1
General Discussion / If anyone still Plays RS
« on: November 19, 2009, 06:11:52 AM »
oohh pick me!
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
2
General Discussion / Any Other RS Blackmarkets? Or Other Game Blackmarket Forums?
« on: June 07, 2009, 12:24:23 PM »
There's no good way anymore for trading big amounts of gold in runescape.
You'll need to have a bunch of quest points before some1 can give you more money than the item you are offering.
I can't explain it better, so you have to go to the basic knowledge of runescape.
You'll need to have a bunch of quest points before some1 can give you more money than the item you are offering.
I can't explain it better, so you have to go to the basic knowledge of runescape.
3
General Discussion / wtf?
« on: June 07, 2009, 12:17:52 PM »
Yeah i got that message too.
Even tho i quited this forum when i quited runescape.
CIAO!
Even tho i quited this forum when i quited runescape.
CIAO!
4
For Sale / Wanted / Post here if you want pureblood remodded
« on: January 12, 2009, 01:35:13 PM »
1. Madhatter
2. JB Lee=Jew
3. Shibbiness
4. DeScReTe GoD/DiPsEt DeZzY
5. Mikester
6. Febreazee
7. Black Paco
8. masive r4nge
9. Dr Tim
10. Leftovercrack
11.Jonny (i stoleded dem)
12.Allanon
13.Kaosune (plz spell my name right unlike Depressed Lover)
14.XX Emo Slasher XX
15. Pro Edge
16. depressed lover... just j/k eXclusive
2. JB Lee=Jew
3. Shibbiness
4. DeScReTe GoD/DiPsEt DeZzY
5. Mikester
6. Febreazee
7. Black Paco
8. masive r4nge
9. Dr Tim
10. Leftovercrack
11.Jonny (i stoleded dem)
12.Allanon
13.Kaosune (plz spell my name right unlike Depressed Lover)
14.XX Emo Slasher XX
15. Pro Edge
16. depressed lover... just j/k eXclusive
5
For Sale / Wanted / Kaosune is depressed lover
« on: January 11, 2009, 04:05:54 PM »
wrong section, plz move to cry baby's
6
Tech Clinic / explorer.exe vanished, HELP!
« on: June 30, 2008, 10:28:52 AM »
WOOT explorer is back!
But before i do something i think ill post the logs first
heres the ComboFix log:
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\ijji\\ENGLISH\\u_gunz.exe"=
"C:\\Soldat\\Soldat.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\WINDOWS\\system32\\java.exe"=
R3 cmuda2;C-Media USB Audio Interface;C:\WINDOWS\system32\drivers\cmuda2.sys [2004-01-06 09:21]
S3 FXDrv32;FXDrv32;F:\FXDrv32.sys []
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-30 17:35:42
Windows 5.1.2600 Service Pack 2 NTFS
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
C:\WINDOWS\system32\rjbxstnf.ini 1712990 bytes
C:\WINDOWS\system32\wuapi.dll.mui 30040 bytes executable
C:\WINDOWS\system32\rwwnw64d.exe 49188 bytes executable
C:\WINDOWS\system32\msnav32.ax 93 bytes
Scan succesvol afgerond
verborgen bestanden: 4
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Voltooingstijd: 2008-06-30 17:36:58 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-30 15:36:55
Pre-Run: 15,115,128,832 bytes beschikbaar
Post-Run: 15,187,709,952 bytes beschikbaar
481
And the Hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:40:38, on 30-6-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Multimedia Keyboard Driver\M-KbdDrv.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\WINDOWS\System32\Rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
c:\windows\system32\rwwnw64d.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Jeffrey Mennen\Bureaublad\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.legacygamers.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {1BD4AC1C-572A-412D-9078-AEB236C71EEC} - C:\WINDOWS\system32\ddcBTMdB.dll (file missing)
O2 - BHO: (no name) - {3CADF366-6DA6-4386-9FD5-EBB0FDF95B1E} - C:\WINDOWS\system32\ddcDvTkH.dll (file missing)
O2 - BHO: mysidesearch search enhancer - {4b77efe6-4b3b-8283-1655-23b88d764aa1} - C:\WINDOWS\system32\zyrliqussxkyfkty.dll
