rookie147

Volunteer Security Advisor
  • Content Count

    76
  • Joined

  • Last visited

Everything posted by rookie147

  1. Hey Nyn, Once again this is about as far as my knowledge of these subjects go, so I think it would be best if you posted in one of the earlier linked forums, and an expert in this field could help you. Sorry, but I think this is the way you'll recieve the best help, Charles
  2. Hey again, Go to the following link, and follow the instructions for installing SP2: http://www.microsoft.com/windowsxp/using/s...installsp2.mspx After you've done all of the above: Please right-click your My Computer icon, and select Properties. Go to the General tab. Under the "System" heading, look for which service pack is installed. Let me know what it says in your next post. Thanks, Charles
  3. Hey there, sorry for the delay in getting back to you. Try downloading Service Pack 2 manually from here: http://www.microsoft.com/windowsxp/sp2/default.mspx Let me know if this works.. Thanks, Charles
  4. Hey Steve, We'll try another scanner instead of Panda: Please run the F-Secure Online Scanner Note: This Scanner is for Internet Explorer Only! Follow the Instruction here for installation. Accept the License Agreement. Once the ActiveX installs,Click Full System Scan Once the download completes, the scan will begin automatically. The scan will take some time to finish, so please be patient. When the scan completes, click the Automatic cleaning (recommended) button. Click the Show Report button and Copy&Paste the entire report in your next reply. Please post me back that log, also telling me how things are running. Thanks, Charles
  5. Hey there, sorry about the delay.. Download KillBox from the following link : http://www.bleepingcomputer.com/files/killbox.php Unzip the folder to your Desktop. Start Killbox.exe Select the "Delete on Reboot" option. Click on the "All Files" button,which will then flash green. Copy the complete text in bold below to the clipboard by highlighting the filepaths and pressing Control + C: C:\WINDOWS\SYSTEM32\xlibgfl254.dll Open 'File' in the menu on top and choose Paste from clipboard You must use the File menu--pasting by right-clicking the mouse will only enter one file. Then press the button that looks like a red circle with a white X in it. Killbox will tell you that all listed files will be removed on next reboot and asks if you would like to Reboot now, click Yes. Click OK at any Pending File Rename Operations prompt, let me know if they appear. If you don't get that message, reboot manually. Your computer should reboot now. Please run Panda's ActiveScan instead, since you seem to be having a few problems with Kaspersky. Once you are on the Panda site click the Scan your PC button A new window will open, click the Check Now button. Enter your personal details. Click the big Scan Now button. It will ask to install various content - please allow this. It will start downloading the files it requires for the scan, which may take a while. When download is complete, click on Local Disks to start the scan. When the scan completes, click the See Report button. Click Save Report and save the file to your Desktop, so you can post this log in your next reply. Please post me back the Panda report and let me know how things are running. Thanks, Charles
  6. Hey Nyn, To be honest with you, partitions are not my strong point when it comes to computers, so I'm afraid I'm unable to help you any further. What I can suggest though is that you register at another forum (one of those I've linked you to below) and post your problem there. In these forums, experts on this sort of problem will be able to help you, and hopefully they will be able to provide you with a solution. Here are a couple of websites I suggest: BleepingComputer GeeksToGo Please give a link to this thread in your topic, and I hope that your problem will be solved. Thanks, Charles
  7. Hello, One way that you can free up some extra space on your computer is by "defragmenting" it. Over time, the data on your hard drive gets scattered. Defragging a computer puts your data back into sequential order, making it easier for Windows to access it. As a result, the performance of your computer will improve if you defrag the computer. To do so, follow these steps: Go to Start | All Programs | Accessories | System Tools Click on Disk Defragmenter. Select the drive you wish to defragment, by clicking on it. Then press Defragment at the bottom. This can take quite a while to run, so please be patient. You will obviously need to do this for both of your hard drives, both C: and D: . As for managing your partitions, I can recommend a program called Partition Magic, a free trial of which can be downloaded from the following link: http://www.soft32.com/download_151.html AVG antivirus should n't only be a 30-day trial, the free version last forever. There is, however, a 30-day trial of the Professional edition, but I'm pretty sure that you don't have this version. The lnik I gave you was to the free version, and it also shows up as "AVGFREE" in your HijackThis log. This version will not run out... Set your system to not show all files. Navigate to Start | My Computer | Tools | Folder Options. Select the View tab. Under the "Hidden Files and Folders" heading, select "Show hidden files and folders". Check: Hide file extensions for known file types Check the Hide protected operating system files (recommended) option. Click Yes to confirm. Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer. Either enable 'Automatic Updates' under Start | Control Panel | Automatic Updates, or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is. Even though you are complaining of a lack of space on your hard drive, I have a list of programs that I usually suggest people install on their computer once they are free from malware: Ad-Aware SE A tutorial on using Ad-Aware to remove spyware from your computer may be found here. Spybot-Search & Destroy A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features. SpywareBlaster A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here. Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle. Please also read Tony Klein's excellent article: How I got Infected in the First Place If, of course, you encounter any more problems, please let me know and I'll try my best to sort them out for you. Thanks and happy computing, Charles
  8. Hey Nyn, You can delete all of the tools I've asked you to download if you want to. Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible. We are going to boot into Safe Mode later in the fix, and there is no internet access. Please download ATF Cleaner. Don't run it yet. Please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list. Double click ATF-Cleaner.exe to run the program. Under Main choose Select All Click the Empty Selected button. If you use Firefox browser Click Firefox at the top and choose Select All Click the Empty Selected button. Note: If you would like to keep your saved passwords, please click "No" at the prompt. If you use Opera browser Click Opera at the top and choose: Select All Click the Empty Selected button. Note: If you would like to keep your saved passwords, please click "No" at the prompt. Click Exit on the main menu to close the program. Next, please find and delete the following files/folders (if present): C:\WINDOWS\aod <--Folder D:\MIRACLE\ToBurn\Icq stuff\RadLight3.exe[RPK.exe] <--File D:\MIRACLE\ToBurn\Icq stuff\RadLight3.exe[VVSN_RDLT0541Inst.exe] <--File D:\MIRACLE\ToBurn\Icq stuff\RadLight3SE.exe[VVSN_RDLT0504Inst.exe] <--File D:\MIRACLE\ToBurn\Icq stuff\RadLight3SE.exe[RPK.exe] <--File Reboot into Normal Mode. In your next post please let me know- how are things running? Thanks, Charles
  9. Due to lack of feedback, this topic is now closed. If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  10. Since this issue appears resolved, this topic is now closed. If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  11. Hello Nyn, Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible. We are going to boot into Safe Mode later in the fix, and there is no internet access. Scan again with HijackThis and put a checkmark next to each of the following entries (if present): O20 - Winlogon Notify: instcat - instcat.dll (file missing) Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button. Please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list. Set your system to show all files. Navigate to Start | My Computer | Tools | Folder Options. Select the View tab. Under the "Hidden Files and Folders" heading, select "Show hidden files and folders". Uncheck: Hide file extensions for known file types Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Next, please find and delete the following files/folders (if present): C:\WINDOWS\www.google.com <--Folder C:\www.google.com <--Folder C:\Documents and Settings\Local Settings\Application Data\SystemDoctor 2006 Free <--Folder C:\Documents and Settings\MIRACLE\Application Data\DriveCleaner Free <--Folder C:\Documents and Settings\Local Settings\Application Data\DriveCleaner Free <--Folder C:\Program Files\Common Files\DriveCleaner Free <--Folder C:\Documents and Settings\MIRACLE\~tmp0374.exe <--File C:\WINDOWS\system32\v6.exe <--File The steps that I am about to suggest involve modifying the registry. Modifying the registry can be dangerous so we will make a backup of the registry first. Backup the Registry: Navigate to Start | Run and paste the following: regedit /e c:\registrybackup.reg Now click OK It won't appear to be doing anything, that's normal. Your mouse pointer may turn to an hour glass for a minute. Please continue when it no longer has the hour glass. Open Notepad and copy and paste the following quotebox into a new text document. (Don't forget to copy and paste REGEDIT4!) Save this as fix.reg Choose to save as *all files and place it on your Desktop. It should look like this: Double-click on it and when it asks you if you want to merge the contents to the registry, click Yes/OK. Reboot into Normal Mode. Open Notepad and copy and paste the following text in the quote box into the window: Save this as fix.bat Choose to save as all files. This is how the batch must look afterwards: Doubleclick fix.bat and let the program run. A small black dos window will flash, this is normal. Please post the contents of the text reply that opens back here. Please run Panda's ActiveScan. Once you are on the Panda site click the Scan your PC button A new window will open, click the Check Now button. Enter your personal details. Click the big Scan Now button. It will ask to install various content - please allow this. It will start downloading the files it requires for the scan, which may take a while. When download is complete, click on Local Disks to start the scan. When the scan completes, click the See Report button. Click Save Report and save the file to your Desktop, so you can post this log in your next reply. Please post me back look.txt, along with a new HijackThis log and the Panda report Thanks, Charles
