Forum Home
Press F1
Thread ID: 70458	2006-07-04 07:28:00	Browser Hijack/Sytem32 folder/Spybot Freezing	azar (10662)	Press F1

Post ID	Timestamp	Content	User
468427	2006-07-04 07:28:00	OS: Windows XP Pro SP2 CPU: Celeron 2.6 Ram : 1 Gig Using Avant browser Hi, something weird been happening every time i click on a link in google i get redirected to ad sites, unless I copy paste the link instead of clicking, OR click the link three times to get to the page I'm after. Ad-aware scan comes up clean, AVG and panda online scans come up clean. Spybot freezes soon after starting, and I cannot open my system32 folder without explorer crashing. Winpatrol as been warning me about dodgy 5 letter exe files trying to add themselves at startup from within the system32 folder (i.e ypphr.exe, jppsr.exe etc) but suddenly stopped and then I started getting this problem. Hijack this log shows nothing unusual to my untrained eye. Perhaps someone can see something in this that i can't. Logfile of HijackThis v1.99.1 Scan saved at 6:23:59 PM, on 7/4/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\Mixer.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINDOWS\system32\ps2.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Documents and Settings\Admin\Desktop\FAH502-Console.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Messenger\msmsgs.exe C:\Documents and Settings\Admin\Desktop\FahCore_78.exe C:\Program Files\YPOPs\YPOPs.exe C:\Program Files\Avant Browser\avant.exe C:\WINDOWS\system32\wscntfy.exe C:\PROGRA~1\MICROS~3\Office10\OUTLOOK.EXE C:\Program Files\Microsoft Office\Office10\WINWORD.EXE C:\Documents and Settings\Admin\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM\..\Run: [Versato] C:\WINDOWS\system32\USB_Kbd\Versato.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Startup: YPOPs.lnk = ? O8 - Extra context menu item: & Yahoo! Search - file:///C:\Program Files\ Yahoo! \Common/ycsrch.htm O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm O8 - Extra context menu item: Open In New Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser.htm O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\ Yahoo! \Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\ Yahoo! \Common/ycmap.htm O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\ Yahoo! \Common/ycsms.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\ Yahoo! \Common\yinsthelper.dll O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - acs.pandasoftware.com O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - h17000.www1.hp.com O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - 32red.microgaming.com O17 - HKLM\System\CCS\Services\Tcpip\..\{1BD5BAE2-BC54-4418-8FB8-B956AA9522DD}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{1CAD311E-F1E5-41E0-A7B3-B3D8E987573C}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{37E73A2E-4C4C-42D8-913C-2E06617044DE}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{5513E6B2-8B37-4A02-ACB2-9B847DADDE99}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{5C176E65-2A63-4542-A9ED-5662D5D24FF9}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.61 85.255.112.60 O17 - HKLM\System\CS1\Services\Tcpip\..\{1BD5BAE2-BC54-4418-8FB8-B956AA9522DD}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.114.61 85.255.112.60 O17 - HKLM\System\CS2\Services\Tcpip\..\{1BD5BAE2-BC54-4418-8FB8-B956AA9522DD}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.61 85.255.112.60 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: SharedDlls - C:\WINDOWS\system32\sfbcsp.dll (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: FAH@C:+Documents and Settings+Admin+Desktop+FAH502-Console.exe - Stanford University - C:\Documents and Settings\Admin\Desktop\FAH502-Console.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe	azar (10662)
468428	2006-07-04 08:29:00	You have got a Russian nasty.... You may want to print out these instructions for reference, since you will have to restart your computer during the fix. Please download FixWareout (downloads.subratam.org) Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal. When your system reboots, follow the prompts. Afterwards, HijackThis will launch. Please click Scan, and check the following items: O17 - HKLM\System\CCS\Services\Tcpip\..\{1BD5BAE2-BC54-4418-8FB8-B956AA9522DD}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{1CAD311E-F1E5-41E0-A7B3-B3D8E987573C}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{37E73A2E-4C4C-42D8-913C-2E06617044DE}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{5513E6B2-8B37-4A02-ACB2-9B847DADDE99}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\..\{5C176E65-2A63-4542-A9ED-5662D5D24FF9}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.61 85.255.112.60 O17 - HKLM\System\CS1\Services\Tcpip\..\{1BD5BAE2-BC54-4418-8FB8-B956AA9522DD}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.114.61 85.255.112.60 O17 - HKLM\System\CS2\Services\Tcpip\..\{1BD5BAE2-BC54-4418-8FB8-B956AA9522DD}: NameServer = 85.255.114.61,85.255.112.60 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.61 85.255.112.60 O20 - Winlogon Notify: SharedDlls - C:\WINDOWS\system32\sfbcsp.dll (file missing) C:\WINDOWS\system32\sfbcsp.dll <--- check that this file has been deleted Should you have problems connecting to the internet after the fix, follow these instrutions. Please go to Start -> Control Panel Network Connections. Rightclick on your default connection (usually Local Area Connection or Dial-up Connection if you are using Dial-up) and leftclick on Properties. Doubleclick on the Internet Protocol (TCP/IP) item and select the button that says "Obtain DNS servers automatically". Click OK twice, and restart your computer. Post a new log when done	Pancake (6359)
