« previous next »
Pages: [1] 2

Author Topic: .dll problems  (Read 1055 times)

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« on: October 13, 2007, 08:52:02 AM »
it is cuases my computer to restart when i run progammes such as java

its c:windows/system32/glyfyred.dll

and i dunno what to do
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #1 on: October 13, 2007, 09:07:51 AM »
Download Hijackthis Installer from [color=\"#FF0000\"]HERE[/color]
For an alternate download location, you can try HERE
SAVE it to your desktop
Double click on HJTInstall.exe to run it
Choose Install

Hijackthis v2.0.2 will open

Under Main Menu, Select
Do a system scan and save a Log file
A log will open in Notepad
Copy and Paste the Whole log back here to the forum----It is all important!
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #2 on: October 13, 2007, 09:35:47 AM »
how do i do system log? i not very smart
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #3 on: October 13, 2007, 09:37:45 AM »
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\wowyalge.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\BT Business Hub\Wireless Configuration\WirelessDaemon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://www-cache.freeserve.com:8080;ftp=http://www-cache.freeserve.com:8080
O2 - BHO: (no name) - {5CA4F5E9-5D99-45C9-A2C5-E63B3F8AF969} - C:\WINDOWS\system32\gebcd.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: {ec73b86e-259c-f02b-0384-f519571d14ef} - {fe41d175-915f-4830-b20f-c952e68b37ce} - C:\WINDOWS\system32\btuvqayi.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll (file missing)
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [3cad74ad] rundll32.exe "C:\WINDOWS\system32\glyfyred.dll",sitypnow
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?58abcea5814547b6b0e008bc10e01966
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?58abcea5814547b6b0e008bc10e01966
O8 - Extra context menu item: Search with Wanadoo - res://C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1186523587958
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1186523682099
O20 - Winlogon Notify: awtqq - C:\WINDOWS\system32\awtqq.dll
O20 - Winlogon Notify: awvvu - C:\WINDOWS\system32\awvvu.dll
O20 - Winlogon Notify: ddcddcy - ddcddcy.dll (file missing)
O20 - Winlogon Notify: gebcd - C:\WINDOWS\system32\gebcd.dll (file missing)
O20 - Winlogon Notify: gebcy - C:\WINDOWS\system32\gebcy.dll
O20 - Winlogon Notify: geeba - C:\WINDOWS\system32\geeba.dll
O20 - Winlogon Notify: geebx - C:\WINDOWS\system32\geebx.dll
O20 - Winlogon Notify: geedb - C:\WINDOWS\system32\geedb.dll
O20 - Winlogon Notify: geede - C:\WINDOWS\system32\geede.dll
O20 - Winlogon Notify: jkhfd - C:\WINDOWS\system32\jkhfd.dll
O20 - Winlogon Notify: jkhhe - C:\WINDOWS\system32\jkhhe.dll
O20 - Winlogon Notify: mljgf - C:\WINDOWS\system32\mljgf.dll
O20 - Winlogon Notify: mljjk - C:\WINDOWS\system32\mljjk.dll
O20 - Winlogon Notify: mlljk - C:\WINDOWS\system32\mlljk.dll
O20 - Winlogon Notify: ssqrs - C:\WINDOWS\system32\ssqrs.dll
O20 - Winlogon Notify: sstqn - C:\WINDOWS\system32\sstqn.dll
O20 - Winlogon Notify: sstts - C:\WINDOWS\system32\sstts.dll
O20 - Winlogon Notify: ssttt - C:\WINDOWS\system32\ssttt.dll
O20 - Winlogon Notify: vtsqq - C:\WINDOWS\system32\vtsqq.dll
O20 - Winlogon Notify: vtstq - C:\WINDOWS\system32\vtstq.dll
O20 - Winlogon Notify: vturq - C:\WINDOWS\system32\vturq.dll
O20 - Winlogon Notify: vturs - C:\WINDOWS\system32\vturs.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: DomainService -   - C:\WINDOWS\system32\wowyalge.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Wireless Adapter Configurator - Unknown owner - C:\Program Files\BT Business Hub\Wireless Configuration\WirelessDaemon.exe

--
End of file - 9537 bytes
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #4 on: October 13, 2007, 09:54:24 AM »
please hurry i dont feel safe with that up whats your answer?
what do i do?
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #5 on: October 13, 2007, 09:55:58 AM »
Quote
please hurry i dont feel safe with that up whats your answer?
I'm not sure what you mean by that, but have some patience, there is nothing wrong with post a Hijackthis log
It just helps identify items in registry and processes that may be legit or malicious

Download this file - Combofix.exe and save it ONLY to your desktop
Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you.
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Post back the log from Combofix

Can you also post a fresh hijackthis log
Ensure to post ALL of it, you cut off the top part last time
« Last Edit: October 13, 2007, 10:09:36 AM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #6 on: October 13, 2007, 10:34:26 AM »
my computer shut down in the middle of it but heres the full hijack one

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:50:06, on 13/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\wowyalge.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\BT Business Hub\Wireless Configuration\WirelessDaemon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://www-cache.freeserve.com:8080;ftp=http://www-cache.freeserve.com:8080
O2 - BHO: (no name) - {5CA4F5E9-5D99-45C9-A2C5-E63B3F8AF969} - C:\WINDOWS\system32\gebcd.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: {ec73b86e-259c-f02b-0384-f519571d14ef} - {fe41d175-915f-4830-b20f-c952e68b37ce} - C:\WINDOWS\system32\btuvqayi.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll (file missing)
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [3cad74ad] rundll32.exe "C:\WINDOWS\system32\glyfyred.dll",sitypnow
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?58abcea5814547b6b0e008bc10e01966
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?58abcea5814547b6b0e008bc10e01966
O8 - Extra context menu item: Search with Wanadoo - res://C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1186523587958
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1186523682099
O20 - Winlogon Notify: awtqq - C:\WINDOWS\system32\awtqq.dll
O20 - Winlogon Notify: awvvu - C:\WINDOWS\system32\awvvu.dll
O20 - Winlogon Notify: ddcddcy - ddcddcy.dll (file missing)
O20 - Winlogon Notify: gebcd - C:\WINDOWS\system32\gebcd.dll (file missing)
O20 - Winlogon Notify: gebcy - C:\WINDOWS\system32\gebcy.dll
O20 - Winlogon Notify: geeba - C:\WINDOWS\system32\geeba.dll
O20 - Winlogon Notify: geebx - C:\WINDOWS\system32\geebx.dll
O20 - Winlogon Notify: geedb - C:\WINDOWS\system32\geedb.dll
O20 - Winlogon Notify: geede - C:\WINDOWS\system32\geede.dll
O20 - Winlogon Notify: jkhfd - C:\WINDOWS\system32\jkhfd.dll
O20 - Winlogon Notify: jkhhe - C:\WINDOWS\system32\jkhhe.dll
O20 - Winlogon Notify: mljgf - C:\WINDOWS\system32\mljgf.dll
O20 - Winlogon Notify: mljjk - C:\WINDOWS\system32\mljjk.dll
O20 - Winlogon Notify: mlljk - C:\WINDOWS\system32\mlljk.dll
O20 - Winlogon Notify: ssqrs - C:\WINDOWS\system32\ssqrs.dll
O20 - Winlogon Notify: sstqn - C:\WINDOWS\system32\sstqn.dll
O20 - Winlogon Notify: sstts - C:\WINDOWS\system32\sstts.dll
O20 - Winlogon Notify: ssttt - C:\WINDOWS\system32\ssttt.dll
O20 - Winlogon Notify: vtsqq - C:\WINDOWS\system32\vtsqq.dll
O20 - Winlogon Notify: vtstq - C:\WINDOWS\system32\vtstq.dll
O20 - Winlogon Notify: vturq - C:\WINDOWS\system32\vturq.dll
O20 - Winlogon Notify: vturs - C:\WINDOWS\system32\vturs.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: DomainService -   - C:\WINDOWS\system32\wowyalge.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Wireless Adapter Configurator - Unknown owner - C:\Program Files\BT Business Hub\Wireless Configuration\WirelessDaemon.exe

--
End of file - 9570 bytes
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #7 on: October 13, 2007, 10:53:33 AM »
my computer has aptempted 4 times every time my computer restarted
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #8 on: October 13, 2007, 11:08:40 AM »
Let's try combofix in safe mode
Only use the F8 method
reboot your computer in Safe Mode by doing the following:

   
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, a menu with options should appear;
  • Select the first option, to run Windows in Safe Mode, then press "Enter".
  • Choose your usual account.
Try running combofix again
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #9 on: October 13, 2007, 11:37:11 AM »
got to 25th stage in safe and restarted combo mix wouldnt even start on normal without restarting
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #10 on: October 13, 2007, 11:45:05 AM »
[quote name=\'hawk eyes\' post=\'396113\' date=\'Oct 13 2007, 09:37 AM\']got to 25th stage in safe and restarted combo mix wouldnt even start on normal without restarting[/quote]

I got no idea what you said there??

Can you post a fresh hijackthis log
Also see if combofix produced a log>>C:\Combofix.txt

If so, post the contents of that log
« Last Edit: October 13, 2007, 11:46:06 AM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #11 on: October 13, 2007, 11:50:32 AM »
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:49, on 2007-10-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\wowyalge.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\BT Business Hub\Wireless Configuration\WirelessDaemon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://www-cache.freeserve.com:8080;ftp=http://www-cache.freeserve.com:8080
O2 - BHO: (no name) - {5CA4F5E9-5D99-45C9-A2C5-E63B3F8AF969} - C:\WINDOWS\system32\gebcd.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: {ec73b86e-259c-f02b-0384-f519571d14ef} - {fe41d175-915f-4830-b20f-c952e68b37ce} - C:\WINDOWS\system32\btuvqayi.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll (file missing)
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [3cad74ad] rundll32.exe "C:\WINDOWS\system32\glyfyred.dll",sitypnow
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?58abcea5814547b6b0e008bc10e01966
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?58abcea5814547b6b0e008bc10e01966
O8 - Extra context menu item: Search with Wanadoo - res://C:\PROGRA~1\Wanadoo\WSBar\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1186523587958
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1186523682099
O20 - Winlogon Notify: awtqq - C:\WINDOWS\system32\awtqq.dll
O20 - Winlogon Notify: awvvu - C:\WINDOWS\system32\awvvu.dll
O20 - Winlogon Notify: ddcddcy - ddcddcy.dll (file missing)
O20 - Winlogon Notify: gebcd - C:\WINDOWS\system32\gebcd.dll (file missing)
O20 - Winlogon Notify: gebcy - C:\WINDOWS\system32\gebcy.dll
O20 - Winlogon Notify: geeba - C:\WINDOWS\system32\geeba.dll
O20 - Winlogon Notify: geebx - C:\WINDOWS\system32\geebx.dll
O20 - Winlogon Notify: geedb - C:\WINDOWS\system32\geedb.dll
O20 - Winlogon Notify: geede - C:\WINDOWS\system32\geede.dll
O20 - Winlogon Notify: jkhfd - C:\WINDOWS\system32\jkhfd.dll
O20 - Winlogon Notify: jkhhe - C:\WINDOWS\system32\jkhhe.dll
O20 - Winlogon Notify: mljgf - C:\WINDOWS\system32\mljgf.dll
O20 - Winlogon Notify: mljjk - C:\WINDOWS\system32\mljjk.dll
O20 - Winlogon Notify: mlljk - C:\WINDOWS\system32\mlljk.dll
O20 - Winlogon Notify: ssqrs - C:\WINDOWS\system32\ssqrs.dll
O20 - Winlogon Notify: sstqn - C:\WINDOWS\system32\sstqn.dll
O20 - Winlogon Notify: sstts - C:\WINDOWS\system32\sstts.dll
O20 - Winlogon Notify: ssttt - C:\WINDOWS\system32\ssttt.dll
O20 - Winlogon Notify: vtsqq - C:\WINDOWS\system32\vtsqq.dll
O20 - Winlogon Notify: vtstq - C:\WINDOWS\system32\vtstq.dll
O20 - Winlogon Notify: vturq - C:\WINDOWS\system32\vturq.dll
O20 - Winlogon Notify: vturs - C:\WINDOWS\system32\vturs.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: DomainService -   - C:\WINDOWS\system32\wowyalge.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Wireless Adapter Configurator - Unknown owner - C:\Program Files\BT Business Hub\Wireless Configuration\WirelessDaemon.exe

--
End of file - 9537 bytes
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #12 on: October 13, 2007, 12:03:00 PM »
Did you look for C:\Combofix.txt?
Was there a log?
Let's try an alternate method

Download [color=\"blue\"]VundoFix.exe[/color]
to your desktop.
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files,  click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above
instructions starting from "Click the Scan for Vundo button."

I'll need to see this report from Vundofix later>>C:\Vundofix.txt

In addition, again post a fresh hijackthis log
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #13 on: October 13, 2007, 12:07:31 PM »
no there wasnt one
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #14 on: October 13, 2007, 12:17:40 PM »
[quote name=\'hawk eyes\' post=\'396118\' date=\'Oct 13 2007, 10:07 AM\']no there wasnt one[/quote]

Okay, do the latest instructions from my last reply
Try not to use the computer when the scanner is running
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #15 on: October 13, 2007, 12:17:54 PM »
no luck restarted while doing
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #16 on: October 13, 2007, 12:19:32 PM »
Are you using the computer at the same time your running these tools?

Try running vundofix in safe mode
Don't use the computer while it's scanning
See if you can get it to finish

If not, we'll again try and alternate method:
Edit, if you can't get Vundofix to complete in safe mode
Do the following
Download [color=\"#008000\"]Deckard's System Scanner (dss.exe)[/color] to your desktop.
Close all applications and windows.
Double-click on dss.exe to run it and follow the prompts.
When the scan is complete, two text files will open; main.txt, which will be maximized and extra.txt, which will be minimized.

Post the contents of  main.txt and extra.txt
« Last Edit: October 13, 2007, 12:30:24 PM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #17 on: October 13, 2007, 01:29:39 PM »
ok i got 4 progammes it came up with but no text thats off the v fix one
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
.dll problems
« Reply #18 on: October 13, 2007, 01:58:04 PM »
It shouldn't come up with 4 programs?
Are you surfing the web with this computer as we're trying to run scans?

Quote
v fix one
What do you mean by that??
Please type in full english

Navigate to this folder
C:\Deckard\System Scanner
Open it and look for main.txt
If you find it post it back here
« Last Edit: October 13, 2007, 01:58:59 PM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline hawk eyes

  • Hero Member
  • *****
  • Posts: 1161
  • Karma: +0/-0
    • View Profile
    • http://
.dll problems
« Reply #19 on: October 13, 2007, 03:51:45 PM »
its the v undo 1
Logged
[font=\"Arial Narrow\"]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"] [/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"] [/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/color][/font]
[font=\"Comic Sans MS\"][color=\"#00ff00\"][color=\"#00ff00\"][font=\"Comic Sans MS\"] [/font][/color][/color][/font]
[font=\"Comic Sans MS\"] [font=\"Comic Sans MS\"]




[font=\"Comic Sans MS\"]bought pbp from dr richey

bought pbp from mr_money_bags

bought fury for ?20 from legit buyer

bought 5mill from ihatemyusername

bought lvl 94 b pure from gameboycolour no mm

sold pbp to dr_richey

sold sms to dr richey

sold lvl 125 to dr richey for $1005

bought pure from gameboycolour ~scammed (50/50)

bought psp from mr_money_bags

bought 2 sigs from hybrid no mm

bought 3 sigs from dr_richey no mm

bought pbp off x trainer x ~scammed no mm

bought rune pure from ihit99s ~scammed dont buy his runescape account blzing sword

bought 200mill from sythe person (omg) no mm

sold 5mill to mr_money_bags no mm

bought 2 sigs from moe c no mm

bought dragon pure from moe c ~scammed no mm

bought sig from hybrid

sold a wc pure to elite-anti-scammer

swapped 118 for 113 to (forgot ttg name) ae m witness

sold copy of my money making book to ieatpillows 2mill no mm

sold copy of my money making book to ttg_junkie 1,5mill no mm

bought 10mill from someone who added me on msn

sold 15mill to mr money bags

sold macro to kyle ~scammed toke macro and never paid no mm

bought 10mill from guer ?30 no mm

bought [/font][font=\"Comic Sans MS\"]graphic[/font][font=\"Comic Sans MS\"] maker from x spec nuthin(very trusted)

bought lvl 113 from i sell lots of accounts

just bought a pure from yded for 7mill

bought pin from jamesp_rs~ canlced he logged out

bought 2 pins from james again ~ canlced he imposted the mm on runescape ash mm5 was real he used ash mm 5

just bought pin from rs2trainer scammed 2mill

bought sig from kyle

just sold a pure 6mill x pec mmed ( buyer was a guest )

just bought azzas dds pure 1mill x pec mmed

just bought 2 pins from colleto 2,5mill

bought a pin from boubcar

donated 1mill to azza

sold Amethyst / Sa5uke a pure 8mill

sold psp to monkey arms ~ he went first 20MILL

bought pin from i loverat i ~ pending

[/font]



[font=\"Comic Sans MS\"][color=\"#00ff00\"]Hawk's mms and xfers[/color]

[/font]



[font=\"Comic Sans MS\"]pin glifer88 [email protected]

2 pins glifer88 [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 3mill

2 mill and lvl 99 main for vitus and kash15 ~ kash recovered

pin for glifer88 and [/font][font=\"Comic Sans MS\"][email protected][/font][font=\"Comic Sans MS\"] 1.3

mmed for tmastert06 and mr_money_bags pin and 1.2

xfered 12mill for elite anti scammer

x fer for thedezired1 500k

azza transfered 25 mill for me

ash did a 5mill transfer for me[/font]



[/b]









 
[font=\"Comic Sans MS\"][font=\"Comic Sans MS\"]my msn [email protected] free mms here replace 0s with os[/font][/font]
[/font][/font] [/font]
Pages: [1] 2
« previous next »