Komputer zacina się dokładnie co 20 minut


(Dero92) #1

Nie wiem co się dzieje,ale tak jest

Wklejam loga z Hijackthis

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 19:11:40, on 2008-11-20

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe

C:\WINDOWS\System32\FTRTSVC.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\WINDOWS\SkyTel.EXE

C:\WINDOWS\system32\JMRaidTool.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe

C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\neostrada tp\neostradatp.exe

C:\Program Files\neostrada tp\ComComp.exe

C:\PROGRA~1\NEOSTR~1\Toaster.exe

C:\PROGRA~1\NEOSTR~1\Inactivity.exe

C:\PROGRA~1\NEOSTR~1\PollingModule.exe

C:\Program Files\neostrada tp\Watch.exe

C:\Program Files\Tlen.pl\tlen.exe

C:\Program Files\SpeedFan\speedfan.exe

C:\WINDOWS\System32\rundll32.exe

C:\WINDOWS\system32\CF6111.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM..\Run: [nwiz] nwiz.exe /install

O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM..\Run: [skyTel] SkyTel.EXE

O4 - HKLM..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot

O4 - HKLM..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar

O4 - HKLM..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe

O4 - HKLM..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"

O4 - HKLM..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKCU..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')

O4 - HKUS\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')

O4 - HKUS\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll

O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O17 - HKLM\System\CCS\Services\Tcpip..{BA503BB6-B39C-4983-B874-9FCDB6466D3E}: NameServer = 194.204.159.1 217.98.63.164

O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--

End of file - 5714 bytes


(Leon$) #2

log czysty

Pobierz Combofix http://forum.dobreprogramy.pl/viewtopic.php?f=16&t=36654 przeskanuj system daj log


(Gutek) #3

Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=253052


(Dero92) #4

mam już pobrany ale nie wiem jak zainstalować


(Leon$) #5

wyłącz wszystkie programy kliknij dwukrotnie w plik i czekaj aż przeskanuje

:slight_smile:


(Dero92) #6

Log z Combofix

ComboFix 08-11-19.08 - Dom 2008-11-21 15:14:20.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.671 [GMT 1:00]

Uruchomiony z: d:\ściągane\ComboFix.exe

* Utworzono nowy punkt przywracania

.

((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\system32\setup.ini

c:\windows\win32t4.dll

.

((((((((((((((((((((((((( Pliki utworzone od 2008-10-21 do 2008-11-21 )))))))))))))))))))))))))))))))

.

2008-11-20 19:11 . 2008-11-20 19:11

2008-11-16 15:17 . 2008-11-16 15:17

2008-11-16 15:17 . 2008-11-16 15:17

2008-11-16 15:13 . 2008-11-16 23:49

2008-11-16 12:44 . 2008-11-20 18:35

2008-11-16 12:44 . 2008-11-16 22:40 45 --a------ c:\windows\system32\initdebug.nfo

2008-11-08 11:54 . 2005-10-31 11:17 135,168 -r------- c:\windows\system32\RtlCPAPI.dll

2008-11-08 11:54 . 2005-07-15 09:48 40,960 -r------- c:\windows\system32\ChCfg.exe

2008-11-08 11:52 . 2008-11-08 11:52

2008-11-08 11:52 . 2005-04-16 15:20 487,424 -r------- c:\windows\RtlExUpd.dll

2008-11-05 18:58 . 2008-11-05 18:58

2008-11-04 18:09 . 2008-11-04 18:09

2008-11-02 11:52 . 2008-11-02 11:52

2008-11-02 01:06 . 2008-11-02 01:27 528 -r-hs---- c:\windows\PCGWIN32.LI4

2008-11-02 01:04 . 2008-11-02 01:04

.

(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-11-21 14:19 35,775,520 --sha-w c:\windows\system32\drivers\fidbox.dat

2008-11-21 14:19 1,278,752 --sha-w c:\windows\system32\drivers\fidbox2.dat

2008-11-21 14:12 --------- d-----w c:\program files\neostrada tp

2008-11-21 14:09 175,009 ----a-w c:\windows\system32\drivers\fwdrv.err

2008-11-21 14:00 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab

2008-11-20 22:20 484,616 --sha-w c:\windows\system32\drivers\fidbox.idx

2008-11-20 22:20 123,728 --sha-w c:\windows\system32\drivers\fidbox2.idx

2008-11-20 16:49 --------- d-----w c:\program files\Tlen.pl

2008-11-19 18:01 --------- d-----w c:\documents and settings\Dom\Dane aplikacji\Image Zone Express

2008-11-16 22:48 --------- d-----w c:\program files\Foto2Avi

2008-11-16 22:47 --------- d-----w c:\program files\Winamp

2008-11-16 15:06 --------- d-----w c:\documents and settings\Dom\Dane aplikacji\uTorrent

2008-11-16 14:18 --------- d-----w c:\documents and settings\Dom\Dane aplikacji\Winamp

2008-11-16 11:18 --------- d-----w c:\documents and settings\Dom\Dane aplikacji\Tlen.pl

2008-11-08 22:45 --------- d--h--w c:\program files\InstallShield Installation Information

2008-11-08 22:45 --------- d-----w c:\program files\Rockstar Games

2008-11-08 10:56 --------- d-----w c:\program files\Spybot - Search & Destroy

2008-10-20 18:16 --------- d-----w c:\program files\PeerGuardian2

2008-10-18 22:45 --------- d-----w c:\program files\EA GAMES

2008-10-18 12:18 --------- d-----w c:\program files\Tibia

2008-10-17 20:50 --------- d-----w c:\program files\HighwayPursuit

2008-10-13 21:41 --------- d-----w c:\program files\TryMedia

2008-10-13 21:41 --------- d-----w c:\program files\Alawar

2008-10-07 19:48 --------- d-----w c:\program files\Common Files\Real

2008-10-07 19:47 --------- d-----w c:\program files\Common Files\xing shared

2008-10-04 16:23 12,464 ----a-w c:\windows\system32\drivers\secdrv.sys

2008-09-28 01:28 2,855 ----a-w c:\windows\PIF\speed.PIF

2008-09-21 17:21 --------- d-----w c:\program files\EACOM

2008-08-31 20:17 107,888 ----a-w c:\windows\system32\CmdLineExt.dll

2005-07-14 10:31 27,648 --sha-r c:\windows\system32\AVSredirect.dll

2005-06-26 13:32 616,448 --sha-r c:\windows\system32\cygwin1.dll

2005-06-21 20:37 45,568 --sha-r c:\windows\system32\cygz.dll

2005-02-28 11:16 240,128 --sha-r c:\windows\system32\x.264.exe

.

((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-06-15 6803456]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-06-15 86016]

"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-04-20 385024]

"WOOWATCH"="c:\progra~1\NEOSTR~1\Watch.exe" [2004-08-23 20480]

"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-10-07 185872]

"nwiz"="nwiz.exe" [2005-06-15 c:\windows\system32\nwiz.exe]

"SkyTel"="SkyTel.EXE" [2006-04-24 c:\windows\SkyTel.exe]

"AdslTaskBar"="stmctrl.dll" [2006-06-02 c:\windows\system32\stmctrl.dll]

"RTHDCPL"="RTHDCPL.EXE" [2006-05-04 c:\windows\RTHDCPL.exe]

[HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]

c:\documents and settings\All Users\Menu Start\Programy\Autostart\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 288472]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk]

path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]

--a------ 2008-07-24 16:02 490952 c:\program files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

--a------ 2001-07-09 09:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]

--a------ 2008-10-07 20:47 214536 c:\program files\Real\RealPlayer\realplay.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]

--a------ 2004-11-02 19:24 32768 c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

-rahs---- 2008-09-16 12:16 1833296 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

--a------ 2008-10-07 20:47 185872 c:\program files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

--a------ 2008-08-04 00:02 36352 c:\program files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"SPF4"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"=dword:00000001

"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\system32\sessmgr.exe"=

"c:\Program Files\Tlen.pl\tlen.exe"=

"c:\Program Files\uTorrent\uTorrent.exe"=

"c:\WINDOWS\system32\dplaysvr.exe"=

"d:\ściągane\Re-Volt\REVOLT.EXE"=

"c:\Program Files\Rockstar Games\GTA2\gta2.exe"=

"c:\Program Files\Rockstar Games\GTA2\gta2 manager.exe"=

"c:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe"=

"c:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hposid01.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"=

"c:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"=

"c:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"=

"c:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"=

"c:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"=

"c:\Program Files\Gadu-Gadu\gg.exe"=

"c:\Program Files\LimeWire\LimeWire.exe"=

"c:\Program Files\SEGA\Beijing 2008\Beijing.exe"=

"c:\Program Files\EA GAMES\Need For Speed Hot Pursuit 2\NFSHP2.exe"=

"c:\Program Files\EA SPORTS\FIFA 2002\fifa2002.exe"=

"c:\Documents and Settings\Dom\Moje dokumenty\Fifa 2001\Fifa 2001 by qbic!\fifa2001.exe"=

"c:\Program Files\Alawar\Tetris 4000\Tetris4000.exe"=

"c:\Program Files\Mozilla Firefox\firefox.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"8067:TCP"= 8067:TCP:fff

"47624:TCP"= 47624:TCP:ggg

R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2007-04-26 302000]

R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2007-04-26 72624]

R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2007-12-13 24592]

R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\DRIVERS\stmatm.sys [2008-06-14 60255]

R3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\DRIVERS\torususb.sys [2008-06-14 684265]

S3 SetupNTGLM7X;SetupNTGLM7X;\??\E:\NTGLM7X.sys []

S4 SPF4;Sunbelt Personal Firewall 4;"c:\program files\Sunbelt Software\Personal Firewall\kpf4ss.exe" [2007-04-26 1234480]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{8f8e5113-3a38-11dd-b4d9-806d6172696f}]

\Shell\AutoRun\command - E:\setup.exe

*Newly Created Service* - PROCEXP90

.

.

------- Skan uzupełniający -------

.

FireFox -: Profile - c:\documents and settings\Dom\Dane aplikacji\Mozilla\Firefox\Profiles\dxjc7ilh.default\

FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://slirsredirect.search.aol.com/sli ... ie7&query=

FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://pl.start2.mozilla.com/firefox?cl ... l:official

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-11-21 15:19:17

Windows 5.1.2600 Dodatek Service Pack 2 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone

ukryte pliki: 0

**************************************************************************

.

Czas ukończenia: 2008-11-21 15:22:40

ComboFix-quarantined-files.txt 2008-11-21 14:22:04

Przed: 142 792 617 984 bajtów wolnych

Po: 142,838,054,912 bajtów wolnych

180


(Gutek) #7

dero92 czytasz co napisałem wyżej?

Syfu nie widze. Wykonaj skan Dr. Web CureIt


(Dero92) #8

Wykonałem i co dalej?


(Gutek) #9

Gdzie raport? Pełne skanowanie?


(Dero92) #10

Tak ale gdzie sie raport zapisał?


(huber2t) #11

Na koniec skanowania powinieneś mieć opcję zapisu raportu