Jump to content


Photo

Over 20 Different Uknown Items in List - Help!


  • Please log in to reply
4 replies to this topic

#1 nrg510

nrg510

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 24 June 2004 - 06:32 PM

Below is my Hijack This log. I've encountered some items that will not go away and are affecting other programs on my computer. I've run Adaware, Spybot, Spysweeper, and AOL Spy software to no avail. Please help!

Logfile of HijackThis v1.97.7
Scan saved at 7:31:04 PM, on 6/24/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\hpoopm07.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Geier\My Documents\Hijack\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ornlfcu.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R3 - Default URLSearchHook is missing
O1 - Hosts: 65.61.161.115 creditreports #HCHNGX
O1 - Hosts: 65.61.161.115 creditreport #HCHNGX
O1 - Hosts: 65.61.161.115 mp3 #HCHNGX
O1 - Hosts: 65.61.161.115 games #HCHNGX
O1 - Hosts: 65.61.161.115 music #HCHNGX
O1 - Hosts: 65.61.161.115 wallpaper #HCHNGX
O1 - Hosts: 65.61.161.115 jobs #HCHNGX
O1 - Hosts: 65.61.161.115 music #HCHNGX
O1 - Hosts: 65.61.161.115 chat #HCHNGX
O1 - Hosts: 65.61.161.115 lyrics #HCHNGX
O1 - Hosts: 65.61.161.115 dvd #HCHNGX
O1 - Hosts: 65.61.161.115 cheats #HCHNGX
O1 - Hosts: 65.61.161.115 free #HCHNGX
O1 - Hosts: 65.61.161.115 maps #HCHNGX
O1 - Hosts: 65.61.161.115 freeware #HCHNGX
O1 - Hosts: 65.61.161.115 cars #HCHNGX
O1 - Hosts: 65.61.161.115 pictures #HCHNGX
O1 - Hosts: 65.61.161.115 dictionary #HCHNGX
O1 - Hosts: 65.61.161.115 weather #HCHNGX
O1 - Hosts: 65.61.161.115 software #HCHNGX
O1 - Hosts: 65.61.161.115 download #HCHNGX
O1 - Hosts: 65.61.161.115 warez #HCHNGX
O1 - Hosts: 65.61.161.115 jokes #HCHNGX
O1 - Hosts: 65.61.161.115 cracks #HCHNGX
O1 - Hosts: 65.61.161.115 screensavers #HCHNGX
O1 - Hosts: 65.61.161.115 hentai #HCHNGX
O1 - Hosts: 65.61.161.115 travel #HCHNGX
O1 - Hosts: 65.61.161.115 hotels #HCHNGX
O1 - Hosts: 65.61.161.115 airplanes #HCHNGX
O1 - Hosts: 65.61.161.115 airports #HCHNGX
O1 - Hosts: 65.61.161.115 sms #HCHNGX
O1 - Hosts: 65.61.161.115 freesms #HCHNGX
O1 - Hosts: 65.61.161.115 computer #HCHNGX
O1 - Hosts: 65.61.161.115 nero #HCHNGX
O1 - Hosts: 65.61.161.115 morpheus #HCHNGX
O1 - Hosts: 65.61.161.115 money #HCHNGX
O1 - Hosts: 65.61.161.115 cash #HCHNGX
O1 - Hosts: 65.61.161.115 sex #HCHNGX
O1 - Hosts: 65.61.161.115 fun #HCHNGX
O1 - Hosts: 65.61.161.115 loans #HCHNGX
O1 - Hosts: 65.61.161.115 casino #HCHNGX
O1 - Hosts: 65.61.161.115 crossword #HCHNGX
O1 - Hosts: 65.61.161.115 spam #HCHNGX
O1 - Hosts: 65.61.161.115 videos #HCHNGX
O1 - Hosts: 65.61.161.115 credit #HCHNGX
O1 - Hosts: 65.61.161.115 pharmacy #HCHNGX
O1 - Hosts: 65.61.161.115 battery #HCHNGX
O1 - Hosts: 65.61.161.115 mobile #HCHNGX
O1 - Hosts: 65.61.161.115 cellphone #HCHNGX
O1 - Hosts: 65.61.161.115 cell #HCHNGX
O1 - Hosts: 65.61.161.115 telephone #HCHNGX
O1 - Hosts: 65.61.161.115 logos #HCHNGX
O1 - Hosts: 65.61.161.115 ringtones #HCHNGX
O1 - Hosts: 65.61.161.115 gsm #HCHNGX
O1 - Hosts: 65.61.161.115 shopping #HCHNGX
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Free Bore Peak - {32F7FC5D-A7ED-5725-B104-582167E6E621} - C:\PROGRA~1\ELSEBI~1\Eggs Heart.dll (file missing)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HPAIO_PrintFolderMgr] C:\WINDOWS\System32\spool\DRIVERS\W32X86\hpoopm07.exe
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\RunServices: [MOSearch] C:\PROGRA~1\COMMON~1\System\MOSearch\Bin\mosearch.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: PowerReg Scheduler.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar (HKLM)
O9 - Extra 'Tools' menuitem: AOL Toolbar (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Dell Home (HKCU)
O16 - DPF: ppctlcab - http://www.pestscan....er/ppctlcab.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com...ex/qtplugin.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan....r/axscanner.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.micr...922/wmv9VCM.CAB
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.napster.c...lient/setup.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...7695.8266319444
O16 - DPF: {A82C3A33-5C0E-466C-B020-71585433A7E4} (PhxStudent.OeSetup15) - https://mycampus.pho...hxStudent15.CAB
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://www.wildtange...twdinstFull.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.s...ta/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.s.../ActiveData.cab

