1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Active sudden hang and the screen become black

Discussion in 'Malware and Virus Removal Archive' started by Hei, 2009/08/23.

  1. 2009/08/23
    Hei

    Hei Inactive Thread Starter

    Joined:
    2008/09/02
    Messages:
    37
    Likes Received:
    0
    [Active] sudden hang and the screen become black

    DDS (Ver_09-07-30.01) - NTFSx86
    Run by home at 9:44:57.31 on 2009-08-24
    Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_11
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.510.200 [GMT 8:00]


    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\ChgService.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    G:\firefox\firefox.exe
    C:\PROGRA~1\FREEDO~1\fdm.exe
    C:\Downloads\dds(1).scr
    C:\Downloads\dds(1).scr

    ============== Pseudo HJT Report ===============

    uStart Page = about:blank
    mStart Page = about:blank
    TB: {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - No File
    TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
    TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
    TB: {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - No File
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [nwiz] nwiz.exe /install
    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
    mRun: [Advanced System Protector] "c:\program files\systweak\advanced system protector\ASP.exe" /autorun
    uPolicies-explorer: <NO NAME> =
    uPolicies-explorer: NoFavoritesMenu = 1 (0x1)
    uPolicies-system: <NO NAME> =
    IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
    IE: {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - c:\program files\common files\sourcetec\swf catcher\InternetExplorer.htm
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    Trusted Zone: reimage.com\cdnrep
    DPF: {10ECCE17-29B5-4880-A8F5-EAD298611484} - hxxp://cdnrep.reimage.com/reix1223.cab
    DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    Handler: ic32pp - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - c:\windows\wc98pp.dll
    LSA: Authentication Packages = msv1_0 nwprovau

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\home\applic~1\mozilla\firefox\profiles\mk2fav6i.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1620443&SearchSource=3&q=
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:eek:fficial
    FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
    FF - prefs.js: network.proxy.ftp - HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable
    FF - prefs.js: network.proxy.gopher - HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable
    FF - prefs.js: network.proxy.http - HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable
    FF - prefs.js: network.proxy.socks - HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable
    FF - prefs.js: network.proxy.ssl - HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable
    FF - prefs.js: network.proxy.type - 4
    FF - component: c:\program files\free download manager\firefox\extension\components\vmsfdmff.dll
    FF - component: g:\firefox\extensions\{930f1200-f5f1-4870-bac6-e233ec8e7023}\components\FFAlert.dll
    FF - plugin: c:\documents and settings\home\application data\mozilla\firefox\profiles\mk2fav6i.default\extensions\yyginstantplay@yoyogames.com\plugins\NPYYGInstantPlay.dll
    FF - plugin: g:\firefox\plugins\npOGAPlugin.dll
    FF - HiddenExtension: Java Console: No Registry Reference - g:\firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
    FF - HiddenExtension: Java Console: No Registry Reference - g:\firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

    ---- FIREFOX POLICIES ----

    ============= SERVICES / DRIVERS ===============

    R0 hotcore3;hc3ServiceName;c:\windows\system32\drivers\hotcore3.sys [2009-8-13 40560]
    R2 Change Modem Device Service;Change Modem Device Service;c:\windows\system32\ChgService.exe [2009-4-6 135168]
    R3 BCASPROT;Advanced System Protector;c:\program files\systweak\advanced system protector\sasprot32.sys [2009-5-4 6656]
    S3 cmnsusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2053s;c:\windows\system32\drivers\cmnsusbser.sys [2009-4-6 103424]
    S3 hitmanpro3;Hitman Pro 3 Support Driver;\??\c:\windows\system32\drivers\hitmanpro3.sys --> c:\windows\system32\drivers\hitmanpro3.sys [?]
    S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-7 34064]