  12. Hey Steve, Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible. Please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list. The steps that I am about to suggest involve modifying the registry. Modifying the registry can be dangerous so we will make a backup of the registry first. Backup the Registry: Navigate to Start | Run and paste the following: regedit /e c:\registrybackup.reg Now click OK It won't appear to be doing anything, that's normal. Your mouse pointer may turn to an hour glass for a minute. Please continue when it no longer has the hour glass. Open Notepad and copy and paste the following quotebox into a new text document. (Don't forget to copy and paste REGEDIT4!) Save this as fix.reg Choose to save as *all files and place it on your Desktop. It should look like this: Double-click on it and when it asks you if you want to merge the contents to the registry, click Yes/OK. Next, please find and delete the following files/folders (if present): C:\WINDOWS\SYSTEM32\xlibgfl254.dll <--File C:\Documents and Settings\Steve\Application Data\ultra/b] <--Folder C:\winstall.exe/b] <--File We need to do a search for some files. Navigate to: Start | Search | For Files and Folders. Expand Search Options, check Advanced Options, check Search system folders, Search hidden files and folders, and Search Subfolders. Paste this into the Search for files and folders named box: ntoskrnl.dll If you find an example of this file, please remove it. Reboot into Normal Mode again. Please do an online scan with Kaspersky WebScanner You will be promted to install an ActiveX component from Kaspersky, Click Yes. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on Next Select a target to scan; click on My Computer The scan will take a while so be patient and let it run. Once the scan is complete choose the option to Save as Text Post these results in your next reply. Please post me back the Kaspersky report. Thanks, Charles
  13. Hello Nyn, Things are looking a bit better already. You can delete BlackLight now; we won't be needing it any more. Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible. We are going to boot into Safe Mode later in the fix, and there is no internet access. Scan again with HijackThis and put a checkmark next to each of the following entries (if present): O4 - HKLM\..\Run: [syswin] C:\DOCUME~1\MIRACLE\LOCALS~1\Temp\x1006.exe O4 - HKLM\..\Run: [ChkDisk] C:\WINDOWS\System32\chk_disk.exe O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://cdn.downloadcontrol.com/files/insta...FreeInstall.cab O20 - Winlogon Notify: instcat - C:\WINDOWS\SYSTEM32\instcat.dll O21 - SSODL: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - (no file) Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button. Please download ATF Cleaner. Don't run it yet. Start Killbox.exe Select the "Delete on Reboot" option. Click on the "All Files" button,which will then flash green. Copy the complete text in bold below to the clipboard by highlighting the filepaths and pressing Control + C: C:\WINDOWS\System32\chk_disk.exe C:\WINDOWS\SYSTEM32\instcat.dll Open 'File' in the menu on top and choose Paste from clipboard You must use the File menu--pasting by right-clicking the mouse will only enter one file. Then press the button that looks like a red circle with a white X in it. Killbox will tell you that all listed files will be removed on next reboot and asks if you would like to Reboot now, click Yes. Click OK at any Pending File Rename Operations prompt, let me know if they appear. If you don't get that message, reboot manually. Your computer should reboot now. PressF8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list. Double click ATF-Cleaner.exe to run the program. Under Main choose Select All Click the Empty Selected button. If you use Firefox browser Click Firefox at the top and choose Select All Click the Empty Selected button. Note: If you would like to keep your saved passwords, please click "No" at the prompt. If you use Opera browser Click Opera at the top and choose: Select All Click the Empty Selected button. Note: If you would like to keep your saved passwords, please click "No" at the prompt. Click Exit on the main menu to close the program. Reboot into Normal Mode again. Download Combofix to your Desktop. Double click combofix.exe Follow the prompts that are displayed. Don't click on the window while the fix is running, because that will cause your system to hang. When finished, it should produce a log, combofix.txt. Post that in your next reply. Please do an online scan with Kaspersky WebScanner You will be promted to install an ActiveX component from Kaspersky, Click Yes. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on Next Select a target to scan; click on My Computer The scan will take a while so be patient and let it run. Once the scan is complete choose the option to Save as Text Post these results in your next reply. Please post me back the Kaspersky report, along with a new Hijackthis log and the ComboFix log Thanks, Charles
  14. Hey there, It looks to me like you posted the ComboFix log twice, and forgot to include C:\rapport.txt. Please post me this in your next reply. Thanks, Charles
  15. Since this issue appears resolved, this topic is now closed. If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  16. Hey there, Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible. We are going to boot into Safe Mode later in the fix, and there is no internet access. Please download SmitfraudFix (by S!Ri) Open the file and it will extract the contents (a folder named SmitfraudFix) to your Desktop. Now, please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list. Once in Safe Mode, open the SmitfraudFix folder again. Double-click smitfraudfix.cmd. Select option #2 - Clean by typing 2 and press "Enter" to delete infected files. You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection. The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter". The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows. A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply. The report can also be found at the root of the system drive, usually at C:\rapport.txt Warning : running option #2 on a non infected computer will remove your Desktop background. Download Combofix to your Desktop. Double click combofix.exe Follow the prompts that are displayed. Don't click on the window while the fix is running, because that will cause your system to hang. When finished, it should produce a log, combofix.txt. Post that in your next reply. Download F-Secure Blacklight and save it to your Desktop. Double click on blbeta.exe to start the program. Accept the user agreement and click Next. Click Scan. You will then see a list of all the items found. Do not choose to rename any yet! I want to see the log first because legitimate items can also be present. BlackLight will have created a log on your Desktop named "fsbl-xxxxxxx.log" (the xxxxxxx will be the date and time of the scan). Post that log in your next reply. Please post me back the rapport.txt, along with a new HijackThis log, the BlackLihg tlog, and the ComboFix.txt. You'll probably need more than one reply to fit it all in... Thanks, Charles
  17. Hey there, Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible. We are going to boot into Safe Mode later in the fix, and there is no internet access. Please download AVG Anti-Spyware to your Desktop. Start the set-up program by double clicking the installer. Follow the on screen instructions to install the program, making sure that "Launch AVG Anti-Spyware" is checked. Click the Update tab then select Start update; a progress bar will show the updates being installed. Now press the Scanner icon, and click the Settings tab. Click Recommended actions, then set it to Quarantine. Close the program now, we will scan with it later on. Download KillBox from the following link : http://www.bleepingcomputer.com/files/killbox.php Unzip the folder to your Desktop. Start Killbox.exe Select the "Delete on Reboot" option. Click on the "All Files" button,which will then flash green. Copy the complete text in bold below to the clipboard by highlighting the filepaths and pressing Control + C: C:\WINDOWS\System32\zstkjr.dll C:\WINDOWS\dbmmgr32.dll C:\WINDOWS\inet20126 C:\WINDOWS\www.google.com C:\www.google.com Open 'File' in the menu on top and choose Paste from clipboard You must use the File menu--pasting by right-clicking the mouse will only enter one file. Then press the button that looks like a red circle with a white X in it. Killbox will tell you that all listed files will be removed on next reboot and asks if you would like to Reboot now, click Yes. Click OK at any Pending File Rename Operations prompt, let me know if they appear. If you don't get that message, reboot manually. Your computer should reboot now. Please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list. Let's clean out your temporary internet files: Close all open windows before we start. Go to Start | Control Panel | Internet Options | General. Click the Delete Cookies button. Next to it, click the Delete Files button. When prompted, place a check in: 'Delete all offline content', click OK If you have Firefox installed, we need to clean out these temporary files as well: Go to Tools | Options. Click Privacy. Press the Clear button located to the right of each option (History, Cookies, Cache). Click OK to finish, before closing it. Alternatively, you can clear all information stored while browsing by clicking Clear All. A confirmation dialog box will be shown before clearing the information. Now we'll clean other temporary files and your Recycle Bin: Go to Start | Run | type: cleanmgr | OK. Let it scan your system for files to remove. Make sure 'Temporary Files', 'Temporary Internet Files', and 'Recycle Bin' are the only things checked. Press OK to remove them. The steps that I am about to suggest involve modifying the registry. Modifying the registry can be dangerous so we will make a backup of the registry first. Backup the Registry: Navigate to Start | Run and paste the following: regedit /e c:\registrybackup.reg Now click OK It won't appear to be doing anything, that's normal. Your mouse pointer may turn to an hour glass for a minute. Please continue when it no longer has the hour glass. Open Notepad and copy and paste the following quotebox into a new text document. (Don't forget to copy and paste REGEDIT4!) Save this as fix.reg Choose to save as *all files and place it on your Desktop. It should look like this: Double-click on it and when it asks you if you want to merge the contents to the registry, click Yes/OK. Launch AVG Anti-Spyware by double clicking the icon on your Desktop. Press the Scanner icon. Then click on the Complete System Scan button. If any infections are found, you will be asked for an action; select Apply all actions. Now press the Reports icon at the top. Choose Save report as and save the text file to your Desktop. Please post this log in your next reply. Reboot into Normal Mode. Download F-Secure Blacklight and save it to your Desktop. Double click on blbeta.exe to start the program. Accept the user agreement and click Next. Click Scan. You will then see a list of all the items found. Do not choose to rename any yet! I want to see the log first because legitimate items can also be present. BlackLight will have created a log on your Desktop named "fsbl-xxxxxxx.log" (the xxxxxxx will be the date and time of the scan). Post that log in your next reply. Please post me back the BlackLight report, AVG log, along with a fresh Hijackthis log. Thanks, Charles
  18. Due to lack of feedback, this topic is now closed. If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  19. Due to lack of feedback, this topic is now closed. If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  20. Hey Steve, Don't worry about the Java steps, ATF Cleaner will have removed them hopefully. Cna you let me know what kind of problems you are still having, please. Thanks, Charles
  21. No, the update hasn't worked. Can you try again for me please, it is very important that you install this update before we continue with the fix..
  22. Hey there, To be honest, I'm not sure what is causing your shutdown problem, but since your system is pretty infected, malware could have something to do with it. Therefore, I think we should try and eliminate the malware, and this will hopefully solve your problem. If not, we can try some things to sort it out later. Before we start with the fix, I see that you are using an unpatched version of Windows. We can help you, but first you need to help us. Any reason why your windows isn't up to date? You don't have even ServicePack1 installed! Remember that your system is extremely vulnerable without the necessary security patches/updates, so malware can get installed automatically while surfing without any problems. Please visit http://www.microsoft.com/windowsxp/downloa...p1/default.mspx and update to Service Pack 1. Without this update, you're wide open to re-infection, and we're both just wasting our time. When your system is clean afterwards, then update to SP2, because updating to SP2 can cause problems as long as you are infected. It looks to me like you have two antiviruses installed on your computer- Symantec and AVG. I do not recommend that you have more than one anti virus product installed and running on your computer at a time. The reason for this is that if both products have their automatic (Real-Time) protection switched on, then those products which do not encrypt the virus strings within them can cause other anti virus products to cause "false alarms". It can also lead to a clash as both products fight for access to files which are opened again this is the resident/automatic protection. In general terms, the two programs may conflict and cause: False Alarms: When the anti virus software tells you that your PC has a virus when it actually doesn't. System Performance Problems: Your system may lock up due to both software products attempting to access the same file at the same time. Since you say you're having some problems with them, I think it would be best to completely remove both of them from your computer; from Add/Remove Programs in the Control Panel. However, Symantec products are often very difficult to remove from your PC, so I'd like you to get rid of it first. One good way to remove it is to download and run the following tool. Please download and save SymNRT.exe to your Desktop: ftp://ftp.symantec.com/public/english_us_...sgen/SymNRT.exe Close all programs and double click on the tool. Follow the on-screen instructions. Restart the computer if asked. Then delete the SymNRT.exe tool from your desktop. Open the Program Files folder on your local disk (normally C:) Find and delete any folders with Norton/Symantec in it. After you have done this, please remove McAfee. If you have any toruble doing this, let me know, there is another file similar to the Symantec one that will remove all traces of McAfee from your computer. Then I'd like you to download AVG Antivirus, which is an excellent, free program and install it, using the following link: AVG Link Now, please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select Safe Mode from the list. Once in Safe Mode, I'd like you to run a full scan of your system using AVG, letting it remove anything it finds. Then reboot back into Normal Mode, and post me back a new HijackThis log. Thanks, Charles
  23. Hey Nyn, I've got a suggestion for you. How about, we try our best to get your computer cleaned up; we'll be able to remove some of the malware? Obviously I can't guarantee you'll be clean, and if necessary you can format at a later date, but we can definately have a crack at getting rid of it all. Then I'll be happy to provide you with some instructions for how to reformat your computer...if cleaning doesn't work. Does this sound OK to you? Let me know in you're next post and we can start cleaning. Thanks, Charles