dllhost.exe *32

[theaerogeek]

Having a similar problem as many of the rest.  dllhost.exe *32 replicating, malwarebytes blocking 95.215.1.57, etc.

 

Attached are FRST.txt and addition.txt.

 

Thank You!

 

Mike

FRST.txt

Addition.txt

[RPMcMurphy]

Hello and welcome.  Please follow these guidelines while we work on your PC:

• Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!
• Please do not run any scans or install/uninstall any applications without being directed to do so.
• Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.

   Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it in the same location as FRST (usually your desktop) as fixlist.txt

HKU\S-1-5-21-3114719108-2386003970-2330068000-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks!EmptyTemp:

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Now run FRST again.

• When the tool opens click Yes to disclaimer.
• Press the Fix button just once and wait.
• The tool will make a log (Fixlog.txt) please post it to your reply.

[theaerogeek]

Run as instructed.   It required a reboot after it ran and I did that.  fixlog.txt attached.

 

Thank you!

 

 

Fixlog.txt

[RPMcMurphy]

Please do this next:

  Download Combofix from HERE, and save it to your desktop.  

**Note:  It is important that it is saved directly to your desktop**

--------------------------------------------------------------------
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link
--------------------------------------------------------------------

Double click on ComboFix.exe & follow the prompts.

• If you have trouble, stop and post back.  Do not try to repeatedly run comboFix!
• When finished, it will produce a report for you.

.
Note: If after running ComboFix you receive a message stating, "Illegal Operation Attempted on a registry key that has been marked for deletion" rebooting your computer will resolve the problem.

Please include the following in your next post:

• ComboFix log

[theaerogeek]

OK - ran combo fix and log file is attached.  It was odd that when it was done, Symantec Antivirus and AntiSpyware was already turned on Proactive Threat was still off.  I assume that is OK?

 

Thanks for the continued help!

ComboFix.txt

[RPMcMurphy]

Please do this next:

   Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

  Open Malwarebytes AntiMalware (MBAM)

• On the Dashboard, click the 'Update Now >>' link
• After the update completes, click the 'Scan Now >>' button.
• Or, on the Dashboard, click the Scan Now >> button.
• If an update is available, click the Update Now button.
• A Threat Scan will begin.
• When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
• In most cases, a restart will be required.
• Wait for the prompt to restart the computer to appear, then click on Yes.
• After the restart once you are back at your desktop, open MBAM once more.
• Click on the History tab > Application Logs.
• Double click on the scan log which shows the Date and time of the scan just performed.
• Click 'Copy to Clipboard'
• Paste the contents of the clipboard into your reply.

Please include the following in your next post:

• adwCleaner log
• MBAM log

[theaerogeek]

Here are the logs of AdwCleaner and MBAM.

 

AdwCleaner:

 

# AdwCleaner v4.101 - Report created 14/11/2014 at 15:55:34
# Updated 09/11/2014 by Xplode
# Database : 2014-11-07.1 [Local]
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : MNCWarner - MNCWARNER-HP
# Running from : C:\Users\MNCWarner\Downloads\AdwCleaner(1).exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

File Found : C:\Users\Public\Desktop\eBay.lnk

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\yourtango.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.3
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16561

-\\ Mozilla Firefox v32.0.3 (x86 en-US)

*************************

AdwCleaner[R0].txt - [2749 octets] - [14/11/2014 15:55:34]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2809 octets] ##########

 

 

And MBAM:

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 11/14/2014
Scan Time: 4:19:04 PM
Logfile:
Administrator: Yes

Version: 2.00.3.1025
Malware Database: v2014.11.14.08
Rootkit Database: v2014.11.12.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: MNCWarner

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 418855
Time Elapsed: 19 min, 34 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

 

Thanks a bunch!

 

AdwCleanerR0.txt

mbam-log-2014-11-14 (16-19-04).txt

[RPMcMurphy]

How is your computer running now? Please do this next:

  Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.  Please go to www.java.com and press the "Free Java Download" button near the center of the page.  Follow the prompts to install the latest version and remove any older, insecure versions.

  Double click on AdwCleaner.exe to run the tool again.

• Click on the Scan button.
• AdwCleaner will begin to scan your computer like it did before.
• After the scan has finished...
  <-Uncheck any lines related to items you may wish to keep->
• This time click on the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

  Go here to run an online scannner from ESET. Windows Vista/Windows 7 users will need to right click on their Internet Explorer shortcut, and select Run as Administrator

• Note: For browsers other than Internet Explorer, you will be prompted to download and install esetsmartinstaller_enu.exe. Click on the link and save the file to a convenient location. Double click on it to install and a new window will open. Follow the prompts.
• Turn off the real time scanner of any existing antivirus program while performing the online scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activex control to install
• Click Start
• Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
• Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
• Click Scan
• Wait for the scan to finish
• When the scan is done, if it shows a screen that says "Threats found!", then click "List of found threats", and then click "Export to text file..."
• Save that text file on your desktop. Copy and paste the contents of that log as a reply to this topic.

