Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:57:20 AM, on 3/24/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\MozyHome\mozybackup.exe C:\WINDOWS\System32\nvsvc32.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\system32\fxssvc.exe C:\WINDOWS\BCMSMMSG.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\DellSupport\DSAgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MozyHome\mozystat.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS10 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oprah.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: (no name) - (53707962-6F74-2D53-2644-206D7942484F) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: DriveLetterAccess - (5CA3D70E-1895-11CF-8E15-001234567890) - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O2 - BHO: Windows Live Toolbar Helper - (BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Windows Live Toolbar - (BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1 O4 - Global Startup: MozyHome Status.lnk = C:\Program Files\MozyHome\mozystat.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O9 - Extra button: Real.com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: (F04A8AE2-A59D-11D2-8792-00C04F8EF29D) (Hotmail Attachments Control) - http://lw9fd.law9.hotmail.msn.com/activex/HMAtchmt.ocx O16 - DPF: (F5A7706B-B9C0-4C89-A715-7A0C6B05DD48) (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O17 - HKLM\System\CCS\Services\Tcpip\..\(4D7C7228-2B7C-4C19-AB8B-80BFC676C5B9): NameServer = 65.61.64.5,65.61.65.5 O17 - HKLM\System\CS1\Services\Tcpip\..\(4D7C7228-2B7C-4C19-AB8B-80BFC676C5B9): NameServer = 65.61.64.5,65.61.65.5 O17 - HKLM\System\CS2\Services\Tcpip\..\(4D7C7228-2B7C-4C19-AB8B-80BFC676C5B9): NameServer = 65.61.64.5,65.61.65.5 O18 - Protocol: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C:\Program Files\AVG\AVG8\avgpp.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: MozyHome Backup Service (mozybackup) - Mozy, Inc. - C:\Program Files\MozyHome\mozybackup.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe O24 - Desktop Component 0: (no name) - http://www.greys-media.com/main.jpg -- End of file - 7561 bytes I am still seeing windows live toolbar on here..weird. I will have to go back into add/remove and see if it is still listed.. could have swore i removed it

We have been having a number of car burglaries and home burglaries in our area. About two months ago, I was babysitting my grandson in my home. It was about 1:30, he was asleep in the closest bedroom to the family room. My dogs were in there and I was in my laundry room off the breakfast area. Amos barked and I came out to "hush" him so that he wouldn't wake Asher but I didn't actually go to see what he was barking at. I returned to the laundry room and about 2 minutes later I heard this very loud knocking on the front door. No doorbell, just loud knocking that went on and on. Of course the dogs both started barking and went to the front door. Asher started crying so I was ticked. I went to the door but didn't open it - I have glass on both sides so I could see out through the sheer curtains. The guy, kinda scruffy looking and in his 20's asked for Michelle. I told him that no one by that name lived here. The dogs were still barking and so he said he would back up - he then glanced at what I think was our house number and then said - I was looking for _______, a part reversal of our house number and asked if there was such a number on our street. I said No very sternly and he turned and walked away. I then noticed that his car was parked in front of our driveway and the driver door was open. I got a good look at the car and just thought something wasn't right about the whole situation. By this time my grandson was not happy and neither was I. A couple hours later I saw a police car going down our street. My grandson and I walked down the street and I could tell that the house three doors down had the front door off the hinges. I told the policewoman what happened at my house and she said I was very lucky that I had gone to the door. My description of events was exactly what the burglars do - they knock loudly so that if someone is home, you will hear them and answer. Then they make up a story and leave. If you don't answer - they kick in the front door - go directly to the bedrooms (which the closest was the one the baby was in), look for purses, money, jewerly, and drugs. They put stuff in your pillowcases and are in and out in just a few minutes. I was able to give a good description of the guy and car. I think he was caught a couple weeks later from what a neighbor saw happening on his way home for lunch one day but I was never asked to ID anyone. Of course we are still having home breakins so I know there is more than one doing this. What is really scary is that I had just been in another one of the bedrooms watching my one soap opera with my dogs and had just left to check on the laundry. I don't think my dogs would have heard him the first time, maybe the loud knocking but I probably wouldn't have with the door closed and TV on. BTW, when he left the neighbors house, he set the door back up so you couldn't tell from the street. He didn't get anything of value - only costume jewerly. The police said that if there is a car parked outside, it doesn't necessarily stop them - if someone doesn't answer the door and barking dogs don't either. They just kick the dogs aside or let them out the door. Scary to think this is happening in mid day and so brazen that it happens more than once in a single neighborhood. I make sure I go check on what the dogs bark at now and I leave my 62" TV on while Asher is sleeping - on mute but still its visible from the front door.

YEH!!! you got a new shelter dog!!! I live on 20 acres and have 16 dogs (all fixed). I keep them basically in three groups. I have lots of fencing and cross-fencing. My husband has electrified the bottom of the fence in some of the areas. I do have several that would kill each other if they got together but I've got it managed well. So I laugh when people think a third dog is "crazy." I don't work and that's helpful, of course. Late last year I did give my pug to rescue. There's a strong pug rescue group in my state so I knew she'd probably find a better place than here. I didn't think I could keep her from becoming obese. So I recently replaced her with a new shelter dog. He's so cute. He's gentle and quiet so far - an important thing when you have so much canine energy in one place. So many, many great dogs in the shelters - I could find one any day in there that I would just LOVE!!. vicky

Annie, love the pics. Really like the background colour above the stone and fireplace too...a little inspired by how well it works with black and white...hmmm We do have flea markets and garage sales - sadly they aren't very promising mostly. I go to flea markets and thrift stores all the time but you are more likely to find a velvet purple Elvis picture with plastic frame than anything else! Australia doesn't have a lot of history the way the States and UK do. Big cities like Melbourne and Sydney are different and better but pricey for anything nice. Gringe huh? Sounds like a Dr Seuss colour! And you are right, maybe a little muddy for me. I think I am liking a colour a bit like Annie's! Maybe a bit lighter as it such a big space and I have strong colour in all the bedrooms. Thanks again! Will try the rug too. Off to the shops feeling inspired! Will report back