[Resolved] hijacked

well its 1.00 am here. the shortcut worked ok, i'll do the scan in the morning and post on here for you then. cheers for now,

A. We are going to try running a completely different version of ComboFix. It even has a slightly different name. First, DELETE your current version of ComboFix on your Desktop, then delete the following folder only C:\ComboFix.

B. Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop. I suggest that you rename it to Combo-Fix.exe (It may provide you with this name as the default name without you having to rename it)

Link 1
Link 2

[external image: Posted Image]


[external image: Posted Image]
——————————————————————–
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

• Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results"
• Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
• Remember to re enable the protection again afterwards.

2. Double click on Combo-Fix.exe & follow the prompts.

• When finished, it will produce a report for you.
• Please post the C:ComboFix.txt along with a HijackThis log so we can continue cleaning the system.

Notes:

• Do not mouseclick combofix's window while it's running. That may cause it to stall
• CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

before I download CF. i have another folder called ComboFix[1] do i leave it / delete it ? just found a notepad in c:\ not sure what it is, as its called "playground" anything to do with this lot? Tue Aug 07 23:37:35 2007: , version . Tue Aug 07 23:37:36 2007: Started thread and set thread priority (6374960) Tue Aug 07 23:37:36 2007: User data dir: C:\Documents and Settings\All Users.WINDOWS\Application Data\Zylom\ZylomGamesPlayer\zylom\piratepoppers\en-US Tue Aug 07 23:37:36 2007: Common data dir: C:\Documents and Settings\All Users.WINDOWS\Application Data\Zylom\ZylomGamesPlayer\zylom\piratepoppers\en-US Tue Aug 07 23:37:36 2007: WM_SIZE: SIZE_RESTORED Tue Aug 07 23:37:36 2007: WM_WINDOWPOSCHANGING: 0,0,0,0 Tue Aug 07 23:37:36 2007: MUTEX: TDXContextMouseMutex:b951896a:4cf3c9a2:c184eabd:8aea924e Tue Aug 07 23:37:37 2007: SetDisplay: 800x600, 0 Tue Aug 07 23:37:37 2007: WM_WINDOWPOSCHANGING: 0,0,0,0 Tue Aug 07 23:37:37 2007: WM_WINDOWPOSCHANGING: 0,0,0,0 Tue Aug 07 23:37:37 2007: WM_WINDOWPOSCHANGING: 0,0,0,0 Tue Aug 07 23:37:37 2007: WM_WINDOWPOSCHANGING: 0,0,525,394 Tue Aug 07 23:37:37 2007: WM_SIZE: SIZE_RESTORED Tue Aug 07 23:37:37 2007: HandleActivation: 1 Tue Aug 07 23:37:37 2007: SetDisplay:ReleaseAssets Tue Aug 07 23:37:37 2007: TDXContext::Create windowed:800x600, 32bpp Tue Aug 07 23:37:37 2007: Backbuffer info DDSURFACE: (525x394) Format: DDPF_RGB: Bits: 32 (R:00ff0000) (G:0000ff00) (B:000000ff) lPitch: 2112 DDSCAPS_3DDEVICE : This surface can be used for 3-D rendering. Applications can use this flag to ensure that a device that can render only to a certain heap has off-screen surfaces allocated from the correct heap. If this flag is set for a heap, the surface is not allocated from that heap. DDSCAPS_LOCALVIDMEM : This surface exists in true, local video memory, rather than nonlocal video memory. If this flag is specified, DDSCAPS_VIDEOMEMORY must be specified, as well. This flag cannot be used with the DDSCAPS_NONLOCALVIDMEM flag. DDSCAPS_OFFSCREENPLAIN : This surface is any off-screen surface that is not an overlay, texture, z-buffer, front-buffer, back-buffer, or alpha surface. It is used to identify plain surfaces. DDSCAPS_VIDEOMEMORY : This surface exists in display memory. Tue Aug 07 23:37:43 2007: Device identifier: Driver: 'atidrae.dll' Description: 'ATI Technologies, Inc. RAGE XL AGP 2X' Version: 0:0 Vendor ID: 1002 (4098) Device ID: 474d (18253) SubSys: : 81002 (528386) Revision: 65 (101) GUID: d7b71ee2:11cf040d:200873b2:35cdc2ca Tue Aug 07 23:37:43 2007: mDxContext->Create succeeded. Tue Aug 07 23:37:43 2007: Device desc: Surface Caps: D3DDEVCAPS_DRAWPRIMTLVERTEX: Device exports a DrawPrimitive-aware hardware abstraction layer (HAL). This flag was introduced in DirectX 5.0. D3DDEVCAPS_EXECUTESYSTEMMEMORY: Device can use execute buffers from system memory. D3DDEVCAPS_FLOATTLVERTEX: Device accepts floating point for post-transform vertex data. D3DDEVCAPS_HWRASTERIZATION: Device has hardware acceleration for scene rasterization. D3DDEVCAPS_SORTEXACT: Device needs data sorted exactly. D3DDEVCAPS_SORTINCREASINGZ: Device needs data sorted for increasing depth. D3DDEVCAPS_TEXTUREVIDEOMEMORY: Device can retrieve textures from device memory. D3DDEVCAPS_TLVERTEXSYSTEMMEMORY: Device can use buffers from system memory for transformed and lit vertices. D3DDEVCAPS_TEXTURENONLOCALVIDMEM: Device can retrieve