My computer has been infected with this virus Win32/TrojanDropper.AgentDGO and I am trying to clean it for 2 days not but with no luck at all.
I have tried several anti spyware and anti virus programs. They have found the threat and cleaned it but it comes coming back.
I read in another topic the same problem another user had and Simon helped him out.
I have downloaded two programs Simon advised the CC cleaner and Combofix.
I run them both and i saved the logs. Please find them below and I am hopping you will be able to help me fix this problem..Thanks in advance...
<b>COMBOFIX</b>
ComboFix 08-01-07.5 - KOSTAS 2008-01-09 16:32:37.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1253.1.1033.18.263 [GMT 2:00]
Running from: C:\Documents and Settings\KOSTAS\Desktop\ComboFix.exe
.
((((((((((((((((((((((((( Files Created from 2007-12-09 to 2008-01-09 )))))))))))))))))))))))))))))))
.
2008-01-09 10:35 . 2008-01-09 10:35 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-01-09 10:35 . 2008-01-09 10:35 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-01-08 17:31 . 2008-01-08 17:31 <DIR> d-------- C:\Program Files\CCleaner
2008-01-08 17:19 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-08 17:01 . 2008-01-08 17:28 <DIR> d-------- C:\Program Files\Ace Explorer
2008-01-08 17:01 . 2008-01-09 16:21 <DIR> d-------- C:\Documents and Settings\KOSTAS\Application Data\Ace Explorer
2008-01-08 12:30 . 2008-01-08 12:30 32,296 --a------ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2008-01-08 11:03 . 2008-01-08 11:03 <DIR> d-------- C:\Documents and Settings\KOSTAS\Application Data\Lavasoft
2008-01-08 10:59 . 2008-01-08 11:02 <DIR> d-------- C:\Program Files\Lavasoft
2008-01-08 10:48 . 2008-01-08 10:49 <DIR> d-------- C:\Program Files\Lavasoft RegHance
2008-01-07 21:39 . 2008-01-07 21:39 0 --a------ C:\WINDOWS\mozver.dat
2008-01-07 21:00 . 2008-01-09 16:28 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2008-01-07 20:03 . 2008-01-07 20:03 2,126 --a------ C:\WINDOWS\system32\wpa.dbl
2008-01-07 19:25 . 2005-08-31 00:07 263 -ra------ C:\WINDOWS\system32\KCMV3D.INI
2008-01-07 19:02 . 2008-01-07 19:02 <DIR> d--h----- C:\WINDOWS\PIF
2008-01-07 16:43 . 2008-01-07 17:49 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-07 14:26 . 2008-01-07 14:26 <DIR> d-------- C:\ESET NOD32 Home Antivirus 3.0.621 32bit
2008-01-07 13:54 . 2004-08-03 23:14 52,736 --a------ C:\WINDOWS\system32\drivers\i8042prt.sys
2007-12-28 15:23 . 2007-12-28 16:01 219 --a------ C:\WINDOWS\wcx_ftp.ini
2007-12-28 15:22 . 2007-12-28 15:22 <DIR> d-------- C:\totalcmd
2007-12-28 15:22 . 2007-12-28 16:16 866 --a------ C:\WINDOWS\wincmd.ini
2007-12-28 15:18 . 2007-12-28 15:18 <DIR> d-------- C:\mels
2007-12-28 11:54 . 2007-12-28 11:54 <DIR> d-------- C:\Program Files\Tegopoulos-Fytrakhs
2007-12-28 11:54 . 1997-07-01 02:01 331,032 --a------ C:\WINDOWS\system32\Threed20.ocx
2007-12-28 11:54 . 1995-08-24 09:50 322,832 --a------ C:\WINDOWS\system32\Mfc30.dll
2007-12-28 11:54 . 1997-02-05 15:54 318,976 --a------ C:\WINDOWS\system32\gtList32.ocx
2007-12-28 11:54 . 1997-02-05 16:23 212,992 --a------ C:\WINDOWS\system32\gt-ld32.dll
2007-12-28 11:54 . 1996-10-24 10:50 108,544 --a------ C:\WINDOWS\system32\vbis4032.dll
2007-12-28 11:54 . 1995-10-27 11:16 46,008 --a------ C:\WINDOWS\system32\Mgptwn__.ttf
2007-12-28 11:54 . 2007-12-28 11:54 82 --a------ C:\WINDOWS\system32\lexiko.ini
2007-12-21 08:21 . 2007-12-21 08:21 33,800 --a------ C:\WINDOWS\system32\drivers\epfwtdir.sys
2007-12-21 08:20 . 2007-12-21 08:20 30,216 --a------ C:\WINDOWS\system32\drivers\easdrv.sys
2007-12-21 08:19 . 2007-12-21 08:19 39,944 --a------ C:\WINDOWS\system32\drivers\eamon.sys
2007-12-18 17:48 . 2007-12-18 17:48 <DIR> d-------- C:\Documents and Settings\KOSTAS\Application Data\Talkback
