hjt-log + combofix (problem)

[cannavaro]

hjt:

Klikk for å se/fjerne innholdet nedenfor

Logfile of HijackThis v1.99.1

Scan saved at 16:39:53, on 26.04.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

C:\WINDOWS\Explorer.EXE

C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe

C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe

C:\Programfiler\iTunes\iTunesHelper.exe

C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\Programfiler\Analog Devices\Core\smax4pnp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programfiler\MSN Messenger\MsnMsgr.Exe

C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Programfiler\Messenger\Msmsgs.exe

C:\Programfiler\iPod\bin\iPodService.exe

C:\Programfiler\WinZip\WZQKPICK.EXE

C:\Programfiler\iTunes\iTunes.exe

C:\Programfiler\MSN Messenger\usnsvc.exe

C:\Programfiler\Internet Explorer\iexplore.exe

C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Programfiler\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.channel4.com/sport/football_ita...planetjuve.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger

R3 - URLSearchHook: (no name) - {A8B28872-3324-4CD2-8AA3-7D555C872D96} - (no file)

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [ATIPTA] C:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programfiler\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [RegistrySmart] "C:\Program Files\RegistrySmart\RegistrySmart.exe" -boot

O4 - HKLM\..\Run: [soundMAXPnP] C:\Programfiler\Analog Devices\Core\smax4pnp.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Programfiler\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Programfiler\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Programfiler\Messenger\Msmsgs.exe" /background

O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programfiler\WinZip\WZQKPICK.EXE

O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O12 - Plugin for .spop: C:\Programfiler\Internet Explorer\Plugins\NPDocBox.dll

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1169647341859

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1176041650984

O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab

O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programfiler\SUPERAntiSpyware\SASWINLO.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

O23 - Service: ManageEngine Firewall Analyzer 4.0 (firewallanalyzer) - Unknown owner - C:\AdventNet\ME\Firewall\bin\wrapper.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programfiler\iPod\bin\iPodService.exe

 

 

combofix:

Klikk for å se/fjerne innholdet nedenfor

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

 

 

C:\WINDOWS\y.exe

C:\WINDOWS\system32\vbzip11.dll

C:\setup.exe

 

 

((((((((((((((((((((((((((((((( Files Created from 2007-03-26 to 2007-04-26 ))))))))))))))))))))))))))))))))))

 

 

2007-04-23 19:48 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\PROGRA~1\WinZip

2007-04-23 19:45 <DIR> d-------- C:\Program Files

2007-04-20 22:45 <DIR> d-------- C:\Programfiler\Uniblue

2007-04-20 22:45 <DIR> d-------- C:\DOCUME~1\FRANKO~1.000\PROGRA~1\Uniblue

2007-04-20 15:40 306,688 --a------ C:\WINDOWS\IsUn0414.exe

2007-04-20 15:32 8,704 --a------ C:\_ISDel.exe

2007-04-20 15:32 71 --a------ C:\Adiout.bat

2007-04-20 15:32 450 --a------ C:\os.dat

2007-04-20 15:32 23,888 --a------ C:\Adi_Rmv.exe

2007-04-20 15:32 23,541 --a------ C:\lang.dat

2007-04-20 15:32 192 --a------ C:\makedisk.bat

2007-04-20 15:32 1,172 --a------ C:\layout.bin

2007-04-20 15:32 <DIR> d-------- C:\setupdir

2007-04-20 14:46 577,536 --a------ C:\WINDOWS\soundman.exe

2007-04-20 14:46 49,152 --a------ C:\WINDOWS\SYSTEM32\ChCfg.exe

2007-04-20 14:46 4,027,840 -ra------ C:\WINDOWS\SYSTEM32\DRIVERS\alcxwdm.sys

2007-04-20 14:46 147,456 --a------ C:\WINDOWS\SYSTEM32\RtlCPAPI.dll

2007-04-20 14:46 10,528,768 --a------ C:\WINDOWS\SYSTEM32\RTLCPL.exe

2007-04-20 14:40 315,392 --a------ C:\WINDOWS\alcupd.exe

2007-04-20 14:40 217,088 --a------ C:\WINDOWS\alcrmv.exe

2007-04-20 14:40 <DIR> d-------- C:\Programfiler\Realtek AC97

2007-04-20 14:28 3,840 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\BANTExt.sys

