Virus opprettet adminbruker på pcen. Hijackthislog

[arnizzz]

Her om dagen ble hele Panda Antivirus disabled. Så jeg kjørte housecall.trendmicro.com.

 

Den fant en god del trojanere. Men når jeg skal kjøre den "fix problems" så blir bare IE lukket.

 

Er litt skremt over at virusene har klart å opprette en egen admin-konto (phenix) som blir brukt til å kjøre uTorrent som står og koser seg. Har prøvd å disablet noen servicer jeg skjønner er crap, men kjenner jeg disse virusene rett så er de vel aktivert igjen i morgen.

 

I need help.

 

 

Logfile of HijackThis v1.99.1

Scan saved at 9:53:06 AM, on 9/7/2006

Platform: Windows 2003 SP1 (WinNT 5.02.3790)

MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)

 

Running processes:

C:\Documents and Settings\adminamj\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Panda Software\AVNT\WebProxy.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\dns.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Microsoft SQL Server\MSSQL$PADMINISTRATOR\Binn\sqlservr.exe

C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\bin\msmdsrv.exe

C:\Program Files\Montitech\NC_Net\OUTPUT\NC_Net.exe

C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe

c:\wamp\apache2\bin\Apache.exe

c:\wamp\mysql\bin\mysqld-nt.exe

C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe

C:\wamp\apache2\bin\Apache.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\rdpclip.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\Panda Software\AVNT\PSCtrlC.exe

C:\Program Files\Panda Software\AVNT\CpIcnMng.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\SAP\SAP Business One ServerTools\Service Manager\ServerManager.exe

C:\wamp\wampserver.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\cmd.exe

C:\WINDOWS\system32\cmd.exe

C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\devenv.exe

C:\dotnet\MamutAPIService\bin\Debug\MamutAPIService.vshost.exe

C:\WINDOWS\system32\cmd.exe

C:\Program Files\Mamut\Mamut.exe

C:\WINDOWS\system32\notepad.exe

C:\drift\mamutapiservice\MamutAPIService.exe

c:\wamp\mysql\bin\mysql.exe

C:\WINDOWS\system32\TskMan.exe

C:\WINDOWS\Debug\wpa\netsrv.exe

c:\wamp\mysql\bin\mysql.exe

C:\WINDOWS\system32\notepad.exe

C:\WINDOWS\system32\notepad.exe

C:\WINDOWS\system32\notepad.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\rdpclip.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\Panda Software\AVNT\PSCtrlC.exe

C:\Program Files\Panda Software\AVNT\CpIcnMng.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\SAP\SAP Business One ServerTools\Service Manager\ServerManager.exe

C:\WINDOWS\system32\scrnsave.scr

C:\WINDOWS\explorer.exe

C:\Program Files\Hijackthis\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [Panda Controller Client] "C:\Program Files\Panda Software\AVNT\PSCtrlC.exe"

O4 - HKLM\..\Run: [CpnIconMng] C:\Program Files\Panda Software\AVNT\CpIcnMng.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - Global Startup: SAP Business One Service manager.lnk = C:\Program Files\SAP\SAP Business One ServerTools\Service Manager\ServerManager.exe

O10 - Broken Internet access because of LSP provider 'c:\documents and settings\adminamj\windows\system32\mswsock.dll' missing

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1141717938421

O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://10.100.1.2/Remote/msrdp.cab

O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = amj.local

O17 - HKLM\Software\..\Telephony: DomainName = amj.local

O17 - HKLM\System\CCS\Services\Tcpip\..\{413EE200-8452-4128-95E3-EEA864588CD4}: NameServer = 10.100.3.27,10.100.3.26

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = amj.local

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: avldr - avldr.dll (file missing)

O20 - Winlogon Notify: dimsntfy - dimsntfy.dll (file missing)

O20 - Winlogon Notify: TPLogon - TPLogon.dll (file missing)

O23 - Service: Application Experience Lookup Service (AeLookupSvc) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Application Layer Gateway Service (ALG) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\alg.exe (file missing)

O23 - Service: Application Management (AppMgmt) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)

O23 - Service: Ati HotKey Poller - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\Ati2evxx.exe (file missing)

O23 - Service: Windows Audio (AudioSrv) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: SAP Business One Early Watch Alert (B1EwaService) - Unknown owner - C:\Program Files\SAP\SAP Business One ServerTools\EWA\EwaService.exe

O23 - Service: SAP Business One License Manager 2005 (B1Lic2005) - Unknown owner - C:\Program Files\SAP\SAP Business One ServerTools\License\B1License.exe

O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Computer Browser (Browser) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Panda NetworkSecure Service (CPntSrv) - Panda Software International - C:\Program Files\Panda Software\AVNT\CPntSrv.exe

O23 - Service: Cryptographic Services (CryptSvc) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: DCOM Server Process Launcher (DcomLaunch) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Distributed File System (Dfs) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\Dfssvc.exe (file missing)

O23 - Service: DHCP Client (Dhcp) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\dmadmin.exe (file missing)

O23 - Service: Logical Disk Manager (dmserver) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: DNS Server (DNS) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\dns.exe (file missing)

O23 - Service: DNS Client (Dnscache) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: DameWare NT Utilities 2.6 (DNTUS26) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\SYSTEM32\DNTUS26.EXE (file missing)

O23 - Service: Error Reporting Service (ERSvc) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Event Log (Eventlog) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\services.exe (file missing)

O23 - Service: Help and Support (helpsvc) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: HID Input Service (HidServ) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\lsass.exe (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: Workstation (lanmanworkstation) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: TCP/IP NetBIOS Helper (LmHosts) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: MamutAPIService (mamutapiservice) - Unknown owner - C:\drift\mamutapiservice\MamutAPIService.exe

O23 - Service: SQL Server FullText Search (MSSQLSERVER) (msftesql) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe" -s:MSSQL.1 -f:MSSQLSERVER (file missing)

O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.3\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)

O23 - Service: SQL Server (MSSQLSERVER) (MSSQLSERVER) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER (file missing)

O23 - Service: SQL Server Analysis Services (MSSQLSERVER) (MSSQLServerOLAPService) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\bin\msmdsrv.exe" -s "C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\Config (file missing)

O23 - Service: NC_Net - Montitech - C:\Program Files\Montitech\NC_Net\OUTPUT\NC_Net.exe

O23 - Service: Net Logon (Netlogon) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: Network Connections (Netman) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Network Location Awareness (NLA) (Nla) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: File Replication (NtFrs) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\ntfrs.exe (file missing)

O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: Removable Storage (NtmsSvc) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Panda Software Controller - Panda Software - C:\Program Files\Panda Software\AVNT\PSCTRLS.EXE

O23 - Service: Panda Function Service (PavFnSvr) - Panda Software - C:\Program Files\Panda Software\AVNT\PavFnSvr.exe

O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe

O23 - Service: Panda Antivirus Service (PavSrv) - Panda Software International - C:\Program Files\Panda Software\AVNT\PavSrv51.exe

O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\services.exe (file missing)

O23 - Service: Panda Network Manager (PnmSrv) - Panda Software - C:\Program Files\Panda Software\AVNT\PnmSrv.exe

O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: Panda IManager Service (PsImSvc) - Panda Software Internacional - C:\Program Files\Panda Software\AVNT\PsImSvc.exe

O23 - Service: Remote Access Auto Connection Manager (RasAuto) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Remote Access Connection Manager (RasMan) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Remote Registry (RemoteRegistry) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

O23 - Service: Remote Procedure Call (RPC) Locator (RpcLocator) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\locator.exe (file missing)

O23 - Service: Remote Procedure Call (RPC) (RpcSs) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Resultant Set of Policy Provider (RSoPProv) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\RSoPProv.exe (file missing)

O23 - Service: Special Administration Console Helper (sacsvr) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: SAP Business One BackUp Service (SBOBackUp) - Unknown owner - C:\Program Files\SAP\SAP Business One ServerTools\BackUp\B1backUp.exe

O23 - Service: SAP Business One DI Server (SBODI_Server) - Unknown owner - C:\Program Files\SAP\SAP Business One ServerTools\DI_Server\B1DI_Server.exe

O23 - Service: SAP Business One Messaging Service (SBOMail) - Unknown owner - C:\Program Files\SAP\SAP Business One ServerTools\Mailer\B1mail.exe

O23 - Service: Smart Card (SCardSvr) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\SCardSvr.exe (file missing)

O23 - Service: Task Scheduler (Schedule) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Secondary Logon (seclogon) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: System Event Notification (SENS) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Windows Firewall/Internet Connection Sharing (ICS) (SharedAccess) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Shell Hardware Detection (ShellHWDetection) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\spoolsv.exe (file missing)

O23 - Service: SQL Server Agent (MSSQLSERVER) (SQLSERVERAGENT) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLAGENT90.EXE" -i MSSQLSERVER (file missing)

O23 - Service: Microsoft Software Shadow Copy Provider (swprv) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Performance Logs and Alerts (SysmonLog) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\smlogsvc.exe (file missing)

O23 - Service: TAO NT Naming Service (TAO_NT_Naming_Service) - Unknown owner - C:\Program Files\SAP\SAP Business One ServerTools\License\NT_Naming_Service.exe

O23 - Service: Telephony (TapiSrv) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Terminal Services (TermService) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Program Files\Panda Software\AVNT\TPSrv.exe

O23 - Service: Distributed Link Tracking Client (TrkWks) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Upload Manager (uploadmgr) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Uninterruptible Power Supply (UPS) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\ups.exe (file missing)

O23 - Service: Virtual Disk Service (vds) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\vds.exe (file missing)

O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\vssvc.exe (file missing)

O23 - Service: Windows Time (W32Time) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: wampapache - Unknown owner - c:\wamp\apache2\bin\Apache.exe" -k runservice (file missing)

O23 - Service: wampmysqld - Unknown owner - c:\wamp\mysql\bin\mysqld-nt.exe

O23 - Service: Windows Management Instrumentation (winmgmt) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Windows.NET Framework (winnet) - Unknown owner - C:\WINDOWS\system32\netsvc.exe (file missing)

O23 - Service: Portable Media Serial Number Service (WmdmPmSN) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Windows Management Instrumentation Driver Extensions (Wmi) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Automatic Updates (wuauserv) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\system32\svchost.exe (file missing)

O23 - Service: Wireless Configuration (WZCSVC) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

O23 - Service: Network Provisioning Service (xmlprov) - Unknown owner - C:\Documents and Settings\adminamj\WINDOWS\System32\svchost.exe (file missing)

 

 

edit:

Dette er hva trendmicro fant (men klarte ikke å fikse):

BKDR_SERVU.DH 1 Infections

BKDR_AGENT.ENV 1 Infections

TROJ_GENERIC 1 Infections

PE_PARITE.A-O 18 Infections

PE_PARITE.A 664 Infections

Endret 7. september 2006 av arnizzz

[Pozzolan]

Er adminamj din konto?

 

Last ned ewido og kjør det. Har dessverre ikke så god erfaring med 2003.

Det du kan begynne med er å slette alle filene i hjt som står med (file missing) slik at loggen blir mer oversiktlig.

[berxter]

Det farligste er vel det Trend kaller PE_PARITE:

http://www.trendmicro.com/vinfo/virusencyc...2EA%2DO&VSect=P

 

Har heller ikke spesiell erfaring med 2003, men det skulle gå an å kjøre Trend sysclean

http://www.trendmicro.com/download/dcs.asp.

Hvorvidt Mcafee Stinger:

http://vil.nai.com/vil/stinger/

vil ha den ønskede effekten vet jeg ikke, men den er vel verd å prøve.

 

Bernt K

[Kasius De'Vias]

Om du vil bli kvitt så å si ALL spy/malware anbefaler jeg å installere og kjøre AdAware, SpyBot og Spyware Doctor, evnt. en ny versjon av en antivirus-software.

 

Burde bli kjørt i sikkerhetsmodus for å få fjernet mest mulig.

 

 

Dette er den trioen jeg kjører utenom antivirus-software. Har ikke hatt noe trøbbel med dette, ikke har jeg hatt noe rest igjen på maskinen.