
Witam wszystkich. Jestem tutaj nowo zarejestrowany, ale nie znaczy to że nie przeglądam często tego forum, z którego dużo czerpię. Napisanie do was zmusiło mnie jednak nieporadzenie sobie samemu z problemem. A więc, najprawdopodobniej też mam problem z heur.w32. Objawy takie same jak kolega wyżej opisywał. Avast którego używam nie znajduje go, ale skaner online mks wyrzuca informacje o nim. Przyznam że nie wiem co dalej robić, czy mam wykonać wszystko to samo co proponowaliście wczesniej dla abdzela? Prosze o radę.
a to logi jakie zrobiłem
- Kod: Zaznacz wszystko
ComboFix 09-04-30.05 - Darek i Ewa 2009-05-01 9:01.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1250.48.1045.18.3069.1784 [GMT 2:00]
Uruchomiony z: c:\users\Darek i Ewa\Downloads\ComboFix.exe
FW: ZoneAlarm Firewall *enabled*
* Utworzono nowy punkt przywracania
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\x64
.
((((((((((((((((((((((((( Pliki utworzone od 2009-04-01 do 2009-05-01 )))))))))))))))))))))))))))))))
.
2009-05-01 06:48 . 2009-05-01 06:48 -------- d-----w c:\program files\Trend Micro
2009-05-01 06:35 . 2009-05-01 06:42 -------- d-----w c:\program files\SkanerOnline
2009-04-30 15:59 . 2009-05-01 06:38 -------- d-----w c:\program files\Panda Security
2009-04-29 17:45 . 2009-04-29 17:54 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\HiT-MM
2009-04-29 17:45 . 2009-04-29 20:51 -------- d---a-w c:\programdata\TEMP
2009-04-29 17:45 . 2009-04-29 20:51 -------- d---a-w c:\users\All Users\TEMP
2009-04-29 16:00 . 2009-04-29 16:00 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\VSRevoGroup
2009-04-28 20:22 . 2009-04-28 20:22 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\OpenOffice.org
2009-04-28 20:15 . 2009-04-28 20:15 -------- d-----w c:\program files\VS Revo Group
2009-04-27 19:21 . 2009-04-27 19:21 -------- d-----w c:\windows\Amelies Cafe
2009-04-27 19:21 . 2009-04-27 19:21 -------- d-----w c:\program files\Amelies Cafe
2009-04-27 18:57 . 2009-04-27 18:57 -------- d-----w c:\program files\OpenOffice.org 3
2009-04-27 16:55 . 2009-04-27 18:09 440864 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-04-27 16:37 . 2009-04-27 18:02 -------- d-----w c:\program files\Common Files\ParetoLogic
2009-04-27 16:37 . 2009-04-27 18:02 -------- d-----w c:\programdata\ParetoLogic
2009-04-27 16:37 . 2009-04-27 18:02 -------- d-----w c:\users\All Users\ParetoLogic
2009-04-27 16:36 . 2009-04-27 16:36 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Downloaded Installations
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Apple Computer
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Apple Computer
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Apple
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\program files\Apple Software Update
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\programdata\Apple
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\All Users\Apple
2009-04-27 15:02 . 2009-04-27 15:02 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Mozilla
2009-04-27 14:00 . 2009-04-27 14:00 -------- d-----w c:\users\Remek\AppData\Local\Toshiba
2009-04-26 19:09 . 2009-04-26 19:09 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Winamp Toolbar
2009-04-26 05:07 . 2009-04-26 05:07 -------- d-----w c:\programdata\Alex Gordon
2009-04-26 05:07 . 2009-04-26 05:07 -------- d-----w c:\users\All Users\Alex Gordon