2007-04-20 14:28 <DIR> d-------- C:\Programfiler\Belarc

2007-04-18 20:06 <DIR> d-------- C:\Programfiler\Messenger

2007-04-18 19:54 <DIR> d-------- C:\Programfiler\MSN Messenger

2007-04-18 17:05 <DIR> dr-h----- C:\DOCUME~1\FRANKO~1.000\Siste

2007-04-18 16:13 792,096 --ahs---- C:\WINDOWS\SYSTEM32\DRIVERS\fidbox.dat

2007-04-18 16:13 14,624 --ahs---- C:\WINDOWS\SYSTEM32\DRIVERS\fidbox2.dat

2007-04-18 16:03 4,212 ---h----- C:\WINDOWS\SYSTEM32\zllictbl.dat

2007-04-18 16:03 11,264 --a------ C:\WINDOWS\SYSTEM32\SpOrder.dll

2007-04-18 16:02 <DIR> d-------- C:\WINDOWS\Internet Logs

2007-04-18 15:45 <DIR> d-------- C:\AdventNet

2007-04-09 10:42 127,720 --a------ C:\WINDOWS\SYSTEM32\mucltui.dll

2007-04-09 10:42 <DIR> d-------- C:\DOCUME~1\NETWOR~1.000\Start-meny

2007-04-08 18:56 24,816 --a------ C:\WINDOWS\SYSTEM32\mdimon.dll

2007-04-07 12:17 <DIR> d-------- C:\WINDOWS\pss

2007-04-07 12:09 <DIR> d-------- C:\Programfiler\Yahoo!

2007-04-07 11:56 <DIR> d-------- C:\DOCUME~1\FRANKO~1.000\PROGRA~1\RegistrySmart

2007-04-05 22:13 <DIR> d-------- C:\Programfiler\Add Remove Pro

2007-04-05 22:09 <DIR> d-------- C:\Programfiler\CCleaner

2007-04-05 21:32 0 --a------ C:\WINDOWS\SYSTEM32\CMMGR32.EXE

2007-04-05 21:08 <DIR> d-------- C:\Programfiler\SUPERAntiSpyware

2007-04-05 21:08 <DIR> d-------- C:\DOCUME~1\FRANKO~1.000\PROGRA~1\SUPERAntiSpyware.com

2007-04-05 21:08 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\PROGRA~1\SUPERAntiSpyware.com

2007-04-05 20:53 3,968 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\AvgAsCln.sys

2007-04-05 13:14 <DIR> d-------- C:\WINDOWS\SxsCaPendDel

2007-04-03 18:37 <DIR> d-------- C:\Programfiler\Real Alternative

2007-04-02 22:27 <DIR> d-------- C:\Programfiler\Media Player Classic

2007-04-02 22:27 <DIR> d-------- C:\DOCUME~1\FRANKO~1.000\PROGRA~1\Real

2007-04-02 22:27 <DIR> d-------- C:\DOCUME~1\FRANKO~1.000\PROGRA~1\Media Player Classic

2007-04-02 22:27 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\PROGRA~1\Real

2007-04-02 14:16 4,608 --a------ C:\WINDOWS\SYSTEM32\W95INF32.DLL

2007-04-02 14:16 2,272 --a------ C:\WINDOWS\SYSTEM32\W95INF16.DLL

2007-04-02 14:16 17,408 --a------ C:\WINDOWS\SYSTEM32\shctxex.dll

2007-04-02 14:16 1,700,352 --a------ C:\WINDOWS\SYSTEM32\GdiPlus.dll

2007-04-02 10:54 <DIR> d---s---- C:\DOCUME~1\LOCALS~1.000\UserData

2007-03-30 22:49 134 --a------ C:\WINDOWS\SYSTEM32\sdpblxl.dat

2007-03-30 22:49 0 --a------ C:\WINDOWS\SYSTEM32\xpsp2rfs.dat

2007-03-30 22:49 0 --a------ C:\WINDOWS\SYSTEM32\wiavidem.dat

2007-03-30 22:49 0 --a------ C:\WINDOWS\SYSTEM32\snmpsnat.dat

2007-03-28 18:08 <DIR> d-------- C:\DOCUME~1\LOCALS~1.000\Start-meny

 

 

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

 

 

2007-04-22 20:37 -------- d-------- C:\DOCUME~1\FRANKO~1.000\PROGRA~1\limewire

2007-04-20 14:40 -------- d--h----- C:\Programfiler\installshield installation information

2007-04-19 21:20 48718 --a------ C:\WINDOWS\SYSTEM32\perfc014.dat

2007-04-19 21:20 324190 --a------ C:\WINDOWS\SYSTEM32\perfh014.dat

2007-04-08 23:10 -------- d-------- C:\Programfiler\gothic iii

2007-04-05 21:52 48865 --a------ C:\WINDOWS\SYSTEM32\msltuj40.dat

2007-04-05 21:25 8274 --a------ C:\WINDOWS\SYSTEM32\dhcpsapv.dat

2007-04-05 21:25 40974 --a------ C:\WINDOWS\SYSTEM32\jgsh4z0h.dat

2007-04-05 21:25 15471 --a------ C:\WINDOWS\SYSTEM32\netmar.dat

2007-04-05 21:25 0 --a------ C:\WINDOWS\SYSTEM32\wowfaxui.dat

2007-04-05 21:25 0 --a------ C:\WINDOWS\SYSTEM32\verifier.dat

2007-04-05 21:25 0 --a------ C:\WINDOWS\SYSTEM32\usp1qy.dat

2007-04-05 21:25 0 --a------ C:\WINDOWS\SYSTEM32\kbdge.dat

2007-04-05 20:11 -------- d-------- C:\Programfiler\itunes

2007-04-05 17:17 -------- d-------- C:\Programfiler\divx

2007-04-05 17:15 -------- d-------- C:\Programfiler\msn gaming zone

2007-04-01 12:31 724992 --a------ C:\WINDOWS\iun6002.exe

2007-03-30 22:49 426 --a------ C:\WINDOWS\SYSTEM32\rdocurds.dat

2007-03-24 14:25 -------- d-------- C:\DOCUME~1\FRANKO~1.000\PROGRA~1\lavasoft

2007-03-24 14:18 -------- d-------- C:\Programfiler\ubisoft

2007-03-24 14:18 -------- d-------- C:\Programfiler\cyanide

2007-03-23 20:07 325640 --a------ C:\WINDOWS\cbkjixb.dll

2007-03-17 23:55 -------- d-------- C:\Programfiler\black isle

2007-03-17 15:45 292864 --a------ C:\WINDOWS\SYSTEM32\winsrv.dll

2007-03-12 17:05 325640 --a------ C:\WINDOWS\wkvhq.dll

2007-03-08 17:39 577536 --a------ C:\WINDOWS\SYSTEM32\user32.dll

2007-03-08 17:39 40960 --a------ C:\WINDOWS\SYSTEM32\mf3216.dll

2007-03-08 17:39 281600 --a------ C:\WINDOWS\SYSTEM32\gdi32.dll

2007-03-08 17:38 1843584 --a------ C:\WINDOWS\SYSTEM32\win32k.sys

2007-03-04 11:31 330760 --a------ C:\WINDOWS\tkdpbk.dll

2007-03-01 16:43 330760 --a------ C:\WINDOWS\h.dll

2007-02-21 15:11 330760 --a------ C:\WINDOWS\jiihm.dll

2007-02-15 22:30 331272 --a------ C:\WINDOWS\hb.exe

2007-02-05 22:19 185344 --a------ C:\WINDOWS\SYSTEM32\upnphost.dll

2007-01-27 16:42 23404 --a------ C:\WINDOWS\SYSTEM32\emptyregdb.dat

2007-01-02 14:21 0 --a------ C:\DOCUME~1\FRANKO~1.000\PROGRA~1\qd info.ini

 

 

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

 

 

*Note* empty entries & legit default entries are not shown

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll

{9030D464-4C02-4ABF-8ECC-5164760863C6} C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]

"ATIPTA"="C:\\Programfiler\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"

"SunJavaUpdateSched"="\"C:\\Programfiler\\Java\\jre1.5.0_10\\bin\\jusched.exe\""

"ISUSPM Startup"="C:\\PROGRA~1\\FELLES~1\\INSTAL~1\\UPDATE~1\\ISUSPM.exe -startup"

"ISUSScheduler"="\"C:\\Programfiler\\Fellesfiler\\InstallShield\\UpdateService\\issch.exe\" -start"

"iTunesHelper"="\"C:\\Programfiler\\iTunes\\iTunesHelper.exe\""

"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP"

"!AVG Anti-Spyware"="\"C:\\Programfiler\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

"RegistrySmart"="\"C:\\Program Files\\RegistrySmart\\RegistrySmart.exe\" -boot"

"SoundMAXPnP"="C:\\Programfiler\\Analog Devices\\Core\\smax4pnp.exe"

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]

"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

"MsnMsgr"="\"C:\\Programfiler\\MSN Messenger\\MsnMsgr.Exe\" /background"

"SUPERAntiSpyware"="C:\\Programfiler\\SUPERAntiSpyware\\SUPERAntiSpyware.exe"

"MSMSGS"="\"C:\\Programfiler\\Messenger\\Msmsgs.exe\" /background"

 

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]

Source REG_SZ C:\Programfiler\NetMeeting\kyze.html

 

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]

Source REG_SZ C:\Programfiler\ComPlus Applications\howyry.html

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=""

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon

 

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa

Authentication Packages REG_MULTI_SZ msv1_0\0\0

Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0

Notification Packages REG_MULTI_SZ scecli\0\0

 

 

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]

HTTPFilter REG_MULTI_SZ HTTPFilter\0\0

LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0

NetworkService REG_MULTI_SZ DnsCache\0\0

DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0

rpcss REG_MULTI_SZ RpcSs\0\0

imgsvc REG_MULTI_SZ StiSvc\0\0

termsvcs REG_MULTI_SZ TermService\0\0

 

 

 

Contents of the 'Scheduled Tasks' folder

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

 

********************************************************************

 

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net

Rootkit scan 2007-04-26 16:43:33

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden services ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden processes: 0

hidden services: 0

hidden files: 0

 

 

********************************************************************

 

Completion time: 07-04-26 16:43:40

C:\ComboFix-quarantined-files.txt ... 07-04-26 16:43

Endret 26. april 2007 av cannavaro

[norbat]

Hei,

Hent Virtumundobegone, legg det på skrivebordet.

 

Kjør programmet. Det lages en logg som du kan poste sammen med en ny HJT-logg.

 

Fortell også litt hva du opplever som problem.