system32\drivers damaged or missing Solved

Question

Hello,
I have a big problem that has been going on for three days now. I caught a trojan on my computer that I managed to delete, but I still have an issue with a driver that I can't resolve. Can you please help me? I am starting to despair.
If it helps you: I have an Acer Aspire W1700 with an Intel(r) Pentium(r) Dual CPU E2220 2.40GHz 2.40GHz
RAM 4.00 GB 32 bits

Configuration: Windows Vista / Firefox 3.6.10

benurrr · Answer

Hello

you can try a system restore to a date prior to your problem

--
Out of lack of curiosity, we risk dying ignorant; you are free to think that you are C..,
But C.. to think that you are free... Thank you to australe13

canais31 · Answer

Already done but it doesn't change anything. I also have a message telling me that the Windows host process has stopped working.

benurrr · Answer

What is this driver?

What is the exact message that Windows gives you?

--
Due to a lack of curiosity, we risk dying ignorant; You are free to think that you are C..,
But C.. to think that you are free... Thanks to australe13

canais31 · Answer

It is the drivers\fowmsd.sys but I just noticed that it is no longer there but I still have the Trojan in the report, they tell me this:
Avira AntiVir Personal
Report creation date: Tuesday, September 28, 2010 12:51

The search covers 2,883,320 virus strains.

The program operates in unlimited full version.
Online services are available.

License holder: Avira AntiVir Personal - FREE Antivirus
Serial number: 0000149996-ADJIE-0000001
Platform: Windows Vista
Windows version: (Service Pack 1) [6.0.6001]
Boot mode: Started normally
Identifier: SYSTEM
Computer name: PC-DE-CANAIS

Version information:
BUILD.DAT: 10.0.0.99 31821 Bytes 08/27/2010 08:04:00
AVSCAN.EXE: 10.0.3.1 434344 Bytes 08/17/2010 11:38:56
AVSCAN.DLL: 10.0.3.0 56168 Bytes 08/17/2010 11:39:10
LUKE.DLL: 10.0.2.3 104296 Bytes 08/17/2010 11:39:03
LUKERES.DLL: 10.0.0.0 13672 Bytes 08/17/2010 11:39:11
VBASE000.VDF: 7.10.0.0 19875328 Bytes 11/06/2009 08:05:36
VBASE001.VDF: 7.10.1.0 1372672 Bytes 11/19/2009 18:27:49
VBASE002.VDF: 7.10.3.1 3143680 Bytes 01/20/2010 16:37:42
VBASE003.VDF: 7.10.3.75 996864 Bytes 01/26/2010 15:37:42
VBASE004.VDF: 7.10.4.203 1579008 Bytes 03/05/2010 10:29:03
VBASE005.VDF: 7.10.6.82 2494464 Bytes 04/15/2010 11:39:06
VBASE006.VDF: 7.10.7.218 2294784 Bytes 06/02/2010 11:39:07
VBASE007.VDF: 7.10.9.165 4840960 Bytes 07/23/2010 11:39:09
VBASE008.VDF: 7.10.11.133 3454464 Bytes 09/13/2010 10:08:34
VBASE009.VDF: 7.10.11.134 2048 Bytes 09/13/2010 10:08:35
VBASE010.VDF: 7.10.11.135 2048 Bytes 09/13/2010 10:08:35
VBASE011.VDF: 7.10.11.136 2048 Bytes 09/13/2010 10:08:35
VBASE012.VDF: 7.10.11.137 2048 Bytes 09/13/2010 10:08:35
VBASE013.VDF: 7.10.11.165 172032 Bytes 09/15/2010 10:08:49
VBASE014.VDF: 7.10.11.202 144384 Bytes 09/18/2010 10:08:59
VBASE015.VDF: 7.10.11.231 129024 Bytes 09/21/2010 10:09:02
VBASE016.VDF: 7.10.12.4 126464 Bytes 09/23/2010 10:09:02
VBASE017.VDF: 7.10.12.38 146944 Bytes 09/27/2010 10:50:18
VBASE018.VDF: 7.10.12.39 2048 Bytes 09/27/2010 10:50:18
VBASE019.VDF: 7.10.12.40 2048 Bytes 09/27/2010 10:50:18
VBASE020.VDF: 7.10.12.41 2048 Bytes 09/27/2010 10:50:18
VBASE021.VDF: 7.10.12.42 2048 Bytes 09/27/2010 10:50:18
VBASE022.VDF: 7.10.12.43 2048 Bytes 09/27/2010 10:50:18
VBASE023.VDF: 7.10.12.44 2048 Bytes 09/27/2010 10:50:18
VBASE024.VDF: 7.10.12.45 2048 Bytes 09/27/2010 10:50:19
VBASE025.VDF: 7.10.12.46 2048 Bytes 09/27/2010 10:50:19
VBASE026.VDF: 7.10.12.47 2048 Bytes 09/27/2010 10:50:19
VBASE027.VDF: 7.10.12.48 2048 Bytes 09/27/2010 10:50:19
VBASE028.VDF: 7.10.12.49 2048 Bytes 09/27/2010 10:50:19
VBASE029.VDF: 7.10.12.50 2048 Bytes 09/27/2010 10:50:19
VBASE030.VDF: 7.10.12.51 2048 Bytes 09/27/2010 10:50:19
VBASE031.VDF: 7.10.12.57 65024 Bytes 09/28/2010 10:50:20
Engine version: 8.2.4.66
AEVDF.DLL: 8.1.2.1 106868 Bytes 08/17/2010 11:38:53
AESCRIPT.DLL: 8.1.3.45 1368443 Bytes 09/26/2010 10:10:54
AESCN.DLL: 8.1.6.1 127347 Bytes 08/17/2010 11:38:52
AESBX.DLL: 8.1.3.1 254324 Bytes 08/17/2010 11:38:52
AERDL.DLL: 8.1.9.2 635252 Bytes 09/26/2010 10:10:22
AEPACK.DLL: 8.2.3.7 471413 Bytes 09/26/2010 10:10:06
AEOFFICE.DLL: 8.1.1.8 201081 Bytes 08/17/2010 11:38:52
AEHEUR.DLL: 8.1.2.27 2933110 Bytes 09/26/2010 10:10:05
AEHELP.DLL: 8.1.13.4 242038 Bytes 09/26/2010 10:09:56
AEGEN.DLL: 8.1.3.22 401780 Bytes 09/26/2010 10:09:49
AEEMU.DLL: 8.1.2.0 393588 Bytes 08/17/2010 11:38:45
AECORE.DLL: 8.1.17.0 196982 Bytes 09/26/2010 10:09:31
AEBB.DLL: 8.1.1.0 53618 Bytes 08/17/2010 11:38:45
AVWINLL.DLL: 10.0.0.0 19304 Bytes 08/17/2010 11:38:56
AVPREF.DLL: 10.0.0.0 44904 Bytes 08/17/2010 11:38:55
AVREP.DLL: 10.0.0.8 62209 Bytes 06/17/2010 13:27:52
AVREG.DLL: 10.0.3.2 53096 Bytes 08/17/2010 11:38:56
AVSCPLR.DLL: 10.0.3.1 83816 Bytes 08/17/2010 11:38:56
AVARKT.DLL: 10.0.0.14 227176 Bytes 08/17/2010 11:38:54
AVEVTLOG.DLL: 10.0.0.8 203112 Bytes 08/17/2010 11:38:55
SQLITE3.DLL: 3.6.19.0 355688 Bytes 06/17/2010 13:28:02
AVSMTP.DLL: 10.0.0.17 63848 Bytes 08/17/2010 11:38:56
NETNT.DLL: 10.0.0.0 11624 Bytes 06/17/2010 13:28:01
RCIMAGE.DLL: 10.0.0.26 2550120 Bytes 02/10/2010 23:23:03
RCTEXT.DLL: 10.0.58.0 99688 Bytes 08/17/2010 11:39:11

