
912 P.2d 390 (1996)
139 Or. App. 379
STATE of Oregon, Respondent,
v.
Thomas Edmond MARQUEZ, Appellant.
Nos. CF93-0540; CA A82503.
Court of Appeals of Oregon.
Argued and Submitted January 31, 1996.
Decided February 28, 1996.
Steven V. Humber, Deputy Public Defender, argued the cause for appellant. With him on the brief was Sally L. Avera, Public Defender.
Timothy A. Sylwester, Assistant Attorney General, argued the cause for respondent. With him on the brief were Theodore R. *391 Kulongoski, Attorney General, and Virginia L. Linder, Solicitor General.
Before DEITS, P.J., and De MUNIZ and HASELTON, JJ.
De MUNIZ, Judge.
Pursuant to a plea agreement, defendant pled guilty to six counts of "computer crime," ORS 164.377(3), after he illegally accessed the Umatilla County computer system. The sentencing court imposed a presumptive 18-month probationary sentence on each conviction. The court also ordered defendant to pay $14,728 in restitution to the county. ORS 137.106. On appeal, defendant challenges only the order of restitution. We affirm.
We first address the state's argument that the claim of error is not reviewable under ORS 138.222(2)(a). That section precludes review of "[a]ny sentence that is within the presumptive sentence[.]" The presumptive probationary sentence was imposed here, and the state's position is that restitution is part of the "presumptive sentence" that we may not review under ORS 138.222(2)(a). The state argues:
"[T]he Supreme Court squarely held in [State v.] Adams[, 315 Or. 359, 847 P.2d 397 (1993),] that if appellate review of a `sentence' is precluded by any provision in ORS 138.222(2)(a) through (d), the `sentence' cannot be reviewed under subsection (4)(a), and this court squarely held in [State v.] Nelson, [127 Or.App. 741, 874 P.2d 108 (1994),] that a restitution order is part of the `sentence' for purposes of ORS 138.222(2). Reading those two cases and [State v.] Martin[, 320 Or. 448, 887 P.2d 782 (1994),] together, the unavoidable conclusion is that if a sentencing court imposes the `presumptive sentence,' ORS 138.222(2)(a) precludes appellate review of any part of the `sentence' imposed, including the restitution order." (Emphasis in original.)
In State v. Thompson, 138 Or.App. 247, 908 P.2d 329 (1995), we held that restitution is not part of the presumptive sentence for which ORS 138.222(2) precludes review. The state's argument here does not persuade us that our holding in Thompson was error. Our holding was based on State v. McFee, 136 Or.App. 160, 162, 901 P.2d 870, rev. allowed 322 Or. 362, 907 P.2d 248 (1995), where we stated that OAR 253-03-001(16) defines "presumptive sentence" as the sentence provided in the grid block and that the grid block provides the terms of incarceration or probation. Thus, it is the incarcerative or probationary terms that are "within the `presumptive sentence'" under ORS 138.222(2)(a). Restitution is not within the grid block and is, therefore, not within the presumptive sentence, review of which is precluded under ORS 138.222(2)(a).
The state's reliance on Nelson does not assist it. The issue in Nelson was not reviewability of a presumptive sentence under ORS 138.222(2)(a) but reviewability of a sentence after a negotiated plea under ORS 138.222(2)(d). The version of ORS 138.222(2)(d) in effect at the time of the defendant's sentence in Nelson, precluded review of "[a]ny sentence resulting from an agreement between the state and the defendant[.]" Under that version of ORS 138.222(2)(d), we held that the restitution imposed after the defendant's negotiated plea was part of the sentence and was not reviewable.[1] ORS 138.222(2)(d) does not address review of "presumptive" sentences.
We turn to defendant's argument that the court erred in imposing restitution. ORS 137.106 authorizes restitution for criminal activities that have "resulted in pecuniary damages," which means "special damages, but not general damages, which a person could recover against the defendant in a civil action[.]" ORS 137.103(2). The prerequisites to imposition of restitution are (1) criminal activities, (2) pecuniary damages, and (3) a causal relationship between the two. State v. Dillon, 292 Or. 172, 181, 637 P.2d 602 (1981). At the restitution hearing, the data processing manager for the county testified that the loss that resulted from "correcting" the problem *392 caused by defendant was $14,728, based on "lost labor and programming time and * * * down time on the computer for various departments." The losses were incurred over a month.
Defendant contends that there was no proof showing a causal connection between the crimes for which he was convicted and the restitution that was ordered. He first argues that he pled guilty only to accessing the county's computer on August 20, 1993, and that the restitution is for a period not covered by those crimes. Defendant claims that the presentence investigation states that defendant's access on August 20 was "intercepted and neutralized." Therefore, defendant argues, there is no showing that there could be any pecuniary damage related to the crimes for which he was convicted.
However, the counts to which defendant pled guilty alleged that the crimes were committed "on or about August 20," and the presentence investigation notes that defendant was suspected of an illegal access to the computer on August 18, the extent of which might not be known until a later date. Furthermore, the report notes that it was the "extent" of defendant's manipulation of the system on six illegal accesses on August 20 that was intercepted and neutralized, not that the access alone was intercepted. During the course of the August 20 access, defendant erased files in the tax assessor's office and instructed the computer to perform tasks different from those that an unknowing operator would be requesting. We agree with the state that there was evidence that all the claimed expenditures were incurred by the county as a result of unlawful entries into the computer system "on or about August 20," within the scope of the counts to which defendant pled guilty, and evidence from which the court could infer that defendant was responsible for those entries. The court could conclude that, although the "extent" of the August 20 entry was neutralized, nonetheless the county had expenses in investigating the entries. See State v. Lindsly, 106 Or.App. 459, 462, 808 P.2d 727 (1991) (investigation and repair expenses incurred by victim of computer crime qualified as pecuniary damages under ORS 137.103(2)).
Defendant next argues that the state failed to prove damage because part of the time for which claim was made was time spent by salaried employees who would have been working anyway. He relies on State v. Heath, 75 Or.App. 425, 706 P.2d 598 (1985), in which we vacated an order for restitution holding that the labor costs of the victim logging company, which were based on lost truck and supervisory time, were not directly attributable to the defendants' criminal conduct when they used their bodies to block a logging road. We reasoned that the company would have incurred those costs regardless of the defendants' conduct that prevented the company from working in that particular area but did not prevent it from working elsewhere.
However, the county here had to work on the problems created by defendant's criminal activity, and, while doing so, was prevented from working on other county business. The facts here are analogous not to those in Heath, but to those in Lindsly, an appeal from imposition of restitution after a conviction for computer crime. We held that the investigation of the defendant's computer system break-in went beyond the temporary restriction on work activities involved in Heath. Investigation of the computer break-in involved expertise and specialized technology that required a diversion of substantial resources, which was damage directly attributable to the defendant's criminal activity. Lindsly, 106 Or.App. at 462, 808 P.2d 727. The same is true here of the damages claimed for the labor and costs of county personnel.[2] But for defendant's criminal activity, *393 those resources would not have been diverted to investigation and interception. The court did not err in ordering restitution.
Affirmed.
NOTES
[1]  Following the Supreme Court's decision in State v. Kephart, 320 Or. 433, 887 P.2d 774 (1994), it is clear that review of restitution also would not be precluded by ORS 138.222(2)(d) as part of a "stipulated sentence" unless the parties had agreed to the restitution.
[2]  Defendant contends that a portion of the county's claim of $4,800 for lost program time was attributed to an outside service firm and that the evidence shows that that firm was paid a monthly fee and that no extra charge was made for services rendered to the county as a result of defendant's criminal activity. The county data manager recognized the assistance of the service provider but did not claim that the county lost money because of that assistance. He testified that the $4,800 was "actually time that wetwo weeks of our work that we lost and will have to redo at a certain point in time." In argument to the court, defendant's attorney acknowledged that the "development time of lost programs at $4800 [is] regular work hours and [that's] what [the manager] testified to, regular work hours."