468429	2006-07-04 09:14:00	Did the trick me thinks, many many many thanks . :D This problem has been screwing my work up for the last few days . Logfile of HijackThis v1 . 99 . 1 Scan saved at 8:08:17 PM, on 7/4/2006 Platform: Windows XP SP2 (WinNT 5 . 01 . 2600) MSIE: Internet Explorer v6 . 00 SP2 (6 . 00 . 2900 . 2180) Running processes: C:\WINDOWS\System32\smss . exe C:\WINDOWS\system32\winlogon . exe C:\WINDOWS\system32\services . exe C:\WINDOWS\system32\savedump . exe C:\WINDOWS\system32\lsass . exe C:\WINDOWS\system32\Ati2evxx . exe C:\WINDOWS\system32\svchost . exe C:\WINDOWS\System32\svchost . exe C:\WINDOWS\system32\spoolsv . exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr . exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc . exe C:\WINDOWS\system32\CTsvcCDA . EXE C:\Documents and Settings\Admin\Desktop\FAH502-Console . exe C:\WINDOWS\system32\svchost . exe C:\Documents and Settings\Admin\Desktop\FahCore_78 . exe C:\WINDOWS\system32\wuauclt . exe C:\WINDOWS\system32\Ati2evxx . exe C:\WINDOWS\Explorer . EXE C:\WINDOWS\system32\wscntfy . exe C:\WINDOWS\Mixer . exe C:\Program Files\CyberLink\PowerDVD\PDVDServ . exe C:\Program Files\BillP Studios\WinPatrol\winpatrol . exe C:\WINDOWS\system32\ps2 . exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc . exe C:\Program Files\MSN Messenger\msnmsgr . exe C:\Program Files\Messenger\msmsgs . exe C:\Program Files\YPOPs\YPOPs . exe C:\Program Files\Avant Browser\avant . exe C:\WINDOWS\system32\NOTEPAD . EXE C:\Documents and Settings\Admin\Desktop\HijackThis . exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www . google . co . uk R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O4 - HKLM\ . . \Run: [C-Media Mixer] Mixer . exe /startup O4 - HKLM\ . . \Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ . exe" O4 - HKLM\ . . \Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol . exe O4 - HKLM\ . . \Run: [AtiPTA] atiptaxx . exe O4 - HKLM\ . . \Run: [Versato] C:\WINDOWS\system32\USB_Kbd\Versato . exe O4 - HKLM\ . . \Run: [KBD] C:\HP\KBD\KBD . EXE O4 - HKLM\ . . \Run: [PS2] C:\WINDOWS\system32\ps2 . exe O4 - HKLM\ . . \Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc . exe /STARTUP O4 - HKCU\ . . \Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr . exe" /background O4 - HKCU\ . . \Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs . exe" /background O4 - Startup: YPOPs . lnk = ? O8 - Extra context menu item: & Yahoo! Search - file:///C:\Program Files\ Yahoo! \Common/ycsrch . htm O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList . htm O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList . htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL . EXE/3000 O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight . htm O8 - Extra context menu item: Open All Links in This Page . . . - C:\Program Files\Avant Browser\OpenAllLinks . htm O8 - Extra context menu item: Open In New Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser . htm O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search . htm O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\ Yahoo! \Common/ycdict . htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\ Yahoo! \Common/ycmap . htm O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\ Yahoo! \Common/ycsms . htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs . exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs . exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\ Yahoo! \Common\yinsthelper . dll O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - . pandasoftware . com/activescan/as5free/asinst . cab" target="_blank">acs . pandasoftware . com O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - . www1 . hp . com/ewfrf-JAVA/Secure/HPGetDownloadManager . ocx" target="_blank">h17000 . www1 . hp . com O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - . microgaming . com/32red/FlashAX . cab" target="_blank">32red . microgaming . com O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp . dll" (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc . exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc . - C:\WINDOWS\system32\Ati2evxx . exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag . exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s . r . o . - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr . exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s . r . o . - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc . exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA . EXE O23 - Service: FAH@C:+Documents and Settings+Admin+Desktop+FAH502-Console . exe - Stanford University - C:\Documents and Settings\Admin\Desktop\FAH502-Console . exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc . - C:\Program Files\iPod\bin\iPodService . exe	azar (10662)
468430	2006-07-04 09:21:00	mmm.....no firewall. it would have told you when it first tryed to access the net.	tweak'e (69)