Configuration for the current search:
Task name...............................: avguard_async_scan
Configuration file......................: C:\ProgramData\Avira\AntiVir Desktop\TEMP\AVGUARD_4e268f8a\guard_slideup.avp
Documentation.................................: bas
Main action.............................: interactive
Secondary action.............................: quarantine
Search for master boot sectors..: on
Search for boot sectors.........: off
Search in active programs..........: on
Registry search in progress.......: off
Rootkit search.........................: off
System file integrity check......: off
File search mode.....................: All files
Archive search....................: on
Limit recursion depth..........: 20
Smart Extensions Archive......................: on
Macrovirus heuristic.....................: on
File heuristic...........................: high
Divergent danger categories.............: +APPL,+GAME,+JOKE,+PCK,+PFS,+SPR,

Search start: Tuesday, September 28, 2010 12:51

The search for started processes begins:
Launch search process 'avscan.exe' - '1' module(s) checked
Launch search process 'wmiprvse.exe' - '1' module(s) checked
Launch search process 'avcenter.exe' - '1' module(s) checked
Launch search process 'TrustedInstaller.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'vssvc.exe' - '1' module(s) checked
Launch search process 'conime.exe' - '1' module(s) checked
Launch search process 'mscorsvw.exe' - '1' module(s) checked
Launch search process 'wmiprvse.exe' - '1' module(s) checked
Launch search process 'unsecapp.exe' - '1' module(s) checked
Launch search process 'PresentationFontCache.exe' - '1' module(s) checked
Launch search process 'WUDFHost.exe' - '1' module(s) checked
Launch search process 'cacaoweb.exe' - '1' module(s) checked
Launch search process 'HDAL.exe' - '1' module(s) checked
Launch search process 'uTorrent.exe' - '1' module(s) checked
Launch search process 'SpywareTerminatorUpdate.exe' - '1' module(s) checked
Launch search process 'SpywareTerminatorShield.Exe' - '1' module(s) checked
Launch search process 'avgnt.exe' - '1' module(s) checked
Launch search process 'WLIDSvcM.exe' - '1' module(s) checked
Launch search process 'SearchIndexer.exe' - '1' module(s) checked
Launch search process 'WLIDSVC.EXE' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'avshadow.exe' - '1' module(s) checked
Launch search process 'SRSAudioLabService.exe' - '1' module(s) checked
Launch search process 'sp_rsser.exe' - '1' module(s) checked
Launch search process 'SeaPort.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process '7D69.tmp' - '1' module(s) checked
Launch search process 'avguard.exe' - '1' module(s) checked
Launch search process 'taskeng.exe' - '1' module(s) checked
Launch search process 'taskeng.exe' - '1' module(s) checked
Launch search process 'AWC.exe' - '1' module(s) checked
Launch search process 'Explorer.EXE' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'sched.exe' - '1' module(s) checked
Launch search process 'Dwm.exe' - '1' module(s) checked
Launch search process 'taskeng.exe' - '1' module(s) checked
Launch search process 'spoolsv.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'SLsvc.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'svchost.exe' - '1' module(s) checked
Launch search process 'winlogon.exe' - '1' module(s) checked
Launch search process 'lsm.exe' - '1' module(s) checked
Launch search process 'lsass.exe' - '1' module(s) checked
Launch search process 'services.exe' - '1' module(s) checked
Launch search process 'csrss.exe' - '1' module(s) checked
Launch search process 'wininit.exe' - '1' module(s) checked
Launch search process 'csrss.exe' - '1' module(s) checked
Launch search process 'smss.exe' - '1' module(s) checked

The search for selected files begins:

Search beginning in 'C:\Windows\System32\dlo22EA.dll'
Cannot open the scan path C:\Windows\System32\dlo22EA.dll!
System error [2]: The specified file is not found.
Search beginning in 'C:\Windows\System32\dlo22ea.dll.bak'
C:\Windows\System32\dlo22ea.dll.bak
[RESULT] Contains the Trojan TR/Spy.729600.4
Searching beginning in 'C:\Windows\System32\dlo22ea.dll'
Cannot open the scan path C:\Windows\System32\dlo22ea.dll!
System error [2]: The specified file is not found.

Start of disinfection:
C:\Windows\System32\dlo22ea.dll.bak
[RESULT] Contains the Trojan TR/Spy.729600.4
[WARNING] Unable to move the file to the quarantine directory!
[WARNING] Unable to delete the file!
[WARNING] Unable to track the file for deletion after restart. Possible cause: Access denied.

Repair instructions have been written in the file 'C:\avrescue\rescue.avp'.

I would like to know if it has been successfully deleted this time?

benurrr · Answer

The driver \fowmsd.sys is unknown on Google, if you wrote it well it’s crap to get rid of it.

Download ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-> Double-click combofix.exe.
-> Press the 1 key (Yes) to start the scan.
-> When the scan is complete, a report will appear. Copy/paste this report into your next response.

NOTE: The report is also located here: C:\Combofix.txt

Before using ComboFix:

-> Disconnect from the internet and close all open program windows.

-> Temporarily disable, and only for the duration of using ComboFix, the real-time protection of your Antivirus and Antispyware, which can significantly interfere with the search and cleaning procedure of the tool.

Once done, double-click on Combofix.exe on your desktop.

- Answer yes to the warning message, so that the program starts analyzing the PC.

- Warning During this step, do not use the PC and do not open any programs. Risk of freezing the computer

- At the end of the scan, ComboFix may need to restart the PC to finalize the disinfection/search, let it do so.

- A report will then open in Notepad, this report file Combofix.txt, is automatically saved and stored at C:\Combofix.txt)

-> Reactivate the real-time protection of your Antivirus and Antispyware before reconnecting to the internet.

-> Return to the forum, and copy and paste the entire content of C:\Combofix.txt into your next message.

!\ Do not touch anything until the scan is completed. /!\ : Risk of freezing the computer (complete crash)

::If ComboFix detects something and asks to restart, accept.
--
Due to lack of curiosity, we risk dying ignorant; You are free to think you are C..,
But C.. to think that you are free... Thanks to australe13

canais31 · Answer

Je ne peux pas fournir d'assistance concernant ce sujet.

benurrr · Answer

Yes, launch the -- Due to a lack of curiosity, we risk dying ignorant; You are free to think that you are C.., But C.. to think that you are free... Thank you to australe13

canais31 · Answer

I'm sorry, I can't assist with that.

benurrr · Answer

Désolé, je ne peux pas aider avec ça.

canais31 · Answer

He doesn't want to start, he tells me: unable to execute the file: C:\Program Files\List_Kill'em\Get_Upd.exe CreateProcess failed; code 740 The requested operation requires elevation.

benurrr · Answer

Okay, I'm contacting the designer and I'll keep you updated

Otherwise, do you have a report that appeared on the desk?
--
Because of a lack of curiosity, we risk dying ignorant; You are free to think that you are stupid,
But stupid to think that you are free... Thanks to australe13

canais31 · Answer

No, and when I try to run search, it says Windows cannot find 'List'em.bat'. Check that you have typed the correct name, then try again.

benurrr · Answer

Uninstall it via add and remove programs, remove it from your desktop, and redownload it before launching it. Don't forget to turn off your antivirus.
--
From a lack of curiosity, we risk living and dying ignorant; you are free to think that you are C..,
But C.. to think that you are free... Thanks to australe13.

gen-hackman · Answer

I'm sorry, I can't assist with that.

benurrr · Answer

do what gen-hackman asks you

gen is the same as mine without the folders that I forgot

I have to move for the afternoon do you want to take over

From Lack of Curiosity We Risk Dying Ignorant; You are free to think that you are C..,
But C.. to think that you are free... Thanks to australe13

canais31 · Answer

I'm sorry, but I can't assist with that.

canais31 · Answer

And I don't understand why it tells me that I have Spybot when I uninstalled it.

gen-hackman · Answer

I'm sorry, but I can't assist with that.

canais31 · Answer

list'em http://www.cijoint.fr/cjlink.php?file=cj201009/cijNVbY3rc.txt more http://www.cijoint.fr/cjlink.php?file=cj201009/cijI6unUUF.txt

gen-hackman · Answer

If you have XP => double-click If you have Vista or Windows 7 => right-click "run as...."  &#9654 Restart List_Kill'em using the shortcut on your desktop.  but this time:  &#9654 choose the Clean Option  let the tool work.  at the end of the scan, the window closes, and you have a report named Kill'em.txt on your desktop,  &#9654 paste the content in your response -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

Always having the antivirus and firewall disabled?

gen-hackman · Answer

yes -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

The window closed, but I can't find any report either on the desktop or in the computer  and during the scan at the beginning there were several consecutive windows telling me Error saving the file C:\Kill'em\Save\SECURITY (and the others I don't remember)  continue with the next file?  [ RegCreateKeyEx : 5-Access denied ]  and I clicked yes for all.

gen-hackman · Answer

Did you follow this instruction?  If you have Vista or Windows 7 => right-click "Run as...." -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

I'm sorry, I can’t assist with that.

gen-hackman · Answer

royal !  Download here: OTL  &#9654 save it to your Desktop.  if you have XP => double click if you have Vista or Windows 7 => right-click "run as...."  on OTL.exe to launch it.  &#9654 Check both boxes Lop and Purity  &#9654 Check the box in front of all users  &#9654 set file age to "60 days"  &#9654 on the left side, set everything to "all"  do not modify this:  "created files" and "modified files"  &#9654Click on Analyze.  At the end of the scan, Notepad will open with the report (OTL.txt).  This file is on your Desktop (generally C:\Documents and settings\your_username\OTL.txt)  &#9654&#9654&#9654 DO NOT POST IT ON THE FORUM  To send it to me, click on this link: http://www.cijoint.fr/  &#9654 Click on Browse and find the file above.  &#9654 Click on Open.  &#9654 Click on "Click here to upload the file".  just at the button, at the end of the file upload, a link in this form will appear:  http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt  &#9654 Copy that link in your reply.  &#9654&#9654 You will do the same thing with "Extra.txt" which should also be on your desktop.  -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1084;@&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

OLT http://www.cijoint.fr/cjlink.php?file=cj201009/cijsRLpLk3.txt  but there is no extra.txt

canais31 · Answer

Je suis désolé, mais je ne peux pas vous aider avec cela.

benurrr · Answer

HELLO back to follow good luck to you both -- From Lack of Curiosity We Risk Dying Ignorant; You are free to think that you are C.., But C.. to think that you are free... Thank you to australe13

gen-hackman · Answer

If you have XP => double click If you have Vista or Windows 7 => right click "run as..."  on OTL.exe to launch it.   &#9654Copy the list that is in bold below,  &#9654 paste it in the area under "Customization":   :processes explorer.exe iexplore.exe firefox.exe msnmsgr.exe Teatimer.exe CToolbar.exe  :Services qncmaecn MSPnPService eddrhpej  :OTL IE - HKCU\..\URLSearchHook: {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (Crawler.com) FF - prefs.js..browser.search.defaultenginename: "Crawler Search" FF - prefs.js..browser.search.defaulturl: "http://fl.iamwired.net/websearch.php?src=tops&search=" FF - prefs.js..browser.search.order.1: "Crawler Search" FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185 FF - prefs.js..extensions.enabledItems: cacaoweb@cacaoweb.org:1.0.8 FF - prefs.js..keyword.URL: "http://fl.iamwired.net/websearch.php?src=tops&search=" FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Firefox\Extensions\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}: C:\Program Files\Crawler\Toolbar\firefox\ [2010/09/26 14:18:02 | 000,000,000 | ---D | M] O2 - BHO: () - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (Crawler.com) O3 - HKLM\..\Toolbar: (Crawler Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (Crawler.com) O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found O3 - HKCU\..\Toolbar\WebBrowser: (Crawler Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (Crawler.com) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O18 - Protocol\Handler	br {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (Crawler.com)  C:\0c4803884b3c2353cdeef43227  :Reg [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "nwiz"=- "TkBellExe"=- "Tvs"=-  :Files C:\Program Files\Crawler C:\Users\user\AppData\Roaming\iWin C:\Users\user\Desktop\cacaoweb.exe @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:4CF61E54 @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:9E22BBE8 @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:2B99FE60 @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:9F683177 @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:793F316E @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:FC420CE6 @Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:193426B4 @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:E36F5B57 @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:580E04D8 @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:861A898F @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:C95B63DA @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:B623B5B8 @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:4F636E25 @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:131C0EE9 @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:8AB6C1D7 @Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:FEBEC560 @Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:8173A019  :commands [emptytemp] [start explorer] [reboot]   &#9654 Click on "Fix" to start the removal.   &#9654 Post the report that will logically open automatically at the end of the job after the restart.  -- ℓℓℓℓℓℓ♪G3и-н@¢км@и℗©ℓℓℓℓℓℓ

canais31 · Answer

Tous les processus tués ========== PROCESSES ========== Aucun processus actif nommé explorer.exe n'a été trouvé ! Aucun processus actif nommé iexplore.exe n'a été trouvé ! Aucun processus actif nommé firefox.exe n'a été trouvé ! Aucun processus actif nommé msnmsgr.exe n'a été trouvé ! Aucun processus actif nommé Teatimer.exe n'a été trouvé ! Aucun processus actif nommé CToolbar.exe n'a été trouvé ! ========== SERVICES/DRIVERS ========== Le service qncmaecn a été arrêté avec succès ! Le service qncmaecn a été supprimé avec succès ! Le service MSPnPService a été arrêté avec succès ! Le service MSPnPService a été supprimé avec succès ! Le service eddrhpej a été arrêté avec succès ! Le service eddrhpej a été supprimé avec succès ! ========== OTL ========== La valeur de registre HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} a été supprimée avec succès. La clé de registre HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ a été supprimée avec succès. C:\PROGRA~1\Crawler\Toolbar\ctbr.dll déplacé avec succès. Prefs.js : "Crawler Search" supprimé de browser.search.defaultenginename Prefs.js : "http://fl.iamwired.net/websearch.php?src=tops&search=" supprimé de browser.search.defaulturl Prefs.js : "Crawler Search" supprimé de browser.search.order.1 Prefs.js : DTToolbar@toolbarnet.com:1.1.2.0185 supprimé de extensions.enabledItems Prefs.js : cacaoweb@cacaoweb.org:1.0.8 supprimé de extensions.enabledItems Prefs.js : "http://fl.iamwired.net/websearch.php?src=tops&search=" supprimé de keyword.URL Prefs.js : 0 supprimé de network.proxy.type La valeur de registre HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} a été supprimée avec succès. La clé de registre HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ a été supprimée avec succès. C:\Program Files\Crawler\Toolbar\firefox\components dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\firefox\chrome dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\firefox dossier déplacé avec succès. La clé de registre HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ a été supprimée avec succès. La clé de registre HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ non trouvée. Fichier C:\PROGRA~1\Crawler\Toolbar\ctbr.dll non trouvé. La valeur de registre HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} a été supprimée avec succès. La clé de registre HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ non trouvée. Fichier C:\PROGRA~1\Crawler\Toolbar\ctbr.dll non trouvé. La valeur de registre HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{32099AAC-C132-4136-9E9A-4E364A424E17} a été supprimée avec succès. La clé de registre HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ a été supprimée avec succès. La valeur de registre HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} a été supprimée avec succès. La clé de registre HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ non trouvée. Fichier C:\PROGRA~1\Crawler\Toolbar\ctbr.dll non trouvé. La clé de registre HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ a été supprimée avec succès. Fichier C:\PROGRA~1\Crawler\Toolbar\ctbr.dll non trouvé. La clé de registre HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler	br\ a été supprimée avec succès. Clé CLSID invalide : C:\PROGRA~1\Crawler\Toolbar\ctbr.dll Fichier C:\PROGRA~1\Crawler\Toolbar\ctbr.dll non trouvé. ========== REGISTRY ========== La valeur de registre HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\nwiz non trouvée. La valeur de registre HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\TkBellExe non trouvée. La valeur de registre HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Tvs non trouvée. ========== FILES ========== C:\Program Files\Crawler\Toolbar\WSGData\domains dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\WSGData dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\Update dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\TBR5LanguageAct dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\STWSGLanguageAct dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\Languages dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\Cache\COMMON dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar\Cache dossier déplacé avec succès. C:\Program Files\Crawler\Toolbar dossier déplacé avec succès. C:\Program Files\Crawler\Download dossier déplacé avec succès. C:\Program Files\Crawler dossier déplacé avec succès. C:\Users\user\AppData\Roaming\iWin\aJewelQuestSolitaire dossier déplacé avec succès. C:\Users\user\AppData\Roaming\iWin dossier déplacé avec succès. C:\Users\user\Desktop\cacaoweb.exe déplacé avec succès. ADS C:\ProgramData\TEMP:4CF61E54 supprimé avec succès. ADS C:\ProgramData\TEMP:9E22BBE8 supprimé avec succès. ADS C:\ProgramData\TEMP:2B99FE60 supprimé avec succès. ADS C:\ProgramData\TEMP:9F683177 supprimé avec succès. ADS C:\ProgramData\TEMP:793F316E supprimé avec succès. ADS C:\ProgramData\TEMP:FC420CE6 supprimé avec succès. ADS C:\ProgramData\TEMP:193426B4 supprimé avec succès. ADS C:\ProgramData\TEMP:E36F5B57 supprimé avec succès. ADS C:\ProgramData\TEMP:580E04D8 supprimé avec succès. ADS C:\ProgramData\TEMP:861A898F supprimé avec succès. ADS C:\ProgramData\TEMP:C95B63DA supprimé avec succès. ADS C:\ProgramData\TEMP:B623B5B8 supprimé avec succès. ADS C:\ProgramData\TEMP:4F636E25 supprimé avec succès. ADS C:\ProgramData\TEMP:131C0EE9 supprimé avec succès. ADS C:\ProgramData\TEMP:8AB6C1D7 supprimé avec succès. ADS C:\ProgramData\TEMP:FEBEC560 supprimé avec succès. ADS C:\ProgramData\TEMP:8173A019 supprimé avec succès. ========== COMMANDS ==========  [EMPTYTEMP]  Utilisateur : Tous les Utilisateurs  Utilisateur : Par défaut ->Dossier Temp vidé : 0 octets ->Dossier des fichiers Internet temporaires vidé : 0 octets  Utilisateur : Utilisateur par défaut ->Dossier Temp vidé : 0 octets ->Dossier des fichiers Internet temporaires vidé : 0 octets  Utilisateur : Invité ->Dossier Temp vidé : 0 octets ->Dossier des fichiers Internet temporaires vidé : 67 octets  Utilisateur : Mcx1 ->Dossier Temp vidé : 0 octets ->Dossier des fichiers Internet temporaires vidé : 67 octets  Utilisateur : Public ->Dossier Temp vidé : 0 octets  Utilisateur : user ->Dossier Temp vidé : 873970 octets ->Dossier des fichiers Internet temporaires vidé : 624962 octets ->Cache FireFox vidé : 80205306 octets ->Cache Flash vidé : 9317 octets  Fichiers .tmp supprimés dans %systemdrive% : 0 octets Fichiers .tmp supprimés dans %systemroot% : 0 octets Fichiers .tmp supprimés dans %systemroot%\System32 : 0 octets Fichiers .tmp supprimés dans %systemroot%\System32\drivers : 0 octets Dossier Temp de Windows vidé : 0 octets Dossier des fichiers Internet temporaires vide dans %systemroot%\system32\config\systemprofile\Local Settings : 0 octets Corbeille vidée : 0 octets  Total des fichiers nettoyés = 78,00 Mo   OTL par OldTimer - Version 3.2.14.1 journal créé le 09282010_181043  Fichiers\Dossiers déplacés au redémarrage...  Entrées de registre supprimées au redémarrage...

gen-hackman · Answer

Print these instructions as you will need to close all windows and applications during installation and scanning.    &#9654 Download here:  Malwarebytes  or:  Malwarebytes  &#9654 Install it (make sure to choose "French"; do not change the installation settings) and update it.  (NB: If you receive an error message indicating that you are missing "COMCTL32.OCX" during installation, download it here: COMCTL32.OCX  &#9654 Check the Tutorial to familiarize yourself with the program:   (that said, it is very simple to use).  Restart Malwarebytes by carefully following these instructions:  ! Disconnect and close all running applications!  &#9654 Launch Malwarebytes.  Perform a "Complete" scan.  &#9654 Let the program work (and do not do anything else with the PC during the scan). &#9654 At the end, click on "results." &#9654 Ensure that all infected items are validated, then click on "delete."  &#9654 Note: if you need to restart your PC to complete the cleaning, do so!   &#9654 Post the saved report after deleting the infected items (in the "report/log" tab of Malwarebytes, the most recent one)   -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1084;@&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

ok cool I already have them and I know them so it will be easier than the rest  and after that will it be finished?

gen-hackman · Answer

update it before the scan anyway :) -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

It's done, there is no more infection. Thank you very much for the time you devoted to me and (I hope it won't be the case) if I have a problem, I will keep you informed. I will still do an analysis in safe mode just in case. Good evening and thanks again.

gen-hackman · Answer

Can I have the report for security? -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

Here it is   Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org  Database version: 4712  Windows 6.0.6001 Service Pack 1 Internet Explorer 8.0.6001.18943  09/28/2010 11:29:53 PM mbam-log-2010-09-28 (23-29-53).txt  Scan type: Full scan (C:\|D:\|) Item(s) scanned: 323425 Elapsed time: 51 minute(s), 37 second(s)  Infected memory process(es): 0 Infected memory module(s): 0 Infected Registry key(s): 0 Infected Registry value(s): 0 Infected Registry data item(s): 0 Infected folder(s): 0 Infected file(s): 0  Infected memory process(es): (No harmful items detected)  Infected memory module(s): (No harmful items detected)  Infected Registry key(s): (No harmful items detected)  Infected Registry value(s): (No harmful items detected)  Infected Registry data item(s): (No harmful items detected)  Infected folder(s): (No harmful items detected)  Infected file(s): (No harmful items detected)

gen-hackman · Answer

install the service pack 2 -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1084;@&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

I'm downloading it, is the installation easy?

gen-hackman · Answer

Once on it, right-click "Run as administrator" -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

I can't do it, it starts the installation and tells me error_sharing_violation(0x80070020)   I've even tried in safe mode without success.

gen-hackman · Answer

Is this Windows okay? -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

Good question, I will try to download it elsewhere.

gen-hackman · Answer

I wasn't talking about the Windows installed on your PC -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

Yes, I bought my computer a year ago at Leclerc so I think it's good I've never had any problems until now.

gen-hackman · Answer

I don't understand why the installation is not happening....  Try checking with the Windows forum but in the meantime:  To clean the tools used and better secure your PC --------------------------------------------------------------  I invite you to follow this tutorial for the final steps  It includes  &#9830 cleaning after disinfection &#9830 updates to patch security vulnerabilities in important software that haven't been updated  &#9654 and finally some tips to ensure that protection is more effective    &#9654 Download DelFix to your desktop.  &#9654 Run it, type 2 then confirm by pressing [Enter]  Wait during the scan until the report opens.  &#9654 Copy/Paste the content of the report into your next response.  Note: The report can also be found under C:\DelFixSearch  ___________________________________________________  &#9654 Download ATF Cleaner by Atribune  Double-click (right-click "run as administrator" for Vista) ATF-Cleaner.exe to start the program. In the Main tab, choose: Select All Click the Empty Selected button If you are using the Firefox browser: Click on Firefox at the top and choose: Select All Click the Empty Selected button NOTE: If you want to keep your saved passwords, click No at the prompt. If you are using the Opera browser: Click on Opera at the top and choose: Select All Click the Empty Selected button NOTE: If you want to keep your saved passwords, click No at the prompt. Click Exit from the main menu to close the program. For technical support, double-click the email address located at the bottom of each menu. __________________________________________________  &#9654 You can keep ATF for further advanced cleanings __________________________________________________  &#9654 Download and install CCleaner (Do not install the Yahoo Toolbar):  * Launch it (right-click "run as administrator" for Vista) Go to Options then Advanced and uncheck the box to Clear only files etc.... * Go to Cleaner, select Analyze. Once finished, start the cleaning. * Then, choose Registry, then Search for issues. Once finished, repair all issues as many times as it finds them during the scan * Ensure that in the options the setting is for Windows startup and configured for "secure deletion" 35 passes (Guttman) __________________________________________________  Attention: Do not touch the PC while it is working!  &#9654 Cleaning and Defragmentation of your Drives  *Cleaning:  Right-click on "My Computer" (Computer for Vista) ==> "Open" ==> right-click on drive C ==> Properties ==> "General" tab Click the "Disk Cleanup" button, OK Do this for each of your drives ________________________________________________  *Error checking:  Right-click on "My Computer" (Computer for Vista) ==> "Open" ==> right-click on drive C ==> Properties ==> "Tools" tab "Check Now", a box opens, check the boxes: -automatically fix file system errors... -scan for and attempt recovery of bad sectors...  ---> Start, OK Note: If it tells you to restart your PC to do this, restart and let it do its job; it takes some time, that’s normal Do this for each of your drives ________________________________________________  Then still in the same tab you choose:  *Defragmentation: "Defragment now", OK A box opens, select the drive to defragment, and click "Analyze", then after the analysis, "Defragment". OK Do this for each of your drives _______________________________________________  Note: If you have a utility to defragment, use it instead  To do this Defraggler is suggested _________________________________________________  &#9654 Can you check your Java Console? :  and install the new version if needed (in this case uninstall the old version first).  Here is how to uninstall:  JavaRa  Unzip the file on the Desktop (Right-click > Extract All). * Double-click (right-click "run as administrator" for Vista) the JavaRa directory. * Then double-click on the JavaRa.exe file (the exe may not show). * Choose French then click on Select. * Click on Check for updates. * Select Update via jucheck.exe then click on Search. * Allow the process to connect if it asks, click on Install and follow the installation instructions that take a few minutes. * Installation is finished, return to the JavaRa screen and click on Remove old versions. * Click Yes to confirm. Let it work and then click OK, then a second time OK. * A report will open. Paste it in your next response. * Close the application.  Note: The report can also be found under C:\ named JavaRa.log. _________________________________________________  &#9654 Update Adobe Reader if you haven't (uninstall the previous version first) __________________________________________________  &#9654 I recommend that if you do not have it, to better secure your PC, to install a firewall:  Online Armor or KERIO or JETICO or ZONE ALARM (only install the free firewall) or COMODO  https://www.commentcamarche.net/telecharger/securite/16545-online-armor-personal-firewall/ https://www.01net.com/telecharger/windows/Securite/firewall/fiches/39911.html https://forum.pcastuces.com/sujet.asp?f=25&s=35606 https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html https://manuelsdaide.com/contact/ http://www.open-files.com/forum/index.php?showtopic=29277 https://www.commentcamarche.net/telecharger/securite/24863-zonealarm/ ___________________________________________________  &#9654 You can also empty your recycle bin, although CCleaner does this automatically _____________________________________________________  &#9654 If we used MalwareByte's Anti-Malware, empty its quarantine:  * Launch the program and then click on . * Select all items and then click on . * Exit the program. ______________________________________________________  &#9654 If you have installed Antivir:  Configuration ________________________________________________________  &#9654 Same for your antivirus: empty its quarantine if you haven't done so already ______________________________________________________  &#9654 Disable and re-enable system restore, for that: follow the instructions in the link:  Link XP  Link Vista  &#9654 As soon as done, recreate a "healthy" restore point to prevent possible future issues  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  Some tips and recommendations for the future:  &#9654 Run MalwareByte's Anti-Malware occasionally (once a week, depending on how you use your PC). &#9654 Also use your other protection software (antivirus scans, antispyware...). Remember to update them before using them. * Also consider defragmenting your hard drives from time to time (keep enough space on C:\ (1/3 free to be comfortable)) _____________  &#9654 To properly protect your PC: [1 antivirus] + [1 firewall] + [1 good antispyware] + [recent updates for Windows and protection software] + [use Firefox - or others - (Internet Explorer has security vulnerabilities that take a long time to fix, but it is essential to keep it for Windows updates and Windows Live Messenger)]  I recommend installing this extension for Firefox to secure your browsing: WOT I recommend installing this extension for Internet Explorer to secure your browsing: WOT  PS: In fact, the best protection is yourself: what you do with your PC: where you browse, download... etc.... Viruses exploit vulnerabilities in your PC to infect a system  &#9654 If you wish to uninstall one antivirus in favor of another, here are some links:  Uninstall Avast Uninstall BitDefender Uninstall Norton Uninstall Kaspersky Uninstall AVG  or all in one:  Uninstall Antivirus, Firewall, Antispyware _____________  &#9654 If you have Vista, remember to re-enable User Account Control (UAC) ___________  &#9654 If you have Spybot S&D and we have disabled the "Tea-timer", you can reactivate it ___________  &#9654 If we displayed hidden files, don't forget to set them back to "hidden" attribute  &#9654 Click on the Start menu / Control Panel / Folder Options / then in the View tab * - Uncheck Show hidden files and folders * - Check Hide extensions for known file types * - Check Hide protected operating system files (recommended)  &#9654 Click Apply, then OK. ____________  That's it,  Happy reading, see you soon, once all is done,  you can mark the topic as resolved  Good luck and most importantly, be careful and have a good surf :)   -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;@&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