2009-04-26 05:00 . 2009-04-26 05:00 53248 ----a-w c:\windows\system32\unrar.dll
2009-04-26 04:58 . 2009-04-26 04:58 -------- d-----w c:\program files\Alex Gordon
2009-04-26 04:33 . 2009-04-26 04:33 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Microsoft Games
2009-04-25 18:59 . 2009-04-25 18:59 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\DAEMON Tools
2009-04-25 18:59 . 2009-04-25 18:59 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\DAEMON Tools Pro
2009-04-25 18:59 . 2009-04-25 18:59 6944 ----a-w c:\users\Darek i Ewa\AppData\Local\d3d9caps.dat
2009-04-25 10:00 . 2009-04-25 10:00 -------- d-----w c:\users\Remek\AppData\Local\Opera
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----w c:\users\Remek\AppData\Roaming\ATI
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----w c:\users\Remek\AppData\Local\ATI
2009-04-25 09:59 . 2009-04-25 09:59 82720 ----a-w c:\users\Remek\AppData\Local\GDIPFONTCACHEV1.DAT
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----w c:\users\Remek\AppData\Local\Google
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----r c:\users\Remek\Searches
2009-04-24 22:12 . 2008-05-27 05:17 11776 ----a-w c:\windows\system32\msshooks.dll
2009-04-24 21:52 . 2009-04-24 21:52 -------- d-----w c:\windows\system32\IOSUBSYS
2009-04-24 21:42 . 2009-04-24 21:42 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Toshiba
2009-04-24 21:23 . 2009-04-24 21:23 -------- d-----w c:\programdata\DAEMON Tools Lite
2009-04-24 21:23 . 2009-04-24 21:23 -------- d-----w c:\users\All Users\DAEMON Tools Lite
2009-04-24 21:23 . 2009-04-24 21:23 -------- d-----w c:\program files\DAEMON Tools Lite
2009-04-24 21:16 . 2009-04-24 21:16 -------- d-----w c:\program files\Common Files\Adobe
2009-04-24 21:14 . 2009-04-24 21:14 -------- d-----w c:\programdata\IsolatedStorage
2009-04-24 21:14 . 2009-04-24 21:14 -------- d-----w c:\users\All Users\IsolatedStorage
2009-04-24 21:14 . 2009-04-24 21:14 -------- d-----w c:\program files\CCleaner
2009-04-24 21:13 . 2009-04-24 21:13 717296 ----a-w c:\windows\system32\drivers\sptd.sys
2009-04-24 21:13 . 2009-04-26 05:00 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\DAEMON Tools Lite
2009-04-24 21:13 . 2009-04-24 21:13 -------- d-----w c:\program files\NAPI-PROJEKT
2009-04-24 21:07 . 2008-02-23 02:41 22528 ----a-w c:\windows\system32\netiougc.exe
2009-04-24 21:07 . 2008-02-23 04:38 170496 ----a-w c:\windows\system32\tcpipcfg.dll
2009-04-24 21:06 . 2009-05-01 06:33 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Draco Organizer
2009-04-24 21:04 . 2009-04-24 21:04 -------- d-----w c:\programdata\CheckPoint
2009-04-24 21:04 . 2009-04-24 21:04 -------- d-----w c:\users\All Users\CheckPoint
2009-04-24 21:04 . 2009-05-01 06:50 -------- d-----w c:\windows\Internet Logs
2009-04-24 21:02 . 2009-04-24 21:02 -------- d-----w c:\programdata\Azureus
2009-04-24 21:02 . 2009-04-24 21:02 -------- d-----w c:\users\All Users\Azureus
2009-04-24 21:02 . 2009-04-30 15:52 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Azureus
2009-04-24 21:02 . 2009-04-24 21:07 -------- d-----w c:\program files\AskBarDis
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\programdata\Winamp Toolbar
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\users\All Users\Winamp Toolbar
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\program files\Winamp Toolbar
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\program files\Common Files\PX Storage Engine
2009-04-24 20:59 . 2009-04-24 21:28 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Winamp
2009-04-24 20:59 . 2009-04-30 15:44 -------- d-----w c:\program files\Winamp
2009-04-24 20:58 . 2009-04-24 20:58 -------- d-----w c:\program files\Vuze
2009-04-24 20:58 . 2009-04-24 21:00 -------- d-----w c:\program files\Spybot - Search & Destroy
2009-04-24 20:58 . 2009-05-01 06:45 -------- d-----w c:\programdata\Spybot - Search & Destroy
2009-04-24 20:58 . 2009-05-01 06:45 -------- d-----w c:\users\All Users\Spybot - Search & Destroy
2009-04-24 20:57 . 2009-03-02 17:10 67584 ----a-w c:\windows\system32\ff_vfw.dll
2009-04-24 20:57 . 2008-06-08 20:58 60273 ----a-w c:\windows\system32\pthreadGC2.dll
2009-04-24 20:57 . 2009-04-24 20:57 -------- d-----w c:\program files\ffdshow
2009-04-24 20:35 . 2009-04-24 20:35 -------- d-----w c:\windows\system32\Adobe
2009-04-24 20:33 . 2008-06-20 01:14 97800 ----a-w c:\windows\system32\infocardapi.dll
2009-04-24 20:33 . 2008-06-20 01:14 105016 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-04-24 20:33 . 2008-06-20 01:14 622080 ----a-w c:\windows\system32\icardagt.exe
2009-04-24 20:33 . 2008-06-20 01:14 11264 ----a-w c:\windows\system32\icardres.dll
2009-04-24 20:33 . 2008-06-20 01:14 43544 ----a-w c:\windows\system32\PresentationHostProxy.dll
2009-04-24 20:33 . 2008-06-20 01:14 781344 ----a-w c:\windows\system32\PresentationNative_v0300.dll
2009-04-24 20:33 . 2008-06-20 01:14 326160 ----a-w c:\windows\system32\PresentationHost.exe
2009-04-24 20:25 . 2009-04-24 20:28 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Nowe Gadu-Gadu
2009-04-24 20:24 . 2009-04-24 20:54 -------- d-----w c:\program files\Nowe Gadu-Gadu
2009-04-24 20:24 . 2008-07-27 18:03 96760 ----a-w c:\windows\system32\dfshim.dll
2009-04-24 20:24 . 2008-07-27 18:03 282112 ----a-w c:\windows\system32\mscoree.dll
2009-04-24 20:24 . 2008-07-27 18:03 41984 ----a-w c:\windows\system32\netfxperf.dll
2009-04-24 20:23 . 2009-04-24 20:23 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Sun
2009-04-24 20:22 . 2008-07-27 18:03 158720 ----a-w c:\windows\system32\mscorier.dll
2009-04-24 20:22 . 2008-07-27 18:03 83968 ----a-w c:\windows\system32\mscories.dll
2009-04-24 20:22 . 2009-04-24 20:22 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Opera
2009-04-24 20:22 . 2009-04-24 20:22 -------- d-----w c:\program files\Opera
2009-04-24 20:17 . 2008-06-06 03:27 562176 ----a-w c:\windows\system32\msdtcprx.dll
2009-04-24 20:17 . 2008-06-06 03:27 38912 ----a-w c:\windows\system32\xolehlp.dll
2009-04-24 20:17 . 2009-02-13 08:49 1255936 ----a-w c:\windows\system32\lsasrv.dll
2009-04-24 20:17 . 2009-02-13 08:49 72704 ----a-w c:\windows\system32\secur32.dll
2009-04-24 20:17 . 2009-03-17 03:38 13824 ----a-w c:\windows\system32\apilogen.dll
2009-04-24 20:17 . 2009-03-17 03:38 24064 ----a-w c:\windows\system32\amxread.dll
2009-04-24 20:16 . 2009-04-24 21:43 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Adobe
2009-04-24 20:13 . 2009-03-03 04:39 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-04-24 20:12 . 2008-08-27 01:05 212480 ----a-w c:\windows\system32\drivers\mrxsmb10.sys
2009-04-24 20:12 . 2008-06-19 03:31 361984 ----a-w c:\windows\system32\IPSECSVC.DLL
2009-04-24 20:12 . 2008-04-18 05:48 269312 ----a-w c:\windows\system32\es.dll
2009-04-24 19:44 . 2008-08-28 03:40 425472 ----a-w c:\windows\system32\PhotoMetadataHandler.dll
2009-04-24 19:44 . 2008-08-28 03:40 347136 ----a-w c:\windows\system32\WindowsCodecsExt.dll
2009-04-24 19:44 . 2008-08-28 03:40 712704 ----a-w c:\windows\system32\WindowsCodecs.dll
2009-04-24 19:44 . 2008-09-18 04:56 147456 ----a-w c:\windows\system32\Faultrep.dll
2009-04-24 19:41 . 2008-06-23 01:59 2868736 ----a-w c:\windows\system32\mf.dll
2009-04-24 19:41 . 2008-06-23 01:59 996352 ----a-w c:\windows\system32\WMNetMgr.dll
2009-04-24 19:41 . 2008-06-23 01:58 94720 ----a-w c:\windows\system32\logagent.exe
2009-04-24 19:41 . 2008-10-21 05:25 1645568 ----a-w c:\windows\system32\connect.dll
2009-04-24 19:14 . 2009-02-09 03:10 2033152 ----a-w c:\windows\system32\win32k.sys
2009-04-24 19:14 . 2008-09-10 03:40 1334272 ----a-w c:\windows\system32\msxml6.dll
2009-04-24 19:06 . 2008-10-16 21:09 43544 ----a-w c:\windows\system32\wups2.dll
2009-04-24 19:06 . 2008-10-16 21:09 51224 ----a-w c:\windows\system32\wuauclt.exe
2009-04-24 19:06 . 2008-10-16 20:56 1524736 ----a-w c:\windows\system32\wucltux.dll
2009-04-24 19:06 . 2008-10-16 21:13 1809944 ----a-w c:\windows\system32\wuaueng.dll
2009-04-24 19:05 . 2008-10-16 21:08 34328 ----a-w c:\windows\system32\wups.dll
2009-04-24 19:05 . 2008-10-16 20:55 83456 ----a-w c:\windows\system32\wudriver.dll
2009-04-24 19:05 . 2008-10-16 21:12 561688 ----a-w c:\windows\system32\wuapi.dll
2009-04-24 19:05 . 2008-10-16 12:08 162064 ----a-w c:\windows\system32\wuwebv.dll
2009-04-24 19:05 . 2008-10-16 11:56 31232 ----a-w c:\windows\system32\wuapp.exe
2009-04-24 18:50 . 2009-04-24 18:50 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\ATI
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-01 06:37 . 2008-01-21 06:24 662056 ----a-w c:\windows\system32\perfh015.dat
2009-05-01 06:37 . 2008-01-21 06:24 126908 ----a-w c:\windows\system32\perfc015.dat
2009-05-01 06:36 . 2008-07-04 10:23 -------- d-----w c:\program files\Google
2009-05-01 06:31 . 2009-04-24 21:05 350192 ---ha-w c:\windows\system32\drivers\vsconfig.xml
2009-04-27 18:09 . 2009-04-27 16:55 6980 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-04-27 18:01 . 2008-07-04 09:59 -------- d-----w c:\program files\Toshiba
2009-04-27 18:01 . 2008-07-04 09:49 -------- d--h--w c:\program files\InstallShield Installation Information
2009-04-27 15:23 . 2006-11-02 10:25 51200 ----a-w c:\windows\inf\infpub.dat
2009-04-27 15:23 . 2006-11-02 10:25 143360 ----a-w c:\windows\inf\infstrng.dat
2009-04-25 05:21 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-04-24 21:05 . 2009-04-24 21:05 -------- d-----w c:\program files\Zone Labs
2009-04-24 21:05 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstor.dat
2009-04-24 21:05 . 2009-04-24 21:05 -------- d-----w c:\program files\Draco Software
2009-04-24 20:30 . 2009-04-24 20:30 -------- d-----r c:\program files\Skype
2009-04-24 20:30 . 2009-04-24 20:30 -------- d-----w c:\program files\Alwil Software
2009-04-24 20:23 . 2008-07-04 09:35 -------- d-----w c:\program files\Java
2009-04-24 17:36 . 2009-04-24 17:36 0 --sha-r c:\windows\system32\drivers\TOSHIBA_Satellite A300_08016-PL_PSAGCE-09000.MRK
2009-04-24 17:32 . 2009-04-24 17:32 -------- d-----w c:\program files\Realtek
2009-04-24 17:32 . 2008-07-04 09:50 319456 ----a-w c:\windows\DIFxAPI.dll
2009-04-24 17:31 . 2009-04-24 17:31 -------- d-----w c:\program files\ATI Technologies
2009-04-24 17:30 . 2008-07-04 09:36 -------- d-----w c:\program files\Intel
2009-03-17 03:38 . 2009-04-24 20:17 40960 ----a-w c:\windows\AppPatch\apihex86.dll
2009-03-03 04:46 . 2009-04-24 20:14 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-03-03 04:46 . 2009-04-24 20:14 3547632 ----a-w c:\windows\system32\ntoskrnl.exe
2009-03-03 04:40 . 2009-04-24 19:42 827392 ----a-w c:\windows\system32\wininet.dll
2009-03-03 04:39 . 2009-04-24 20:13 183296 ----a-w c:\windows\system32\sdohlp.dll
2009-03-03 04:39 . 2009-04-24 20:14 551424 ----a-w c:\windows\system32\rpcss.dll
2009-03-03 04:37 . 2009-04-24 19:42 78336 ----a-w c:\windows\system32\ieencode.dll
2009-03-03 04:37 . 2009-04-24 20:13 98304 ----a-w c:\windows\system32\iasrecst.dll
2009-03-03 04:37 . 2009-04-24 20:13 54784 ----a-w c:\windows\system32\iasads.dll
2009-03-03 04:37 . 2009-04-24 20:13 44032 ----a-w c:\windows\system32\iasdatastore.dll
2009-03-03 03:04 . 2009-04-24 20:14 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-03-03 02:38 . 2009-04-24 20:13 17408 ----a-w c:\windows\system32\iashost.exe
2009-03-03 02:28 . 2009-04-24 19:42 26624 ----a-w c:\windows\system32\ieUnatt.exe
2009-02-15 22:11 . 2009-04-24 21:05 293528 ----a-w c:\windows\system32\drivers\vsdatant.sys
2009-02-15 22:10 . 2009-04-24 21:06 1221512 ----a-w c:\windows\system32\zpeng25.dll
2009-02-05 20:06 . 2009-04-24 20:30 51792 ----a-w c:\windows\system32\drivers\aswMonFlt.sys
2008-01-21 02:43 . 2006-11-02 12:50 174 --sha-w c:\program files\desktop.ini
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-12-09 16:40 333192 ----a-w c:\program files\AskBarDis\bar\bin\askBar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-12-09 333192]
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-12-09 333192]
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2008-04-24 430080]
"Nowe Gadu-Gadu"="c:\program files\Nowe Gadu-Gadu\gg.exe" [2009-04-20 9818728]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Draco Organizer"="c:\program files\Draco Software\Draco Organizer 3\Organizer.exe" [2009-02-22 10560512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 144784]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2008-04-29 417792]
"HDMICtrlMan"="c:\program files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe" [2008-04-26 716800]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-10-31 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-03-19 716800]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"NDSTray.exe"="NDSTray.exe" [BU]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-04-08 6037504]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-11-20 1826816]
c:\users\Remek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files\Toshiba\TRDCReminder\TRDCReminder.exe [2008-3-5 393216]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GOEC62~1.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{0C12CEC7-392B-43B9-B40C-07340BE0882A}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{EDF8BAA0-2546-417B-810E-78DDE9D6AA9F}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{A1EB7158-918B-486D-B2E6-6673E32ABABF}"= c:\program files\Skype\Phone\Skype.exe:Skype
"TCP Query User{3A9E1A36-3934-4EBA-A68C-6F2EB1CA0F20}c:\\program files\\vuze\\azureus.exe"= UDP:c:\program files\vuze\azureus.exe:Azureus
"UDP Query User{BA49DDCA-C67D-4C07-83A2-DBFC39C12185}c:\\program files\\vuze\\azureus.exe"= TCP:c:\program files\vuze\azureus.exe:Azureus
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