468431	2006-07-04 09:24:00	Yep thats all fine . Your good to go . . . . . . . If you wish to do so, here are a few things that you can do that will help keep your computer a bit more clean and secure . . If you have not already done so, you might want to run Disk Cleanup and run it in each user's profile: Run Disk Cleanup Click "Start > Programs > Accessories > System Tools > Disk Cleanup" Please make sure the following are checked: -- Downloaded Program Files -- Temporary Internet Files -- Recycle Bin -- Temporary Files Click "OK" and Disk Cleanup will delete those files for you . Now that you are clean its now is a good time to flush out your restored files . To flush the XP System Restore Points: (Using XP, you must be logged in as Administrator to do this . ) Go to Start>Run and type msconfig Press enter . When msconfig opens, click the Launch System Restore Button . On the next page, click the System Restore Settings Link on the left . Check the box labeled Turn Off System Restore . Reboot . Go back in and turn System Restore ON . A new Restore Point will be created . How Do I Protect My Computer Against Future Malware Now I'm Clean . NOTE:You may have already taken some of these steps . Update your anti-virus software & Windows operating system on a daily or weekly basis . Microsoft also distributes updates to its operating systems . These updates fix security holes or other problems that make a computer susceptible to security breaches . How to update your Windows operating system (http://www . windowsupdate . com/) Know What You're Installing Check the source . To avoid malware, make sure your software comes from a reputable source . Be particularly suspicious of sponsored software (software that relies on advertising) or software that claims to speed up your Internet connection . Use Custom Install . If you feel comfortable with software installation, you can choose Custom Install (as opposed to Typical Install) . Custom Install allows you to select only the software components you wish to install, and leave out others (such as potential spyware) . Modify Security Settings (Internet Explorer 6) To reduce the risk of installing malware, you can set Internet Explorer to high security mode . To do so: Open Internet Explorer . Go to Tools > Internet Options… . On the Internet Options screen, select the Security tab, then select the Internet icon (if it is not already selected) . Under Security level for this zone, click Default Level . Set the slider to High . Note: You may have to lower the security level to view certain Web sites . Next, select the Trusted Sites icon . Under Security level for this zone, click Default Level . Set the slider to Medium . Click Apply, then OK to save the changes . Some Recommended Protection Programs Each tool has its own strengths for identifying and removing specific types of malware . To thoroughly check your computer, its recommend that you use more than one malware removal program . Don't forget to back up your data files before starting a scan! Some available programs are: Ad-Aware (http://www . lavasoft . com/) SpyBot Search & Destroy ( . safer-networking . org/en/index . html" target="_blank">www . safer-networking . org) Now that you are clean, to help protect your system I recommend that you get the following free programs: SpywareBlaster ( . javacoolsoftware . com/spywareblaster . html" target="_blank">www . javacoolsoftware . com) to help prevent spyware from installing . SpywareGuard ( . javacoolsoftware . com/spywareguard . html" target="_blank">www . javacoolsoftware . com) to catch and block spyware . IESpy-Ad ( . aumha . org/secure . htm" target="_blank">www . aumha . org)to block access to malicious websites so you cannot be redirected to them from an infected site or email . WinPatrol (http://www . winpatrol . com/) to monitor any changes that programs make to the registry . If you do not have a firewall, here is a free one for personal use: ZoneAlarm (http://www . zonelabs . com/) . zonelabs . com/store/content/company/products/trial_zaFamily/trial_zaFamily . jsp?lid=home_freedownloads" target="_blank">www . zonelabs . com . zonelabs . com/store/content/company/products/znalm/comparison . jsp?dc=12bms&ctry=US&lang=en&lid=ho_za" target="_blank">www . zonelabs . com Before using or purchasing any Spyware/Malware protection/removal program, always check the Rogue/Suspect Spyware List . It will save you a lot of grief, as well as money if you are thinking of purchasing . Here is the link: . spywarewarrior . com/rogue_anti-spyware . htm" target="_blank">www . spywarewarrior . com If you want to know just how effective your anti-spyware program is, or how well any of the "rogue" programs listed at the above link work, check this for an independent comparison of several anti-spyware programs: . spywarewarrior . com/asw-test-guide . htm" target="_blank">www . spywarewarrior . com Here is a helpful article: "So how did I get infected in the first place?" . biz/postlite7736- . html" target="_blank">computercops . biz . pchelpforum . com/index . php?page=protect" target="_blank">www . pchelpforum . com Let us know if we have not resolved your problem . Otherwise, you are good to go . Happy and Safe Surfing!	Pancake (6359)
468432	2006-07-04 09:28:00	nice post pancake :)	tweak'e (69)
468433	2006-07-04 09:50:00	Yes.Its my standard "Im finished with you.Now get the heck out of it" speech. :D :D :D	Pancake (6359)
468434	2006-07-04 10:45:00	I haven't read our FAQs recently, but off the top of my head, that looks good enough to become one. (Note to those important people in charge of FAQs..)	Laura (43)
1