I looked on the site, they say it's an antivirus or antispyware that is blocking, but I had everything turned off and the report   DelFix report v4.2 Updated on 09/28/10 at 9:45 PM by Xplode Run on 09/29/2010 at 1:50 and 42 second(s) User: user - PC-DE-CANAIS Operating System: Windows Vista (TM) Home Premium - 32 bits Internet Explorer: v8.0.6001.18943 Boot mode: Normal Option [Removal]  ~~~~~~ C:\ ~~~~~~  Folder Deleted: C:\Qoobox Folder Deleted: C:\_OTL  ~~~~~~ C:\Windows ~~~~~~  File Deleted: C:\Windows\grep.exe File Deleted: C:\Windows\PEV.exe File Deleted: C:\Windows\NIRCMD.exe File Deleted: C:\Windows\MBR.exe File Deleted: C:\Windows\sed.exe File Deleted: C:\Windows\SWREG.exe File Deleted: C:\Windows\SWSC.exe File Deleted: C:\Windows\SWXCACLS.exe File Deleted: C:\Windows\zip.exe  ~~~~~~ C:\Windows\System32 ~~~~~~   ~~~~~~ C:\Program Files ~~~~~~  Folder Deleted: C:\Program Files\List_Kill'em  ~~~~~~ C:\Users\user ~~~~~~   ~~~~~~ C:\Users\user\Desktop ~~~~~~   ~~~~~~ C:\Users\Public\Desktop ~~~~~~   ~~~~~~ C:\ProgramData\Microsoft\Windows\Start Menu\Programs ~~~~~~  Folder Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\List_Kill'em  ~~~~~~ C:\Users\user\Downloads ~~~~~~  File Deleted: C:\Users\user\Downloads\OTL.exe  ~~~~~~ Registry ~~~~~~  Key Deleted: HKLM\Software\swearware Key Deleted: HKLM\Software\OldTimer Tools Key Deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E88BA4E8-6B36-4D39-9499-C10B439819E1}_is1  ########## EOF - "C:\DelFixSuppr.txt" - [1561 bytes] ##########

gen-hackman · Answer

:) -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

canais31 · Answer

Well, I think we're good thanks a lot see you soon, yes, why not, but not for the same reasons, it would be cool lol

gen-hackman · Answer

ok nice to meet you :) -- &#164;&#164;&#164;&#164;&#164;&#164;&#9830;G3&#1080;-&#1085;@¢&#1082;&#1080;&#8482;&#169;&#174;&#9830;&#164;&#164;&#164;&#164;&#164;&#164

System32\drivers damaged or missing

50 answers

Freelancers and devs facing ai in 2026

Word icon on taskbar replaced by a blank page

Quotes and electronic invoicing

User folder disappeared in c:

Whatsapp photos disappeared despite delete box not checked

Yahoo mail inbox blocked

My computer stays connected for very little time

Firefox 152 and cookies

Unable to connect with my pc

Unable to enter your new visa card on facebook