AVG picked these up this week

Trojan file name A016 3114.dll
path C:\system volume information\ _ (faof-ode7-c86e-4ee2 )
healable - no
source - backup copy
status infected


trojan file name A0160976.exe
path - C:\system volume information\ _ restore 9 faofdoe7-c86e-4ee2 )
healable - no
source - back up copy
status - infected


Trojan file name vbsys2.dll
path c\windows\system 32\
healable - no
source back up copy
status- infected



My question is what is the best way to handle these . Thanks .




.

put them in qurintetine and run a hijack this log and post it so we can go though it. i'd also turn system restore off untill you get cleaned then turn it back on so you have a clean back-up. virus like to get into you backup. what wimdows are you running. on xp go to start Control panel click on system click the system restore tab and click the little box turn off system restore the hit appy

The first two items are negligible. They are stored in a restore point/checkpoint on your computer. The easiest way to rid of them is to turn System Restore off, apply the changes, then be certain to turn it back ON again and apply the changes. Turning it off and on again like this (if you apply the on/off setting) will flush all old restore points and thus kill those files.

vbsys2.dll is arguably more on the adware/spyware side of things than a trojan - they consider it a trojan because it downloads and installs software on your system without your consent (which has actually tragic results often times). As with anything else showing up in the O20 and O21 lines of a HJT log, it is pretty tough to get rid of and a Hijackthis cleaning is not likely to help because it lodges itself into the O21 series of the HJT log (ShellServiceObjectDelayLoad) - in plain english, it's setup to load when you login and therefore simply "deleting it" or fixing the line in HJT is likely not to help.

I'd go install Ewido (www.ewido.com), update the program after installation but DO NOT SCAN. Reboot your computer in SAFE MODE. Scan while in safe mode and fix anything Ewido finds. Boot up in normal mode, then post a HJT log and we can help.

OK , I think I followed every thing properly and ewido found and acted on 7 items , so here is the requested HJL . I am running XP corperate . Thanks shifty .


Logfile of HijackThis v1.99.1
Scan saved at 10:21:41 PM, on 8/15/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\MMaestro\BWheel35.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\ktdata\sysmon32.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\NetZero\qsacc\x1exec.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://67-72chevyt/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.netzero.net/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7900
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 64.136.29.30;64.136.21.30;64.136.29.34;searchap.untd.com;127.0.0.1;localhost;*microsoft.com;*windows update.com;*wustat.windows.com;*.pogo.com;*.worldwinner.com;*test-speed.com;liveupdate.symantecliveupdate.com;*symantec.com;*.nai.com;*.networkassociates.com;*photosi te.com;*.dir.untd.com;*.prod.untd.com;<local>
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\NZSearch\SearchEnh1.dll
O2 - BHO: Popup-Blocker Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LWBMOUSE] C:\MMaestro\BWheel35.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Sysmon] c:\ktdata\sysmon32.exe
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [spc_w] "C:\Program Files\NZSearch\nzspc.exe" -w
O4 - HKCU\..\RunOnce: [untd_recovery] "C:\Program Files\NetZero\qsacc\x1exec.exe"
O8 - Extra context menu item: Display All Images with Full Quality - res://C:\Program Files\NetZero\qsacc\appres.dll/228
O8 - Extra context menu item: Display Image with Full Quality - res://C:\Program Files\NetZero\qsacc\appres.dll/227
O16 - DPF: {9AF6E7AE-D248-11D2-BFAA-00805F2392C0} (Smi Class) - http://wwemail.support.hp.com/fd2/objects/SysQuery.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2EAAA77C-2EF7-44A1-8C74-DF94D8BB13C9}: NameServer = 64.136.28.120 64.136.20.120
O17 - HKLM\System\CS1\Services\Tcpip\..\{2EAAA77C-2EF7-44A1-8C74-DF94D8BB13C9}: NameServer = 64.136.28.120 64.136.20.120
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

Looks good to me!

I would double-check and make sure that c:\windows\system 32\vbsys2.dll is no longer on the computer. Easiest way to do this is to click on the Start menu choose Search and hunt for files named vbsys2.dll

Meanwhile, I would disable and re-enable System Restore to flush any of those bad files (again) now that the computer is clean.

The search came up clean . Thanks for helping out again .

maybe not completely fixed. Most of the time I can not erase the history with internet options - clear history button . Even if I delete cookies & files still no go . I have a history eraser program ( Blackout ) and even that will not erase the history . I can delete each item one at a time by sending them to the recycle bin . What might the reason be for this history mystery ? Could it be a sry program that AVG is not finding ? Thanks .


.

I suppose that is possible - it could be - but it probably nuked something on its way out.

I am going to defer to theeldergeek.com:

http://www.theeldergeek.com/repair_ie6.htm

Try both of those options and see if it fixes your problem. If the first doesn't, the second should. Try #1 before #2. Also - you will need your XP recovery/install CD present to do both steps.

I suppose that is possible - it could be - but it probably nuked something on its way out.

I am going to defer to theeldergeek.com:

http://www.theeldergeek.com/repair_ie6.htm

Try both of those options and see if it fixes your problem. If the first doesn't, the second should. Try #1 before #2. Also - you will need your XP recovery/install CD present to do both steps.



Hi Shifty , I used method # 1 and it did the trick ---- but ---- after a couple of weeks it's right back to not taking commands to erase from both internet options and blackout eraser . Sometimes it will erase but mostly not . ???:confused: ???. Thanks



.

Have you tried to repeat step #1 in that link again, and see if it returns? I'm just curious to know if something has ended up corrupting something on your computer again....

I have not but I will rerun tonight .

Logfile of HijackThis v1.99.1
Scan saved at 1:30:47 PM, on 9/25/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\MMaestro\BWheel35.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\ktdata\sysmon32.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\NetZero\qsacc\x1exec.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\ktdata\datx32.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://67-72chevyt/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.netzero.net/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7900
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 64.136.29.30;64.136.21.30;64.136.29.34;searchap.untd.com;127.0.0.1;localhost;*microsoft.com;*windows update.com;*wustat.windows.com;*.pogo.com;*.worldwinner.com;*test-speed.com;liveupdate.symantecliveupdate.com;*symantec.com;*.nai.com;*.networkassociates.com;*photosi te.com;*.dir.untd.com;*.prod.untd.com;*.tvguide.com;<local>
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\NZSearch\SearchEnh1.dll
O2 - BHO: Popup-Blocker Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LWBMOUSE] C:\MMaestro\BWheel35.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Sysmon] c:\ktdata\sysmon32.exe
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [spc_w] "C:\Program Files\NZSearch\nzspc.exe" -w
O4 - HKCU\..\RunOnce: [untd_recovery] "C:\Program Files\NetZero\qsacc\x1exec.exe"
O8 - Extra context menu item: Display All Images with Full Quality - res://C:\Program Files\NetZero\qsacc\appres.dll/228
O8 - Extra context menu item: Display Image with Full Quality - res://C:\Program Files\NetZero\qsacc\appres.dll/227
O17 - HKLM\System\CCS\Services\Tcpip\..\{2EAAA77C-2EF7-44A1-8C74-DF94D8BB13C9}: NameServer = 64.136.20.121 64.136.28.121
O17 - HKLM\System\CS1\Services\Tcpip\..\{2EAAA77C-2EF7-44A1-8C74-DF94D8BB13C9}: NameServer = 64.136.20.121 64.136.28.121
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

That log looks clean - I believe you told me the stuff in C:\ktdata was the eraser program.

The only difference I really see is that right now you have some process running in the background called "datx32.exe" that was not present in any other log, but it also is running from the ktdata directory, so I guess it's not a problem.

I can't help but wonder if maybe the eraser program is causing the problem... Let me ask some questions about it:

Where did you buy it?
How much was it?
When did you buy it?
Who makes it?
What do you use it for - specifically, what things does it erase that are of importance?
What are the features that make it easy for you to use? That is to say, if you got a replacement, what are the things they make really easy to do that you would want in another similar program?

I'm asking that last couple of questions because I'd love to recommend another (hopefully free) alternative that would replace it. In all of my years of reading these logs, I have never seen that 'ktdata' folder, heard of this eraser program, and nobody has the filenames it runs very well archived in Google, which is rare.

That log looks clean - I believe you told me the stuff in C:\ktdata was the eraser program.

The only difference I really see is that right now you have some process running in the background called "datx32.exe" that was not present in any other log, but it also is running from the ktdata directory, so I guess it's not a problem.

I can't help but wonder if maybe the eraser program is causing the problem... Let me ask some questions about it:

Where did you buy it? ----local software dist and it was factory sealed

How much was it?--------------$50

When did you buy it?--------2 yr's ago

Who makes it?-----------Kinthec software



What do you use it for - specifically, what things does it erase that are of importance?---------Milspec - 7X - over write program

clean cashe
cookies
browser history
documents list
find history
run history
recycle bin
temp folder
activity info register
IE cashe cookies&store

shreads individual files on command

encription on command & a coupl of other things .



What are the features that make it easy for you to use? That is to say, if you got a replacement, what are the things they make really easy to do that you would want in another similar program?------------------------------------------- one click function from a prechecked list of items to clear




I'm asking that last couple of questions because I'd love to recommend another (hopefully free) alternative that would replace it. In all of my years of reading these logs, I have never seen that 'ktdata' folder, heard of this eraser program, and nobody has the filenames it runs very well archived in Google, which is rare.




Answers are in Quote



----I have used this for a couple of years with no problems. It always in harmony with the IE history , in fact I almost always use it instead of internet tools . Thanks








In addition to the above I stumbled on this in c \ progran files connection wizard and this is called history configeration settings

[date]
1=04/26/2006
[04/26/2006]
1=20:47:40
2=21:01:40
3=21:09:15
4=23:22:24
[04/26/2006-20:47:40]
TCP/IP enabled for NetZero=
TCP/IP implementation software is present=
Remote Access Service software is present=
Dial Up Adapter software is present=
Client for Microsoft Networks is present=
COM3 Port(s) not accessible.=Recommended to close all programs which are using these ports. Please restart the machine, if problem persists.
Lucent Win Modem is Not Accessible=Please Close the applications, which are using the port. Please restart the machine, if problem persists
No recommended modem driver is installed=Recommended to install proper driver
[04/26/2006-20:47:40-ext]
logid=<cwlog timestamp:"20060427034739" ms:"108" pid:"0XB14">

[04/26/2006-21:01:40]
TCP/IP enabled for NetZero=
TCP/IP implementation software is present=
Remote Access Service software is present=
Dial Up Adapter software is present=
Client for Microsoft Networks is present=
COM3 Port(s) not accessible.=Recommended to close all programs which are using these ports. Please restart the machine, if problem persists.
Lucent Win Modem is Not Accessible=Please Close the applications, which are using the port. Please restart the machine, if problem persists
No recommended modem driver is installed=Recommended to install proper driver
[04/26/2006-21:01:40-ext]
logid=<cwlog timestamp:"20060427040140" ms:"137" pid:"0XFDC">

[04/26/2006-21:09:15]
TCP/IP enabled for NetZero=
TCP/IP implementation software is present=
Remote Access Service software is present=
Dial Up Adapter software is present=
Client for Microsoft Networks is present=
No recommended modem driver is installed=Recommended to install proper driver
[04/26/2006-21:09:15-ext]
logid=<cwlog timestamp:"20060427040915" ms:"167" pid:"0X9B4">

[04/26/2006-23:22:24]
No conflicting software detected=
IE is set to online mode=
TCP/IP enabled for NetZero=
TCP/IP implementation software is present=
Remote Access Service software is present=
Dial Up Adapter software is present=
Client for Microsoft Networks is present=
COM3 Port(s) not accessible.=Recommended to close all programs which are using these ports. Please restart the machine, if problem persists.
Lucent Win Modem is Not Accessible=Please Close the applications, which are using the port. Please restart the machine, if problem persists
No recommended modem driver is installed=Recommended to install proper driver
[04/26/2006-23:22:24-ext]
logid=<cwlog timestamp:"20060427062223" ms:"618" pid:"0XC5C">



.