#2 nrg510

nrg510

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 24 June 2004 - 08:15 PM

Ok, here's an update to my situation. While I haven't heard from anyone yet, I realize that there are a lot of people needing help, so I'm being very patient and trying everything I can on my end.

I'm currently running a Trend Micro and Panda scan. Both are at about 50% with no infections found. However, KEYWORD = HOWEVER, I did run ANOTHER AOL Spyware scan and found the the following. I've deleted these before, but this time I blocked them. Here is what it found.

IBIS Toolbar - Been found before and deleted.
Brillant Digital - Have not seen that one before. Was classified as a Trojan???
Cydoor - Also new
Booked Space - Have seen this before
Virtual Bouncer - It's Back! This seems to be the one that keeps coming back each time.

I've also noticed that one of the browser windows with ad that was poping up actually had a place to "stop receiving this ad". Guess what! It worked, now I am only getting two others. One fails to load and can be stopped with the popup blocker on the AOL toolbar, the other is from a company, PCSECURITYSHIELD. Looks legit, but its funny they promote an adware/spyware software, yet they are contributing to the cause.

There is definitely some issues on my system. Sad thing is that I've not had ANY for years up until yesterday. Somehow I miss clicked on a popup add and then all I knew was I was taken over. The first and most prodominant to be installed was something called "Earn." It placed itself into the programs list and continued to wreck havic on me.

I need some help PLEASE!

Note: Since I've blocked the most recent AOL scan, I've not had any known problem, but having done this about 50 times today, as soon as I either log off (XP PRO) or shutdown/turn on, everything comes back. UNLESS!!!! I disconnect my cable modem. If I turn off the modem, I have no problems. To me I think it is some type of trojan, because it is only re-installing after it connects with the host, I might be wrong, but that's why I'm here! Please help!

Nick.

#3 nrg510

nrg510

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 24 June 2004 - 08:42 PM

A question for anybody and everybody. I currently only use the XP Pro built in firewall and my router as a line of defense. After experiencing what I am still going through, I am considering another line of defense. My first choice was Norton Internet Security, but I'm opening this up to everyone's input, so what would be a good software?

How much would I benefit from running Norton IS or a similar program?

Nick.

#4 nrg510

nrg510

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 24 June 2004 - 09:10 PM

Another Update... The Trend Micro and Panda Scans are complete with nothing found. 204155 files scanned and nothing detected. I have yet to hear from anyone or get any help, so I'm going to wait just a little longer. I'm still receiving the unusual ads. The only thing I haven't tried is the CWS Shredder. I'm going to d/l it now and give it a shot. I also tried a Look2me utility because I remembered seeing that in the title of one of the ads.

At some point I am going to have used every utility available to me to remove this crap.

Still waiting on help...,

Nick.

#5 nrg510

nrg510

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 24 June 2004 - 09:39 PM

Is there anyone out there that can help me??? Please??? I'm still getting ads!!! I've done everything I can think of. I've left detailed information in the posts I have made including a Hijack This log... I'm going to include an updated one in this post then I'm off for about an hour or so. Someone PLEASE HELP ME!!!!!!!!

The log below is the most recent and was conducted after another reboot. After running the Trend Micro and Panda, I booted into safemode and ran all of the Spyware programs again and found the same items again. PLEASE HELP!!!!

Logfile of HijackThis v1.97.7
Scan saved at 10:38:29 PM, on 6/24/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\hpoopm07.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Geier\My Documents\Hijack\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ornlfcu.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R3 - Default URLSearchHook is missing
O1 - Hosts: 65.61.161.115 creditreports #HCHNGX
O1 - Hosts: 65.61.161.115 creditreport #HCHNGX
O1 - Hosts: 65.61.161.115 mp3 #HCHNGX
O1 - Hosts: 65.61.161.115 games #HCHNGX
O1 - Hosts: 65.61.161.115 music #HCHNGX
O1 - Hosts: 65.61.161.115 wallpaper #HCHNGX
O1 - Hosts: 65.61.161.115 jobs #HCHNGX
O1 - Hosts: 65.61.161.115 music #HCHNGX
O1 - Hosts: 65.61.161.115 chat #HCHNGX
O1 - Hosts: 65.61.161.115 lyrics #HCHNGX
O1 - Hosts: 65.61.161.115 dvd #HCHNGX
O1 - Hosts: 65.61.161.115 cheats #HCHNGX
O1 - Hosts: 65.61.161.115 free #HCHNGX
O1 - Hosts: 65.61.161.115 maps #HCHNGX
O1 - Hosts: 65.61.161.115 freeware #HCHNGX
O1 - Hosts: 65.61.161.115 cars #HCHNGX
O1 - Hosts: 65.61.161.115 pictures #HCHNGX
O1 - Hosts: 65.61.161.115 dictionary #HCHNGX
O1 - Hosts: 65.61.161.115 weather #HCHNGX
O1 - Hosts: 65.61.161.115 software #HCHNGX
O1 - Hosts: 65.61.161.115 download #HCHNGX
O1 - Hosts: 65.61.161.115 warez #HCHNGX
O1 - Hosts: 65.61.161.115 jokes #HCHNGX
O1 - Hosts: 65.61.161.115 cracks #HCHNGX
O1 - Hosts: 65.61.161.115 screensavers #HCHNGX
O1 - Hosts: 65.61.161.115 hentai #HCHNGX
O1 - Hosts: 65.61.161.115 travel #HCHNGX
O1 - Hosts: 65.61.161.115 hotels #HCHNGX
O1 - Hosts: 65.61.161.115 airplanes #HCHNGX
O1 - Hosts: 65.61.161.115 airports #HCHNGX
O1 - Hosts: 65.61.161.115 sms #HCHNGX
O1 - Hosts: 65.61.161.115 freesms #HCHNGX
O1 - Hosts: 65.61.161.115 computer #HCHNGX
O1 - Hosts: 65.61.161.115 nero #HCHNGX
O1 - Hosts: 65.61.161.115 morpheus #HCHNGX
O1 - Hosts: 65.61.161.115 money #HCHNGX
O1 - Hosts: 65.61.161.115 cash #HCHNGX
O1 - Hosts: 65.61.161.115 sex #HCHNGX
O1 - Hosts: 65.61.161.115 fun #HCHNGX
O1 - Hosts: 65.61.161.115 loans #HCHNGX
O1 - Hosts: 65.61.161.115 casino #HCHNGX
O1 - Hosts: 65.61.161.115 crossword #HCHNGX
O1 - Hosts: 65.61.161.115 spam #HCHNGX
O1 - Hosts: 65.61.161.115 videos #HCHNGX
O1 - Hosts: 65.61.161.115 credit #HCHNGX
O1 - Hosts: 65.61.161.115 pharmacy #HCHNGX
O1 - Hosts: 65.61.161.115 battery #HCHNGX
O1 - Hosts: 65.61.161.115 mobile #HCHNGX
O1 - Hosts: 65.61.161.115 cellphone #HCHNGX
O1 - Hosts: 65.61.161.115 cell #HCHNGX
O1 - Hosts: 65.61.161.115 telephone #HCHNGX
O1 - Hosts: 65.61.161.115 logos #HCHNGX
O1 - Hosts: 65.61.161.115 ringtones #HCHNGX
O1 - Hosts: 65.61.161.115 gsm #HCHNGX
O1 - Hosts: 65.61.161.115 shopping #HCHNGX
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Free Bore Peak - {32F7FC5D-A7ED-5725-B104-582167E6E621} - C:\PROGRA~1\ELSEBI~1\Eggs Heart.dll (file missing)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HPAIO_PrintFolderMgr] C:\WINDOWS\System32\spool\DRIVERS\W32X86\hpoopm07.exe
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\RunServices: [MOSearch] C:\PROGRA~1\COMMON~1\System\MOSearch\Bin\mosearch.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: PowerReg Scheduler.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar (HKLM)
O9 - Extra 'Tools' menuitem: AOL Toolbar (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Dell Home (HKCU)
O16 - DPF: ppctlcab - http://www.pestscan....er/ppctlcab.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com...ex/qtplugin.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan....r/axscanner.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.micr...922/wmv9VCM.CAB
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.napster.c...lient/setup.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...7695.8266319444
O16 - DPF: {A82C3A33-5C0E-466C-B020-71585433A7E4} (PhxStudent.OeSetup15) - https://mycampus.pho...hxStudent15.CAB
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://www.wildtange...twdinstFull.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.s...ta/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.s.../ActiveData.cab




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button