HOMEOldSP problem (Browser Hijacking...)

Discussion in 'adware, spyware & hijack cleaning' started by Warlok, Jun 18, 2004.

Thread Status:
Not open for further replies.
  1. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    Greetings,

    Help.

    My computer is afflicted with spyware, and despite the best efforts of many programs I cannot get rid of it.

    The first thing that hit me was a Backdoor.Jeem, followed by Trojan.ByteVerify, MHTMLRedir.Exploit, and Downloader.Trojan. A HOMEOldSP keeps popping up in my registry, and a number of "CoolWebSearch" and Browser Hijackers keep getting added to my registry. I keep killing them with Spy Sweeper and AdAware.

    My web browser continually tries to reset the homepage/default page to "home:about" a I suspect bogus search engine page. If I am connected to the Internet when this page is there, eventually it tries to browse some odd IP number server (to download more spyware junk? Probably...). Also, when I have my e-mail program open (Eudora Pro) I occassionally get some strange html pop-up that I cannot Alt-F4; it seems to finish doing something before it disappears. It seems to recur with a certain timing or frequency.

    I suspect there is something on my system controlling all these things, but this is way beyond me... I hope I don`t have to reinstall XP. I wonder if the spyware has established a hidden user profile somehow with full admin rights, and if my web browser (IE) and e-mail program are now compromised. There was a time before I ran Spy Sweeper that I would see a flash of that stupid "home:about" web page just before the User Accounts menu window opened - that has now stopped, so I assume what was causing it is gone. I haven`t passworded my own Windows logon profile because doing so now might simply pass that password on to whatever hacker or network of hackers is responsible for this crap. In the past I have been told also that passwording is simply something that makes your system stand out a little further to hackers - you must have something of value to do so.

    A friend of mine gave me the additional anti-spyware programs which have helped stave off any further infection thus far, and he gave me the link to this site. I even hate risking Internet connect time with this stuff lurking around. I hope you can help me. I have downloaded the programs (already had AdAware) as you directed on your forum site and shall post the log results in my next post.

    Thank you for even having a place like this to turn to.



    P.S.: Forgot to mention that my browser security settings (IE) were turned completely down by this spyware - I fixed that right away and it has stayed fixed since.
     
    Last edited: Jun 18, 2004
    Warlok, Jun 18, 2004
    #1
  2. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    Here is the log file. I ran AdAware. Note that I ran AdAware with "Unload recognized processes during scanning." and "Let Windows remove files in use after reboot." OFF (X`ed), since the default for them was ON (checkmarked). I assume this OFF status was your intended setting? Here we are then:


    Logfile of HijackThis v1.97.7
    Scan saved at 6:03:25 PM, on 6/18/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\NORTON~1\navapw32.exe
    C:\WINDOWS\System32\CTHELPER.EXE
    E:\In Case Of Bullshit\Program Files\HiJackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\WARLOK~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\WARLOK~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\WARLOK~1\LOCALS~1\Temp\sp.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\WARLOK~1\LOCALS~1\Temp\sp.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\WARLOK~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\WARLOK~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
    O2 - BHO: (no name) - {BD928AEE-BAD6-4C71-809B-99536FDA6709} - C:\WINDOWS\mm.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
    O9 - Extra button: FlashGet (HKLM)
    O9 - Extra 'Tools' menuitem: &FlashGet (HKLM)
    O9 - Extra button: Yahoo! Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O15 - Trusted Zone: http://*.windowsupdate.com
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/bonnie/us/win/QuickTimeInstaller.exe
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.3dgroove.com/download/GrooveAX.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37881.6409143519
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{997DBC3B-FAA5-4D3A-848D-9A91C1F81007}: NameServer = 204.83.142.2,204.83.142.4




    Of course, as I post this my browser (and Spy Sweeper) are preventing my homepage from becoming HOMEOldSP...
     
    Last edited: Jun 18, 2004
    Warlok, Jun 18, 2004
    #2
  3. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    I wonder if this fellow`s (TedB) advice might be a solution...

    How I Cleaned the c1dcon.ewizard.cc Hijack

    I wonder how he knew what it was he had. I was unable to respond to his post... perhaps only admins can post in all threads (understandable). I realize people are taken in order and/or according to critical state as you kind folks are able, and I do not wish to bully forward; I hope I have provided enough information, and I am amazed at how many people have these problems. I hope the Bill going through the US Congress & Senate to outlaw Spyware passes...


    c1dcon.ewizard.cc hijack

    That`s the name of a new virus/spyware occurrence. Comes up every time I send an e-mail now, just before it transforms into a window warning me about viri and spyware. Is TedB`s procedure the way to go?
     
    Last edited: Jun 19, 2004
    Warlok, Jun 19, 2004
    #3
  4. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    On Saturday the 19th I updated the reference files for AdAware 6.0. That "c1dwizard" bit of spyware is nowhere to be seen. I ran it once and it found the usual HOMEOldSP, but this time it got rid of it - the second run plus a scan with Spy Sweeper confirmed this. I rebooted in Safe mode and ran both again... still clean. Completely. I was *not* hooked up to the Interlag at the time.

    Several reboots and the spyware, as well as all browser redirects, were still gone.

    As soon as I hooked back up to the Interlag (physically re-attaching the cable) and opened my e-mail or browser, Spy Sweeper`s browser homepage shield popped up and told me something was trying to redirect IE to "about:blank". The usual. Sure enough, "HOMEOldSP" was back.