R3 GoogleDesktopManager-022208-143751;Menedżer Google Desktop 5.7.802.22438;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-07-04 29744]
R3 Partner Service;Partner Service;c:\programdata\Partner\partner.exe [2008-07-04 110576]
S1 aswSP;avast! Self Protection; [x]
S2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [2008-12-09 464264]
S2 ASKUpgrade;ASKUpgrade;c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe [2008-12-09 234888]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2008-04-16 40960]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168]
S3 NETw5v32;Sterownik karty Intel(R) Wireless WiFi Link dla systemu Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
--- Inne Usługi/Sterowniki w Pamięci ---
*NewlyCreated* - PAVBOOT
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{39d07498-30f6-11de-b7a3-806e6f6e6963}]
\shell\AutoRun\command - F:\autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b0c83a3b-31ca-11de-a755-001e3398ae94}]
\shell\AutoRun\command - D:\csetup.exe
.
Zawartość folderu 'Zaplanowane zadania'
2009-05-01 c:\windows\Tasks\User_Feed_Synchronization-{99587E5E-A343-49EE-BF05-C8BC2F209EF1}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
- - - - USUNIĘTO PUSTE WPISY - - - -
HKLM-Run-cfFncEnabler.exe - cfFncEnabler.exe
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA;
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA
IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4
IE: {{8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} - hxxp://www.mks.com.pl/skaner/SkanerOnline.cab
FF - ProfilePath - c:\users\Darek i Ewa\AppData\Roaming\Mozilla\Firefox\Profiles\n2no1xzj.default\
FF - prefs.js: network.proxy.type - 2
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-01 09:05
Windows 6.0.6001 Service Pack 1 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
TOSCDSPD = c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe?/i??????7?w?A??P?[?x?[???[???[??
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_USERS\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\[u]0[/u]000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
[HKEY_USERS\SYSTEM\ControlSet004\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\[u]0[/u]000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Czas ukończenia: 2009-05-01 9:06
ComboFix-quarantined-files.txt 2009-05-01 07:06
Przed: 149 327 818 752 bajtów wolnych
Po: 149 360 984 064 bajtów wolnych
Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
309 --- E O F --- 2009-04-27 14:02
i hijack
- Kod: Zaznacz wszystko
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:48:36, on 2009-05-01
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\system32\conime.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [cfFncEnabler.exe] cfFncEnabler.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Draco Organizer] "C:\Program Files\Draco Software\Draco Organizer 3\Organizer.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user')
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4 (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Menedżer Google Desktop 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
--
End of file - 10586 bytes
Zrobiłem wszystko co wojtas omówił w temacie http://forum.programosy.pl/problem-z-heur-w32-vt108997.html Zrobiłęm scan online i już heur.w32 nie pokazał. Myślałem że jest ok, ale po jakims czasie znowu miałem zawieszke opery. Proszę o jakąkolwiek pomoc.
Z góry dzięki. Dalik