Chas, getting very odd results

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Conklin, Jun 22, 2004.

  1. Conklin

    Conklin Private First Class

    :rolleyes:

    Chas,

    This AM I couldn't get on Major Geeks at all for about an hour.
    When I did get on, there was no visible message from you for me.

    Just now I clicked on and found an abbreviated thread (3 messages total) with the same title we've been using, and with a message from you. Unfortunately I tried to click back to see the entire thread and now I can't find your message or my reply.

    Perhaps you might want to send me an eMail instead?
    I something goping on there? Or is it on my end?
    This spy-stuff WILL make one paranoid!

    bill
     
    Conklin, Jun 22, 2004
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Bill, The thread looks okay to me. I'm typing up a reply to your last message right now.
     
    chaslang, Jun 22, 2004
    #2
  3. Conklin

    Conklin Private First Class

    Don't recall full content of your last sendout, which I can not now find. But recall you wanted me to pursue tsmgr.exe. I ran a file-search on my entire C: drive for tsmgr.* and came up with nothing. AA shows two cookies again, atdtm and mediaplex. Spybot again shows the DSO Exploit, Avenue A and Multiplex entries. The computer, which had been running well, has slowed down again.


    Meanwhile on my desktop computer:

    I realize it is extremely confusing to have me talk about not one but two different computers. But right now, my desktop, which I used to send you messages about the laptop (which is what began this saga) is seemingly getting sicker. I have to feel like the problems I have had getting on MG bbs are part of it. AA scan once again shows atdmt.xt and mediaplex.txt cookies. Spybot now shows yet another entry for hitbox (now two entries), making a total of twelve...all the ones I told you about earlier today plus the new entry for hitbox. DSO (5 entries) Avenue A, Mediaplex, etc. I again removed all; they seem to return right away.
    I ran crapcleaner, ran the Peper trojan remover.

    I got an Ad-Watch 3 message on my desktop computer "an attempt to alter a protected object has been detected.
    Root:HKEY_Current_user
    Key: Software|microsoft\Internetexplorer\main
    Value: Search URL
    Data: http://www.the-exit.com/search
    New data:http://www.google.com
    "Please chhose how to procede"

    I chose to block it, though I thought up til now that Google was pretty trustworthy, and i use their toolbar.

    I am bemused by all this. bill
     
    Conklin, Jun 22, 2004
    #3
  4. Conklin

    Conklin Private First Class

    Even now, when I go to our original thread, there is no message from you earlier today. I know you sent one because I saw it briefly; it dealt with trying to find and isolate tsmgr.exe.

    Something is interfering with our communication. Diabolic!

    bill
     
    Conklin, Jun 22, 2004
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Bill, Are you able to read the other thread? I just posted some info there.

    Are both your desktop and laptop WinXP SP1?
     
    chaslang, Jun 22, 2004
    #5
  6. Conklin

    Conklin Private First Class

    Chas, no recent message from you on the original thread, though the box to the right indicates you are the most recent contributor. Could the thread be so long now that the bbs is trimming it?

    Yes, both computers are Win XP, SP-1

    I am attaching Hijack this from my desktop. You haven't asked for it yet but my guess is that you will. ;~))

    Logfile of HijackThis v1.97.7
    Scan saved at 8:40:34 PM, on 6/22/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
    C:\WINDOWS\System32\hphmon05.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\LTMSG.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    C:\Program Files\Logitech\MouseWare\system\em_exec.exe
    C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
    C:\Program Files\DIGStream\digstream.exe
    C:\WINDOWS\kdx\KHost.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
    C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\ClipCache\clipc.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
    C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
    C:\Program Files\HP\Digital Imaging\bin\hposol08.exe
    C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
    C:\Program Files\InboxCop\bin\inboxcopUI.exe
    C:\Program Files\HP\Digital Imaging\bin\hpoevm08.exe
    C:\Program Files\InboxCop\bin\inboxcop.exe
    C:\WINDOWS\System32\HPZipm12.exe
    C:\Program Files\InboxCop\bin\inboxcop.exe
    C:\Program Files\HP\Digital Imaging\Bin\hpoSTS08.exe
    C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe
    C:\Program Files\Ontrack\PowerDesk\PDEXPLO.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\InboxCop\bin\inboxcop.exe
    C:\My Downloads\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = http://www.the-exit.com/search
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us10.hpwis.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us10.hpwis.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us10.hpwis.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us10.hpwis.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;<local>
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://us10.hpwis.com/
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
    O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
    O4 - HKLM\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
    O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
    O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
    O4 - HKLM\..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 1150_1300\SetConfig.exe -c Direct -p IP_192.168.1.75 -pn "hp LaserJet 1300 PCL 6" -n 0 -l 1033 -sl 120000
    O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
    O4 - HKLM\..\Run: [Ad-watch] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe"
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ClipCache] C:\Program Files\ClipCache\clipc.exe /wait 3
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXE
    O4 - Startup: InboxCop.lnk = C:\Program Files\InboxCop\bin\inboxcopUI.exe
    O4 - Startup: spamsubtract.lnk = C:\Program Files\interMute\SpamSubtract\SpamSub.exe
    O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = ?
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: hpoddt01.exe.lnk = ?
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: officejet 6100.lnk = ?
    O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
    O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: >>> HARDCORE MOVIES <<< - javascript:{document.location='http://neosexvideo.com/webmasters/df060/access.htm';}
    O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: Print Using ClickBook (HKLM)
    O9 - Extra button: Research (HKLM)
    O10 - Broken Internet access because of LSP provider 'spsublsp.dll' missing
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/31bf494b7f8c860f4223/netzip/RdxIE601.cab
    O16 - DPF: {670821E0-76D1-11D4-9F60-009027A966BF} (YouBet Secure Data Transfer Control) - http://racing.youbet.com/wr_4_0/controls/ybrequest.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX22/download/kdx.cab
     
    Conklin, Jun 22, 2004
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I have no problem reading the old thread. Works just fine. And no it's not too long. We have some threads with thousands of messages (in the lounge).