    ============== File Associations ===============

    scrfile= "%1" %*

    =============== Created Last 30 ================

    2009-08-22 16:08 664 a------- c:\windows\system32\d3d9caps.dat
    2009-08-22 15:12 <DIR> --d----- C:\K59CCYEi
    2009-08-21 18:21 <DIR> --d----- C:\warcraft 2
    2009-08-21 18:07 <DIR> --d----- c:\windows\download
    2009-08-21 18:07 1,793 a------- c:\windows\ST4UNST.000
    2009-08-20 09:50 <DIR> --d----- C:\K4HnG69W
    2009-08-19 19:13 <DIR> --d----- C:\K43CsTnb
    2009-08-17 20:28 <DIR> --d----- C:\K3IRjLJo
    2009-08-13 11:39 <DIR> --d----- C:\K1bcT9BH
    2009-08-13 10:01 <DIR> --d----- C:\K1a1l3eh
    2009-08-13 00:28 <DIR> --d----- c:\docume~1\alluse~1\applic~1\createpart
    2009-08-13 00:28 <DIR> --d----- c:\docume~1\alluse~1\applic~1\explauncher
    2009-08-13 00:25 40,560 a------- c:\windows\system32\drivers\hotcore3.sys
    2009-08-13 00:24 <DIR> --d----- c:\program files\Paragon Software
    2009-08-13 00:05 125,136,896 a------- C:\Paragon-PM95-PRE_WinInstallSNx32_9.0.99.10022_001.msi
    2009-08-12 22:52 <DIR> --d----- C:\K1OoxLr8
    2009-08-08 17:35 195 a------- C:\dolphin_log.html
    2009-08-08 17:35 <DIR> --d----- c:\program files\Animated Wallpaper Maker
    2009-08-06 19:36 <DIR> --d----- C:\Jz1YsSny
    2009-08-05 19:30 <DIR> --d----- c:\program files\Pointstone
    2009-08-05 19:30 <DIR> --d----- c:\program files\common files\Pointstone
    2009-08-04 19:48 <DIR> --d----- C:\Warcraft III
    2009-08-04 18:56 4,248,840 a------- c:\windows\system32\qtp-mt334.dll
    2009-08-04 18:56 248,584 a------- c:\windows\system32\prgiso.dll
    2009-08-03 10:58 <DIR> --d----- c:\program files\Mozilla ActiveX Control v1.7.12
    2009-08-03 10:01 <DIR> -cd-h--- c:\docume~1\alluse~1\applic~1\{FC0EF073-EDB5-4CBE-B92D-5CE9A223F37B}
    2009-07-31 22:51 <DIR> --d----- c:\program files\ImageShack Corp
    2009-07-27 10:52 <DIR> --d----- c:\program files\Spirits of Metropolis v1.10
    2009-07-25 15:19 <DIR> --d----- c:\program files\ShellBlast 1.31

    ==================== Find3M ====================

    2009-08-03 13:36 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-08-03 13:36 19,096 a------- c:\windows\system32\drivers\mbam.sys
    2009-07-03 00:35 1,732,608 a------- c:\windows\system32\common_res.dll
    2009-06-28 23:43 74,752 a------- c:\windows\cadkasdeinst01e.exe
    2009-06-04 15:28 44,544 a------- c:\windows\system32\msxml4a.dll
    2008-03-01 10:13 32 a----r-- c:\documents and settings\all users\hash.dat
    2008-10-19 10:56 1,024 a--shr-- c:\windows\alevir.exe
    2008-10-19 10:56 1,024 a--shr-- c:\windows\brasil.exe
    2008-10-19 10:56 1,024 a--shr-- c:\windows\brasil.pif
    2008-10-19 10:56 1,024 a--shr-- c:\windows\instit.bat
    2008-10-19 10:56 1,024 a--shr-- c:\windows\marco!.scr
    2008-10-19 10:56 1,024 a--shr-- c:\windows\puta!!.exe
    2008-10-19 10:56 1,024 a--shr-- c:\windows\scrsvr.exe
    2008-10-19 10:56 1,024 a--shr-- c:\windows\speedy.exe
    2008-10-19 10:56 1,024 a--shr-- c:\windows\speedy.pif
    2009-02-26 23:20 23 a--sh--- c:\windows\system32\edacded0_x.dat

    ============= FINISH: 9:45:15.67 ===============




    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-07-30.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 2008-03-26 03:41:46
    System Uptime: 2009-08-24 09:29:50 (0 hours ago)

