Ran read and run me first, still have problems

Discussion in 'Malware Help (A Specialist Will Reply)' started by samcoffeeman, Feb 2, 2008.

  1. samcoffeeman

    samcoffeeman Private E-2

    Hey,
    Ran into a bunch of pretty fun problems a few days ago. SpyGuardPro, Malware alarm and whole bunch of things that have made my browser fubar. Had a red circle with a white x and a yellow triangle with an ! in it on my task bar telling me to download some bs programs which I didn't. Also, when i was on the site to get help or sometimes trying to run malware removal applications, sometimes about 60 windows would pop up with http:\\\ in the address and say syntax error. Had some problems while trying to run through the read and run me programs. I couldn't download the latest java because it said bin\java-rmi.exe: old file not found. Found file with same name. Then it would reverse and send me to java help page, which was no use, error code 1722 I think. When I ran spybot in normal boot mode, my computer froze up when I tried to fix after the scan, reran in safe mode and it worked. Also MGtools would not run through all the way, stopped with a message Could not find C:\documents and settings\administrator\desktop\procdll.txt. I ran HJT on my own and tried to get rid of some stuff that was obviously malware and the last 3 BHO no name objects kept returning(I tried to fix two of their winlogon duplicates with them). Please help.
    I forgot to save my logfile from avg, will rescan and post.
    Thanks
     

    Attached Files:

    samcoffeeman, Feb 2, 2008
    #1
  2. samcoffeeman

    samcoffeeman Private E-2

    So I reran avg and mgtools so you have the logfile for avg and I could tell you what the other error message from MGtools said.
    A box comes up that says:
    Processdll.exe - application error
    The application failed to initialize properly (0xc000007b). Click on OK to terminate the application.
    Also, the logfile may be different for HJT from MGtools this time because it is after I fixed some of the obvious malware issues.
     

    Attached Files:

    samcoffeeman, Feb 2, 2008
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    But you had it Ignore all the problems it found. Why? There is no sense in running the scans if you are not going to fix what they find. Run it again and this time Quarantine or Delete what it finds.


    I could tell you what the other error message from MGtools said.
    A box comes up that says:
    Processdll.exe - application error
    The application failed to initialize properly (0xc000007b). Click on OK to terminate the application.[/quote] See Error Message Type 4 in Using MGtools

    You should not be running the READ ME from safeboot mode unless your PC does not work at all in normal boot mode.

    Why are your running without an antivirus program?

    Uninstall the below software:
    Java(TM) SE Runtime Environment 6
    Outerinfo <-- should have been uninstalled in step 0 of the READ ME

    Make sure you reboot after uninstalling the above!

    After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

    Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O2 - BHO: (no name) - {607E240C-8561-4ADD-895E-59229079912E} - C:\WINDOWS\system32\jkhfd.dll
    O2 - BHO: (no name) - {89A1E40D-0254-4F99-B9AE-B60A2D8754A9} - C:\WINDOWS\system32\awtusqq.dll
    O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\cpezzgkz.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
    O20 - Winlogon Notify: awtusqq - C:\WINDOWS\SYSTEM32\awtusqq.dll
    O20 - Winlogon Notify: cpezzgkz - C:\WINDOWS\SYSTEM32\cpezzgkz.dll
    O20 - Winlogon Notify: winkoh32 - C:\WINDOWS\SYSTEM32\winkoh32.dll
    O21 - SSODL: zip - {5cd68737-6f21-457e-9506-07b0a8a66458} - C:\WINDOWS\Installer\{5cd68737-6f21-457e-9506-07b0a8a66458}\zip.dll

    After clicking Fix, exit HJT.

