Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Gave ComboFix a shot

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Gave ComboFix a shot

Unread postby glance left » March 5th, 2009, 7:41 pm

OK...just gunning in the dark, I gave ComboFix a shot after struggling with persistent viral infection for months. All my anti-viral anti-ware programs seemed impotent against it. I began skimming through forum boards looking for others with similar problem. When I found one poor sap with the same issue, I saw that ComboFix was recommended. I decided to go for it, even though it recommends waiting to get supervision from a professional before launching (call me impulsive ;)

The run was successful, it seems. The problem appears to be fixed, for the time being. I'll go ahead an post the log report here and lay myself within your expertise, if that's ok. Apologies if I'm circumnavigating any protocol in this fashion. I can't make head nor tails of the report, so I was hoping to get a skilled perusal.

Thank y'all so much! Here's the report...

ComboFix 09-03-04.01 - Compaq_Owner 2009-03-05 16:34:01.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447.82 [GMT -6:00]
Running from: c:\documents and settings\Compaq_Owner\Desktop\ComboFix.exe
AV: Spyware Doctor with AntiVirus *On-access scanning enabled* (Updated)
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\IE4 Error Log.txt
c:\windows\system32\bqpldg.dll
c:\windows\system32\chfefa.dll
c:\windows\system32\cuapophw.dll
c:\windows\system32\cxyngwxm.dll
c:\windows\system32\DKTwHRqr.ini
c:\windows\system32\DKTwHRqr.ini2
c:\windows\system32\fealbmic.ini
c:\windows\system32\gonpidwl.ini
c:\windows\system32\gpmecvum.dll
c:\windows\system32\iosahxvt.dll
c:\windows\system32\iqwuxetk.ini
c:\windows\system32\jkmryl.dll
c:\windows\system32\kipqlhhc.ini
c:\windows\system32\ktexuwqi.dll
c:\windows\system32\lxfiegfy.dll
c:\windows\system32\mcrh.tmp
c:\windows\system32\mgdsxqhu.ini
c:\windows\system32\MSVolume.dll
c:\windows\system32\muvcempg.ini
c:\windows\system32\mxwgnyxc.ini
c:\windows\system32\njslbeyu.ini
c:\windows\system32\nlewwxgx.ini
c:\windows\system32\nmeyil.dll
c:\windows\system32\onctmppc.ini
c:\windows\system32\oyowrdrj.ini
c:\windows\system32\pleewk.dll
c:\windows\system32\pljtotni.dll
c:\windows\system32\pynvubjf.dll
c:\windows\system32\qhjetmpg.ini
c:\windows\system32\qxalkyak.dll
c:\windows\system32\riluki.dll
c:\windows\system32\tgzgpq.dll
c:\windows\system32\twznwf.dll
c:\windows\system32\txkxdb.dll
c:\windows\system32\ujnmfmxn.ini
c:\windows\system32\vaintetl.ini
c:\windows\system32\vdpnsskm.dll
c:\windows\system32\vsugdtrk.dll
c:\windows\system32\vwrindnv.ini
c:\windows\system32\wpvbppog.ini
c:\windows\system32\xwhqkhdn.ini
c:\windows\system32\yfgeifxl.ini
c:\windows\system32\yjpelfre.ini
c:\windows\Tasks\wftdbbya.job
c:\windows\wiaserviv.log
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2009-02-05 to 2009-03-05 )))))))))))))))))))))))))))))))
.

2009-03-05 13:29 . 2009-03-05 13:30 <DIR> d-------- c:\program files\ATI Technologies
2009-03-05 13:29 . 2004-11-03 21:10 516,096 --------- c:\windows\system32\ati2sgag.exe
2009-03-05 13:29 . 2004-12-20 15:30 294,912 -ra------ c:\windows\system32\atiiiexx.dll
2009-03-05 13:29 . 2004-12-20 15:30 192,512 -ra------ c:\windows\system32\ATIDEMGR.dll
2009-03-05 13:29 . 2004-12-20 15:30 9,054 -ra------ c:\windows\system32\atifglpf.xml
2009-03-05 13:05 . 2009-03-05 13:05 23,392 --a------ c:\windows\system32\nscompat.tlb
2009-03-05 13:05 . 2009-03-05 13:05 16,832 --a------ c:\windows\system32\amcompat.tlb
2009-03-05 12:42 . 2009-03-05 12:42 10 --a------ c:\windows\WININIT.INI
2009-03-01 21:25 . 2009-03-01 21:25 <DIR> d-------- c:\program files\Microsoft Silverlight
2009-02-24 09:16 . 2009-02-24 09:16 38,208 --a------ c:\windows\system32\drivers\TfSysMon.sys
2009-02-24 09:16 . 2009-02-24 09:16 33,088 --a------ c:\windows\system32\drivers\TfNetMon.sys
2009-02-24 09:15 . 2009-02-24 09:15 51,520 --a------ c:\windows\system32\drivers\TfFsMon.sys
2009-02-24 09:15 . 2009-02-24 09:15 12,608 --a------ c:\windows\system32\drivers\TfKbMon.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-05 22:49 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-05 22:42 --------- d-----w c:\program files\Steam
2009-03-05 22:22 --------- d-----w c:\program files\Spyware Doctor
2009-03-05 22:07 --------- d-----w c:\program files\Lavasoft
2009-03-05 22:07 --------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft
2009-03-05 21:33 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\Skype
2009-03-05 19:30 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-05 19:10 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\skypePM
2009-03-05 19:05 --------- d-----w c:\program files\Yahoo!
2009-03-05 19:01 --------- d-----w c:\program files\Windows Media Connect 2
2009-03-05 18:58 --------- d-----w c:\documents and settings\All Users\Application Data\Viewpoint
2009-03-05 18:56 --------- d-----w c:\program files\Common Files\Real
2009-03-05 18:53 --------- d-----w c:\program files\WildTangent
2009-03-05 18:53 --------- d-----w c:\program files\Puppy Luv
2009-03-05 18:52 --------- d-----w c:\documents and settings\All Users\Application Data\ATI MMC
2009-03-05 18:50 --------- d-----w c:\program files\Common Files\Symantec Shared
2009-03-05 18:48 --------- d-----w c:\program files\Quicken
2009-03-05 18:47 --------- d-----w c:\program files\Electronic Arts
2009-03-05 18:47 --------- d-----w c:\documents and settings\All Users\Application Data\Electronic Arts
2009-03-05 18:46 --------- d-----w c:\program files\ValuSoft
2009-02-25 04:37 --------- d-----w c:\documents and settings\All Users\Application Data\PC Tools
2009-02-02 15:55 --------- d-----w c:\program files\Barbie(R) idesign(TM) Ultimate Stylist(TM)
2009-01-31 16:32 66,952 ----a-w c:\windows\system32\drivers\iksysflt.sys
2009-01-31 16:31 81,288 ----a-w c:\windows\system32\drivers\iksyssec.sys
2009-01-31 16:31 40,840 ----a-w c:\windows\system32\drivers\ikfilesec.sys
2009-01-31 16:15 --------- d-----w c:\documents and settings\All Users\Application Data\Avira
2009-01-27 21:57 --------- d-----w c:\program files\Common Files\PC Tools
2009-01-27 21:48 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\PC Tools
2009-01-27 21:41 --------- d-----w c:\program files\Common Files\Download Manager
2009-01-19 22:55 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\BFGTOOLBAR
2009-01-19 15:15 --------- d-----w c:\program files\AdwarePro
2009-01-18 21:30 64,160 ----a-w c:\windows\system32\drivers\Lbd.sys
2009-01-15 14:37 --------- d-----w c:\documents and settings\All Users\Application Data\PCPitstop
2009-01-15 04:10 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\Move Networks
2009-01-11 20:27 --------- d-----w c:\program files\Google
2009-01-10 23:01 --------- d-----w c:\documents and settings\Compaq_Owner\Application Data\Apple Computer
2009-01-10 21:41 --------- d-----w c:\program files\Bonjour
2009-01-10 21:40 --------- d-----w c:\program files\iTunes
2009-01-10 21:40 --------- d-----w c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-10 21:39 --------- d-----w c:\program files\iPod
2009-01-10 21:39 --------- d-----w c:\program files\Common Files\Apple
2009-01-10 21:37 --------- d-----w c:\program files\QuickTime
2009-01-10 21:13 --------- d-----w c:\program files\Safari
2008-03-09 21:37 0 ----a-w c:\program files\temp01
2006-10-08 14:38 8,808 ----a-w c:\documents and settings\Compaq_Owner\Application Data\wklnhst.dat
2005-05-18 05:09 774,144 ----a-w c:\program files\RngInterstitial.dll
2005-05-11 06:01 56 --sh--r c:\windows\system32\1B42EE0825.sys
2008-08-13 13:05 88 --sh--r c:\windows\system32\2508EE421B.sys
2008-08-13 13:05 2,516 --sha-w c:\windows\system32\KGyGaAvL.sys
.

------- Sigcheck -------

2005-06-10 18:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
2004-08-04 06:00 57856 7435b108b935e42ea92ca94f59c8e717 c:\windows\$NtUninstallKB896423$\spoolsv.exe
2008-04-13 18:12 57856 d8e14a61acc1d4a6cd0d38aebac7fa3b c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spoolsv.exe
2005-06-10 17:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\system32\spoolsv.exe
2005-06-10 17:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\system32\dllcache\spoolsv.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320]
"Steam"="c:\program files\Steam\Steam.exe" [2008-12-14 1410296]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-25 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
"KBD"="c:\hp\KBD\KBD.EXE" [2003-02-11 61440]
"UpdateManager"="c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2004-04-14 233472]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2004-08-20 155648]
"PS2"="c:\windows\system32\ps2.exe" [2003-09-12 98304]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 253952]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2009-01-31 1168264]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-11-03 344064]
"VTTimer"="VTTimer.exe" [2004-10-22 c:\windows\system32\VTTimer.exe]
"SiSPower"="SiSPower.dll" [2004-09-24 c:\windows\system32\SiSPower.dll]
"AGRSMMSG"="AGRSMMSG.exe" [2005-03-04 c:\windows\AGRSMMSG.exe]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 c:\windows\ALCXMNTR.EXE]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 c:\windows\KHALMNPR.Exe]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 c:\windows\KHALMNPR.Exe]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-04 258048]
HP Image Zone Fast Start.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-11-04 53248]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-09-22 692224]
NewShortcut1.lnk - c:\program files\HP\HP Mouse\panel.exe [2007-06-05 233472]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2006-05-29 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.JDCT"= jl_jdct.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Steam\\SteamApps\\glance_left\\half-life 2 deathmatch\\hl2.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"443:TCP"= 443:TCP:*:Disabled:c:\\Program Files\\Internet Content Filter\\TheApp.exe

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-01-19 64160]
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2009-02-24 51520]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [2009-02-24 38208]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [2009-01-27 160792]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-01-27 356920]
R3 HidMouse;HidMouse;c:\windows\system32\drivers\HidMouse.sys [2007-06-05 29184]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2009-02-24 33088]
R3 ThreatFire;ThreatFire;c:\program files\Spyware Doctor\TFEngine\TFService.exe service --> c:\program files\Spyware Doctor\TFEngine\TFService.exe service [?]
S3 ldiskl;ldiskl;\??\c:\docume~1\COMPAQ~1\LOCALS~1\Temp\ldiskl.sys --> c:\docume~1\COMPAQ~1\LOCALS~1\Temp\ldiskl.sys [?]

--- Other Services/Drivers In Memory ---

*Deregistered* - mchInjDrv

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
.
Contents of the 'Scheduled Tasks' folder

2009-03-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []

2009-03-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
- - - - ORPHANS REMOVED - - - -

BHO-{D1499A38-1DC5-4EE7-B54A-7873687FD3F1} - c:\windows\system32\rqRHwTKD.dll
HKCU-Run-PhotoShow Deluxe Media Manager - c:\progra~1\WALGRE~1\WALGRE~1\data\Xtras\mssysmgr.exe
HKCU-Run-EA Core - c:\program files\Electronic Arts\EADM\Core.exe
HKCU-Run-AdwareProMFCT - c:\program files\AdwarePro\StartApp.exe
Notify-cattcp - c:\windows\java\cattcp.dll
Notify-vgabas - c:\windows\java\trustlib\vgabas.dll
Notify-wvUkHBtr - wvUkHBtr.dll


.
------- Supplementary Scan -------
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.com/
uSearch Bar = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
uInternet Settings,ProxyOverride = localhost;*.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &AOL Toolbar search - c:\program files\AOL Toolbar\toolbar.dll/SEARCH.HTML
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: Yahoo! &SMS - file:///c:\program files\Yahoo!\Common/ycsms.htm
LSP: c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\senk26dn.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.firefox.com
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - plugin: c:\documents and settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\senk26dn.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava11.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava12.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava13.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava14.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJava32.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJPI142_03.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPOJI610.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWTHost.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-05 16:45:42
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(676)
c:\windows\system32\Ati2evxx.dll
c:\program files\Spyware Doctor\TFEngine\TFNI.dll

- - - - - - - > 'lsass.exe'(732)
c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
c:\program files\Spyware Doctor\TFEngine\TFWAH.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\PSIService.exe
c:\program files\Spyware Doctor\pctsSvc.exe
c:\program files\Common Files\Logitech\KhalShared\KHALMNPR.exe
c:\program files\HP\Digital Imaging\bin\hpqgalry.exe
c:\program files\Common Files\Symantec Shared\Security Center\symwsc.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\Symantec Shared\Security Center\SymSCUI.exe
c:\program files\Spyware Doctor\TFEngine\TFService.exe
c:\windows\SoftwareDistribution\Download\fd0264849c01086f3c6b505dc02dbd44\update\update.exe
.
**************************************************************************
.
Completion time: 2009-03-05 16:57:46 - machine was rebooted
ComboFix-quarantined-files.txt 2009-03-05 22:57:35

Pre-Run: 157,649,858,560 bytes free
Post-Run: 157,417,771,008 bytes free

283 --- E O F --- 2009-01-15 09:02:21
glance left
Active Member
 
Posts: 3
Joined: March 5th, 2009, 7:15 pm
Advertisement
Register to Remove

Re: Gave ComboFix a shot

Unread postby NonSuch » March 6th, 2009, 2:50 am

In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log as well as a copy of the ComboFix log.

You should be aware that it is extremely dangerous to use ComboFix on your own. If something had gone wrong, you would not have known what to do nor how to alleviate the problem. For the safety of your system, please do not run anything else on your own.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<
User avatar
NonSuch
Administrator
Administrator
 
Posts: 27300
Joined: February 23rd, 2005, 7:08 am
Location: California


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 54 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware