Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:36:48, on 2.6.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Windows\mservice.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [MSN] C:\Windows\mservice.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O9 - Extra button: Lisää tämä blogiin - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Lisää tämä blogiin tuotteessa Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1212397316705 O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- End of file - 4262 bytes
1.Lataa combofix.exe työpöydällesi yhdestä linkistä: combofix1 combofix2 2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia. 3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi. Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
Siinäpä olis: ComboFix 08-06-01.6 - Omistaja 2008-06-02 23:51:58.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.516 [GMT 3:00] Running from: C:\Documents and Settings\Omistaja\Työpöytä\ComboFix.exe * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-05-02 to 2008-06-02 ))))))))))))))))) . 2008-06-02 22:26 . 2008-06-02 22:26 <KANSIO> d-------- C:\Program Files\Trend Micro 2008-06-02 21:50 . 2008-06-02 21:50 <KANSIO> d-------- C:\Program Files\Lavasoft 2008-06-02 21:50 . 2008-06-02 21:50 <KANSIO> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-06-02 21:50 . 2008-06-02 21:53 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-02 21:35 . 2008-06-02 21:35 96,950 -r-hs---- C:\WINDOWS\mservice.exe 2008-06-02 17:10 . 2008-06-02 17:10 <KANSIO> d-------- C:\Program Files\Nokia 2008-06-02 15:47 . 2008-06-02 15:54 <KANSIO> d-------- C:\Documents and Settings\Omistaja\Application Data\U3 2008-06-02 15:45 . 2008-06-02 15:45 <KANSIO> d-------- C:\Documents and Settings\Omistaja\Application Data\ATI 2008-06-02 15:40 . 2008-06-02 17:10 <KANSIO> d--h----- C:\Program Files\InstallShield Installation Information 2008-06-02 15:40 . 2008-06-02 15:41 <KANSIO> d-------- C:\Program Files\ATI Technologies 2008-06-02 15:40 . 2006-05-03 11:57 520,192 --------- C:\WINDOWS\system32\ati2sgag.exe 2008-06-02 15:25 . 2008-06-02 15:41 <KANSIO> d-------- C:\Program Files\Common Files\InstallShield 2008-06-02 15:24 . 2008-06-02 15:24 <KANSIO> d-------- C:\ATI 2008-06-02 15:24 . 2004-08-04 09:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-06-02 15:02 . 2008-06-02 15:15 <KANSIO> d-------- C:\Program Files\Winamp 2008-06-02 15:02 . 2008-06-02 15:15 <KANSIO> d-------- C:\Documents and Settings\Omistaja\Application Data\Winamp 2008-06-02 14:19 . 2008-06-02 14:19 1,160 --a------ C:\WINDOWS\mozver.dat 2008-06-02 14:16 . 2008-06-02 14:16 <KANSIO> d-------- C:\Program Files\Windows Live Toolbar 2008-06-02 14:16 . 2008-06-02 14:16 <KANSIO> d-------- C:\Documents and Settings\Omistaja\Contacts 2008-06-02 14:15 . 2008-06-02 14:15 <KANSIO> d----c--- C:\WINDOWS\system32\DRVSTORE 2008-06-02 14:09 . 2008-06-02 14:24 <KANSIO> d-------- C:\Program Files\Windows Live 2008-06-02 14:09 . 2008-06-02 14:15 <KANSIO> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller 2008-06-02 14:09 . 2008-06-02 14:09 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-06-02 14:05 . 2008-06-02 14:05 0 --a------ C:\WINDOWS\nsreg.dat 2008-06-02 12:32 . 2005-06-28 09:21 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-06-02 12:31 . 2008-06-02 12:31 <KANSIO> d-------- C:\WINDOWS\system32\bits 2008-06-02 12:31 . 2008-06-02 15:57 <KANSIO> d--h----- C:\WINDOWS\$hf_mig$ 2008-06-02 12:07 . 2004-09-15 02:12 351,232 --a------ C:\WINDOWS\system32\winhttp.dll 2008-06-02 12:07 . 2004-09-15 02:11 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2008-06-02 12:07 . 2004-09-15 02:11 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll 2008-06-02 12:07 . 2004-09-15 02:11 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll 2008-06-02 12:02 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll 2008-06-02 12:02 . 2007-07-30 19:18 34,136 --a------ C:\WINDOWS\system32\wucltui.dll.mui 2008-06-02 12:02 . 