2007-12-17 12:56 . 2001-04-03 15:30 49,152 -ra------ C:\WINDOWS\system32\LMServer.exe
2007-12-17 12:56 . 2001-04-02 11:38 24,576 -ra------ C:\WINDOWS\system32\LMServerps.dll
2007-12-15 13:13 . 2003-10-06 04:00 323,584 --a------ C:\WINDOWS\system32\sdecdx61.dll
2007-12-15 13:13 . 2003-10-06 04:00 229,376 --a------ C:\WINDOWS\system32\sde61.dll
2007-12-15 13:13 . 2005-11-10 20:18 41,472 --a------ C:\WINDOWS\system32\indexudf.dll
2007-12-15 13:12 . 2007-12-15 13:17 <DIR> d-------- C:\Program Files\Dictionaries Explorer II
2007-12-14 15:54 . 2002-08-31 06:44 212,992 --a------ C:\WINDOWS\system32\NmUninst.exe
2007-12-14 10:38 . 2008-01-09 11:09 <DIR> d---s---- C:\Documents and Settings\KOSTAS\UserData
2007-12-13 17:23 . 2007-12-13 17:24 <DIR> d-------- C:\Documents and Settings\KOSTAS\Contacts
2007-12-13 16:57 . 2008-01-08 17:54 <DIR> d-------- C:\Program Files\MSN Messenger
2007-12-13 13:52 . 2008-01-04 14:48 <DIR> d-------- C:\FORTHCRS
2007-12-13 12:06 . 2008-01-08 14:44 <DIR> d-------- C:\Tair
2007-12-13 11:18 . 2007-12-13 11:19 <DIR> d-------- C:\Documents and Settings\KOSTAS\Application Data\WORLDSPAN
2007-12-13 11:15 . 2007-12-14 16:31 <DIR> d-------- C:\wspan
2007-12-13 10:44 . 2007-12-13 10:50 321 --a------ C:\tue.bat
2007-12-13 10:44 . 2007-12-13 10:50 319 --a------ C:\wed.bat
2007-12-13 10:44 . 2007-12-13 10:50 319 --a------ C:\thu.bat
2007-12-13 10:44 . 2007-12-13 10:50 319 --a------ C:\mon.bat
2007-12-13 10:44 . 2007-12-13 10:51 319 --a------ C:\fri.bat
2007-12-13 10:37 . 2007-12-13 10:37 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-12-13 10:33 . 2008-01-09 16:29 19,534 --a------ C:\WINDOWS\TF3_COLS.ini
2007-12-13 10:33 . 2008-01-09 16:29 4,317 --a------ C:\WINDOWS\TF3.ini
2007-12-13 10:32 . 2008-01-09 16:29 <DIR> d-------- C:\TempTFW
2007-12-13 10:32 . 2008-01-09 16:29 13,030 --a------ C:\PDOXUSRS.NET
2007-12-13 10:29 . 1998-10-02 19:00 327,168 --a------ C:\WINDOWS\IsUninst.exe
2007-12-13 10:28 . 2007-12-13 10:28 <DIR> d-------- C:\Program Files\Common Files\Borland Shared
2007-12-13 10:28 . 2007-12-13 10:28 <DIR> d-------- C:\Program Files\BDENT
2007-12-13 10:28 . 2007-12-13 10:28 <DIR> d-------- C:\Documents and Settings\KOSTAS\WINDOWS
2007-12-13 10:28 . 1999-03-23 09:12 299,520 --a------ C:\WINDOWS\uninst.exe
2007-12-13 10:28 . 1999-11-12 05:11 183,808 --a------ C:\WINDOWS\system32\bdeadmin.cpl
2007-12-13 10:20 . 2007-11-15 18:46 83,288 --a------ C:\WINDOWS\system32\LMIRfsClientNP.dll
2007-12-13 10:20 . 2007-08-03 15:09 46,112 --a------ C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
2007-12-13 10:20 . 2007-11-15 18:46 21,496 --a------ C:\WINDOWS\system32\LMIport.dll
2007-12-13 10:19 . 2008-01-02 10:07 <DIR> d-------- C:\Program Files\LogMeIn
2007-12-13 10:19 . 2007-11-15 18:46 87,352 --a------ C:\WINDOWS\system32\LMIinit.dll
2007-12-13 10:19 . 2007-12-13 10:19 1,024 --a------ C:\.rnd
2007-12-13 10:01 . 2007-12-13 10:01 <DIR> d-------- C:\Documents and Settings\KOSTAS\Application Data\MSN6
2007-12-13 10:01 . 2007-12-13 10:01 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\MSN6
2007-12-12 20:20 . 2008-01-07 18:08 <DIR> d-------- C:\Program Files\Google
2007-12-12 18:35 . 2007-12-12 18:35 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2007-12-12 18:22 . 2008-01-09 11:46 <DIR> d-------- C:\TF2000
2007-12-12 18:20 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2007-12-11 20:54 . 2007-12-11 20:54 <DIR> d---s---- C:\WINDOWS\system32\Microsoft
2007-12-11 20:50 . 2007-12-11 20:50 <DIR> d-------- C:\WINDOWS\provisioning
2007-12-11 20:47 . 2004-08-04 00:56 2,897,920 --a------ C:\WINDOWS\system32\xpsp2res.dll
2007-12-11 20:37 . 2007-12-11 20:37 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2007-12-11 20:09 . 2007-12-11 20:09 <DIR> d-------- C:\Program Files\Yahoo!
2007-12-11 20:09 . 2007-12-11 20:09 <DIR> d-------- C:\Program Files\Common Files\ACD Systems
2007-12-11 20:09 . 2007-12-11 20:09 <DIR> d-------- C:\Program Files\ACD Systems
2007-12-11 20:09 . 2007-12-11 20:09 <DIR> d-------- C:\Documents and Settings\KOSTAS\Application Data\ACD Systems
2007-12-11 20:09 . 2007-12-11 20:09 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ACD Systems
2007-12-11 20:04 . 2007-12-11 20:04 <DIR> d-------- C:\Documents and Settings\KOSTAS\Application Data\Logitech
2007-12-11 20:02 . 2007-12-11 20:02 0 --ah----- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2007-12-11 20:02 . 2007-12-11 20:02 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
2007-12-11 20:00 . 2007-12-11 20:00 <DIR> d-------- C:\Program Files\Logitech
2007-12-11 20:00 . 2007-12-17 12:56 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2007-12-11 20:00 . 2007-12-11 20:01 <DIR> d-------- C:\Program Files\Common Files\Logitech
2007-12-11 20:00 . 2007-12-11 20:00 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Logitech
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 14:26 --------- d-----w C:\Program Files\Common Files\Adobe
2008-01-07 19:34 158,208 ----a-w C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe
2008-01-07 19:34 158,208 ----a-w C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\MSConfig .exe
2008-01-07 19:30 --------- d-----w C:\Program Files\Xerox One Touch
2007-12-17 10:56 --------- d-----w C:\Program Files\Kyocera
2007-12-13 09:59 60,968 ----a-w C:\WINDOWS\java\GoToAssistDownloadHelper.exe
2007-12-11 19:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\ESET
2007-12-11 19:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\FLEXnet
2007-12-11 19:09 --------- d-----w C:\Program Files\Microsoft.NET
2007-12-11 19:09 --------- d-----w C:\Program Files\Microsoft ActiveSync
2007-12-11 18:34 155,995 ----a-w C:\WINDOWS\java\Packages\8E3HJP3T.ZIP
2007-12-11 18:00 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-12-11 17:57 --------- d-----w C:\Program Files\UIU
2007-12-11 17:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\ScanSoft
2007-12-11 17:52 --------- d-----w C:\Program Files\Scansoft
2007-12-11 17:52 --------- d-----w C:\Program Files\Common Files\scansoft shared
2007-12-11 17:49 270,336 ----a-w C:\WINDOWS\IHelper.exe
2007-12-11 17:26 --------- d-----w C:\Program Files\microsoft frontpage
2007-11-15 16:46 23,736 ----a-w C:\WINDOWS\system32\lmimirr.dll
2007-11-15 16:46 10,040 ----a-w C:\WINDOWS\system32\lmimirr2.dll
2003-07-15 13:33 225,280 ----a-w C:\WINDOWS\inf\i386\rtscan.dll
2002-10-09 08:11 61,440 ----a-w C:\WINDOWS\inf\i386\onetUSD.dll
2002-08-23 13:06 13,824 ----a-w C:\WINDOWS\inf\i386\Usbscan.sys
2002-07-09 07:23 36,864 ----a-w C:\WINDOWS\inf\i386\Vizmicro.dll
2002-05-20 07:20 172,032 ----a-w C:\WINDOWS\inf\i386\viceo.dll
.
<pre> ----a-w 1,460,560 2008-01-07 16:17:24 C:\Program Files\Spybot - Search & Destroy\TeaTimer .exe ----a-w 158,208 2008-01-07 19:34:10 C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\MSConfig .exe </pre>
((((((((((((((((((((((((((((( snapshot@2008-01-08_17.30.42.04 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-07-09 11:52:00 253,952 ----a-w C:\WINDOWS\Downloaded Program Files\CONFLICT.1\WSFileIO3.dll
+ 2002-01-31 12:54:04 3,732 ----a-w C:\WINDOWS\Downloaded Program Files\CONFLICT.1\WSMap.vbs
- 2008-01-08 08:25:23 29,926 ----a-r C:\WINDOWS\Installer\{571700F0-DB9D-4B3A-B03D-35A14BB5939F}\MsblIco.Exe
+ 2008-01-08 15:54:20 29,926 ----a-r C:\WINDOWS\Installer\{571700F0-DB9D-4B3A-B03D-35A14BB5939F}\MsblIco.Exe
- 2008-01-07 19:21:44 180,240 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-01-09 14:28:40 178,648 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2005-05-24 10:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2007-08-29 13:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2007-08-29 13:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2008-01-08 14:52 5674352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2003-10-06 15:16 5058560]
"IndexSearch"="C:\Program Files\Scansoft\PaperPort\IndexSearch.exe" [ ]
"Acrobat Assistant 8.0"="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 00:56 15360]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Hpm.lnk - C:\wspan\swgw\Hpm.exe [2007-12-13 12:05:02]
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2007-12-11 20:01:02]
Worldspan Filter Agent.lnk - C:\wspan\swgw\FilterAgent.exe [2007-12-13 11:18:02]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
--a------ 2008-01-08 12:19 1443072 C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
C:\WINDOWS\system32\vtutu.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI]
--a------ 2008-01-07 21:30 1 C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2008-01-08 14:52 5674352 C:\Program Files\MSN Messenger\MsnMsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NI.UGA6P_0001_N122M2210]
C:\DOCUME~1\KOSTAS\LOCALS~1\Temp\winvsnet.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2003-10-06 15:16 5058560 C:\WINDOWS\system32\NvCpl.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2003-10-06 15:16 49152 C:\WINDOWS\System32\NVMCTRAY.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2003-10-06 15:16 741376 C:\WINDOWS\system32\nwiz.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OneTouch Monitor]
--a------ 2008-01-07 21:30 1 C:\Program Files\Xerox One Touch\OneTouchMon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
--a------ 2008-01-07 20:37 1460560 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2007-12-21 08:21]
R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files\LogMeIn\x86\RaInfo.sys [2007-08-03 15:09]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\WINDOWS\system32\drivers\LMIRfsDriver.sys [2007-08-03 15:09]
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-09 16:33:16
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-01-09 16:33:42
ComboFix-quarantined-files.txt 2008-01-09 14:33:34
ComboFix2.txt 2008-01-09 14:31:22
ComboFix3.txt 2008-01-08 15:30:55
end COMBOFIX
CC CLEANER REPORT
ACDSee 9 Photo Manager
Ace Explorer (remove only)
Ad-Aware SE Professional
Adobe Flash Player ActiveX
CCleaner (remove only)
CDDRV_Installer
ESET NOD32 Antivirus
FileSpecs plug-in for Ad-Aware SE
GO! Res
Google Toolbar for Internet Explorer
HexDump plug-in for Ad-Aware SE
HijackThis 1.99.1
Host Print Manager
Kaspersky Online Scanner
KhalSetup
KM-NET Printer Disk Manager
Lavasoft Reghance 2.1 -licensed-
Logitech SetPoint
LogMeIn
LSP Explorer plug-in for Ad-Aware SE
MAGENTA - GOLDEN VERSION 2006 - English-Greek-English dictionar
MEL
Messenger-Control plug-in for Ad-Aware SE
Microsoft Office 2003 Estonian User Interface Pack
Microsoft Office 2003 Greek User Interface Pack
Microsoft Office 2003 Latvian User Interface Pack
Microsoft Office 2003 Russian User Interface Pack
Microsoft Office 2003 Ukrainian User Interface Pack
Microsoft Office Professional Edition 2003
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (2.0.0.11)
NetMos Multi-IO Controller
NVIDIA Display Driver
NVIDIA Windows 2000/XP nForce Drivers
OE/W Messengerctrl plug-in for Ad-Aware SE
PaperPort 8.0 SE
PaperPort Printer Driver
Spybot - Search & Destroy
Total Commander (Remove or Repair)
Tweak-SE plug-in for Ad-Aware SE
VX2 Cleaner plug-in for Ad-Aware SE
WebFldrs XP
Windows Installer 3.1 (KB893803)
Windows Live Messenger
Windows XP Service Pack 2
WinRAR 3.61 – Εφαρμογή Διαχείρισης Συμπιεσμένων Αρχείων
WinZip
WinZip Command Line Support Add-On 1.1 SR-1
Worldspan API
Xerox One Touch
Edited by Konstantinos, 09 January 2008 - 08:50 AM.