textures from nonlocal video (AGP) memory. This flag was introduced in DirectX 5.0. For more information about AGP memory, see Using Non-local Video Memory Surfaces in the DirectDraw documentation. dwDeviceRenderBitDepth: 1280 Device's rendering bit depth. This can be one or more of the following DirectDraw bit-depth constants: DDBD_8, DDBD_16, DDBD_24, or DDBD_32. dwDeviceZBufferBitDepth: 1024 Bit depth of the device's depth-buffer. This can be one of the following DirectDraw bit-depth constants: DDBD_8, DDBD_16, DDBD_24, or DDBD_32. dwMinTextureWidth, dwMaxTextureWidth: 1, 1024 Minimum/Maximum texture width for this device. dwMinTextureHeight, dwMaxTextureHeight: 1, 1024 Minimum/Maximum texture height for this device. dwMaxTextureRepeat: 0 Full range of the integer bits of the post-normalized texture indices. If the D3DPTEXTURECAPS_TEXREPEATNOTSCALEDBYSIZE bit is set, the device defers scaling by the texture size until after the texture address mode is applied. If not set, the device scales the texture indices by the texture size (largest level of detail) prior to interpolation. dwMaxTextureAspectRatio: 0 Maximum texture aspect ratio supported by the hardware; this is typically a power of 2. dwMaxAnisotropy: 0 Maximum valid value for the D3DTSS_MAXANISOTROPY texture-stage state. dvGuardBandLeft, dvGuardBandTop, dvGuardBandRight, and dvGuardBandBottom: 0, 0, 0, 0 The screen-space coordinates of the guard-band clipping region. Coordinates inside this rectangle but outside the viewport rectangle are automatically clipped. dvExtentsAdjust: 0 Number of pixels to adjust the extents rectangle outward to accommodate antialiasing kernels. TriCaps: dwMiscCaps D3DPMISCCAPS_CULLCCW: The driver supports counterclockwise culling through the D3DRENDERSTATE_CULLMODE state. (This applies only to triangle primitives.) This corresponds to the D3DCULL_CCW member of the D3DCULL enumerated type. D3DPMISCCAPS_CULLCW: The driver supports clockwise triangle culling through the D3DRENDERSTATE_CULLMODE state. (This applies only to triangle primitives.) This corresponds to the D3DCULL_CW member of the D3DCULL enumerated type. D3DPMISCCAPS_CULLNONE: The driver does not perform triangle culling. This corresponds to the D3DCULL_NONE member of the D3DCULL enumerated type. D3DPMISCCAPS_MASKPLANES: The device can perform a bitmask of color planes. D3DPMISCCAPS_MASKZ: The device can enable and disable modification of the depth buffer on pixel operations. dwRasterCaps D3DPRASTERCAPS_DITHER: The device can dither to improve color resolution. D3DPRASTERCAPS_FOGVERTEX: The device calculates the fog value during the lighting operation, places the value into the alpha component of the D3DCOLOR value given for the specular member of the D3DTLVERTEX structure and interpolates the fog value during rasterization. D3DPRASTERCAPS_SUBPIXEL: The device performs subpixel placement of z, color, and texture data, rather than working with the nearest integer pixel coordinate. This helps avoid bleed-through due to z imprecision and jitter of color and texture values for pixels. There is no corresponding state that can be enabled and disabled; the device either performs subpixel placement, or it does not. This bit is present only so that the you can better determine what the rendering quality will be. D3DPRASTERCAPS_TRANSLUCENTSORTINDEPENDENT: The device supports translucency that is not dependent on the sort order of the polygons. For more information, see D3DRENDERSTATE_TRANSLUCENTSORTINDEPENDENT. D3DPRASTERCAPS_ZTEST: The device can perform z-test operations. This effectively renders a primitive and indicates whether any z pixels have been rendered. dwShadeCaps D3DPSHADECAPS_ALPHAFLATBLEND D3DPSHADECAPS_COLORFLATRGB D3DPSHADECAPS_COLORGOURAUDRGB D3DPSHADECAPS_FOGFLAT D3DPSHADECAPS_FOGGOURAUD D3DPSHADECAPS_SPECULARFLATRGB D3DPSHADECAPS_SPECULARGOURAUDRGB dwTextureCaps D3DPTEXTURECAPS_ALPHA: Supports RGBA textures in the D3DTBLEND_DECAL and D3DTBLEND_MODULATE texture filtering modes. If this capability is not set, only RGB textures are supported in those modes. Regardless of the setting of this flag, alpha must always be supported in D3DTBLEND_DECALMASK, D3DTBLEND_DECALALPHA, and D3DTBLEND_MODULATEALPHA filtering modes whenever those filtering modes are available. D3DPTEXTURECAPS_PERSPECTIVE: Perspective correction is supported. D3DPTEXTURECAPS_POW2: All nonmipmapped textures must have widths and heights specified as powers of 2. (Mipmapped textures must always have dimensions that are powers of 2.) D3DPTEXTURECAPS_TRANSPARENCY: Texture transparency is supported. (Only those texels that are not the current transparent color are drawn.) LineCaps: dwMiscCaps D3DPMISCCAPS_MASKPLANES: The device can perform a bitmask of color planes. D3DPMISCCAPS_MASKZ: The device can enable and disable modification of the depth buffer on pixel operations. dwRasterCaps D3DPRASTERCAPS_DITHER: The device can dither to improve color resolution. D3DPRASTERCAPS_FOGVERTEX: The device calculates the fog value during the lighting operation, places the value into the alpha component of the D3DCOLOR value given for the specular member of the D3DTLVERTEX structure and interpolates the fog value during rasterization. D3DPRASTERCAPS_SUBPIXEL: The device performs subpixel placement of z, color, and texture data, rather than working with the nearest integer pixel coordinate. This helps avoid bleed-through due to z imprecision and jitter of color and texture values for pixels. There is no corresponding state that can be enabled and disabled; the device either performs subpixel placement, or it does not. This bit is present only so that the you can better determine what the rendering quality will be. D3DPRASTERCAPS_TRANSLUCENTSORTINDEPENDENT: The device supports translucency that is not dependent on the sort order of the polygons. For more information, see D3DRENDERSTATE_TRANSLUCENTSORTINDEPENDENT. D3DPRASTERCAPS_ZTEST: The device can perform z-test operations. This effectively renders a primitive and indicates whether any z pixels have been rendered. dwShadeCaps D3DPSHADECAPS_ALPHAFLATBLEND D3DPSHADECAPS_COLORFLATRGB D3DPSHADECAPS_COLORGOURAUDRGB D3DPSHADECAPS_FOGFLAT D3DPSHADECAPS_FOGGOURAUD dwTextureCaps D3DPTEXTURECAPS_ALPHA: Supports RGBA textures in the D3DTBLEND_DECAL and D3DTBLEND_MODULATE texture filtering modes. If this capability is not set, only RGB textures are supported in those modes. Regardless of the setting of this flag, alpha must always be supported in D3DTBLEND_DECALMASK, D3DTBLEND_DECALALPHA, and D3DTBLEND_MODULATEALPHA filtering modes whenever those filtering modes are available. D3DPTEXTURECAPS_PERSPECTIVE: Perspective correction is supported. D3DPTEXTURECAPS_POW2: All nonmipmapped textures must have widths and heights specified as powers of 2. (Mipmapped textures must always have dimensions that are powers of 2.) D3DPTEXTURECAPS_TRANSPARENCY: Texture transparency is supported. (Only those texels that are not the current transparent color are drawn.) TextureOpCaps: dwTextureOpCaps The D3DTOP_ADD texture blending operation is supported by this device. The D3DTOP_BLENDDIFFUSEALPHA texture blending operation is supported by this device. The D3DTOP_BLENDFACTORALPHA texture blending operation is supported by this device. The D3DTOP_BLENDTEXTUREALPHA texture blending operation is supported by this device. The D3DTOP_DISABLE texture blending operation is supported by this device. The D3DTOP_MODULATE texture blending operation is supported by this device. The D3DTOP_SELECTARG1 texture blending operation is supported by this device. The D3DTOP_SELECTARG2 texture blending operation is supported by this device. Tue Aug 07 23:37:43 2007: TEXT CALLIBRATION pass 0 Tue Aug 07 23:37:43 2007: TDxTextureData::CreateSurface: Requesting 2097152, 3867776 available. Tue Aug 07 23:37:43 2007: TEXT CALLIBRATION pass 1 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -1.000000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.750000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.500000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.250000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 -0.250000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.000000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 0.000000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.250000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 0.250000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.500000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 0.500000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.750000 y: 0.000000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -1.000000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.750000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.500000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.250000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.750000 -0.250000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.000000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.750000 0.000000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.250000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.750000 0.250000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.500000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.750000 0.500000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.750000 y: 0.000000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -1.000000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.750000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.500000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.250000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.500000 -0.250000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.000000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.500000 0.000000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.250000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.500000 0.250000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.500000 y: 0.000000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -0.500000 0.500000 0.000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.750000 y: 0.000000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -1.000000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.750000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.500000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.250000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.000000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.250000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.500000 y: 0.000000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.750000 y: 0.000000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -1.000000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.750000 y: 0.250000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 -0.750000 0.250000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.500000 y: 0.250000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 -0.500000 0.250000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.250000 y: 0.250000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 -0.250000 0.250000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.000000 y: 0.250000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 0.000000 0.250000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.250000 y: 0.250000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.500000 y: 0.250000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.750000 y: 0.250000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -1.000000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.750000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.500000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.250000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.000000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.250000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.500000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.750000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -1.000000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.750000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.500000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.250000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.000000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.250000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.500000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.750000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -1.000000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.750000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.500000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.250000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.000000 y: 0.250000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.250000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.500000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.750000 y: 0.250000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -1.000000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.750000 y: 0.500000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 -0.750000 0.500000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.500000 y: 0.500000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 -0.500000 0.500000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.250000 y: 0.500000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 -0.250000 0.500000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.000000 y: 0.500000: 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION SUCCESS: -1.000000 0.000000 0.500000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.250000 y: 0.500000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.500000 y: 0.500000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.750000 y: 0.500000: 00000000 00ffffff 00ffffff 00000000 00000000 00ffffff 