    Now download The Avenger by Swandog46, and save it to your Desktop.
    • Extract avenger.exe from the Zip file and save it to your desktop
    • Run avenger.exe by double-clicking on it.
    • Check the 'Input script manually' box.
    • Click on the magnifying glass icon.
    • Copy everything in the Quote box below, and paste it in the box that opens:
    • Now click the 'Done' button.
    • Click on the traffic light icon and OK the prompt.
    • You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
    • A log file from Avenger will be produced at C:\avenger.txt
    Also delete all files in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
    C:\WINDOWS\TEMP
    C:\Documents and Settings\Administrator\Local Settings\Temp

    Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

    NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.
    • Double-click ATF-Cleaner.exe to run the program.
    • Under Main choose: Select All
    • Click the Empty Selected button.
    If you use Firefox browser
    • Click Firefox at the top and choose: Select All
    • Click the Empty Selected button.
      • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    If you use Opera browser
    • Click Opera at the top and choose: Select All
    • Click the Empty Selected button.
      • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    Click Exit on the Main ATF Cleaner menu to close the program.



    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this and also attach the log from Avenger.

    Make sure you tell me how things are working now!
     
    chaslang, Feb 2, 2008
    #3
  4. samcoffeeman

    samcoffeeman Private E-2

    Hey chas,
    Thanks for the quick reply, I am still having some major issues. First off, I did delete outerinfo as in step 0 and it must have come back. Second I can't download the latest java app, reference my first communication about error 1722. This seems to be a problem with my windows installer perhaps. I also cannot get online in normal boot mode due to my browser being hijacked, it just keeps redirecting me and is super slow. I still tried to follow your directions as best i could. When I tried to run avenger, it said "Integrity check failed. This file has been modified. Reason might be a possible virus infection." I haven't ever run with an antivirus program because all it does is bog down my computer, but I will from now on. I have only had one problem before this in 5 years so that is why.
    Anything you can do to help me from here would be fantastic,
    Sam
     
    samcoffeeman, Feb 3, 2008
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then let's try things a different way. Just do the below steps.

    Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O2 - BHO: (no name) - {607E240C-8561-4ADD-895E-59229079912E} - C:\WINDOWS\system32\jkhfd.dll
    O2 - BHO: (no name) - {89A1E40D-0254-4F99-B9AE-B60A2D8754A9} - C:\WINDOWS\system32\awtusqq.dll
    O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\cpezzgkz.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
    O20 - Winlogon Notify: awtusqq - C:\WINDOWS\SYSTEM32\awtusqq.dll
    O20 - Winlogon Notify: cpezzgkz - C:\WINDOWS\SYSTEM32\cpezzgkz.dll
    O20 - Winlogon Notify: winkoh32 - C:\WINDOWS\SYSTEM32\winkoh32.dll
    O21 - SSODL: zip - {5cd68737-6f21-457e-9506-07b0a8a66458} - C:\WINDOWS\Installer\{5cd68737-6f21-457e-9506-07b0a8a66458}\zip.dll

    After clicking Fix, exit HJT.


    Now we need to use ComboFix to remove a bunch of malware files.
    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Open Notepad and copy/paste the text in the below code box into it (make sure you scroll all the way down in the code box to get all lines selected ):
    Code:
    Driver::
qwer78
 
File::
C:\Program Files\udefender_setup.exe
C:\WINDOWS\system32\drivers\qwer78.sys
C:\-1339391859
C:\evvr.exe
C:\WINDOWS\system32\awtusqq.dll
C:\WINDOWS\system32\cpezzgkz.dll
C:\WINDOWS\system32\cpezzgkz.dllbox
C:\WINDOWS\system32\cuifyvph.dll
C:\WINDOWS\system32\drvlak.dll
C:\WINDOWS\system32\drvtir.dll
C:\WINDOWS\system32\drvtirr.dll
C:\WINDOWS\system32\drvxox.dll
C:\WINDOWS\system32\drvxoxr.dll
C:\WINDOWS\system32\fohtobim.dll
C:\WINDOWS\system32\jkhfd.dll
C:\WINDOWS\system32\kbdsdf.dll
C:\WINDOWS\system32\nnecwkcc.dll
C:\WINDOWS\system32\pldofcpl.dll
C:\WINDOWS\system32\ukuwphjp.dll
C:\WINDOWS\system32\winkoh32.dll
C:\WINDOWS\system32\winload.dll
C:\WINDOWS\system32\wubcjnwa.dll
C:\WINDOWS\system32\sbwbsuuq.dll
C:\WINDOWS\system32\myexuxgo.dll
C:\WINDOWS\system32\wrfxutqe.dll
C:\WINDOWS\system32\duvqebsq.dll
C:\WINDOWS\system32\fqyjlryw.dll
C:\WINDOWS\system32\sjlfnmlg.dll
C:\WINDOWS\system32\dbcwqipt.dll
C:\WINDOWS\system32\jjpkgwta.dll
C:\WINDOWS\system32\lbvcwydo.dll
C:\WINDOWS\system32\gcmrvqnq.dll
C:\WINDOWS\system32\hhouaupi.dll
C:\WINDOWS\system32\ihjxwvdq.dll
C:\WINDOWS\system32\xmaawygj.dll
C:\WINDOWS\system32\fluoebsr.dll
C:\WINDOWS\system32\alikplgw.dll
C:\WINDOWS\system32\fxgujoit.dll
C:\WINDOWS\system32\cqmubein.dll
C:\WINDOWS\system32\chybldiy.dll
C:\WINDOWS\system32\utkhleib.dll
C:\WINDOWS\system32\lixvkmjf.dll
C:\WINDOWS\system32\mrnlxnei.dll
C:\WINDOWS\system32\xwhuxqhr.dll
C:\WINDOWS\system32\tvqyieoo.dll
C:\WINDOWS\system32\cckwcenn.ini
C:\WINDOWS\system32\dfhkj.ini
C:\WINDOWS\system32\dfhkj.ini2
C:\WINDOWS\system32\pjhpwuku.ini
C:\WINDOWS\system32\mcllkwhs.dll
C:\WINDOWS\system32\vglchrwj.dll
C:\WINDOWS\system32\mjtdyooj.exe
C:\WINDOWS\system32\vjsqtdmt.exe
C:\WINDOWS\system32\vkolehrn.exe
C:\WINDOWS\system32\asvvralb.exe
 
Folder::
C:\Temp\tn3
C:\Program Files\Enigma Software Group
C:\WINDOWS\system32\re9
C:\WINDOWS\system32\kt8
C:\WINDOWS\system32\gz4
C:\WINDOWS\system32\edcA01
C:\WINDOWS\system32\dp2
C:\Temp\Ryuan1
 
Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\mssmgr]
[-HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\Explorer\ShellExecuteHooks | {89A1E40D-0254-4F99-B9AE-B60A2D8754A9}]
    • Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
    • At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
    • You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    • Now use your mouse to drag CFscript.txt on top of ComboFix.exe
    • Follow the prompts.
    • When it finishes, a log will be produced named c:\combofix.txt
    • I will ask for this log below
    Note:

    Do not mouseclick combofix's window while it is running. That may cause it to stall.

    Also delete all files in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
    C:\WINDOWS\TEMP
    C:\Documents and Settings\Administrator\Local Settings\Temp

    Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

    NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.
    • Double-click ATF-Cleaner.exe to run the program.
    • Under Main choose: Select All
    • Click the Empty Selected button.
    If you use Firefox browser
    • Click Firefox at the top and choose: Select All
    • Click the Empty Selected button.
      • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    If you use Opera browser
    • Click Opera at the top and choose: Select All
    • Click the Empty Selected button.
      • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    Click Exit on the Main ATF Cleaner menu to close the program.


    Now run the C:\MGtools\GetLogs.bat file by double clicking on it.

    Then attach the below logs:
    • C:\ComboFix.txt
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
    chaslang, Feb 4, 2008
    #5
  6. samcoffeeman

    samcoffeeman Private E-2

    Hey chas,
    So I did what you asked me to do and I was also able to run trendmicro's housecall in safe mode with networking. I have posted the logs with this and I finally, thanks to housecall, have a name for what I have. These three items were uncleanable. PE_VIRUT.AV, TROJ_VUNDO.AFU, TROJ_VUNDO.AFY. I am thinking that the vundos are somehow attached to the virut and that is the real culprit, which i can't seem to get rid of. I am trying to find some help by searching this virus by name to see how to get rid of it. Anything you know about this little bitch would be great.
    Thanks,
    Sam
     

    Attached Files:

    samcoffeeman, Feb 5, 2008
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    We did not need a name for what you had. We already knew that it was Virtumonde (aka Vundo). You also have a few other infections (, Rustock Rootkit, WinLogonHook and Trojan-Downloader.Win32.Alphabet) Please do not run anything unless we ask you to run. Besides running TrendMicro, you also ran Panda and all you did was make my fix not work. Incomplete incorrect procedures will only cause Vundo to spread and change names of the files. No antivirus or antispyware programs will detect all of the related files. Nor will they remove/fix the problems. Only manual procedures like I already gave you will fix the problems. Sometimes it takes repeated steps since the infection can spread/rename as stated above when other things are run that we do not ask for AND it will also spread/rename each time a PC is powered down/up or rebooted.

    Do you use MusicMatch JukeBox? It is not malware but if you don't use, uninstall it to avoid having it waste system resources.

    Why does your system show so many files that are part of the Windows Operating system to have file dates of Feb 3, 2008. What did you do on Feb 3rd? This is making it very difficult to find new files added by your infection since every file on your PC is new.

    Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O2 - BHO: (no name) - {89A1E40D-0254-4F99-B9AE-B60A2D8754A9} - C:\WINDOWS\system32\awtusqq.dll
    O2 - BHO: (no name) - {901A8DE6-F5BA-4690-9566-6EC11FD009D9} - C:\WINDOWS\system32\jkhfd.dll
    O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\cpezzgkz.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
    O20 - Winlogon Notify: awtusqq - C:\WINDOWS\SYSTEM32\awtusqq.dll
    O20 - Winlogon Notify: cpezzgkz - C:\WINDOWS\SYSTEM32\cpezzgkz.dll
    O21 - SSODL: zip - {b4de3409-32e0-4d27-a891-da00d6ab41d5} - C:\WINDOWS\Installer\{b4de3409-32e0-4d27-a891-da00d6ab41d5}\zip.dll


    After clicking Fix, exit HJT.


    Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.


    Now we need to use ComboFix to remove a bunch of malware files.
    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Open Notepad and copy/paste the text in the below code box into it ( make sure you scroll all the way down in the code box to get all lines selected ):
    Code:
    Driver::
qwer78
 
File::
C:\WINDOWS\Installer\{b4de3409-32e0-4d27-a891-da00d6ab41d5}\zip.dll
C:\WINDOWS\system32\awtusqq.dll
C:\WINDOWS\system32\jkhfd.dll
C:\WINDOWS\system32\cpezzgkz.dll
C:\WINDOWS\system32\cpezzgkz.dllbox
C:\WINDOWS\system32\fprjbdel.dll
C:\WINDOWS\system32\wxxgerfu.dll
C:\WINDOWS\system32\drvpuh.dll
C:\WINDOWS\system32\drvtov.dll
C:\WINDOWS\system32\pldofcpl.dll
C:\WINDOWS\mgrs.exe
C:\WINDOWS\system32\cuifyvph.dll
C:\WINDOWS\system32\nnecwkcc.dll
C:\WINDOWS\system32\drvlak.dll
C:\WINDOWS\system32\ukuwphjp.dll
C:\WINDOWS\system32\wubcjnwa.dll
C:\WINDOWS\system32\fohtobim.dll
C:\WINDOWS\system32\pxcrt.dll
C:\WINDOWS\system32\kbdsdf.dll
C:\WINDOWS\system32\drivers\qwer78.sys
C:\WINDOWS\system32\winload.dll
C:\WINDOWS\system32\winkoh32.dll
C:\WINDOWS\system32\cckwcenn.ini
C:\WINDOWS\system32\dfhkj.ini
C:\WINDOWS\system32\dfhkj.ini2
C:\WINDOWS\system32\ledbjrpf.ini
C:\WINDOWS\system32\pjhpwuku.ini
C:\WINDOWS\system32\drivers\qwer78.sys
 
Folder::
C:\WINDOWS\Installer\{b4de3409-32e0-4d27-a891-da00d6ab41d5}
 
Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{89A1E40D-0254-4F99-B9AE-B60A2D8754A9}"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"zip"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\awtusqq]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cpezzgkz]
    • Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
    • At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
    • You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    • Now use your mouse to drag CFscript.txt on top of ComboFix.exe
    • Follow the prompts.
    • When it finishes, a log will be produced named c:\combofix.txt
    • I will ask for this log below
    Note:

    Do not mouseclick combofix's window while it is running. That may cause it to stall.


    Now delete all files and subfolders in the below folder.
    C:\WINDOWS\TEMP

    Now run Ccleaner!

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it.

    Then attach the below logs:
    • C:\ComboFix.txt
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!

    Also DO NOT POWER DOWN OR REBOOT after you attach these new logs. Wait for the next fix before you do anything else.
     
    chaslang, Feb 5, 2008
    #7
  8. samcoffeeman

    samcoffeeman Private E-2

    Hey chas,
    Thanks again, sorry if I made this more difficult by running housecall. I will follow your instructions from now on. It seems like we are getting somewhere, I was able to get to this site much easier in normal mode, only a few redirections. Before i read this, i tried something else as well, I downloaded a sophos antivirus program onto a disc on a friend's laptop and ran it from the disc, as it seems that this virus is infecting all of my .exe files and running it directly from a disc would prevent the infection to that program. The first time around it found over 4000 infections, it cannot disinfect c:\windows\explorer.exe or c:\windows\shell.exe, but I ran it again and it was down to about 50 infections. I will include a log from that in case it is any help and will not run it again(log size is 677.1KB, too large to upload.). I could not delete c:windows/temp files, two files said they were being used by another program, index.dat and wina.tmp.
    Thanks to you,
    Sam
     

    Attached Files:

    samcoffeeman, Feb 5, 2008
    #8
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay this probably is the answer to my question about why all of your files are showing a date of Feb 3 (now they are Feb 5) which is making it very difficult to find problems files since just about eveything on your PC is showing up as a new file.

    Please put the log file from Sophos into a ZIP file and attach it. What was the name of the infection that Sophos found? Also please note that there have been a few types of infections going around that infect all executable files on a PC. In reality with infections like this, it would really be much safe to delete your hard disk partition, create a new partition, format, and then reinstall your OS and then all of your other programs. Nothing on your hard disk can really be trusted at this point.


    Note that now some addition new types of infections are also showing up after the last fix. We can continue to try and remove all your malware, but your PC may not be trustworthy. Tell me how you wish to proceed. Remember to not reboot or power down.

    One of the new infections appears to be this: http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=39437
    Another appears to be this: http://www.sophos.com/virusinfo/analyses/w32mytobca.html
     
    chaslang, Feb 5, 2008
    #9
  10. samcoffeeman

    samcoffeeman Private E-2

    Thanks chas,
    I feel like I am heading for a reformat which sucks but am going to try a little bit more. Is there a way to download explorer and shell to a disc and run them from there so i can disinfect those programs on my computer? I feel like if i could disinfect those two, sophos might actually be able to make some real headway here. Anyhow, here is the logfile from sophos.
    Sam
     

    Attached Files:

    samcoffeeman, Feb 6, 2008
    #10
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should run the same Sophos Tool again and attach a new log. Let's see if the infection is still being detected.

    Also try giving this a run: Win32/Virut Removal Tool

    Let me know the results.
     
    chaslang, Feb 6, 2008
    #11
  12. samcoffeeman

    samcoffeeman Private E-2

    I had to give up. Thanks for all of your help, just finished reinstalling/formatting, got the latest windows update, java update, and mcafee security suite. I hadn't read anywhere of anyone successfully getting rid of this problem. I tried a number of different things but only seemed to get worse right after it seemed to get better. It seems there is no way to disinfect it if it effects every .exe file. I think I got it out of every file except for cmd.exe at one point, but could get no further. Oh well, running antivirus from now on, they finally got me.
    Sam
     
    samcoffeeman, Feb 8, 2008
    #12
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    chaslang, Feb 9, 2008
    #13

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds