What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijack This-log

33 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I have been scanning filles all day using ad-ware, S&D, cwshredder and still get an endless stream of pop ups.

ad-ware finds but won't delete "Coolwebsearch" and CwShredder has found and "removed" - cws.bootconf and cws.Svchost32 serveral times over.

Here is the "Hijack This Analyzer" log

Log was analyzed using KRC HijackThis Analyzer - Updated on 1/16/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\McAgent.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.0
Scan saved at 4:31:36 AM, on 1/21/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\PROGRAM FILES\ADMANAGER CONTROLLER\ADMANCTL.EXE
C:\WINDOWS\BUNDLES\ADL_MTESTSTUB.EXE
C:\WINDOWS\SYSTEM\AWVWID.EXE
C:\UKGGGPBU.EXE
C:\PROGRAM FILES\ISTSVC\ISTSVC.EXE
C:\PROGRAM FILES\COOKIE WASHER\AOLWASHER.EXE
C:\PROGRAM FILES\ADMANAGER CONTROLLER\ADMANKEEP.EXE
C:\WINDOWS\APPLICATION DATA\CCUU.EXE
C:\WINDOWS\SYSTEM\SYSMONNT.EXE
C:\WINDOWS\SYSTEM\ZKV.EXE
C:\WINDOWS\SYSTEM\OPEIVEDE.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSFTSN.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.adelphia.net/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\jhmqc.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\jhmqc.dll/sp.html#28129
R3 - URLSearchHook: (no name) - _{CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - (no file)
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 search.netscape.com
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_4.DLL (file missing)
O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
O4 - HKLM\..\Run: [Windows] c:\msdos98.exe
O4 - HKLM\..\Run: [OEMCLEANUP] C:\windows\OPTIONS\oemreset.exe
O4 - HKLM\..\Run: [hjoyqlkwjkisd] C:\WINDOWS\SYSTEM\jhrrvth.exe
O4 - HKLM\..\Run: [FARMMEXT] C:\WINDOWS\FARMMEXT.exe
O4 - HKLM\..\Run: [Admanager Controller] C:\PROGRAM FILES\ADMANAGER CONTROLLER\ADMANCTL.EXE
O4 - HKLM\..\Run: [CSV10P70] \Progra~1\CSBB\CSV10P070.EXE
O4 - HKLM\..\Run: [wxqnobuj] C:\WINDOWS\wxqnobuj.exe
O4 - HKLM\..\Run: [wdixxc] C:\WINDOWS\SYSTEM\wdixxc.exe
O4 - HKLM\..\Run: [vcmpin] C:\WINDOWS\BUNDLES\ADL_MTESTSTUB.EXE
O4 - HKLM\..\Run: [hlvpec] C:\WINDOWS\SYSTEM\hlvpec.exe
O4 - HKLM\..\Run: [q4Fh34P] AWVWID.EXE
O4 - HKLM\..\Run: [AutoUpdater] "c:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKLM\..\Run: [Bk7N] C:\UKGGGPBU.EXE
O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exe
O4 - HKLM\..\Run: [kdifwlit] C:\WINDOWS\kdifwlit.exe
O4 - HKLM\..\Run: [VBouncer] C:\PROGRA~1\VBOUNCER\VirtualBouncer.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [¢‰¸ï0 4Ã4}¤Áœ5]C:\Program Files\ISTsvc\istsvc.exe] C:\UKGGGPBU.EXE
O4 - HKLM\..\RunServices: [WinTools] C:\PROGRA~1\COMMON~1\WINTOOLS\WTOOLSA.EXE
O4 - HKCU\..\Run: [ccWasher] C:\Program Files\Cookie Washer\aolwasher.exe /0
O4 - HKCU\..\Run: [Umss] C:\WINDOWS\Application Data\ccuu.exe
O4 - HKCU\..\Run: [SYSMONNT] C:\WINDOWS\SYSTEM\SYSMONNT
O4 - HKCU\..\Run: [Ugve] C:\WINDOWS\SYSTEM\zkv.exe
O4 - HKCU\..\Run: [b3wnRQjqe] OPEIVEDE.EXE
O4 - Startup: PowerReg Scheduler.exe
O8 - Extra context menu item: AltaVista Home - http://jump.altavista.com/avie5/home
O8 - Extra context menu item: AV Search This Term - http://jump.altavista.com/avie5/search
O8 - Extra context menu item: AV Translate this Web Page - http://jump.altavista.com/avie5/babelfish
O8 - Extra context menu item: AV Translate Selection - http://jump.altavista.com/avie5/babelfish
O9 - Extra button: (no name) - {06FE5D00-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/home (file missing)
O9 - Extra 'Tools' menuitem: &AltaVista Home - {06FE5D00-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/home (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/babelfish (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/babelfish (file missing)
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/linksearch (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/linksearch (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/hostsearch (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://jump.altavista.com/avie5/hostsearch (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O12 - Plugin for .edu/bendor/groupmem/Dongmao/List_of_reference/SERS_Biomolecules/R: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.awmdabest.com
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.static.topconverting.com
O15 - Trusted Zone: *.05p.com (HKLM)
O15 - Trusted Zone: *.searchmiracle.com (HKLM)
O15 - Trusted Zone: *.clickspring.net (HKLM)
O15 - Trusted Zone: *.mt-download.com (HKLM)
O15 - Trusted Zone: *.my-internet.info (HKLM)
O15 - Trusted Zone: *.scoobidoo.com (HKLM)
O15 - Trusted Zone: *.awmdabest.com (HKLM)
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O15 - Trusted Zone: *.static.topconverting.com (HKLM)
O15 - Trusted IP range: 206.161.125.149
O15 - Trusted IP range: 206.161.124.130 (HKLM)
O16 - DPF: {FA13A9FA-CA9B-11D2-9780-00104B242EA3} (WildTangent Control) - http://www.wildtangent.com/install/wdriver/cab/wtinst.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security2.norton.com/SSC/SharedCont…c/bin/cabsa.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (&Yahoo! Companion) - http://us.dl1.yimg.com/download.yahoo.com/…/yiebio4025.cab
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://qp.wnyric.org/qp2.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/143b281ce8b789e63d23/…ip/RdxIE601.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac…ta/SymAData.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.av.aol.com/molbin/shared/m…77/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.av.aol.com/molbin/shared/m…,18/mcgdmgr.cab
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200404…meInstaller.exe
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP…ol_v1-0-3-9.cab
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://ns-cncrooks.wnyric.org/iNotes6.cab
O16 - DPF: {24D1BDCE-D835-11D6-BF84-0050047EA0E7} (BlueStream_Flash Class) - http://www.rovion.com/Controls/Rovion.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/ClickYes…bridge-c356.cab
O16 - DPF: {BAB3E70B-A847-4A88-ACFC-778FCCC00287} (CActSetupObj Object) - http://www.odysseusmarketing.com/actsetup.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {36A59337-6EEF-40AE-94B1-ED443A0C4740} (XParamObj Class) - http://download.abetterinternet.com/downlo…LL58/banner.cab
O16 - DPF: {886DDE35-E955-11D0-A707-000000521958} - http://69.56.176.78/webplugin.cab
O16 - DPF: {666E4D35-E955-11D0-A707-000000521958} - http://www.ieplugin.com/webplugin.cab
O16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.bundleware.com/activeX/DS3/DS3.cab
O18 - Filter: text/html - {CC905FF6-B553-496C-9DFA-CFF65ADCD0FC} - (no file)


End of KRC HijackThis Analyzer Log.
====================================

Thanks
Post #2
You have the latest version of VX2. Download L2mfix from one of these two locations:

http://www.atribune.org/downloads/l2mfix.exe
http://www.downloads.subratam.org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!
Post #3
Thanks for your reply!!

Unfortunatly I recived a messege "Not compatible with 9x or windows nt" when I double clicked on l2mfix.bat.

Thanks!
Post #4
After reading the "Read Me" file on the _____ program

These infections are usually indicated by these lines in a hijackthis log:

O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch

I noticed that these excat files appear on my "HiJack This" log.

O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 search.netscape.com


I'll wait for a reply before I do anything.

Thanks for your time.
Post #6
That worked….here is the log * DLLCompare Log version(1.0.0.127) Files Found that Windows does not See or cannot Access *Not everything listed here means you are infected! ________________________________________________ C:\WINDOWS\SYSTEM\lwpsd70n.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\huagent.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\tzp3216s.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\dpound.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\wvpui.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\dj210v~1.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\iiircl.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K ________________________________________________ 998 items found: 998 files (7 H/S), 0 directories. Total of file sizes: 185,338,556 bytes 176.75 M ——————–End log——————— Thanks for your time and energy!
Post #7
  • Download finditnt2000xp.zip.
  • Unzip the contents of finditnt2000xp.zip to a convenient location.
  • Navigate to the Find It NT-2K-XP folder and double-click on find.bat.
  • A command prompt will open and it will search your computer for malicious files.
  • Once it has finished a Notepad window will pop up with output.txt.
  • Copy the entire contents of output.txt into your next post.
Please do not reboot once you have done this
Post #10
Yes it is I keep forgetting :P

  • Download the Pocket Killbox.
  • Unzip the contents of KillBox.zip to a convenient location.
  • Double-click on KillBox.exe.
  • Click "Replace on Reboot" and check the "Use Dummy" box.
  • Paste this file into the top "Full Path of File to Delete" box.
    • C:\WINDOWS\SYSTEM\lwpsd70n.dll
  • Click the "Delete File" button which looks like a stop sign.
  • Click "Yes" at the Replace on Reboot prompt.
  • Click "No" at the Pending Operations prompt.
  • Repeat steps 4-8 above for these files:C:\WINDOWS\SYSTEM\huagent.dll
    C:\WINDOWS\SYSTEM\tzp3216s.dll
    C:\WINDOWS\SYSTEM\dpound.dll
    C:\WINDOWS\SYSTEM\wvpui.dll
    C:\WINDOWS\SYSTEM\dj210v~1.dll
    C:\WINDOWS\SYSTEM\iiircl.dll
  • Click "Replace on Reboot" and check the "Use Dummy" box.
  • Paste this file into the top "Full Path of File to Delete" box.
    • C:\WINDOWS\System\Guard.tmp
  • Click the "Delete File" button which looks like a stop sign.
  • Click "Yes" at the Replace on Reboot prompt.
  • Click "Yes" at the Pending Operations prompt to restart your computer.
  • Then post a new Dll Compare log please.
Post #11
Ok foget "findit" I used PocketKill… followed your instructions… I think they were a little different than what you described. It never gave me "Pending Operations prompt" to click "no" to. Regaurdless here is the DLLCompare Log * DLLCompare Log version(1.0.0.127) Files Found that Windows does not See or cannot Access *Not everything listed here means you are infected! ________________________________________________ C:\WINDOWS\SYSTEM\wvpui.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\mlincp16.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\ccqmixer.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\mbtext35.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\ipsetup.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\mjrclr40.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\wungde.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\rotiff.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K C:\WINDOWS\SYSTEM\hsfsui23.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K ________________________________________________ 1,007 items found: 1,007 files (9 H/S), 0 directories. Total of file sizes: 187,144,892 bytes 178.47 M ——————–End log——————— Thanks!
Post #12
Settings for Killbox From the menu bar click the "About" and ensure you have version 2.0.0.76 or better. Select Option Replace on Reboot From the Dllcompare log copy & paste each full path into the Killbox topmost box. ie: a fullpath from our sample log would be C:\WINDOWS\SYSTEM\wvpui.dll C:\WINDOWS\SYSTEM\mlincp16.dll C:\WINDOWS\SYSTEM\ccqmixer.dll C:\WINDOWS\SYSTEM\mbtext35.dll C:\WINDOWS\SYSTEM\ipsetup.dll C:\WINDOWS\SYSTEM\mjrclr40.dll C:\WINDOWS\SYSTEM\wungde.dll C:\WINDOWS\SYSTEM\rotiff.dll C:\WINDOWS\SYSTEM\hsfsui23.dll With the full path to the file name in the topmost textbox, click the option Use Dummy which will create a numbered dummy file instantly for you. Click the Red X …and for the confirmation message that will appear, you will need to click Yes A second message will ask to Reboot now? you will need to click No (since you are not finished adding all related files in yet) When you get to the last file in the Dllcompare log, also add in one additional file C:\Windows\System\Guard.tmp On that last file, close all programs and Reboot your computer. Then post a dllcompare log
Post #13
Followed your instructions to the letter… I was using the Killbox version 2.0.0.76. Here is what I got from the DLLCompare Log * DLLCompare Log version(1.0.0.127) Files Found that Windows does not See or cannot Access *Not everything listed here means you are infected! ________________________________________________ C:\WINDOWS\SYSTEM\wvpui.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K ________________________________________________ 1,008 items found: 1,008 files (1 H/S), 0 directories. Total of file sizes: 187,361,980 bytes 178.68 M ——————–End log——————— Thanks!
Post #14
Settings for Killbox From the menu bar click the "About" and ensure you have version 2.0.0.76 or better. Select Option Replace on Reboot From the Dllcompare log copy & paste each full path into the Killbox topmost box. ie: a fullpath from our sample log would be C:\WINDOWS\SYSTEM\wvpui.dll With the full path to the file name in the topmost textbox, click the option Use Dummy which will create a numbered dummy file instantly for you. Click the Red X …and for the confirmation message that will appear, you will need to click Yes A second message will ask to Reboot now? you will need to click No (since you are not finished adding all related files in yet) When you get to the last file in the Dllcompare log, also add in one additional file C:\Windows\System\Guard.tmp On that last file, close all programs and Reboot your computer. Then post a dllcompare log Also post that findit log if you got it to work and a new hijackthis log please.
Post #15
OK I have run the "killbox" and "Dllcompare" twice and both times the same file remains * DLLCompare Log version(1.0.0.127) Files Found that Windows does not See or cannot Access *Not everything listed here means you are infected! ________________________________________________ C:\WINDOWS\SYSTEM\wvpui.dll Tue Jan 18 2005 7:45:02p ..S.R 217,088 212.00 K ________________________________________________ 1,011 items found: 1,011 files (1 H/S), 0 directories. Total of file sizes: 188,013,244 bytes 179.30 M ——————–End log——————— A few things…. 1st- I am using Killbox version 2.0.0.76 but I am not getting the 2nd message "A second message will ask to Reboot now? you will need to click No." I get a message stating "file will be replaced on reboot" …. so I click O.K. and then its ready for the next fullpath. It does not seem like a problem. 2nd- should I be running this while in safe mode? 3rd- When I enter the "C:\Windows\System\Guard.tmp" at the end… I have been checking 1st "Replace on Reboot" 2nd "use dummy" 3rd the Red X 4th exit 5th Start - shutdown- restart Thanks!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI