Avast wykrywa jakiegoś wirusa i nie może go usunąć.

[Eldir]

Witam. Tak jak w temacie avast wykrywa jakiegoś wirusa, którego nie jest w stanie usunąć, również blokuje połączenie z jakimś plikiem rar.
Tutaj log z RSIT:

Kod: Zaznacz wszystko

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bar leszczowy at 2009-09-18 08:46:27
Microsoft Windows XP Professional Dodatek Service Pack 2
System drive C: has 1 GB (7%) free of 20 GB
Total RAM: 767 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:46:48, on 2009-09-18
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
D:\Alwil Software\Avast4\aswUpdSv.exe
D:\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
d:\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
D:\Alwil Software\Avast4\ashMaiSv.exe
D:\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
D:\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0BIC1.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\lxcccoms.exe
D:\Advanced SystemCare 3\AWC.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
D:\Adobe\Reader\reader_sl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Tlen.pl\tlen.exe
D:\Mozilla Firefox\firefox.exe
F:\pomocy\RSIT.exe
C:\Program Files\trend micro\Bar leszczowy.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Adobe\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - D:\FlashGet universal\ComDlls\bhoCATCH.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Kacper\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast!] D:\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [lxccmon.exe] "C:\Program Files\Lexmark 3300 Series\lxccmon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [EPSON Stylus C62 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0BIC1.EXE /P23 "EPSON Stylus C62 Series" /O5 "LPT1:" /M "Stylus C62"
O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 3] "D:\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKCU\..\Run: [AlcoholAutomount] "d:\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\BARLES~1\USTAWI~1\Temp\herss.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Adobe\Reader\reader_sl.exe
O8 - Extra context menu item: &Download All by FlashGet - D:\FlashGet universal\ComDlls\Bhoall.htm
O8 - Extra context menu item: &Download by FlashGet - D:\FlashGet universal\ComDlls\Bholink.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CSIScanner - Prevx - D:\Prevx 3.0\prevx.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - d:\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 6283 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - D:\Adobe\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F364306-AA45-47B5-9F9D-39A8B94E7EF1}]
FG2CatchUrl - D:\FlashGet universal\ComDlls\bhoCATCH.dll [2008-08-19 104016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}]
IEPluginBHO Class - C:\Documents and Settings\Kacper\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll [2009-05-28 42088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-03 208952]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-03 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-03 455168]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"avast!"=D:\ALWILS~1\Avast4\ashDisp.exe [2009-08-17 81000]
"lxccmon.exe"=C:\Program Files\Lexmark 3300 Series\lxccmon.exe [2005-07-21 192512]
"FaxCenterServer"=C:\Program Files\Lexmark Fax Solutions\fm3032.exe [2005-07-12 299008]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"EPSON Stylus C62 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0BIC1.EXE [2002-04-10 74240]
"LXCCCATS"=rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"Advanced SystemCare 3"=D:\Advanced SystemCare 3\AWC.exe [2009-01-09 2262352]
"DriverUpdaterPro"=C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe [2009-06-12 2682916]
"AlcoholAutomount"=d:\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"cdoosoft"=C:\DOCUME~1\BARLES~1\USTAWI~1\Temp\herss.exe [2009-09-16 115942]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
Adobe Reader Speed Launch.lnk - D:\Adobe\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-06-03 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=FFFFFFFF
"HonorAutorunSetting"=1
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=
"NoDriveAutoRun"=
"HonorAutorunSetting"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Tlen.pl\tlen.exe"="C:\Program Files\Tlen.pl\tlen.exe:*:Enabled:Komunikator Tlen.pl"
"H:\CS\Counter-Strike 1.6 + Half-Life\hl.exe"="H:\CS\Counter-Strike 1.6 + Half-Life\hl.exe:*:Disabled:Half-Life Launcher"
"H:\METIN 2\metin2.bin"="H:\METIN 2\metin2.bin:*:Disabled:metin2"
"D:\uTorrent\uTorrent.exe"="D:\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\FlashGet universal\FlashGet.exe"="D:\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2"
"H:\cs 1.6\hl.exe"="H:\cs 1.6\hl.exe:*:Disabled:Half-Life Launcher"
"D:\mIRC\mirc.exe"="D:\mIRC\mirc.exe:*:Enabled:mIRC"
"H:\HIII\Heroes3.exe"="H:\HIII\Heroes3.exe:*:Disabled:Heroes of Might and Magic® III (CDP)"
"H:\newlongju\metin2.bin"="H:\newlongju\metin2.bin:*:Disabled:metin2"
"G:\EA GAMES\Battlefield 1942\BF1942.exe"="G:\EA GAMES\Battlefield 1942\BF1942.exe:*:Enabled:BF1942"
"H:\metin2 pl\60.18.147Mt2.exe"="H:\metin2 pl\60.18.147Mt2.exe:*:Disabled:60.18.147Mt2"
"H:\metin2 pl\metin_zzyt2.exe"="H:\metin2 pl\metin_zzyt2.exe:*:Disabled:metin_zzyt2"
"C:\Documents and Settings\Kacper\Moje dokumenty\Nowe Gadu-Gadu\gg.exe"="C:\Documents and Settings\Kacper\Moje dokumenty\Nowe Gadu-Gadu\gg.exe:*:Disabled:Nowe Gadu-Gadu"
"H:\metin2 pl\metin_99yt2.exe"="H:\metin2 pl\metin_99yt2.exe:*:Disabled:metin_99yt2"
"H:\metin2 pl\metin_yt2.exe"="H:\metin2 pl\metin_yt2.exe:*:Disabled:metin_yt2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{639966d0-a1e6-11de-afe5-00e07dc02499}]
shell\AutoRun\command - O:\o8tf6l.exe
shell\open\command - O:\o8tf6l.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{825a2601-39b3-11de-87f5-00e07dc02499}]
shell\AutoRun\command - RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isee.exe
shell\open\command - RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isee.exe


======List of files/folders created in the last 1 months======

2009-09-18 08:46:28 ----D---- C:\Program Files\trend micro
2009-09-18 08:46:27 ----D---- C:\rsit
2009-09-17 17:14:05 ----RSH---- C:\o8tf6l.exe
2009-09-17 08:21:34 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\PrevxCSI
2009-09-17 08:21:34 ----A---- C:\WINDOWS\wininit.ini
2009-09-04 12:08:15 ----A---- C:\WINDOWS\NeroDigital.ini
2009-09-04 10:20:07 ----D---- C:\Program Files\Common Files\LightScribe
2009-09-04 10:19:01 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\Ahead
2009-09-04 10:16:32 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Nero
2009-09-04 10:16:31 ----D---- C:\Program Files\Nero
2009-09-04 10:16:31 ----D---- C:\Program Files\Common Files\Ahead
2009-09-04 10:15:22 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-09-04 10:15:21 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-08-26 08:54:42 ----A---- C:\WINDOWS\system32\javaws.exe
2009-08-26 08:54:42 ----A---- C:\WINDOWS\system32\javaw.exe
2009-08-26 08:54:42 ----A---- C:\WINDOWS\system32\java.exe
2009-08-20 10:08:07 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\DAEMON Tools Pro

======List of files/folders modified in the last 1 months======

2009-09-18 08:46:29 ----D---- C:\WINDOWS\Temp
2009-09-18 08:46:29 ----D---- C:\WINDOWS\system32\CatRoot2
2009-09-18 08:46:28 ----RD---- C:\Program Files
2009-09-18 08:46:11 ----D---- C:\WINDOWS\Prefetch
2009-09-17 23:10:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-09-17 20:14:37 ----D---- C:\Program Files\Lx_cats
2009-09-17 20:04:13 ----D---- C:\WINDOWS
2009-09-17 19:28:56 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\foobar2000
2009-09-17 13:48:51 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\uTorrent
2009-09-17 08:22:37 ----D---- C:\WINDOWS\system32\drivers
2009-09-17 08:10:03 ----SHD---- C:\System Volume Information
2009-09-17 08:10:03 ----D---- C:\WINDOWS\system32\Restore
2009-09-16 20:14:42 ----D---- C:\WINDOWS\system32\config
2009-09-16 15:27:10 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\Tlen.pl
2009-09-15 17:28:32 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\BITS
2009-09-11 07:38:51 ----SD---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\Microsoft
2009-09-10 18:32:11 ----D---- C:\Program Files\Tlen.pl
2009-09-08 09:57:43 ----A---- C:\WINDOWS\win.ini
2009-09-06 19:50:00 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\BESTplayer
2009-09-04 20:03:47 ----HD---- C:\WINDOWS\inf
2009-09-04 10:20:11 ----SHD---- C:\WINDOWS\Installer
2009-09-04 10:20:07 ----D---- C:\Program Files\Common Files
2009-09-04 10:18:30 ----D---- C:\WINDOWS\system32
2009-09-04 10:15:23 ----D---- C:\WINDOWS\system32\DirectX
2009-09-04 10:13:58 ----D---- C:\Temp
2009-08-30 10:47:47 ----D---- C:\Documents and Settings\Bar leszczowy\Dane aplikacji\mIRC
2009-08-29 11:25:04 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-26 08:54:27 ----D---- C:\Program Files\Java
2009-08-22 11:30:34 ----D---- C:\WINDOWS\system32\wbem
2009-08-22 11:30:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-08-17 26944]
R1 AmdK7;Sterownik procesora AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2004-08-04 41472]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-08-17 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-08-17 51376]
R1 kbdhid;Sterownik klawiatury HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
R1 VIAPFD;VIAPFD; C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-05-04 3033]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-08-17 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-08-17 94160]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-08-17 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-06-03 3100160]
R3 HidUsb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ms_mpu401;Sterownik portu MIDI UART Microsoft MPU-401; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 rtl8139;Sterownik NT karty Realtek RTL8139(A/B/C)-based PCI Fast Ethernet; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 VIAudio;VIA AC'97 Enhanced Audio Controller (WDM); C:\WINDOWS\system32\drivers\viaudio.sys [2001-01-16 44852]
S3 a6bupgjy;a6bupgjy; C:\WINDOWS\system32\drivers\a6bupgjy.sys []
S3 ab2ajnxn;ab2ajnxn; C:\WINDOWS\system32\drivers\ab2ajnxn.sys []
S3 hidgame;Włącznik Microsoft HID do portu joysticka; C:\WINDOWS\system32\DRIVERS\hidgame.sys [2001-08-17 8576]
S3 LwAdiHid;Urządzenia cyfrowe Logitech WingMan (autowykrywanie); C:\WINDOWS\system32\DRIVERS\LwAdiHid.sys [2004-08-03 20864]
S3 USBCM;Scientific-Atlanta USB Cable Modem Driver; C:\WINDOWS\system32\DRIVERS\Sacm2A.sys [2004-06-10 15429]
S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Sterownik skanera USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; D:\Alwil Software\Avast4\aswUpdSv.exe [2009-08-17 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-06-03 552960]
R2 avast! Antivirus;avast! Antivirus; D:\Alwil Software\Avast4\ashServ.exe [2009-08-17 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 StarWindServiceAE;StarWind AE Service; d:\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R3 avast! Mail Scanner;avast! Mail Scanner; D:\Alwil Software\Avast4\ashMaiSv.exe [2009-08-17 254040]
R3 avast! Web Scanner;avast! Web Scanner; D:\Alwil Software\Avast4\ashWebSv.exe [2009-08-17 352920]
R3 lxcc_device;lxcc_device; C:\WINDOWS\system32\lxcccoms.exe [2005-07-06 466944]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-06-02 593920]
S2 CSIScanner;CSIScanner; D:\Prevx 3.0\prevx.exe [2009-09-17 4368952]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-12-05 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------


Z góry dziękuję za pomoc

[Okocza]

Eldir, daj log z combofix

[Eldir]

Proszę

Kod: Zaznacz wszystko

ComboFix 09-09-17.04 - Bar leszczowy 2009-09-18  9:59.1.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1250.48.1045.18.767.450 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Bar leszczowy\Pulpit\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090917-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
c:\docume~1\BARLES~1\USTAWI~1\Temp\cvasds0.dll
c:\docume~1\BARLES~1\USTAWI~1\Temp\cvasds1.dll
c:\documents and settings\Bar leszczowy\Dane aplikacji\BITS
c:\documents and settings\Bar leszczowy\Dane aplikacji\BITS\BITS.ini
c:\documents and settings\Bar leszczowy\Dane aplikacji\BITS\DHTTable.dat
c:\documents and settings\Bar leszczowy\Dane aplikacji\BITS\ProxyList.ini
c:\documents and settings\Bar leszczowy\Dane aplikacji\BITS\UPnP.ini
c:\documents and settings\Bar leszczowy\Dane aplikacji\Microsoft\Installer\{31BFEC6C-1F27-45B5-839C-BCBAE327993A}\soffice.exe
c:\documents and settings\Kacper\Dane aplikacji\BITS
c:\documents and settings\Kacper\Dane aplikacji\BITS\BITS.ini
c:\documents and settings\Kacper\Dane aplikacji\BITS\DHTTable.dat
c:\documents and settings\Kacper\Dane aplikacji\BITS\ProxyList.ini
C:\o8tf6l.exe
c:\windows\system32\ieuinit.inf
D:\o8tf6l.exe
E:\o8tf6l.exe
F:\o8tf6l.exe
G:\o8tf6l.exe
H:\o8tf6l.exe

.
(((((((((((((((((((((((((   Pliki utworzone od 2009-08-18 do 2009-09-18  )))))))))))))))))))))))))))))))
.

2009-09-18 06:46 . 2009-09-18 06:46   --------   d-----w-   c:\program files\trend micro
2009-09-18 06:46 . 2009-09-18 06:46   --------   d-----w-   C:\rsit
2009-09-17 06:36 . 2009-09-17 06:36   --------   d-----w-   c:\documents and settings\Bar leszczowy\DoctorWeb
2009-09-17 06:22 . 2009-09-17 06:22   27656   ----a-w-   c:\windows\system32\drivers\pxsec.sys
2009-09-17 06:22 . 2009-09-17 06:22   22024   ----a-w-   c:\windows\system32\drivers\pxscan.sys
2009-09-17 06:21 . 2009-09-17 06:26   --------   d-----w-   c:\documents and settings\All Users\Dane aplikacji\PrevxCSI
2009-09-04 18:27 . 2009-09-04 18:27   --------   d-----w-   c:\documents and settings\Bar leszczowy\Ustawienia lokalne\Dane aplikacji\WMTools Downloaded Files
2009-09-04 08:20 . 2009-09-04 08:22   --------   d-----w-   c:\program files\Common Files\LightScribe
2009-09-04 08:19 . 2009-09-04 08:22   --------   d-----w-   c:\documents and settings\Bar leszczowy\Ustawienia lokalne\Dane aplikacji\Ahead
2009-09-04 08:19 . 2009-09-04 08:23   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\Ahead
2009-09-04 08:16 . 2009-09-04 08:16   --------   d-----w-   c:\documents and settings\All Users\Dane aplikacji\Nero
2009-09-04 08:16 . 2009-09-04 08:19   --------   d-----w-   c:\program files\Common Files\Ahead
2009-09-04 08:16 . 2009-09-04 08:16   --------   d-----w-   c:\program files\Nero
2009-08-25 10:48 . 2007-03-08 03:56   110592   ----a-w-   c:\documents and settings\Kacper\artpclnt.dll
2009-08-20 08:08 . 2009-08-20 08:08   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\DAEMON Tools Pro

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-18 07:41 . 2009-04-29 14:56   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\foobar2000
2009-09-18 07:27 . 2009-05-01 13:51   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\uTorrent
2009-09-17 18:14 . 2009-05-30 08:43   --------   d-----w-   c:\program files\Lx_cats
2009-09-16 13:27 . 2009-04-29 13:45   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\Tlen.pl
2009-09-10 16:32 . 2009-04-29 13:43   --------   d-----w-   c:\program files\Tlen.pl
2009-09-08 11:42 . 2009-05-10 07:48   --------   d-----w-   c:\documents and settings\Kacper\Dane aplikacji\InstallShield Installation Information
2009-09-08 11:40 . 2009-05-10 07:48   --------   d-----w-   c:\documents and settings\Kacper\Dane aplikacji\InstallShield
2009-09-06 17:50 . 2009-08-17 06:32   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\BESTplayer
2009-08-30 08:47 . 2009-07-04 21:41   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\mIRC
2009-08-29 09:25 . 2009-04-28 21:33   --------   d--h--w-   c:\program files\InstallShield Installation Information
2009-08-26 06:54 . 2009-04-29 16:41   --------   d-----w-   c:\program files\Java
2009-08-22 09:30 . 2001-10-26 14:15   75706   ----a-w-   c:\windows\system32\perfc015.dat
2009-08-22 09:30 . 2001-10-26 14:15   451564   ----a-w-   c:\windows\system32\perfh015.dat
2009-08-17 16:10 . 2009-04-28 21:51   1279456   ----a-w-   c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-04-28 21:51   93392   ----a-w-   c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-04-28 21:51   94160   ----a-w-   c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-04-28 21:51   114768   ----a-w-   c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-04-28 21:51   20560   ----a-w-   c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-04-28 21:52   51376   ----a-w-   c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-04-28 21:52   23152   ----a-w-   c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-04-28 21:51   26944   ----a-w-   c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-04-28 21:51   97480   ----a-w-   c:\windows\system32\AvastSS.scr
2009-08-17 13:04 . 2009-08-17 13:04   --------   d-----w-   c:\program files\Lateral Solution Ltd
2009-08-04 18:21 . 2009-08-04 18:18   --------   d-----w-   c:\documents and settings\Bar leszczowy\Dane aplikacji\DAEMON Tools Lite
2009-08-04 18:19 . 2009-08-04 18:19   --------   d-----w-   c:\documents and settings\All Users\Dane aplikacji\DAEMON Tools Lite
2009-08-04 18:19 . 2009-08-04 18:19   --------   d-----w-   c:\program files\DAEMON Tools Toolbar
2009-08-04 18:19 . 2009-08-04 18:19   --------   d-----w-   c:\program files\DAEMON Tools Lite
2009-08-04 17:57 . 2004-07-17 09:36   12464   ----a-w-   c:\windows\system32\drivers\secdrv.sys
2009-08-04 17:50 . 2009-08-04 17:50   531   ----a-w-   c:\windows\eReg.dat
2009-08-04 17:39 . 2009-08-04 17:39   721904   ----a-w-   c:\windows\system32\drivers\sptd.sys
2009-07-25 03:23 . 2009-04-29 16:41   411368   ----a-w-   c:\windows\system32\deploytk.dll
.

(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 3"="d:\advanced systemcare 3\AWC.exe" [2009-01-09 2262352]
"DriverUpdaterPro"="c:\program files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe" [2009-06-12 2682916]
"AlcoholAutomount"="d:\alcohol soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-03 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-03 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-03 455168]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"avast!"="d:\alwils~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"lxccmon.exe"="c:\program files\Lexmark 3300 Series\lxccmon.exe" [2005-07-21 192512]
"FaxCenterServer"="c:\program files\Lexmark Fax Solutions\fm3032.exe" [2005-07-12 299008]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"EPSON Stylus C62 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S0BIC1.EXE" [2002-04-10 74240]
"LXCCCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll" [2005-07-20 73728]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]

c:\documents and settings\All Users\Menu Start\Programy\Autostart\
Adobe Reader Speed Launch.lnk - d:\adobe\Reader\reader_sl.exe [2005-9-24 29696]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Tlen.pl\\tlen.exe"=
"h:\\CS\\Counter-Strike 1.6 + Half-Life\\hl.exe"=
"d:\\uTorrent\\uTorrent.exe"=
"d:\\FlashGet universal\\FlashGet.exe"=
"h:\\cs 1.6\\hl.exe"=
"d:\\mIRC\\mirc.exe"=
"h:\\HIII\\Heroes3.exe"=
"h:\\newlongju\\metin2.bin"=
"g:\\EA GAMES\\Battlefield 1942\\BF1942.exe"=
"h:\\metin2 pl\\60.18.147Mt2.exe"=
"h:\\metin2 pl\\metin_zzyt2.exe"=
"c:\\Documents and Settings\\Kacper\\Moje dokumenty\\Nowe Gadu-Gadu\\gg.exe"=
"h:\\metin2 pl\\metin_99yt2.exe"=
"h:\\metin2 pl\\metin_yt2.exe"=

R0 pxscan;pxscan;c:\windows\system32\drivers\pxscan.sys [2009-09-17 22024]
R0 pxsec;pxsec;c:\windows\system32\drivers\pxsec.sys [2009-09-17 27656]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-04-28 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-04-28 20560]
S2 CSIScanner;CSIScanner;d:\prevx 3.0\prevx.exe [2009-09-17 4368952]
S3 LwAdiHid;Urządzenia cyfrowe Logitech WingMan (autowykrywanie);c:\windows\system32\drivers\LwAdiHid.sys [2009-06-26 20864]
.
.
------- Skan uzupełniający -------
.
IE: &Download All by FlashGet - d:\flashget universal\ComDlls\Bhoall.htm
IE: &Download by FlashGet - d:\flashget universal\ComDlls\Bholink.htm
IE: E&ksport do programu Microsoft Excel - d:\micros~1\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Bar leszczowy\Dane aplikacji\Mozilla\Firefox\Profiles\2z15zovu.default\
FF - plugin: d:\adobe\Reader\browser\nppdf32.dll
FF - plugin: d:\real alternative\browser\plugins\nppl3260.dll
FF - plugin: d:\real alternative\browser\plugins\nprpjplug.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-18 10:03
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

skanowanie ukrytych procesów ... 

skanowanie ukrytych wpisów autostartu ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  LXCCCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

skanowanie ukrytych plików ... 

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > 'winlogon.exe'(564)
c:\windows\system32\Ati2evxx.dll
.
Czas ukończenia: 2009-09-18 10:05
ComboFix-quarantined-files.txt  2009-09-18 08:04

Przed: 1 486 696 448 bajtów wolnych
Po: 1 502 027 776 bajtów wolnych

WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

170


[Okocza]

wykonaj to, co napisałem tutaj:

zhakowane-konto-wow-a-logi-po-czyszczeniu-vt111408.html#p844321

Autor postu otrzymał pochwałę

[Eldir]

Zrobiłem jak napisałeś i to są procesy działające w zakładce uruchamianie:



A tu raport z tego skanowania online (Kaspersky)

Kod: Zaznacz wszystko

*KASPERSKY ONLINE SCANNER 7.0: raport skanowania*
sobota, 26 wrzesień 2009
System operacyjny: Microsoft Windows XP Professional Dodatek Service
Pack 2 (build 2600)
Wersja Kaspersky Online Scanner: 7.0.26.13
Data ostatniej aktualizacji baz danych: Friday, September 25, 2009 22:00:49
Liczba wpisów: 2920159

*Ustawienia skanowania*
typ baz danych użytych do skanowania    rozszerzone
Skanuj archiwa    tak
Skanuj pocztowe bazy danych    tak
*Obszar skanowania*    Mój komputer
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
M:\
*Statystyki skanowania*
Przeskanowanych obiektów    79256
Wykrytych zagrożeń    3
Wyykrytych zainfekowanych obiektów    2
Wykrytych podejrzanych obiektów    4
Czas skanowania    09:00:48


*Nazwa pliku*    *Zagrożenie*    *Liczba zagrożeń*
C:\Documents and Settings\Kacper\metin2.bin   Podejrzanych:
Packed.Win32.Black.d   1   
C:\Documents and Settings\Kacper\Pulpit\ĐÂÁúľÔ.exe   Podejrzanych:
Packed.Win32.Black.d   1   
D:\mIRC\mirc.exe   Zainfekowanych: not-a-virus:Client-IRC.Win32.mIRC.g   1   
H:\newlongju\metin2.bin   Podejrzanych: Packed.Win32.Black.d   1   
H:\newlongju\ĐÂÁúľÔ.exe   Podejrzanych: Packed.Win32.Black.d   1   
H:\RECYCLER\S-1-5-21-299502267-1708537768-1060284298-1004\Dh12.rar
Zainfekowanych: Trojan.Win32.Agent.ad   1   
* Wybrany obszar został przeskanowany.*


[wojtas]

jave , odkurzacza wylacz log ok

[Eldir]

A co z tym fantem zrobić?

Kod: Zaznacz wszystko

Zainfekowanych: Trojan.Win32.Agent.ad   1   

[wojtas]

sciagnij killbox’a

Odpalasz Killboxa zaznacz opcję Delete on Reboot następnie w polu Full Path of File to Delete wklej ścieżkę

H:\RECYCLER\S-1-5-21-299502267-1708537768-1060284298-1004\Dh12.rar

i nacisnij x
Program będzie pytał o restart (oczywiście zgadzasz się)

Autor postu otrzymał pochwałę

[Eldir]

Dzięki wielkie ;D