Recommend
3 
 Thumb up
 Hide
13 Posts

BoardGameGeek» Forums » Everything Else » Chit Chat

Subject: An appeal to Geek wisdom: Malware/Adware rss

Your Tags: Add tags
Popular Tags: [View All]
Goo
United States
Yorba Linda
California
flag msg tools
badge
I have become my own island state. A ravaged, war-torn land where nothing grows and the horizons are bleak.
Avatar
mb
My 5 year old has taken to "exploring" on the computer. I am sure that this is why I now have a malware that I cannot get rid of. I have tried Spybot, Webroot, and Avast! antivirus--to no avail.

The bug redirects my links to ad sites. If I search in Google and click on the links that come up, there is a 25% chance I will be redirected to another site and a 25% chance Firefox will crash during the redirect. Also when I right click on urls to open in a new tab, there are the same chances.

The other thing is that I keep getting the Windows notification balloon.wav "popping" sound randomly and constantly, but I am being "notified" of nothing.

Unless I can find a solution for both of these, I am going to do a nuclear option format and start from scratch. I hate to do it, but I did invest in a portable hard drive recently, so why not use it. Unfortunatly, I only backed up documents/pictures/music and stuff like that. What I wouldn't give for a version of my registry and program files from last month (and no, go back, does not work).

Any advice?
 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Thomas Eastside, Esq.
United States
Richmond Hts.
Ohio
flag msg tools
badge
Avatar
mbmbmbmbmb
Try Malwarebytes Anti-Malware. It helped me kick a particularly insidious fake antivirus program that functioned similarly to what you are experiencing.
2 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Hopefully becoming a restaurant owner soon! Peter Melanson
Canada
New Brunswick
flag msg tools
badge
Avatar
mbmbmbmbmb
Malwarbytes is good.

I'd need more information though. Another nice little utility is called "HijackTHIS!" and what it does is it scans the registry for stuff that starts up when windows boots. If you can run HiJackTHIS and post the report here, it can help us figure out the particular bug you have and someone could safely google how to get rid of it for you.

Some nice nasty malware though like to run services to ensure they restart after you endtask the nasties.

My advice would be to install Malwarebytes, then reboot in safemode so that only minimal stuff is loaded. Then run Malwarebytes and let the program find and clean it out. Then use HijackTHIS to make sure it's all out.

Good luck.
4 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Jorge Montero
United States
St Louis
Missouri
flag msg tools
badge
I'll take Manhattan in a garbage bag. With Latin written on it that says "It's hard to give a shit these days"
Avatar
mbmbmbmbmb
HijackThis is definitely the weapon of choice for the ugliest malware. The problem is that you REALLY have to know what you are doing when using it. It's a mighty weapon that can not only get rid of crap that stuck itself on your boot sequence, but also remove core services that would render Windows unusable.

There's forums where you can post the results of a HijackThis scan, and will tell you exactly what to remove. With your apparent level of expertise, I'd make sure to post in one of them if you have to resort to using such a dangerous weapon.
3 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Marc B.
United States
Palm Bay
Florida
flag msg tools
badge
Avatar
mbmbmbmbmb
Dreadnaut wrote:
Try Malwarebytes Anti-Malware. It helped me kick a particularly insidious fake antivirus program that functioned similarly to what you are experiencing.


Ah, you must be speaking of "Antivirus 360"... I just spent 3 days cleaning a friends machine whose daughter installed kazaa with the most infected installer I have ever seen. There were over 18 trojans and malwares embedded in the installer exe. Malwarebytes was the only way I could get that stupid Antivirus 360 killed.
2 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
On Monday mornings, I'm dedicated to the proposition that All Men are created jerks.
United States
Stratford
Connecticut
flag msg tools
badge
Avatar
mbmbmbmbmb
My heart goes out to you. I just dealt with that one.
It disabled any virus or malware program I had or could install. It stopped me from getting on the internet. I finally wiped my hard drive and started from scratch. Luckily i had a back up of all my files.

A word of warning: if you have any other drives, internal or external, you'll have to deal with them, too, otherwise they'll reinfect you the minute you explore them.

What a friggin' nightmare.
1 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Goo
United States
Yorba Linda
California
flag msg tools
badge
I have become my own island state. A ravaged, war-torn land where nothing grows and the horizons are bleak.
Avatar
mb
I ran Malwarebytes last night and it found a few things. I ran it again in SafeMode just now and it didn't find anything.

I've seen the forums where people post their HijackThis logs. Anyone know of a trustworthy forum to try this?