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -1.000000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.750000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.500000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.250000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.000000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.250000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.500000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.750000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -1.000000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.750000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.500000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.250000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.000000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.250000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.500000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.750000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -1.000000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.750000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.500000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.250000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.000000 y: 0.500000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.250000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.500000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.750000 y: 0.500000: 00000000 00000000 00ffffff 00000000 00000000 00000000 00ffffff 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -1.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 00ffffff Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 00ffffff Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: -0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 00ffffff Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 00ffffff Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00ffffff 00ffffff 00000000 00ffffff Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00ffffff 00ffffff 00000000 00ffffff Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -1.000000 x2: 0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00ffffff 00ffffff 00000000 00ffffff Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -1.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: -0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.750000 x2: 0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -1.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: -0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.500000 x2: 0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -1.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: -0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.000000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.250000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.500000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:44 2007: TEXT CALLIBRATION PIXELS x1: -0.250000 x2: 0.750000 y: 0.750000: 00000000 00000000 00000000 00000000 00000000 00ffffff 00000000 00000000 Tue Aug 07 23:37:46 2007: WM_PAINT 4064c 0 0 Tue Aug 07 23:37:46 2007: FORCING REDRAW Tue Aug 07 23:37:51 2007: WM_PAINT 4064c 0 0 Tue Aug 07 23:37:51 2007: FORCING REDRAW Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:25 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:26 2007: TPlatformData::Restore: mDirectDraw NULL. Calling SetDisplay() Tue Aug 07 23:38:26 2007: SetDisplay: 800x600, 0 Tue Aug 07 23:38:26 2007: WM_WINDOWPOSCHANGING: 0,0,0,0 Tue Aug 07 23:38:26 2007: WndProc: WM_KILLFOCUS, 263734, 0 Tue Aug 07 23:38:26 2007: WM_WINDOWPOSCHANGING: 0,0,0,0 Tue Aug 07 23:38:26 2007: WM_WINDOWPOSCHANGING: 0,0,0,0 Tue Aug 07 23:38:26 2007: WM_WINDOWPOSCHANGING: 0,0,525,394 Tue Aug 07 23:38:26 2007: SetDisplay:ReleaseAssets Tue Aug 07 23:38:26 2007: WM_PAINT 4064c 0 0 Tue Aug 07 23:38:26 2007: WM_PAINT 4064c 0 0 Tue Aug 07 23:38:45 2007: TDXContext::Create windowed:800x600, 16bpp Tue Aug 07 23:38:46 2007: Backbuffer info DDSURFACE: (525x394) Format: DDPF_RGB: Bits: 32 (R:00ff0000) (G:0000ff00) (B:000000ff) lPitch: 2112 DDSCAPS_3DDEVICE : This surface can be used for 3-D rendering. Applications can use this flag to ensure that a device that can render only to a certain heap has off-screen surfaces allocated from the correct heap. If this flag is set for a heap, the surface is not allocated from that heap. DDSCAPS_LOCALVIDMEM : This surface exists in true, local video memory, rather than nonlocal video memory. If this flag is specified, DDSCAPS_VIDEOMEMORY must be specified, as well. This flag cannot be used with the DDSCAPS_NONLOCALVIDMEM flag. DDSCAPS_OFFSCREENPLAIN : This surface is any off-screen surface that is not an overlay, texture, z-buffer, front-buffer, back-buffer, or alpha surface. It is used to identify plain surfaces. DDSCAPS_VIDEOMEMORY : This surface exists in display memory. Tue Aug 07 23:38:46 2007: Device identifier: Driver: 'atidrae.dll' Description: 'ATI Technologies, Inc. RAGE XL AGP 2X' Version: 0:0 Vendor ID: 1002 (4098) Device ID: 474d (18253) SubSys: : 81002 (528386) Revision: 65 (101) GUID: d7b71ee2:11cf040d:200873b2:35cdc2ca Tue Aug 07 23:38:46 2007: mDxContext->Create succeeded. Tue Aug 07 23:38:46 2007: Device desc: Surface Caps: D3DDEVCAPS_DRAWPRIMTLVERTEX: Device exports a DrawPrimitive-aware hardware abstraction layer (HAL). This flag was introduced in DirectX 5.0. D3DDEVCAPS_EXECUTESYSTEMMEMORY: Device can use execute buffers from system memory. D3DDEVCAPS_FLOATTLVERTEX: Device accepts floating point for post-transform vertex data. D3DDEVCAPS_HWRASTERIZATION: Device has hardware acceleration for scene rasterization. D3DDEVCAPS_SORTEXACT: Device needs data sorted exactly. D3DDEVCAPS_SORTINCREASINGZ: Device needs data sorted for increasing depth. D3DDEVCAPS_TEXTUREVIDEOMEMORY: Device can retrieve textures from device memory. D3DDEVCAPS_TLVERTEXSYSTEMMEMORY: Device can use buffers from system memory for transformed and lit vertices. D3DDEVCAPS_TEXTURENONLOCALVIDMEM: Device can retrieve textures from nonlocal video (AGP) memory. This flag was introduced in DirectX 5.0. For more information about AGP memory, see Using Non-local Video Memory Surfaces in the DirectDraw documentation. dwDeviceRenderBitDepth: 1280 Device's rendering bit depth. This can be one or more of the following DirectDraw bit-depth constants: DDBD_8, DDBD_16, DDBD_24, or DDBD_32. dwDeviceZBufferBitDepth: 1024 Bit depth of the device's depth-buffer. This can be one of the following DirectDraw bit-depth constants: DDBD_8, DDBD_16, DDBD_24, or DDBD_32. dwMinTextureWidth, dwMaxTextureWidth: 1, 1024 Minimum/Maximum texture width for this device. dwMinTextureHeight, dwMaxTextureHeight: 1, 1024 Minimum/Maximum texture height for this device. dwMaxTextureRepeat: 0 Full range of the integer bits of the post-normalized texture indices. If the D3DPTEXTURECAPS_TEXREPEATNOTSCALEDBYSIZE bit is set, the device defers scaling by the texture size until after the texture address mode is applied. If not set, the device scales the texture indices by the texture size (largest level of detail) prior to interpolation. dwMaxTextureAspectRatio: 0 Maximum texture aspect ratio supported by the hardware; this is typically a power of 2. dwMaxAnisotropy: 0 Maximum valid value for the D3DTSS_MAXANISOTROPY texture-stage state. dvGuardBandLeft, dvGuardBandTop, dvGuardBandRight, and dvGuardBandBottom: 0, 0, 0, 0 The screen-space coordinates of the guard-band clipping region. Coordinates inside this rectangle but outside the viewport rectangle are automatically clipped. dvExtentsAdjust: 0 Number of pixels to adjust the extents rectangle outward to accommodate antialiasing kernels. TriCaps: dwMiscCaps D3DPMISCCAPS_CULLCCW: The driver supports counterclockwise culling through the D3DRENDERSTATE_CULLMODE state. (This applies only to triangle primitives.) This corresponds to the D3DCULL_CCW member of the D3DCULL enumerated type. D3DPMISCCAPS_CULLCW: The driver supports clockwise triangle culling through the D3DRENDERSTATE_CULLMODE state. (This applies only to triangle primitives.) This corresponds to the D3DCULL_CW member of the D3DCULL enumerated type. D3DPMISCCAPS_CULLNONE: The driver does not perform triangle culling. This corresponds to the D3DCULL_NONE member of the D3DCULL enumerated type. D3DPMISCCAPS_MASKPLANES: The device can perform a bitmask of color planes. D3DPMISCCAPS_MASKZ: The device can enable and disable modification of the depth buffer on pixel operations. dwRasterCaps D3DPRASTERCAPS_DITHER: The device can dither to improve color resolution. D3DPRASTERCAPS_FOGVERTEX: The device calculates the fog value during the lighting operation, places the value into the alpha component of the D3DCOLOR value given for the specular member of the D3DTLVERTEX structure and interpolates the fog value during rasterization. D3DPRASTERCAPS_SUBPIXEL: The device performs subpixel placement of z, color, and texture data, rather than working with the nearest integer pixel coordinate. This helps avoid bleed-through due to z imprecision and jitter of color and texture values for pixels. There is no corresponding state that can be enabled and disabled; the device either performs subpixel placement, or it does not. This bit is present only so that the you can better determine what the rendering quality will be. D3DPRASTERCAPS_TRANSLUCENTSORTINDEPENDENT: The device supports translucency that is not dependent on the sort order of the polygons. For more information, see D3DRENDERSTATE_TRANSLUCENTSORTINDEPENDENT. D3DPRASTERCAPS_ZTEST: The device can perform z-test operations. This effectively renders a primitive and indicates whether any z pixels have been rendered. dwShadeCaps D3DPSHADECAPS_ALPHAFLATBLEND D3DPSHADECAPS_COLORFLATRGB D3DPSHADECAPS_COLORGOURAUDRGB D3DPSHADECAPS_FOGFLAT D3DPSHADECAPS_FOGGOURAUD D3DPSHADECAPS_SPECULARFLATRGB D3DPSHADECAPS_SPECULARGOURAUDRGB dwTextureCaps D3DPTEXTURECAPS_ALPHA: Supports RGBA textures in the D3DTBLEND_DECAL and D3DTBLEND_MODULATE texture filtering modes. If this capability is not set, only RGB textures are supported in those modes. Regardless of the setting of this flag, alpha must always be supported in D3DTBLEND_DECALMASK, D3DTBLEND_DECALALPHA, and D3DTBLEND_MODULATEALPHA filtering modes whenever those filtering modes are available. D3DPTEXTURECAPS_PERSPECTIVE: Perspective correction is supported. D3DPTEXTURECAPS_POW2: All nonmipmapped textures must have widths and heights specified as powers of 2. (Mipmapped textures must always have dimensions that are powers of 2.) D3DPTEXTURECAPS_TRANSPARENCY: Texture transparency is supported. (Only those texels that are not the current transparent color are drawn.) LineCaps: dwMiscCaps D3DPMISCCAPS_MASKPLANES: The device can perform a bitmask of color planes. D3DPMISCCAPS_MASKZ: The device can enable and disable modification of the depth buffer on pixel operations. dwRasterCaps D3DPRASTERCAPS_DITHER: The device can dither to improve color resolution. D3DPRASTERCAPS_FOGVERTEX: The device calculates the fog value during the lighting operation, places the value into the alpha component of the D3DCOLOR value given for the specular member of the D3DTLVERTEX structure and interpolates the fog value during rasterization. D3DPRASTERCAPS_SUBPIXEL: The device performs subpixel placement of z, color, and texture data, rather than working with the nearest integer pixel coordinate. This helps avoid bleed-through due to z imprecision and jitter of color and texture values for pixels. There is no corresponding state that can be enabled and disabled; the device either performs subpixel placement, or it does not. This bit is present only so that the you can better determine what the rendering quality will be. D3DPRASTERCAPS_TRANSLUCENTSORTINDEPENDENT: The device supports translucency that is not dependent on the sort order of the polygons. For more information, see D3DRENDERSTATE_TRANSLUCENTSORTINDEPENDENT. D3DPRASTERCAPS_ZTEST: The device can perform z-test operations. This effectively renders a primitive and indicates whether any z pixels have been rendered. dwShadeCaps D3DPSHADECAPS_ALPHAFLATBLEND D3DPSHADECAPS_COLORFLATRGB D3DPSHADECAPS_COLORGOURAUDRGB D3DPSHADECAPS_FOGFLAT D3DPSHADECAPS_FOGGOURAUD dwTextureCaps D3DPTEXTURECAPS_ALPHA: Supports RGBA textures in the D3DTBLEND_DECAL and D3DTBLEND_MODULATE texture filtering modes. If this capability is not set, only RGB textures are supported in those modes. Regardless of the setting of this flag, alpha must always be supported in D3DTBLEND_DECALMASK, D3DTBLEND_DECALALPHA, and D3DTBLEND_MODULATEALPHA filtering modes whenever those filtering modes are available. D3DPTEXTURECAPS_PERSPECTIVE: Perspective correction is supported. D3DPTEXTURECAPS_POW2: All nonmipmapped textures must have widths and heights specified as powers of 2. (Mipmapped textures must always have dimensions that are powers of 2.) D3DPTEXTURECAPS_TRANSPARENCY: Texture transparency is supported. (Only those texels that are not the current transparent color are drawn.) TextureOpCaps: dwTextureOpCaps The D3DTOP_ADD texture blending operation is supported by this device. The D3DTOP_BLENDDIFFUSEALPHA texture blending operation is supported by this device. The D3DTOP_BLENDFACTORALPHA texture blending operation is supported by this device. The D3DTOP_BLENDTEXTUREALPHA texture blending operation is supported by this device. The D3DTOP_DISABLE texture blending operation is supported by this device. The D3DTOP_MODULATE texture blending operation is supported by this device. The D3DTOP_SELECTARG1 texture blending operation is supported by this device. The D3DTOP_SELECTARG2 texture blending operation is supported by this device. Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585 Tue Aug 07 23:38:47 2007: DX Error: DirectDraw does not have enough display memory to perform the operation. , File .\dxtexturedata.cpp, Line 1585

I have no idea what all that stuff is. If you do not know what it relates to, just delete it. Also delete the ComboFix[1} folder. Please run the tool. Trevuren

A. You don't appear to be running any anti-virus software

Anti-virus software are programs that detect, clean, and/or erase harmful virus files on a computer. Unchecked, virus files can unintentionally be forwarded to others, and thereby spread infection. Keeping your anti-virus updated is essential.

Please download a free anti-virus software from one these excellent vendors NOW:

• Antivir PersonalEdition Classic .
• AVG Anti-Virus Free Edition

It is strongly recommended that you run only one antivirus program at a time. Having more than one antivirus program active in memory uses additional resources and can result in program conflicts and false virus alerts.


B. Using the Add/Remove program module in your Control Panel, please UNINSTALL the following "rogue" programs:

WinAnonymous
Easy SpyRemover

C. 1. Please open Notepad

• Click Start , then Run
• Type notepad .exe in the Run Box.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

KillAll::

File::
C:\WINDOWS\Internet Logs\xDB17.tmp
C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
C:\WINDOWS\system32\drivers\Msft_Kernel_ggsemc_01005.Wdf
C:\WINDOWS\system32\drivers\ggsemc.sys
C:\WINDOWS\system32\drivers\ggflt.sys
C:\WINDOWS\Internet Logs\xDB16.tmp
C:\WINDOWS\Internet Logs\xDB15.tmp
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_09_25_13_38_03_small.dmp.zip
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_09_25_13_37_11_full.dmp.zip
C:\WINDOWS\Internet Logs\xDB14.tmp
C:\WINDOWS\Internet Logs\xDB13.tmp
C:\WINDOWS\Internet Logs\xDB12.tmp
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_09_09_11_12_07_small.dmp.zip
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_09_09_11_10_01_small.dmp.zip
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_09_09_11_31_59_small.dmp.zip
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_09_09_11_31_46_small.dmp.zip
C:\WINDOWS\Internet Logs\tvDebug.zip
C:\WINDOWS\Internet Logs\xDB10.tmp
C:\WINDOWS\Internet Logs\xDB11.tmp
C:\WINDOWS\Internet Logs\xDB15B.tmp
C:\WINDOWS\Internet Logs\vsmon_on_demand_2007_09_01_19_05_41_full.dmp.zip
C:\WINDOWS\Internet Logs\xDB2B.tmp
C:\WINDOWS\Internet Logs\xDBF.tmp
C:\WINDOWS\Internet Logs\xDBE.tmp
C:\WINDOWS\Internet Logs\xDBD.tmp
C:\WINDOWS\Internet Logs\xDBC.tmp
C:\WINDOWS\Internet Logs\xDBB.tmp
C:\WINDOWS\Internet Logs\xDBA.tmp
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_08_04_19_48_23_small.dmp.zip
C:\WINDOWS\Internet Logs\zlclient_2nd_2007_08_04_19_47_36_small.dmp.zip
C:\WINDOWS\Internet Logs\xDB9.tmp
C:\WINDOWS\Internet Logs\xDB8.tmp
C:\WINDOWS\Internet Logs\xDB7.tmp
C:\WINDOWS\Internet Logs\xDB9.tmp
C:\WINDOWS\Internet Logs\xDB8.tmp
C:\WINDOWS\Internet Logs\xDB7.tmp
C:\Documents and Settings\Ian.KERRX4\5278.bat
C:\Documents and Settings\Ian.KERRX4\setup9x.exe
C:\WINDOWS\Internet Logs\vsmon_on_demand_2007_08_03_19_18_15_full.dmp.zip
C:\WINDOWS\Internet Logs\xDB6.tmp
C:\WINDOWS\Internet Logs\xDB5.tmp
C:\WINDOWS\Internet Logs\xDB3.tmp
C:\WINDOWS\Internet Logs\xDB4.tmp
C:\WINDOWS\Internet Logs\xDB1.tmp
C:\WINDOWS\Internet Logs\xDB2.tmp
C:\Documents and Settings\Antony\cnmss Canon SELPHY DS810 (Local).dll
C:\WINDOWS\SYSTEM32\gghkj.bak1
F:\InstallTomTomHOME.exe

Folder::
C:\Program Files\Easy SpyRemover
C:\Documents and Settings\Ian.KERRX4\Application Data\WinAnonymous
C:\Program Files\Common Files\WinAnonymous
C:\Documents and Settings\All Users.WINDOWS\Application Data\WinAnonymous
C:\Documents and Settings\All Users.WINDOWS\Application Data\SalesMon
C:\Program Files\SpywarePro

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareProMFC"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Easy SpyRemover"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fb56f953-fbf3-11db-8e83-00d059f24eab}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=-
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="" 
[-HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}]

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Save the above as CFScript.txt

4. Now drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

5. All your monitoring programs (Antivirus/Antispyware, Guards and Shields) will be stopped.

[external image: Posted Image]

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

6. ComboFix will automatically REBOOT your machine when the KillAll:: switch is used..

7. Post the following logs/Reports:

• ComboFix.txt
• Fresh HijackThis log run after all the other tools have performed their cleanup.

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

WinAnonymous Easy SpyRemover they're not there to remove, and i have zone alarm security installed, but not running at the moment

Good. Please continue with the fix.

it all ran ok, after rebooting, no log came up.

Please look for the log here: C:\ComboFix.txt, not 2 or 3, C:\ComboFix.txt

Finally, using Windows Explorer, (Windows Key +E), locate and DELETE the following file: C:\WINDOWS\SYSTEM32\gghkj.ini2<==File have looked and looked, and searched again and again there is no SYSTEM32 file on here.do i carry on