    Motherboard: MICRO-STAR INTERNATIONAL CO., LTD | | MS-7104
    Processor: Intel(R) Pentium(R) 4 CPU 2.40GHz | Socket 478 | 2400/133mhz

    ==== Disk Partitions =========================

    A: is Removable
    C: is FIXED (NTFS) - 72 GiB total, 12.806 GiB free.
    D: is FIXED (NTFS) - 19 GiB total, 15.773 GiB free.
    E: is FIXED (NTFS) - 39 GiB total, 29.792 GiB free.
    F: is FIXED (FAT32) - 19 GiB total, 16.897 GiB free.
    G: is FIXED (NTFS) - 38 GiB total, 35.473 GiB free.
    H: is CDROM ()

    ==== Disabled Device Manager Items =============

    Class GUID:
    Description: PCI Simple Communications Controller
    Device ID: PCI\VEN_0004&DEV_2043&SUBSYS_1048144F&REV_01\3&13C0B0C5&0&28
    Manufacturer:
    Name: PCI Simple Communications Controller
    PNP Device ID: PCI\VEN_0004&DEV_2043&SUBSYS_1048144F&REV_01\3&13C0B0C5&0&28
    Service:

    ==== System Restore Points ===================

    RP1: 2009-05-09 09:18:24 - System Checkpoint
    RP2: 2009-05-10 14:52:48 - System Checkpoint
    RP3: 2009-05-20 23:56:19 - 1-Click-Optimizer
    RP4: 2009-05-25 10:31:45 - SpeedOptimizer - Networking optimization
    RP5: 2009-05-29 12:45:36 - System Checkpoint
    RP6: 2009-05-30 14:12:24 - System Checkpoint
    RP7: 2009-06-01 11:13:38 - System Checkpoint
    RP8: 2009-07-07 22:14:55 - Unsigned driver install
    RP9: 2009-07-07 22:44:37 - Unsigned driver install
    RP10: 2009-07-09 20:22:59 - System Checkpoint
    RP11: 2009-07-31 22:51:50 - Installed ImageShack Uploader
    RP12: 2009-08-13 00:15:41 - Installed Paragon Partition Managerâ„¢ 9.5 Professional.
    RP13: 2009-08-13 00:21:54 - Installed Paragon Partition Managerâ„¢ 9.5 Professional.
    RP14: 2009-08-13 00:24:39 - Installed Paragon Partition Managerâ„¢ 9.5 Professional.

    ==== Installed Programs ======================

    'WE' Group Arkanoid Space Ball
    3D Maker by Lokas Software
    3D Text Commander 2.0 by Insofta Development
    ACDSee Pro
    Acrobat.com
    Adobe AIR
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Photoshop 7.0
    Adobe Reader 9.1
    Adobe Shockwave Player 11
    Advanced System Protector
    Advanced SystemCare 3
    AiO_Scan_CDA
    AiOSoftwareNPI
    AnvSoft Mobile Video Converter 2.0
    Audacity 1.3.6 (Unicode)
    BufferChm
    Canon PIXMA iP1000
    CCleaner (remove only)
    CP_Package_Variety1
    CP_Package_Variety2
    CP_Package_Variety3
    CustomerResearchQFolder
    Defraggler (remove only)
    Destinations
    DeviceManagementQFolder
    Disc2Phone
    DocProc
    eSupportQFolder
    EvJO Photo-Image Resizer v2.5
    F300
    F300_Help
    F300Trb
    Fax_CDA
    Free Download Manager 3.0
    Game Maker 7.0
    GamingHarbor Toolbar
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Windows XP (KB954550-v5)
    HP Extended Capabilities 6.1
    HP Imaging Device Functions 6.1
    HP Photosmart Essential
    HP PSC & OfficeJet 6.1.A
    HP Software Update
    HP Solution Center and Imaging Support Tools 6.1
    HPProductAssistant
    ImageShack Uploader
    iTunes
    Java(TM) 6 Update 11
    K-Lite Codec Pack 4.0.0 (Full)
    Malwarebytes' Anti-Malware
    MarketResearch
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Office Professional Edition 2003
    Microsoft Silverlight
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Mobile Partner
    Moyea FLV Editor Ultimate version: 1.0.1.0
    Mozilla Firefox (3.0.7)
    MP3 Converter V4.6.0
    MSN
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 6 Service Pack 2 (KB954459)
    NewCopy_CDA
    NVIDIA Drivers
    Paragon Partition Managerâ„¢ 9.5 Professional
    PowerDVD
    ProductContextNPI
    Quicksys RegCleaner 2009 (Build 209)
    QuickTime
    Readme
    Realtek AC'97 Audio
    Recuva (remove only)
    Scan
    ScannerCopy
    Security Update for Windows XP (KB923789)
    SolutionCenter
    Sothink SWF Quicker
    Spirits of Metropolis v1.10
    Status
    Toolbox
    Total Privacy 5
    TrayApp
    Uninstall 1.0.0.1
    Unload
    VIA Platform Device Manager
    VideoLAN VLC media player 0.8.6d
    WebFldrs XP
    WebReg
    Windows Genuine Advantage Notifications (KB905474)
    Windows Live Messenger
    Windows Live OneCare safety scanner
    Windows Live Sign-in Assistant
    WinPcap 4.0.2
    WinRAR archiver
    WinUtilities for Giveawayoftheday 7.0
    Wise Registry Cleaner 4 Professional V4.22
    Your monster voice 1

    ==== Event Viewer Messages From Past Week ========

    2009-08-23 22:46:55, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 60 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
    2009-08-23 22:16:55, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 30 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
    2009-08-23 22:01:55, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
    2009-08-23 19:36:10, error: Service Control Manager [7001] - The Fast User Switching Compatibility service depends on the Terminal Services service which failed to start because of the following error: The specified module could not be found.
    2009-08-23 15:21:18, error: ipnathlp [32003] - The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
    2009-08-23 14:08:44, error: Service Control Manager [7034] - The Pml Driver HPZ12 service terminated unexpectedly. It has done this 1 time(s).
    2009-08-23 14:08:44, error: Service Control Manager [7034] - The Change Modem Device Service service terminated unexpectedly. It has done this 1 time(s).
    2009-08-23 14:08:44, error: Service Control Manager [7023] - The Terminal Services service terminated with the following error: The specified module could not be found.
    2009-08-23 14:08:06, error: Dhcp [1002] - The IP address lease 192.168.1.2 for the Network Card with network address 0016176CA9CC has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    2009-08-22 22:42:18, error: Server [2505] - The server could not bind to the transport \Device\NetBT_Tcpip_{31D23F5C-2E67-47F0-A419-4EDD613BB7F9} because another computer on the network has the same name. The server could not start.
    2009-08-22 16:56:39, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    2009-08-22 16:08:53, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments " " in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
    2009-08-22 15:36:00, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
    2009-08-22 15:36:00, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
    2009-08-22 15:36:00, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2009-08-22 15:36:00, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2009-08-22 15:36:00, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.

    ==== End Of File ===========================








    When i was using my computer, it suddenly hang ang after a few minute, the screen blank and the cpu make a sound like a buzzer nearly for 3 second while the screen still blank. Then i press the restart button on the cpu or i turn off it power and start again, the syntom still happen. But i off my computer for nearly 30min, and start again, it work normal.
    can anyone tell me what should i do to fix it?

    thanks in advance.
     
    Last edited: 2009/08/23
    Hei,
    #1
  2. 2009/08/23
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Did you create these folders?
    C:\K59CCYEi
    C:\K4HnG69W
    C:\K43CsTnb
    C:\K3IRjLJo
    C:\K1bcT9BH
    C:\K1a1l3eh
    C:\K1OoxLr8
    C:\Jz1YsSny


    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE. If Combofix asks you to install Recovery Console, please allow it.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.
    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!



    Download HijackThis:
    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
    by clicking on Download HijackThis Installer
    Install, and run it.
    Post HijackTHis log.
    Do NOT attempt to fix anything!

    NOTE. If you're using Vista, right click on HijackThis, and click Run as Administrator
     

  3. to hide this advert.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.