Please include the following in your next post:

• How is the computer running now?
• adwCleaner log
• ESET log

[theaerogeek]

Computer seems like has been good to go since the combofix run with fixlist. 

 

OK - Java is updated.

 

Here is the AdwClearner log file:

 

# AdwCleaner v4.101 - Report created 15/11/2014 at 07:53:21
# Updated 09/11/2014 by Xplode
# Database : 2014-11-07.1 [Local]
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : MNCWarner - MNCWARNER-HP
# Running from : C:\Users\MNCWarner\Downloads\AdwCleaner(1).exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\Users\Public\Desktop\eBay.lnk

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.3
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\yourtango.com

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16561


-\\ Mozilla Firefox v32.0.3 (x86 en-US)


*************************

AdwCleaner[R0].txt - [2933 octets] - [14/11/2014 15:55:34]
AdwCleaner[R1].txt - [2993 octets] - [15/11/2014 07:47:26]
AdwCleaner[s0].txt - [2581 octets] - [15/11/2014 07:53:21]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [2641 octets] ##########

 

 

Because the original issue nearly caused me to go over my monthly data limit (I know - thats a whine and yes monthly data limits are so quaint) - does the ESET use a large amount of data?  Seems like it would.  Do you know?  If so, I will need to find a different means to run that - but here's the AdwCleaner anyway for now.

 

Thanks!

 

 

[RPMcMurphy]

In that case, just run a full scan with your installed antivirus program (Symantec) and let me know what, if anything, it turns up.

[theaerogeek]

OK - there is a wee bit if weirdness going on.  First, after my previous post, I noticed that Symantec did not start/auto run upon boot up.  I had to manually start it up.  I ran a full scan as instructed and it found about half a dozen "tracking cookies" and deleted them. I supposed that's OK? 

 

MBAM also made me aware of blocked incoming web traffic shown below:

Detection, 11/16/2014 8:45:19 AM, SYSTEM, MNCWARNER-HP, Protection, Malicious Website Protection, IP, 60.173.11.143, 9064, Inbound, C:\Windows\System32\svchost.exe,
Detection, 11/16/2014 8:45:19 AM, SYSTEM, MNCWARNER-HP, Protection, Malicious Website Protection, IP, 60.173.11.143, 9064, Inbound, C:\Windows\System32\svchost.exe,
Detection, 11/16/2014 9:05:35 AM, SYSTEM, MNCWARNER-HP, Protection, Malicious Website Protection, IP, 60.173.11.245, 9064, Inbound, C:\Windows\System32\svchost.exe,
Detection, 11/16/2014 9:05:35 AM, SYSTEM, MNCWARNER-HP, Protection, Malicious Website Protection, IP, 60.173.11.245, 9064, Inbound, C:\Windows\System32\svchost.exe,
Detection, 11/16/2014 9:05:35 AM, SYSTEM, MNCWARNER-HP, Protection, Malicious Website Protection, IP, 60.173.11.245, 9064, Inbound, C:\Windows\System32\svchost.exe,
Detection, 11/16/2014 9:05:35 AM, SYSTEM, MNCWARNER-HP, Protection, Malicious Website Protection, IP, 60.173.11.245, 9064, Inbound, C:\Windows\System32\svchost.exe,
Detection, 11/16/2014 9:05:35 AM, SYSTEM, MNCWARNER-HP, Protection, Malicious Website Protection, IP, 60.173.11.245, 9064, Inbound, C:\Windows\System32\svchost.exe,
Update, 11/16/2014 9:11:10 AM, SYSTEM, MNCWARNER-HP, Scheduler, Malware Database, 2014.11.15.9, 2014.11.16.2,
 

I guess that is MBAM doing it job?

 

Besides that, all seems OK. My only worry at this point is why Symantec didn't start upon boot up like it always has.  Was something deleted with AdwCleaner?

 

Thanks for the continued assistance! 

[RPMcMurphy]

Let me see if we can fix that auto-start.  Please do this:

   Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it in the same location as FRST (usually your desktop) as fixlist.txt

Folder: c:\Qoobox\Quarantine\Registry_backups

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Now run FRST again.

• When the tool opens click Yes to disclaimer.
• Press the Fix button just once and wait.
• The tool will make a log (Fixlog.txt) please post it to your reply.

[theaerogeek]

OK - here it is.  Thanks!

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-11-2014 03
Ran by MNCWarner at 2014-11-16 17:14:16 Run:3
Running from C:\Users\MNCWarner\Downloads
Loaded Profile: MNCWarner (Available profiles: MNCWarner & DefaultAppPool)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Folder: c:\Qoobox\Quarantine\Registry_backups
*****************


========================= Folder: c:\Qoobox\Quarantine\Registry_backups ========================

2014-11-13 19:14 - 2014-11-13 19:14 - 0000377 _____ () c:\Qoobox\Quarantine\Registry_backups\HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47}.reg.dat
2014-11-13 19:15 - 2014-11-13 19:15 - 0000080 _____ () c:\Qoobox\Quarantine\Registry_backups\HKLM-Run-SynTPEnh.reg.dat
2014-11-13 19:14 - 2014-11-13 19:14 - 0000582 _____ () c:\Qoobox\Quarantine\Registry_backups\SafeBoot-Symantec Antvirus.reg.dat
2014-11-13 18:48 - 2014-11-13 19:25 - 0042398 _____ () c:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2014-11-13 19:13 - 2014-11-13 19:13 - 0000196 _____ () c:\Qoobox\Quarantine\Registry_backups\Wow6432Node-HKLM-Run-Adobe Reader Speed Launcher.reg.dat
2014-11-13 19:13 - 2014-11-13 19:13 - 0000314 _____ () c:\Qoobox\Quarantine\Registry_backups\Wow6432Node-HKLM-Run-Propel Accelerator Setup.reg.dat
2014-11-13 19:13 - 2014-11-13 19:13 - 0000314 _____ () c:\Qoobox\Quarantine\Registry_backups\Wow6432Node-HKLM-Run-Propel Accelerator.reg.dat

====== End of Folder: ======


==== End of Fixlog ====

[RPMcMurphy]

Please do this now:

   Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it in the same location as FRST (usually your desktop) as fixlist.txt

cmd: copy c:\Qoobox\Quarantine\Registry_backups\SafeBoot-Symantec Antvirus.reg.dat c:\users\MNCWarner\Desktop\fix.reg

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Now run FRST again.

• When the tool opens click Yes to disclaimer.
• Press the Fix button just once and wait.
• The tool will make a log (Fixlog.txt) please post it to your reply.

Once that has run you should have a file on your desktop called fix.reg. Right click on that, select "Merge" and confirm any prompts. Once that is done, reboot the machine and let me know if your AV auto-starts.

 

[theaerogeek]

It looks like it didn't run properly???

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-11-2014 03
Ran by MNCWarner at 2014-11-16 19:50:43 Run:4
Running from C:\Users\MNCWarner\Downloads
Loaded Profile: MNCWarner (Available profiles: MNCWarner & DefaultAppPool)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
cmd: copy c:\Qoobox\Quarantine\Registry_backups\SafeBoot-Symantec Antvirus.reg.dat c:\users\MNCWarner\Desktop\fix.reg
*****************


=========  copy c:\Qoobox\Quarantine\Registry_backups\SafeBoot-Symantec Antvirus.reg.dat c:\users\MNCWarner\Desktop\fix.reg =========

The system cannot find the file specified.

========= End of CMD: =========


==== End of Fixlog ====

[RPMcMurphy]

If you are comfortable with these instructions, lets try doing it manually:

 

First navigate to this folder:  c:\Qoobox\Quarantine\Registry_backups

 

Inside that folder locate this file:  SafeBoot-Symantec Antvirus.reg.dat

 

Right click on it, select "Rename" and remove the .dat extension.  Confirm any prompts you are given.

 

That should leave you with a file called SafeBoot-Symantec Antvirus.reg  Right click on that, select "Merge" and confirm any prompts.

 

Once that is done, reboot the machine and let me know if your AV auto-starts.

[theaerogeek]

Seems to be OK now.  Thanks for you help!  I believe I'm good to go now.

[RPMcMurphy]

Next Post::

Great! All I have left for you is another update and some very important cleanup:

  Your Adobe reader needs to be updated.  Please visit Adobe's site and grab the newest version.  Be sure to watch for and uncheck any boxes offering to install other software.

  Uninstall ComboFix

• Press the Windows key + R on your keyboard or click Start -> Run.  Copy and past the following text into the run box that opens and press OK:
  Combofix /Uninstall

  Download OTC to your desktop and run it

• Click Yes to begin the cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the cleanup process. If you are asked to reboot the machine choose Yes.
• Manually delete any remaining logs or tools from our fixes

  Double click on AdwCleaner.exe to run the tool again.

• Click on the Uninstall button.
• Click Yes when asked are you sure you want to uninstall.
• Both AdwCleaner.exe, its folder and all logs will be removed.

  Finally, I'd like to make a couple of suggestions to help you stay clean in the future:

• Restart any anti-malware programs that we disabled while we were cleaning your machine.
• Keep your antivirus application and MBAM current and updated.  Scan with them at least weekly.
• Please read this post for some helpful information.

Please post once more so I know you are all set and I can mark this thread resolved. Good luck and stay safe!

[theaerogeek]

Done and done!

 

Thanks a bunch for helping me out with this.  Don't take this wrong way, but hopefully our paths don't cross in the future. 

That would mean I I'm stayin' clean!

 

TheAeroGeek

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!