    Try clearing your cache or hitting refresh too.
     
    chaslang, Jun 22, 2004
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Working on the HijaakThis log now.

    Do you want your search URL to be: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = http://www.the-exit.com/search

    And do you use the below service:
    KHost.exe Program Title:kdxRating:2 ( Not Required at Startup - Application Launcher, Microsoft Office Application )Comments:KonTiki Secure Delivery Plug In related. "The Kontiki Delivery Management System (DMS) is a secure delivery network for distribution of video, software, audio, documents, and other digital media. The Kontiki DMS enables enterprises to efficiently publish, secure, deliver and track digital media to employees, partners, and customers"
     
    chaslang, Jun 22, 2004
    #8
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Also do you need this DigStream stuff? Personally I would not want it.

    DIGStream Cache Manager - part of ESPN Motion that periodically checks for new videos periodically, downloading them in the background is available. Starting ESPN Motion starts digstream automatically
     
    chaslang, Jun 23, 2004
    #9
  10. Conklin

    Conklin Private First Class

    No, I cleared everything, and hit refresh. The last message on the thread was sent "today 00:10"


    Not only that but access was just denied me, and I had to re-enter my pass word.

    Your last message is not something I understand, tho it came through OK. I don't know about those start-up programs.

    bill
     
    Conklin, Jun 23, 2004
    #10
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm not sure what message you mean. Give me some of the text.


    You mean Digstream and Khost? If so, I would take that to mean we can remove them?
     
    chaslang, Jun 23, 2004
    #11
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Bill,

    It's a wonder this laptop runs at all. With all the stuff that you have from Hewlett Packard and InBoxCop running, I'm amazed you have any resource left.

    What do you have and HP Digital Camera and HP Printer setup? You should ask them if all this stuff really needs to run at startup? I would think most can probably be run on demand.
     
    chaslang, Jun 23, 2004
    #12
  13. Conklin

    Conklin Private First Class

    This isn't the laptop, it's the desktop.

    I don't even know what Khost is, so I guess I can do without it. Digstream is not something I use right now, and Inbox Cop I could lose too.

    If you can figure out a way to hookup the hP stuff better, I'd welcome that too.

    I have the feeling that the desktop is gettin sicker. The thing with not getting some of the messages bothers me, and on our second thread, the messages are shuffled in time sequence rather than arranges by order of arrival.

    As I said from the beginning, I'm not a computer pro. I use my computers a lot and I'm pretty good at what I use them for. But I often don't really grasp what makes them tick. I'm like that with my car, too. Just show me where to put the key in! You'd be ASTONISHED at all the things I don't know!

    So bear with me. I appreciate all you've done for me, which is substantial, and I hope we can get on through this so that both computers work OK without me having to worry about them, so I can focus on my work with them. You truly do heroic work, and seem like you are there 24 hours a day. For all you do, thank you very much.

    bill
     
    Conklin, Jun 23, 2004
    #13
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Bill, Thanks for the kind words and vote of confidence.

    Okay so we are on the desktop. First let's look into whether or not those two applications can be uninstalled from Add/Remove programs (open Control Panel to see this). And look for anything like:
    The Kontiki Delivery Management System (DMS) or Khost
    and also
    DIGStream Cache Manager or ESPN Motion

    If they are there, uninstall them. Let me know hoe that goes.

    I'm not sure why you are have problems with view the threads properly. Is that happening of both computers?
     
    chaslang, Jun 23, 2004
    #14
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Bill,

    A quick question.... you do realize that when threads get to a certain length the start making multiple pages. You have to then change the page by clicking on the page number selection on the top right. Our first thread now has two pages.
     
    chaslang, Jun 23, 2004
    #15
  16. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay let's get started on the HijaakThis log you posted.

    Note the DigStream and KDX stuff may not be there anymore if you were able to uninstall via Add/Remove programs.
    Shut down all applications and run HijaakThis and fix (if still there):
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = http://www.the-exit.com/search
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
    O4 - HKLM\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: >>> HARDCORE MOVIES <<< - javascript:{document.location='http://neosexvideo.com/webmasters/df060/access.htm';}
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/31bf494...ip/RdxIE601.cab
    O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX22/download/kdx.cab

    This next line indicates a broken LSP chain.
    O10 - Broken Internet access because of LSP provider 'spsublsp.dll' missing
    You need to download LSP-Fix and run it to fix this. LSP-fix downloadable here: http://www.cexx.org/lspfix.htm

    1.Unzip and run LSPFix.
    2.Check 'I know what I'm doing'.
    3.Select spsublsp.dll in the Left Hand Side (Keep side)
    4.Click the right-pointing 'arrows' and move all instances of spsublsp.dll and nothing else to the Remove Side (RHS) side
    5.Click the 'Finished' button. (if you exit with the X at top right nothing happens)

    Reboot in safe mode and delete (if still there):
    C:\Program Files\DIGStream
    C:\WINDOWS\kdx
     
    chaslang, Jun 23, 2004
    #16

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds