-611111195622} -
    O17 - HKLM\System\CCS\Services\Tcpip\..\{9AA05188-E2E3-494D-B48E-ABBAF4B7EF1D}: NameServer = 194.97.173.125 194.97.173.124
    O17 - HKLM\System\CCS\Services\Tcpip\..\{BB1F0418-1ED5-4B66-B898-6FB4C5776800}: NameServer = 85.255.116.106,85.255.112.230
    O20 - Winlogon Notify: reset5 - C:\WINDOWS\SYSTEM32\reset5.dll
    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
    O23 - Service: Reset 5 - Unknown owner - C:\WINDOWS\system32\srvany.exe
    O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
     
  • Bugbatter

    4 Apprentice

    20487 Posts

    438

    0

    Posted June 9th, 2006 21:00

    Yup, everything done right. Thanks. :)
    We can get things cleaned up, but first it is CRITICAL that you update to Service Pack 1a.
    Please visit this link: http://www.microsoft.com/windowsxp/downloads/updates/sp1/default.mspx

    Follow the directions for Express Installation under " Installing SP1a on Your Computer".

    IMPORTANT: DO NOT update to Service pack 2.
    Doing so before your computer is malware free can cause Windows to become unstable.
    We will update to SP2 when your system is clean.


    By the way, did you install this yourself:

    Running Process:
    C:\WINDOWS\system32\resetservice.exe
    C:\WINDOWS\system32\srvany.exe

    O20 - Winlogon Notify: reset5 - C:\WINDOWS\SYSTEM32\reset5.dll
    O23 - Service: Reset 5 - Unknown owner - C:\WINDOWS\system32\srvany.exe


    Please post a fresh HijackThis log after you have updated Windows. Thanks.
  • Kaktuuus

    5 Posts

    438

    0

    Posted June 11th, 2006 19:00

    okay, here is the brand new log file of HJT after updating windows service pack 1. Hope that is enough information because that spyware is really annoying :smileyindifferent:
     
    oh, i don´t know who was installing this one...
    C:\WINDOWS\system32\srvany.exe
    C:\WINDOWS\system32\resetservice.exe
    why, what´s wrong with it?
     
     
     
    Logfile of HijackThis v1.99.1
    Scan saved at 22:41:18, on 11.06.2006
    Platform: Windows XP  (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
    C:\Programme\Java\jre1.5.0_03\bin\jusched.exe
    C:\Programme\Winamp\winampa.exe
    C:\Programme\QuickTime\qttask.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Programme\Messenger\msmsgs.exe
    C:\WINDOWS\wupdmgr.exe
    C:\WINDOWS\osaupd.exe
    C:\Programme\Yahoo!\Messenger\ymsgr_tray.exe
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
    C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\srvany.exe
    C:\WINDOWS\system32\resetservice.exe
    C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
    C:\WINDOWS\system32\wguserv.exe
    C:\PROGRA~1\FRNDSL\FRNDSL.exe
    C:\Programme\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
    C:\Programme\Internet Explorer\iexplore.exe
    C:\Programme\Internet Explorer\iexplore.exe
    C:\HijackThis\HijackThis.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.freenet.de
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer von freenet.de
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: (no name) - {e52dedbb-d168-4bdb-b229-c48160800e81} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [CaAvTray] "C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
    O4 - HKLM\..\Run: [CAVRID] "C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_03\bin\jusched.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
    O4 - HKLM\..\Run: [windows] c:\zx\svchost.exe
    O4 - HKLM\..\Run: [Adware.Srv32] C:\WINDOWS\System32\runsrv32.exe
    O4 - HKLM\..\Run: [Transponder] C:\WINDOWS\System32\susp.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Programme\Yahoo!\Messenger\ypager.exe" -quiet
    O14 - IERESET.INF: START_PAGE_URL=http://www.freenet.de
    O16 - DPF: {2F003D51-39FD-4D18-9016-95CF70B92ABE} - http://download.movienetworks.com/install/US/altpmtscab.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {33331111-1111-1111-1111-611111193423} -
    O16 - DPF: {33331111-1111-1111-1111-611111193429} -
    O16 - DPF: {33331111-1111-1111-1111-615111193427} -
    O16 - DPF: {33331111-1131-1111-1111-611111193428} -
    O16 - DPF: {43331111-1111-1111-1111-611111195622} -
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1150033232445
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1150033212556
    O17 - HKLM\System\CCS\Services\Tcpip\..\{9AA05188-E2E3-494D-B48E-ABBAF4B7EF1D}: NameServer = 194.97.173.124 194.97.173.125
    O17 - HKLM\System\CCS\Services\Tcpip\..\{BB1F0418-1ED5-4B66-B898-6FB4C5776800}: NameServer = 85.255.116.106,85.255.112.230
    O20 - Winlogon Notify: reset5 - C:\WINDOWS\SYSTEM32\reset5.dll
    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
    O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
    O23 - Service: Reset 5 - Unknown owner - C:\WINDOWS\system32\srvany.exe
    O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Programme\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
     
     
     
  • Bugbatter

    4 Apprentice

    20487 Posts

    438

    0

    Posted June 11th, 2006 23:00

    We will need some additional information before we begin your fix.

    Please go here (Microsoft website) using Internet Explorer ( not Firefox or any other browser as they won't work)
    *Click on "Windows Validation Assistant"
    *Click on the "Validate Now" button.
    *Be patient while the ActiveX loads, do not click on any links.
    *Read the instructions on this page while it's loading. You will be prompted to install - click YES.
    *Enter your product key then click "continue"
    (Product keys are 25-character alphanumeric strings that are formatted in groups of five characters, separated by dashes. If your computer came shipped with Windows pre-loaded, the product key is located on a genuine Microsoft license sticker somewhere on your computer.)

    *When it says "Validation Complete" please click "Continue to return to your previous activity"
    *Copy what it says and paste it here.

    Thanks! :)
  • Kaktuuus

    5 Posts

    438

    0

    Posted June 16th, 2006 11:00

    sorry, my windows xp version isn´t registered yet and i can not find the registering key so i couldn´t dowload the ActiveX compilation. I guess that´s it, there isn´t any other way to get rid of this spyware thing?