O2 - BHO: (no name) - {4D4467E9-C176-4962-8F36-090EB6909026} - C:\WINDOWS\system32\iifecbXP.dll (file missing)
O2 - BHO: (no name) - {4F966DA3-A368-4111-A4DB-E59B4DA6FB55} - C:\WINDOWS\system32\tuvWqNDV.dll (file missing)
O2 - BHO: (no name) - {517E6CDD-33AE-41B6-9FFA-37B11430CDC4} - C:\WINDOWS\system32\byXPigEX.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7CA4920E-0D46-4672-96CB-B8470D2FDABF} - C:\WINDOWS\system32\xxywUMFW.dll (file missing)
O2 - BHO: (no name) - {7DB91C87-E6BA-4B39-8C08-BF95A99E0302} - C:\WINDOWS\system32\jkkJyAQG.dll (file missing)
O2 - BHO: (no name) - {8205EF4D-3D65-4CAA-A346-AE14FC9D801A} - C:\WINDOWS\system32\rqRiJAPJ.dll (file missing)
O2 - BHO: {8809f229-efc0-2d9a-38c4-9db35e88bd4a} - {a4db88e5-3bd9-4c83-a9d2-0cfe922f9088} - C:\WINDOWS\system32\vrhbuwuk.dll
O2 - BHO: (no name) - {A531FD18-9BCB-4BDF-8E7F-0EF16EDED66D} - C:\WINDOWS\system32\fccbAPhG.dll (file missing)
O2 - BHO: (no name) - {AACEB173-C677-45CD-8E98-9C35BF7D313B} - C:\WINDOWS\system32\jkkIYpmj.dll (file missing)
O2 - BHO: gooochi browser optimizer - {b107af60-b6d0-019f-a16e-c558b2a772f0} - C:\WINDOWS\system32\{145a3735-9b3d-380e-cf6c-eb6b2d80a7c2}.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [{14-4D-D1-1B-DW}] c:\windows\system32\rwwnw64d.exe DWram
O4 - HKLM\..\Run: [CmUsbAudio] RunDll32 cmcnfg2.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [MutlimediaKbdDriver] C:\Program Files\Multimedia Keyboard Driver\M-KbdDrv.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [{0a0e24db-7645-e43b-4c99-635abbc6fead}] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\{145a3735-9b3d-380e-cf6c-eb6b2d80a7c2}.dll" DllStart
O4 - HKLM\..\Run: [a0214db4] rundll32.exe "C:\WINDOWS\system32\fntsxbjr.dll",b
O4 - HKLM\..\Run: [BMa3127e28] Rundll32.exe "C:\WINDOWS\system32\kseuajvp.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Nnts] "C:\DOCUME~1\JEFFRE~1\MIJNDO~1\ICROSO~1.NET\chkntfs.exe" -vt ndrv
O4 - HKCU\..\Run: [Ngql] "C:\Program Files\Common Files\??stem32\?hkntfs.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\qcntokdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rwwnw64d.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1212511711984
O20 - AppInit_DLLs: lfrnaitc.dll,vrhbuwuk.dll
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
--
End of file - 6791 bytes
But before i do something i think ill post the logs first
heres the ComboFix log:
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\ijji\\ENGLISH\\u_gunz.exe"=
"C:\\Soldat\\Soldat.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\WINDOWS\\system32\\java.exe"=
R3 cmuda2;C-Media USB Audio Interface;C:\WINDOWS\system32\drivers\cmuda2.sys [2004-01-06 09:21]
S3 FXDrv32;FXDrv32;F:\FXDrv32.sys []
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-30 17:35:42
Windows 5.1.2600 Service Pack 2 NTFS
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
C:\WINDOWS\system32\rjbxstnf.ini 1712990 bytes
C:\WINDOWS\system32\wuapi.dll.mui 30040 bytes executable
C:\WINDOWS\system32\rwwnw64d.exe 49188 bytes executable
C:\WINDOWS\system32\msnav32.ax 93 bytes
Scan succesvol afgerond
verborgen bestanden: 4
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Voltooingstijd: 2008-06-30 17:36:58 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-30 15:36:55
Pre-Run: 15,115,128,832 bytes beschikbaar
Post-Run: 15,187,709,952 bytes beschikbaar
481
And the Hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:40:38, on 30-6-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Multimedia Keyboard Driver\M-KbdDrv.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\WINDOWS\System32\Rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
c:\windows\system32\rwwnw64d.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Jeffrey Mennen\Bureaublad\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.legacygamers.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {1BD4AC1C-572A-412D-9078-AEB236C71EEC} - C:\WINDOWS\system32\ddcBTMdB.dll (file missing)
O2 - BHO: (no name) - {3CADF366-6DA6-4386-9FD5-EBB0FDF95B1E} - C:\WINDOWS\system32\ddcDvTkH.dll (file missing)
O2 - BHO: mysidesearch search enhancer - {4b77efe6-4b3b-8283-1655-23b88d764aa1} - C:\WINDOWS\system32\zyrliqussxkyfkty.dll
O2 - BHO: (no name) - {4D4467E9-C176-4962-8F36-090EB6909026} - C:\WINDOWS\system32\iifecbXP.dll (file missing)
O2 - BHO: (no name) - {4F966DA3-A368-4111-A4DB-E59B4DA6FB55} - C:\WINDOWS\system32\tuvWqNDV.dll (file missing)
O2 - BHO: (no name) - {517E6CDD-33AE-41B6-9FFA-37B11430CDC4} - C:\WINDOWS\system32\byXPigEX.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7CA4920E-0D46-4672-96CB-B8470D2FDABF} - C:\WINDOWS\system32\xxywUMFW.dll (file missing)
O2 - BHO: (no name) - {7DB91C87-E6BA-4B39-8C08-BF95A99E0302} - C:\WINDOWS\system32\jkkJyAQG.dll (file missing)
O2 - BHO: (no name) - {8205EF4D-3D65-4CAA-A346-AE14FC9D801A} - C:\WINDOWS\system32\rqRiJAPJ.dll (file missing)
O2 - BHO: {8809f229-efc0-2d9a-38c4-9db35e88bd4a} - {a4db88e5-3bd9-4c83-a9d2-0cfe922f9088} - C:\WINDOWS\system32\vrhbuwuk.dll
O2 - BHO: (no name) - {A531FD18-9BCB-4BDF-8E7F-0EF16EDED66D} - C:\WINDOWS\system32\fccbAPhG.dll (file missing)
O2 - BHO: (no name) - {AACEB173-C677-45CD-8E98-9C35BF7D313B} - C:\WINDOWS\system32\jkkIYpmj.dll (file missing)
O2 - BHO: gooochi browser optimizer - {b107af60-b6d0-019f-a16e-c558b2a772f0} - C:\WINDOWS\system32\{145a3735-9b3d-380e-cf6c-eb6b2d80a7c2}.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [{14-4D-D1-1B-DW}] c:\windows\system32\rwwnw64d.exe DWram
O4 - HKLM\..\Run: [CmUsbAudio] RunDll32 cmcnfg2.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [MutlimediaKbdDriver] C:\Program Files\Multimedia Keyboard Driver\M-KbdDrv.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [{0a0e24db-7645-e43b-4c99-635abbc6fead}] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\{145a3735-9b3d-380e-cf6c-eb6b2d80a7c2}.dll" DllStart
O4 - HKLM\..\Run: [a0214db4] rundll32.exe "C:\WINDOWS\system32\fntsxbjr.dll",b
O4 - HKLM\..\Run: [BMa3127e28] Rundll32.exe "C:\WINDOWS\system32\kseuajvp.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Nnts] "C:\DOCUME~1\JEFFRE~1\MIJNDO~1\ICROSO~1.NET\chkntfs.exe" -vt ndrv
O4 - HKCU\..\Run: [Ngql] "C:\Program Files\Common Files\??stem32\?hkntfs.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\qcntokdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rwwnw64d.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1212511711984
O20 - AppInit_DLLs: lfrnaitc.dll,vrhbuwuk.dll
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
--
End of file - 6791 bytes
7
Tech Clinic / explorer.exe vanished, HELP!
« on: June 30, 2008, 05:09:38 AM »
[quote name=\'MadHatter\' post=\'433537\' date=\'Jun 26 2008, 01:45 PM\']are you on vista?
i have the same problem but im pretty sure it isnt a virus just stress on explorer.exe
try opening task manager
ctrl+alt+del on XP
ctrl + alt + esc on vista
and select file>>new task>> "explorer.exe"
it should restart and work fine[/quote]
that doesnt works either, and im using windows XP
Sorry i didnt replyed in a long time since i was using my laptop instead,
Im now on school but when i come home i will do what questello told me
thx!
i have the same problem but im pretty sure it isnt a virus just stress on explorer.exe
try opening task manager
ctrl+alt+del on XP
ctrl + alt + esc on vista
and select file>>new task>> "explorer.exe"
it should restart and work fine[/quote]
that doesnt works either, and im using windows XP
Sorry i didnt replyed in a long time since i was using my laptop instead,
Im now on school but when i come home i will do what questello told me
thx!
8
Tech Clinic / explorer.exe vanished, HELP!
« on: June 23, 2008, 12:25:08 PM »
Okay i played runescape and after some time my computer crashed,
So like always i just shut of my computer holding my on/off button for 7 seconds and turned it on.
But now my explorer.exe is vanished from Task manager (i dont have the menu start)
Even if i try to open a new task, I see the program running for a second and disapears..
I know you, guestello fights most against spyware but maybe you could help me out here..
(my grammer is terrible beause im dutch but i can read fine)
heres my log :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:29:26, on 23-6-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\TWVubmVu\command.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jeffrey Mennen\Bureaublad\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.legacygamers.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [{14-4D-D1-1B-DW}] C:\windows\system32\jnwnw64l.exe DWram
O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\qcntokdm.exe DWram
O4 - HKLM\..\Run: [dbar_starter] C:\Documents and Settings\Jeffrey Mennen\Application Data\Deskbar_{5814E6D7-D9CE-49da-8402-48DC1FCA51FA}\starter.exe
O4 - HKLM\..\Run: [CmUsbAudio] RunDll32 cmcnfg2.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [MutlimediaKbdDriver] C:\Program Files\Multimedia Keyboard Driver\M-KbdDrv.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [{0a0e24db-7645-e43b-4c99-635abbc6fead}] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\{145a3735-9b3d-380e-cf6c-eb6b2d80a7c2}.dll" DllStart
O4 - HKLM\..\Run: [a0214db4] rundll32.exe "C:\WINDOWS\system32\fntsxbjr.dll",b
O4 - HKLM\..\Run: [BMa3127e28] Rundll32.exe "C:\WINDOWS\system32\kseuajvp.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Nnts] "C:\DOCUME~1\JEFFRE~1\MIJNDO~1\ICROSO~1.NET\chkntfs.exe" -vt ndrv
O4 - HKCU\..\Run: [WinUpdater] "C:\Program Files\winvi\update.exe" /background
O4 - HKCU\..\Run: [WebSUpdater] "C:\Program Files\winvi\wupda.exe" /background
O4 - HKCU\..\Run: [Ngql] "C:\Program Files\Common Files\??stem32\?hkntfs.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\qcntokdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\jnwnw64l.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1212511711984
O20 - AppInit_DLLs: lfrnaitc.dll vrhbuwuk.dll
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TWVubmVu\command.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
--
End of file - 4833 bytes
So like always i just shut of my computer holding my on/off button for 7 seconds and turned it on.
But now my explorer.exe is vanished from Task manager (i dont have the menu start)
Even if i try to open a new task, I see the program running for a second and disapears..
I know you, guestello fights most against spyware but maybe you could help me out here..
(my grammer is terrible beause im dutch but i can read fine)
heres my log :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:29:26, on 23-6-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\TWVubmVu\command.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jeffrey Mennen\Bureaublad\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.legacygamers.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [{14-4D-D1-1B-DW}] C:\windows\system32\jnwnw64l.exe DWram
O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\qcntokdm.exe DWram
O4 - HKLM\..\Run: [dbar_starter] C:\Documents and Settings\Jeffrey Mennen\Application Data\Deskbar_{5814E6D7-D9CE-49da-8402-48DC1FCA51FA}\starter.exe
O4 - HKLM\..\Run: [CmUsbAudio] RunDll32 cmcnfg2.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [MutlimediaKbdDriver] C:\Program Files\Multimedia Keyboard Driver\M-KbdDrv.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [{0a0e24db-7645-e43b-4c99-635abbc6fead}] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\{145a3735-9b3d-380e-cf6c-eb6b2d80a7c2}.dll" DllStart
O4 - HKLM\..\Run: [a0214db4] rundll32.exe "C:\WINDOWS\system32\fntsxbjr.dll",b
O4 - HKLM\..\Run: [BMa3127e28] Rundll32.exe "C:\WINDOWS\system32\kseuajvp.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Nnts] "C:\DOCUME~1\JEFFRE~1\MIJNDO~1\ICROSO~1.NET\chkntfs.exe" -vt ndrv
O4 - HKCU\..\Run: [WinUpdater] "C:\Program Files\winvi\update.exe" /background
O4 - HKCU\..\Run: [WebSUpdater] "C:\Program Files\winvi\wupda.exe" /background
O4 - HKCU\..\Run: [Ngql] "C:\Program Files\Common Files\??stem32\?hkntfs.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\qcntokdm.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\jnwnw64l.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1212511711984
O20 - AppInit_DLLs: lfrnaitc.dll vrhbuwuk.dll
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TWVubmVu\command.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
--
End of file - 4833 bytes
9
For Sale / Wanted / Buy runescape Mill
« on: November 21, 2007, 02:39:41 PM »
im buying 2 or 3 mills~ nothing much~
need a recommen seller and trusty mm'er
ill add you on M5N
need a recommen seller and trusty mm'er
ill add you on M5N
10
For Sale / Wanted / Wanted Any Free Accounts Not Low Level's
« on: November 05, 2007, 03:49:38 PM »
yeah sure im quiting, you can have my main
username : fknova
password : upurs
srry but i dont think anyone around here will be quiting, neither they would give you there accounts
username : fknova
password : upurs
srry but i dont think anyone around here will be quiting, neither they would give you there accounts
11
General Discussion / Keeping JBLEE ALIVE
« on: September 16, 2007, 02:40:47 PM »
[quote name=\'JB Lee\' post=\'388914\' date=\'Sep 16 2007, 01:36 PM\']im sure this will be deleted as soon as a mod see's this...
which means it wont get deleted for a few hours
http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/tongue.gif\' class=\'bbc_emoticon\' alt=\'
\' /> lol
thanks for this...but I don't think it will make a difference...i don't think they want a new mod because I don't think they want to admit they are doing a crappy job...[/quote]
wow lol and that's why some poeple are 100% behind you
which means it wont get deleted for a few hours
\' /> lolthanks for this...but I don't think it will make a difference...i don't think they want a new mod because I don't think they want to admit they are doing a crappy job...[/quote]
wow lol and that's why some poeple are 100% behind you
13
Idle Chat / What are you listening to? (Music)
« on: September 08, 2007, 04:10:47 PM »
Papa Roach - between angels and insects
14
Idle Chat / BIGGEST POST CHALLENGE
« on: September 08, 2007, 03:53:54 PM »
BUMB!
WOOT IM DOUBLE POSTING!!!
WOOT IM DOUBLE POSTING!!!
15
For Sale / Wanted / Selling lvl 46 Range/2h
« on: September 08, 2007, 03:35:00 PM »
talking about a new topic, this is alrdy ur 2nd today
16
For Sale / Wanted / Selling lvl 46 Range/2h
« on: September 08, 2007, 03:19:59 PM »
ow ok lol,
srry i dont trust you that muchhttp://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/rolleyes.gif\' class=\'bbc_emoticon\' alt=\':rolleyes:\' />
but its very easy to scam that wayhttp://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/tongue.gif\' class=\'bbc_emoticon\' alt=\'\' />
but let me stop posting in herehttp://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/happy.gif\' class=\'bbc_emoticon\' alt=\'^_^\' />
srry i dont trust you that much
but its very easy to scam that way
\' /> but let me stop posting in here
17
Idle Chat / LOOK AT THIS!!!
« on: September 08, 2007, 03:17:31 PM »
whaha ok
ow no srry dude,,
i looked above and saw runescape>generall discusion
i thought this was the runescape section
my badhttp://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/rolleyes.gif\' class=\'bbc_emoticon\' alt=\':rolleyes:\' />
ow no srry dude,,
i looked above and saw runescape>generall discusion
i thought this was the runescape section
my bad
18
For Sale / Wanted / Selling lvl 46 Range/2h
« on: September 08, 2007, 03:14:56 PM »
[email protected]
who that might be?
who that might be?
19
For Sale / Wanted / Selling lvl 46 Range/2h
« on: September 08, 2007, 03:11:39 PM »
No i deleted my 1st post http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/blink.gif\' class=\'bbc_emoticon\' alt=\':blink:\' />
and i gave trayt some advice to use a anti scammer
and i gave trayt some advice to use a anti scammer
20
Idle Chat / LOOK AT THIS!!!
« on: September 08, 2007, 03:09:39 PM »
Woot lol i doub if he made it http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/ohmy.gif\' class=\'bbc_emoticon\' alt=\'
\' />
`but wrong forum section?
\' />`but wrong forum section?