Here is my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:14:09 PM, on 4/5/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ngvpnmgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\Family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbc...://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbc...://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [VAIO Recovery] "C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe"
O4 - HKLM\..\Run: [BJCFD] "C:\Program Files\BroadJump\Client Foundation\CFD.exe"
O4 - HKLM\..\Run: [DACSMiniApp] "C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Search Protection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {CC32D4D8-2A0B-4CEB-B105-C9B968379105} (CGameManagerCtrl Object) - https://disney.go.com/games/downloads/gamemanager/DIGGameMan...
O20 - AppInit_DLLs: karna.dat
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Unknown owner - C:\Program Files\Norton AntiVirus\navapsvc.exe (file missing)
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe
O23 - Service: Canon PIXMA iP6000D Memory Card Manager (PDUiP6000DMemCrdMgr) - CANON INC. - C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
O23 - Service: ScriptBlocking Service (SBService) - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe (file missing)
O23 - Service: SonicStageMonitoring - Sony Corporation - C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
O23 - Service: Sony TVTA Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE
O24 - Desktop Component 0: (no name) - http://media.ign.com/ign/images/frame_bg.gif
O24 - Desktop Component 1: (no name) - http://www.gamerevolution.com/oldsite/newimages/bg-wide-code...

--
End of file - 12086 bytes


 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Andy M
United Kingdom
Norwich
Norfolk
flag msg tools
Avatar
mbmbmbmbmb
Did it flag any of that as dubious? It looks pretty clean to me.

Malwarebytes + Superantispyware = kills most of this stuff
1 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Quinn Munnerlyn
United States
Carrollton
Texas
flag msg tools
Location: 3' from my actual position.
Avatar
mbmbmbmbmb
moss_icon wrote:
Did it flag any of that as dubious? It looks pretty clean to me.

Malwarebytes + Superantispyware = kills most of this stuff


I'll second this. These two compliment each other very well.

Sometimes after cleaning some of the nastier ones they'll still leave behind some bits that have changed some things on your system. It wouldn't hurt also to use system restore to revert to a state before you got the malware in the first place.
1 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Goo
United States
Yorba Linda
California
flag msg tools
badge
I have become my own island state. A ravaged, war-torn land where nothing grows and the horizons are bleak.
Avatar
mb
moss_icon wrote:
Did it flag any of that as dubious? It looks pretty clean to me.

Malwarebytes + Superantispyware = kills most of this stuff


It did not find anything fishy/dubious.

is Superantisyware something specific, or do you just mean spybot or webroot or something like that?

I am definitely still getting redirects from Google searches and right clicking on urls and I am still getting that balloon.wav/Windows Notifcation sound randomly.
 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Goo
United States
Yorba Linda
California
flag msg tools
badge
I have become my own island state. A ravaged, war-torn land where nothing grows and the horizons are bleak.
Avatar
mb
Lothartvni wrote:
Sometimes after cleaning some of the nastier ones they'll still leave behind some bits that have changed some things on your system. It wouldn't hurt also to use system restore to revert to a state before you got the malware in the first place.


I tried to do a system restore but it would not do it. Maybe because I never did a set-point. The calender has lots of dates in bold that it says are restore set-points, but it will not go back to any of them. It just says that no changes were made.
 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
M C
Canada
Lethbridge
Alberta
flag msg tools
badge
Game group needed...
Avatar
mbmbmbmbmb
Malware has become so insidious and tenacious that I've found a format reinstall is the path of least resistance. Otherwise you have to use multiple tools to clean things and I still have a nagging sense of unease after.
1 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Hopefully becoming a restaurant owner soon! Peter Melanson
Canada
New Brunswick
flag msg tools
badge
Avatar
mbmbmbmbmb
Gelatinous Goo wrote:
moss_icon wrote:
Did it flag any of that as dubious? It looks pretty clean to me.

Malwarebytes + Superantispyware = kills most of this stuff


It did not find anything fishy/dubious.

is Superantisyware something specific, or do you just mean spybot or webroot or something like that?

I am definitely still getting redirects from Google searches and right clicking on urls and I am still getting that balloon.wav/Windows Notifcation sound randomly.


I looked over the file and looked up anything I didn't recognize. I didn't find any hits.

Unfortunately it looks like it's running out of the services area of Vista/XP. That's a bugger to get rid of.

If running it in safe mode doesn't get rid of it, then you will have to do the big reformat.

Make sure you note the day this happened so when some lawyer gets around to a class action against these clowns you can get some recopense.
1 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Front Page | Welcome | Contact | Privacy Policy | Terms of Service | Advertise | Support BGG | Feeds RSS
Geekdo, BoardGameGeek, the Geekdo logo, and the BoardGameGeek logo are trademarks of BoardGameGeek, LLC.