.

That connection wizard thing opens with notepad .

.

That last thing you are showing me there is a setup file from 04/27/2006 where it looks like Netzero was running some kind of installation wizard on your computer. IT may not have bene necessarily NetZero, but that is my guess.

I'll look into the Kintech stuff later. Thanks.

I repeated step one ( the eldergeek 1st method ) tonight and so far it's working again .


.

Ok, that's bizarre. That really suggests to me that something is getting corrupted somewhere -

Next question: When was the last time you scanned the drive for errors? You can quickly and easily do this by going to the Start Menu, choose "Run", then type in this command and press OK: chkdsk /r

It is important to include the " /r" part (there is a space in there!)

After clicking OK you will be prompted to reboot - please do. Let it scan your system and look for any bad sectors it may find.

My thought is, maybe it's possible that there are some failing sectors on the drive in the vicinity of the IE files that are constantly screwing up one of the system files? Otherwise, my only guess is that that Kintech software is doing something which leads to corruption or instability of a system file or other file associated with IE.

Well I got C:\windows\system 32\chkdsk.exe and it said

The type of the filesystem is NTFS
cannot lock current drive
chkdsk cannot run because the volume is in use by another process.

It then gave a yes or no option of running on the next start up but the y/n option would not work .

I then tried again off line but got the same results. :confused:

.

reboot the computer and see if it kicks in. that's a typical popup you would get and normally after that it will ask you "do you want to run on next reboot" and you would say "yes".

i'm not sure what you mean, "would not work". you would normally just click "yes" and reboot. then it would kick in on reboot.

Clicking the "y " gets me nothing even on reboot . Mean while the spot light is back on netzero . Todays AVG scan is telling me -

c:\ program files \ netzero\ qsacc\ turbocashe \ D0\ EB34

Possible exploit. WMF

EB3419D11921C8009D

Also today history erase is selective , sometimes it works sometimes it will not work . When it is not working if I hit the history erase button the history list flashes once . sometimes it will erase one list but not another . For example it might erase "most visited " but will not erase the lists ' By site " or " order visited today " . Thanks


.

That warning from AVG - basically Netzero gives you some software to optimize your browsing and it caches files from the internet. It saved something potentially bad in its surfing cache and AVG found it.

I can't help but wonder if there is some conflict in the triangle between Netzero software<->Kintech software<->IE that is causing the problem.

How long ago did you get Netzero for service? When was the last time the Netzero software was updated or downloaded and installed an update?

your idea net zero has some thing to do with it is with my line of thinking too . I have had constant problems ( keep getting booted ) with net zero after installing Hi-speed about a year ago . I have talked to net zero about 5 or 6 times and they reached the conclusion it was my modem driver luicient win . I have talked to Hewlett packard and they tell me that is not true my modem is up to the task . They say it is NZ .. I have updated my driver on the HP site and have reinstalled netzero several times from a recently provided net zero hi speed disc . the standard NZ program is loaded before the hi speed is added . I have tried removing the KT data program in the past and NZ still runs like crap . When my contract for hi-speed is up I am getting rid of it .


.

I would stick with hi-speed, but I would go with a different company. Over in AZ, the options should be pretty wide open.

I didn't know Netzero offered broaband access. :confused:

PS - you could always do this:

If you don't have an software installer for your Netzero stuff, go download one from their site (or something). If you have the install CD it came with, keep that handy.

Uninstall any of the browsing optimizer and browser tie-ins from NZ, but try to leave the connection-related software on the system. Reboot after each uninstall and test for the bad stuff you're seeing. If it improves, you found the culprit :) If you lose internet access, you can always reinstall the software.

I didn't know Netzero offered broaband access. :confused:


Not broadband but some kind of signal compression thing for faster dial up .I think they claim 5 times faster then regular dial up . I found out that NZ is tied up with some other company called Light speed or something like that to get the signal compression feature .

Thanks for your time spent and I will fool around with net zero and see what happens . :)


.