    I rebooted to Safe mode today, ran AdAware twice and once again had a pristine system - it found HOMEOldSP and eliminated it. I have included a new HiJackThis.log, below:

    Logfile of HijackThis v1.97.7
    Scan saved at 1:01:31 PM, on 6/21/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    E:\In Case Of Bullshit\Program Files\HiJackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://3dgamers.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://3dgamers.com
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
    O2 - BHO: (no name) - {BD928AEE-BAD6-4C71-809B-99536FDA6709} - C:\WINDOWS\mm.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
    O9 - Extra button: FlashGet (HKLM)
    O9 - Extra 'Tools' menuitem: &FlashGet (HKLM)
    O9 - Extra button: Yahoo! Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O15 - Trusted Zone: http://*.windowsupdate.com
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/bonnie/us/win/QuickTimeInstaller.exe
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.3dgroove.com/download/GrooveAX.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37881.6409143519
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{997DBC3B-FAA5-4D3A-848D-9A91C1F81007}: NameServer = 204.83.142.2,204.83.142.4


    Help.
     
    Last edited: Jun 21, 2004
    Warlok, Jun 21, 2004
    #4
  5. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    Stupid spyware... when I checked my e-mail tonight that "c1d.wizard..." thing came back again - at least it purportedly did... a brief window flashed on with that name in the title before giving me a bogus anti-spyware message.
     
    Warlok, Jun 22, 2004
    #5
  6. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Hi Warlok,

    This one looks like MrBadGuy to me:

    O2 - BHO: (no name) - {BD928AEE-BAD6-4C71-809B-99536FDA6709} - C:\WINDOWS\mm.dll

    Can you download and install APM from http://www.diamondcs.com.au/index.php?page=apm

    In the top window select explorer then look in the bottom half if that dll is listed there.
    If so rightclick the dll and choose UnloadDLL
    Click OK on all the prompts and fix the line above in HijackThis with all IE and explorer windows closed.

    Then reboot and post a new HijackThis log.

    Regards,

    Pieter
     
    Pieter_Arntz, Jun 22, 2004
    #6
  7. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    I ran AdAware disconnected from the Interlag, then did what you told me. The "mm.dll" was in the Internet Explorer section. Then I rebooted into Safe Mode and ran AdAware again, followed by HiJackThis. Here is the newest log file:

    Logfile of HijackThis v1.97.7
    Scan saved at 3:24:10 PM, on 6/22/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    E:\In Case Of Bullshit\Program Files\HiJackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://3dgamers.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://3dgamers.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
    O9 - Extra button: FlashGet (HKLM)
    O9 - Extra 'Tools' menuitem: &FlashGet (HKLM)
    O9 - Extra button: Yahoo! Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O15 - Trusted Zone: http://*.windowsupdate.com
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/bonnie/us/win/QuickTimeInstaller.exe
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.3dgroove.com/download/GrooveAX.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37881.6409143519
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{997DBC3B-FAA5-4D3A-848D-9A91C1F81007}: NameServer = 204.83.142.2,204.83.142.4




    I imagine the next thing to kill with HiJackThis is that HOMEOldSP thing, right?
     
    Warlok, Jun 22, 2004
    #7
  8. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Hi Warlok,

    Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R3 - Default URLSearchHook is missing

    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE

    Then reboot and use AdAware as described here:
    https://www.wilderssecurity.com/showthread.php?t=15913

    Regards,

    Pieter
     
    Pieter_Arntz, Jun 23, 2004
    #8
  9. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    This line...

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank

    ... was not present. I think it was still nuked since the last AdAware run.

    YAY! I think the system is clean; no prompts to change my browser to "about:blank" anymore. Do you want one more HiJackThis log? Hopefully the next few days will not see anything new and frightening. The only stuff I`m getting out of AdAware now seems to be normal cookie material (click trackers and whatnot). Thank you Mr. Arntz, and to all your fellows who do this - you`re all definitely in my somewhat anemic "good book". When/if I get rich, you`re all getting something for your troubles.

    Perhaps one could say I look forward to *not* contacting you again in the future (!). Thanks again.
     
    Warlok, Jun 23, 2004
    #9
  10. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    One check to make sure:
    Copy the contents of the bold text to Notepad.
    Name the file Appinit.bat
    Save as type *All Files*
    Save on the Desktop.

    Reg save "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" windows1.hiv
    ren windows1.hiv windows.txt

    Double click on Appinit.bat
    This will create a file on the desktop named windows.txt
    Post the content please.

    Regards,

    Pieter
     
    Pieter_Arntz, Jun 24, 2004
    #10
  11. Warlok

    Warlok Registered Member

    Joined:
    Jun 18, 2004
    Posts:
    8
    Location:
    SK., Canada
    Okay. Here it is (lots of blank spaces removed at the document end):






    regf       Pugf hbin  @ 
     ìý¨ÿÿÿnk, ’i•þIÃ ÿÿÿÿ ÿÿÿÿÿÿÿÿ ø x ÿÿÿÿ 0  ! Windows Èþÿÿsk x x    ”     ì
         !
     €  !      #
     €  #  ?    
         ?   
        ?    
            Øÿÿÿvk  €   fùAppInit_DLLsÖæG ° Ðÿÿÿvk     ÀUDeviceNotSelectedTimeoutðÿÿÿ1 5  @ ðÿÿÿ9 0  ¸| Ðÿÿÿvk  €'   zGDIProcessHandleQuota"þàÿÿÿvk  €   °ºSpooler2ðÿÿÿy e s Èn  ° à 0 ` ¨ àÿÿÿvk  €   =pswapdiskÐÿÿÿvk     R¿TransmissionRetryTimeoutàÿÿÿ° à 0 ` ¨ È  Ðÿÿÿvk  €'   SqUSERProcessHandleQuota ¸
     
    Last edited: Jun 24, 2004
    Warlok, Jun 24, 2004
    #11
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...