2007-07-30 19:18 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui 2008-06-02 12:02 . 2007-07-30 19:19 25,944 --a------ C:\WINDOWS\system32\wuapi.dll.mui 2008-06-02 12:02 . 2007-07-30 19:18 20,824 --a------ C:\WINDOWS\system32\wuaueng.dll.mui 2008-06-02 12:01 . 2008-06-02 12:01 <KANSIO> d---s---- C:\Documents and Settings\Omistaja\UserData 2008-06-02 12:01 . 2007-07-30 19:19 549,720 --a------ C:\WINDOWS\system32\wuapi.dll 2008-06-02 12:01 . 2007-07-30 19:19 325,976 --a------ C:\WINDOWS\system32\wucltui.dll 2008-06-02 12:01 . 2007-07-30 19:19 216,408 --a------ C:\WINDOWS\system32\wuaucpl.cpl 2008-06-02 12:01 . 2004-08-03 14:03 186,648 --a------ C:\WINDOWS\system32\wuaueng1.dll 2008-06-02 12:01 . 2004-08-03 14:02 168,728 --a------ C:\WINDOWS\system32\wuauclt1.exe 2008-06-02 12:01 . 2007-07-30 19:18 33,624 --a------ C:\WINDOWS\system32\wups.dll 2008-06-02 12:01 . 2008-06-02 12:01 13,646 --a------ C:\WINDOWS\system32\wpa.bak 2008-06-02 11:51 . 2004-08-04 09:15 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2008-06-02 11:51 . 2004-09-15 02:12 130,048 --a------ C:\WINDOWS\system32\ksproxy.ax 2008-06-02 11:51 . 2004-09-15 02:11 74,240 --a------ C:\WINDOWS\system32\usbui.dll 2008-06-02 11:51 . 2004-08-04 09:07 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2008-06-02 11:51 . 2004-09-15 02:06 57,216 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2008-06-02 11:51 . 2001-08-17 21:19 40,704 --a------ C:\WINDOWS\system32\drivers\es1371mp.sys 2008-06-02 11:51 . 2004-09-15 02:07 5,504 --a------ C:\WINDOWS\system32\drivers\intelide.sys 2008-06-02 11:51 . 2004-09-15 02:11 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2008-06-02 11:49 . 2008-06-02 23:30 <KANSIO> d-------- C:\WINDOWS\system32\CatRoot2 2008-06-02 11:49 . 2008-06-02 11:49 <KANSIO> d--h----- C:\Documents and Settings\Default User\Verkkoympäristö 2008-06-02 11:49 . 2008-06-02 11:49 <KANSIO> d-------- C:\Documents and Settings\Default User\Työpöytä 2008-06-02 11:49 . 2008-06-02 11:49 <KANSIO> d--h----- C:\Documents and Settings\Default User\Tulostinympäristö 2008-06-02 11:49 . 2008-06-02 11:49 <KANSIO> d-------- C:\Documents and Settings\Default User\Suosikit 2008-06-02 11:49 . 2008-06-02 10:58 <KANSIO> d--h----- C:\Documents and Settings\Default User\Mallit 2008-06-02 11:49 . 2008-06-02 11:49 <KANSIO> dr------- C:\Documents and Settings\Default User\Käynnistä-valikko 2008-06-02 11:49 . 2008-06-02 21:51 <KANSIO> d-------- C:\Documents and Settings\All Users\Työpöytä 2008-06-02 11:49 . 2008-06-02 10:59 <KANSIO> dr------- C:\Documents and Settings\All Users\Tiedostot 2008-06-02 11:49 . 2008-06-02 11:49 <KANSIO> d-------- C:\Documents and Settings\All Users\Suosikit 2008-06-02 11:49 . 2008-06-02 11:49 <KANSIO> d--h----- C:\Documents and Settings\All Users\Mallit 2008-06-02 11:49 . 2008-06-02 13:25 <KANSIO> dr------- C:\Documents and Settings\All Users\Käynnistä-valikko 2008-06-02 11:40 . 2008-06-02 11:40 <KANSIO> d-------- C:\Program Files\Alwil Software 2008-06-02 11:40 . 2003-03-18 23:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll 2008-06-02 11:40 . 2003-03-18 22:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll 2008-06-02 11:40 . 2003-02-21 06:42 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll 2008-06-02 11:31 . 2008-06-02 11:31 <KANSIO> d---s---- C:\WINDOWS\system32\Microsoft 2008-06-02 11:31 . 2005-02-22 10:54 265,984 -ra------ C:\WINDOWS\system32\drivers\MRV8335XP.sys 2008-06-02 11:06 . 2008-06-02 21:53 <KANSIO> d--hs---- C:\WINDOWS\Installer 2008-06-02 11:05 . 2008-06-02 11:49 <KANSIO> d--h----- C:\Documents and Settings\Omistaja\Verkkoympäristö 2008-06-02 11:05 . 2008-06-02 23:51 <KANSIO> d-------- C:\Documents and Settings\Omistaja\Työpöytä 2008-06-02 11:05 . 2008-06-02 11:49 <KANSIO> d--h----- C:\Documents and Settings\Omistaja\Tulostinympäristö 2008-06-02 11:05 . 2008-06-02 13:36 <KANSIO> dr------- C:\Documents and Settings\Omistaja\Suosikit 2008-06-02 11:05 . 2008-06-02 22:11 <KANSIO> dr------- C:\Documents and Settings\Omistaja\Omat tiedostot 2008-06-02 11:05 . 2008-06-02 10:58 <KANSIO> d--h----- C:\Documents and Settings\Omistaja\Mallit 2008-06-02 11:05 . 2008-06-02 11:49 <KANSIO> dr------- C:\Documents and Settings\Omistaja\Käynnistä-valikko 2008-06-02 11:05 . 2008-06-02 22:40 <KANSIO> d-------- C:\Documents and Settings\Omistaja 2008-06-02 11:05 . 2008-06-02 11:05 <KANSIO> d--hs---- C:\Documents and Settings\NetworkService 2008-06-02 11:05 . 2008-06-02 13:36 <KANSIO> d--hs---- C:\Documents and Settings\LocalService 2008-06-02 11:04 . 2008-06-02 11:04 8,192 --a------ C:\WINDOWS\REGLOCS.OLD 2008-06-02 11:03 . 2008-06-02 11:49 <KANSIO> d--h----- C:\WINDOWS\system32\config\systemprofile\Verkkoympäristö 2008-06-02 11:03 . 2008-06-02 11:49 <KANSIO> d-------- C:\WINDOWS\system32\config\systemprofile\Työpöytä 2008-06-02 11:03 . 2008-06-02 11:49 <KANSIO> d--h----- C:\WINDOWS\system32\config\systemprofile\Tulostinympäristö 2008-06-02 11:03 . 2008-06-02 11:49 <KANSIO> d-------- C:\WINDOWS\system32\config\systemprofile\Suosikit 2008-06-02 11:03 . 2008-06-02 10:58 <KANSIO> d--h----- C:\WINDOWS\system32\config\systemprofile\Mallit 2008-06-02 11:03 . 2008-06-02 11:49 <KANSIO> dr------- C:\WINDOWS\system32\config\systemprofile\Käynnistä-valikko 2008-06-02 11:02 . 2003-04-25 15:00 13,463,552 --a--c--- C:\WINDOWS\system32\dllcache\hwxjpn.dll 2008-06-02 11:01 . 2008-06-02 11:01 <KANSIO> d-------- C:\WINDOWS\system32\xircom 2008-06-02 11:01 . 2008-06-02 11:01 <KANSIO> d-------- C:\Program Files\microsoft frontpage 2008-06-02 11:00 . 2008-06-02 15:05 <KANSIO> d--hs---- C:\Documents and Settings\All Users\DRM 2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe . (((((((((((((((((((((((((((((((((((( Find3M-raportti )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-04-29 08:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 08:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 08:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys . (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet ))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-09-15 02:12 15360] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 02:19 79224] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2008-04-01 21:49 36352] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 16:41 45056] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-09-15 02:12 15360] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 02:20] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E] \Shell\AutoRun\command - E:\LaunchU3.exe -a [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fba208f0-30a1-11dd-804e-02112233b654}] \Shell\AutoRun\command - E:\LaunchU3.exe -a *Newly Created Service* - CATCHME . 'Ajoitetut tehtävät'-kansion sisältö "2008-06-02 19:58:01 C:\WINDOWS\Tasks\Tarkistetaan Windows Live -työkalurivin päivitykset.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-02 23:53:10 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-06-02 23:54:13 ComboFix-quarantined-files.txt 2008-06-02 20:54:08 Pre-Run: 32,401,154,048 tavua vapaana Post-Run: 32,404,987,904 tavua vapaana 152 --- E O F --- 2008-06-02 10:46:22
Avaa Muistio ja kopioi/liitä quoteboxin sisältö sinne: Tallenna se nimellä CFScript.txt Sitten raahaa CFScript ComboFix.exeen kuten alla. Käynnistä tietokone uudelleen pyydettäessä ja lähetä combofix.txt-tiedoston sisältö tänne. ========== scannaa hjt:llä merkkaa paina Fix checked O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O4 - HKLM\..\Run: [MSN] C:\Windows\mservice.exe ============ Missä palomuuri ============ Lataa Malwarebytes' Anti-Malware työpöydällesi. 1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman. 2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish. 3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version. 4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan. 5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset. 6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected. 7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt 8. Lähetä lokin sisältö seuraavassa viestissäsi.
