|
|
|||||||
|
 Ugh, Spyware.banker/backdoor.bot...AGAIN!
|
|
|
|
Hello. I have been here a couple times to try and fix my malware and it has been successful, but the same things seem to keep reappearing in scans. I have trouble running anything that goes through CMD (combofix/mgtools/Iseeyouxp) for some reason. I am led to believe that it is ...
|
 |
|
|
Thread Tools |
|
#1
10th Jun 2009, 16:21
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
Hello. I have been here a couple times to try and fix my malware and it has been successful, but the same things seem to keep reappearing in scans. I have trouble running anything that goes through CMD (combofix/mgtools/Iseeyouxp) for some reason. I am led to believe that it is because the PATH environment variable is not allowing cmd to access the right files? Anyway, here are some MBAM scans and a HJT log.
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:20:37 PM, on 6/10/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\nvsvc32.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\system32\dllhost.exe c:\windows\system32\rundll32.exe c:\progra~1\avg\avg8\avgtray.exe c:\windows\system32\rundll32.exe c:\program files\itunes\ituneshelper.exe c:\windows\stsystra.exe c:\program files\common files\installshield\updateservice\issch.exe c:\program files\intel\intel matrix storage manager\iaanotif.exe c:\windows\ehome\ehtray.exe c:\program files\dell\media experience\dmxlauncher.exe C:\WINDOWS\eHome\ehmsas.exe c:\program files\free desktop clock\desktopclock.exe c:\program files\google\googletoolbarnotifier\googletoolbarno tifier.exe c:\windows\system32\ctfmon.exe c:\documents and settings\kevin young\local settings\application data\google\update\googleupdate.exe c:\program files\superantispyware\superantispyware.exe C:\Program Files\iPod\bin\iPodService.exe c:\garmin\ant agent\ant agent.exe c:\program files\digital line detect\dlg.exe c:\program files\itunes\itunes.exe C:\Program Files\Java\jre6\bin\jqs.exe c:\documents and settings\kevin young\local settings\application data\google\chrome\application\chrome.exe c:\documents and settings\kevin young\local settings\application data\google\chrome\application\chrome.exe c:\program files\malwarebytes' anti-malware\mbam.exe c:\documents and settings\kevin young\local settings\application data\google\chrome\application\chrome.exe c:\documents and settings\kevin young\local settings\application data\google\chrome\application\chrome.exe c:\documents and settings\kevin young\my documents\downloads\hijackthis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=4061002 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\s wg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [DellHelp] C:\Dell\DellHelp\DellHelp.exe /c O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [SkinClock] c:\program files\free desktop clock\DesktopClock.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Kevin Young\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [ANT Agent] C:\Garmin\ANT Agent\ANT Agent.exe O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Kevin Young\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun O4 - HKUS\S-1-5-21-1206202269-1744925342-3452710213-1006\..\Run: [SkinClock] c:\program files\free desktop clock\DesktopClock.exe (User '?') O4 - HKUS\S-1-5-21-1206202269-1744925342-3452710213-1006\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe (User '?') O4 - HKUS\S-1-5-21-1206202269-1744925342-3452710213-1006\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?') O4 - HKUS\S-1-5-21-1206202269-1744925342-3452710213-1006\..\Run: [Google Update] "C:\Documents and Settings\Kevin Young\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c (User '?') O4 - HKUS\S-1-5-21-1206202269-1744925342-3452710213-1006\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (User '?') O4 - HKUS\S-1-5-21-1206202269-1744925342-3452710213-1006\..\Run: [ANT Agent] C:\Garmin\ANT Agent\ANT Agent.exe (User '?') O4 - HKUS\S-1-5-21-1206202269-1744925342-3452710213-1006\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Kevin Young\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun (User '?') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Digital Line Detect.lnk = ? O8 - Extra context menu item: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-US\local\search.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000 O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/actives.../as2stubie.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.4.1.cab O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1229742173692 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Belkin Wireless USB Network Adapter (Belkin Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 11391 bytes Malwarebytes' Anti-Malware 1.37 Database version: 2216 Windows 5.1.2600 Service Pack 3 6/2/2009 6:34:22 PM mbam-log-2009-06-02 (18-34-22).txt Scan type: Full Scan (C:\|) Objects scanned: 196280 Time elapsed: 53 minute(s), 59 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 10 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Cur rentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully. HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Cur rentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully. HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explo rer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully. HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explo rer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{967b15bc-c0b0-4a69-bfe3-2cdcd20adce4} (Spyware.Banker) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1c1ebef0-37cf-4408-b494-f6c000fd6ed7} (Spyware.Banker) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{339949fb-4a8c-4aa3-bd04-8b888d9a642a} (Spyware.Banker) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{cf3e4737-a002-49ce-8e07-3460cb177a28} (Spyware.Banker) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{b42bf63c-5354-4c5c-a789-66efeec5e1b0} (Spyware.Banker) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{b42bf63c-5354-4c5c-a789-66efeec5e1b0} (Spyware.Banker) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\WINDOWS\system32\AcroIEHelpe003.dll (Spyware.Banker) -> Quarantined and deleted successfully. |
|
#2
10th Jun 2009, 16:47
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
Sorry for double but here is a recent mbam scan.
Malwarebytes' Anti-Malware 1.37 Database version: 2259 Windows 5.1.2600 Service Pack 3 6/10/2009 7:46:14 PM mbam-log-2009-06-10 (19-46-14).txt Scan type: Full Scan (C:\|) Objects scanned: 199320 Time elapsed: 53 minute(s), 48 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\WINDOWS\system32\AcroIEHelpe003.dll (Spyware.Banker) -> Quarantined and deleted successfully. c:\documents and settings\Kevin Young\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully. |
|
#3
10th Jun 2009, 17:32
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
Use the ESET Online Antivirus Scanner
This scanner requires Internet Explorer 1. Check the box next to YES, I accept the Terms of Use. 2. Click Start 3. When asked, allow the activex control to install 4. Click Start 5. Make sure that the option Remove found threats and the option Scan unwanted applications is check marked. 6. Click Scan 7. Wait for the scan to finish 8. Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt 9. Add the C:\Program Files\EsetOnlineScanner\log.txt log into your next reply.
__________________
 |
|
#4
10th Jun 2009, 19:40
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
# version=4
# OnlineScanner.ocx=1.0.0.635 # OnlineScannerDLLA.dll=1, 0, 0, 79 # OnlineScannerDLLW.dll=1, 0, 0, 78 # OnlineScannerUninstaller.exe=1, 0, 0, 49 # vers_standard_module=4002 (20090411) # vers_arch_module=1.064 (20080214) # vers_adv_heur_module=1.066 (20070917) # EOSSerial=779dd52fbada7441aba5d1cce1027195 # end=finished # remove_checked=true # unwanted_checked=true # utc_time=2009-04-12 08:52:10 # local_time=2009-04-12 04:52:10 (-0500, Eastern Daylight Time) # country="United States" # osver=5.1.2600 NT Service Pack 3 # scanned=362847 # found=0 # scan_time=3552 |
|
#5
10th Jun 2009, 21:05
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
Delete ComboFix and download a new copy. Rename it before saving it to the desktop.
Download ComboFix from one of the below links. You must rename it before saving it! Important! You MUST save ComboFix to your desktop. Link 1 Link 2 Link 3 Rename ComboFix to Combo-Fix before saving it to the desktop.   Temporarily disable your antivirus and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them. Double click on Combo-Fix.exe & follow the prompts. Vista users Right-Click on Combo-Fix.exe and select Run as administrator (you will receive a UAC prompt, please allow it) Do not mouse-click ComboFix's window while it is running. That may cause it to stall. When the scan completes it will open a text window. Post the contents of that log in your next reply. Remember to re-enable your antivirus and antispyware protection when ComboFix is complete.
__________________
|
|
#6
11th Jun 2009, 15:55
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
I have spent about 3 hours trying to figure out why combofix will not run...countless searches on google that give me nothing. The only thing I may have found out is that when I try to run it 'something' is not pointing to the right place so all I get is the loading bar that says combofix then the cmd window never shows. Prior to running it, there is no folder in C: with any combofix data, though after the attempt, a folder named 32788R22FWJFW appears and has all of the .bat, .vbs, etc. files that it uses to run. I'm not sure if there is anything I can do at this point but maybe you will know!
|
|
#7
11th Jun 2009, 16:00
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
Launch Task Manager by pressing Ctrl + Alt + Delete
End Process on these file names (if found) - FindStr - Vfind - SED - GREP - or any file that has the extension *.cfexe End each only once. Now try running it again..
__________________
|
|
#8
11th Jun 2009, 16:33
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
:( Nothing there. I should just reformat.
|
|
#9
11th Jun 2009, 16:50
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
I'm not sure the problems are malware related. The ESET scan came back clean and the MBAM findings I don't think would be causing this.
You might try a repair first.
__________________
|
|
#10
11th Jun 2009, 17:05
|
|||
|
|||
|
Ugh, Spyware.banker/backdoor.bot...AGAIN!
How would I go about doing that?
|
|
|
|
| Bookmarks |
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Spyware.Banker Detected in MBAM Scan | SevenYears | Virus, Spyware & Security | 88 | 28th Apr 2009 18:30 |
| Evqcpq0tc.exe - (Backdoor.Bot) New Virus Not on Google. | mursfSmurf | Virus, Spyware & Security | 2 | 24th Mar 2009 17:32 |
| Spyware help, please! | rkdub | Virus, Spyware & Security | 2 | 17th Oct 2008 05:07 |
| Do I have Spyware, and if yes, how do I get rid of it?? Please Help! | harvey45 | Virus, Spyware & Security | 5 | 6th Oct 2008 15:43 |
| Spyware Q? | Daniels2386 | Virus, Spyware & Security | 4 | 11th Jan 2008 16:43 |
| Thread Tools | |
|
|
